last executing test programs: 14.583449821s ago: executing program 3 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x24020400) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2040) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f00000001c0)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000005c0)={'wlan0\x00'}) 13.148760588s ago: executing program 3 (id=232): socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000c80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x100, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x2b}, @in6=@empty, {0x0, 0x0, 0x0, 0x8001}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x100}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000009c0)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 11.428741043s ago: executing program 3 (id=234): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000540)=""/161) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x5, 0xbf, 0xdd, 0x8, 0xc2e, 0x700, 0xd4f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x64, 0x6, 0x20, 0xb, "", [{{0x9, 0x4, 0xad, 0x8e, 0x1, 0xdf, 0x30, 0x5, 0x9e, [], [{{0x9, 0x5, 0xe, 0x12, 0x40, 0xfa, 0xfa, 0x1}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x3c, 0x0, 0x0) 8.868175035s ago: executing program 0 (id=254): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES32=0x0], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000400)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000900)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000980)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x6) semget(0x1, 0x5, 0x6b4) fsopen(&(0x7f0000000ac0)='virtiofs\x00', 0x1) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) madvise(0xffffffffffffffff, 0x0, 0xb) 7.685453516s ago: executing program 3 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x300}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1008014, &(0x7f0000000200)=ANY=[], 0x3, 0x805, &(0x7f0000001c00)="$eJzs3U9oHOfZAPBnZMl/FDAm34e/YBxnbOcDBxxltYqVikCTzWpkT7LaFburYlNKamI5CMtJSBra+JKYQtKWQumpxzTX3HprKbTQQ9tToTn00lsgp5JC/xEIBZWd3ZUleVeSHVtOmt/PSDM788y8zztaz7Mj7bwbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAk1dlSaTKJWl5fPJ8OV51tNua3WN/f3683TDZ4ekO7EUnnK/bvj0/+0V32vzdWH+58OxFHu4+Oxv7OZH9cu+/woSf/Z3Skv/0WCd2u4zuMSyIOdJK6cnFlZenVu5DILvrBL291i9Hezymr563I5ytnszRvNdKZ6enSY+fmWulcXstaF1rtbD6tNrNKe6wXPzMzlWYTFxqL9bOzlVqWnqo+kk7OzDzxaLlUmk6fnVjIKs1Wo/7Ys9Gqnstrtbx+togpl74dnZgnOk/E5/J22s4q82l6eXllaWq7XDtBk4NW7Ok+f44+fOij1z/8+/JS5wk5bCdJrwPlyclyeXL6zMyZJ0ql0XKpvHFBaZNYi4iRiE7EXXnS8gVyZ07ccAeM9Op/1CKPeizG+UgH/BuLasxGMxox33n8p7GbInr69f//H/vrH7Zqd33971f5B26sPhJF/T/WfXRsWP0fmOtu/nst3ohrcSUuxkqsxFK8egvbru7r9m5XMx65ve369TuNZMPys5FFPfJoRSPymI9KsSTtLUljJqZjOkrxfJyLuWhFGnORRy2yaMWFaEU7suIZVY1mZFGJdjSiGWmcimo8EmlMxkzMxFSkkcVEXIhGLEY9zsZsVIq9XI7l4rhPbcr38IH4xYt//Ojdzvxa0OQWHUzeiiiC/rZF0E3lfsv6v9p5zXBThPr/JbB3q5V38vQNn8lqv/4DAAAA/7WS4rfvnev/sXiwmJvLa9nX73VaAAAAwB1U/OX/aGdSvMXrwUg61/+lAZEf7HpuAAAAwJ2RFPfYJRExHg915y7HcrwVSzHolwARcWi3UwQAAAA+o+Lv/8c6k/GIN4sF/eFShlz/AwAAAF803xs2xv6H/TF2Wwv7kl+NRcRYcn3h/MPJ1UonrnJ1T3e73uRra3tszx1JDvZ2UkymR6/dl0TEaDU7mvRHv/x3b/Dbj4vvR0bXNh821n/SbG6ZQGydQPEofhjHuzHHLxWT+3qbjCbdVsbn8lo2UW3UniyGROx8tV9/afk7EZ3Wv1+fP5jE5eWVpYkXXl65VORyvbP59au9ARRvGkdxi1z6w//Gg4N7PFbciNFrd7zbbml9/0e6m49s3Wayvs2340Q35sR4dzreX9Ntc3+nzcmJJyejUjk40s7Ot19fXdf7XhaTaz0fu62evx0nN/zoTp4akEV5QxYv3ZxFef3x39mx2JDFma+e7Dd/cnMW7x5/8/y/fttIsqntspi6hSxW90RszgLgXrlcjPpzowodKKrQp6tdnfrfrbudYlXpBvTs4Fz7zxutrL3K6G+/rtaNxubqPrJ2YtxZdV+Nbl051Y051X09MXpkQF25PuCM/sryK7/rndEff/8nP/3Gsd//rGj3tqrb+/FIN6Y3ift/M6TGdvq8f1NVfa+zxXtD223Vyklcj9jzrauvxOHX3rj26PLViy8uvbj0Urk8NV16vFQ6U97bix0rXjFskSkAX17bf8bO0Ih+nUke33RVHZc21t37195SMBEvxMuxEpfidHG3QUQ8NLjd8XVvQzi9zVXr+LpPeDndu7acfbYbuvna8kZseS127QowiSGxU+uO2P/9uJh8cjd+GgCwO05sU4eTvWuhw14hJKe3ue7eWMs3XR3H8Fo+yFfu3qEAgC+NrPlxMt5+J2k284XnJ2dmJivtc1nabFSfS5v57NkszevtrFk9V6mfzdKFZqPdqPZ/cTybtdLW4sJCo9lO5xrNNEZa+fnik9/T3ke/t7L5Sr2dV1sLtazSytJqo96uVNvpbN6qpguLz9Ty1v6sWWzcWsiq+VxerbTzRj1tNRab1WwiTVtZ1gs8lzXTfDart/O5vDNbTxea+XyleT0iaovzWTqbtarNfKHd6O6w31Zen2s054vdTtzc/b/s9vEGgM+D1964duXiysrSq7c38+ctY5LuzL3uIwCw0Y1yfa8zAQAAAAAAAAAAAAAAhll7//+h/kxn6Xa3/Y3Eju4R3BPbxeyLW7npcN9nuVXxLszE3oGr9kbs7PjctZkk4q2V6KZx4HNwoO7dzDefeurKsJhn3nzg3M72Ezu9UzbeORix9+c/6i55enjwd3v//was6g/7fAs9/SBi5DaOz2oyYNWnq/001tm72+clAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjkPwEAAP//MkpLmg==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002440)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c4}}, {{&(0x7f0000002500)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x40080) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000440), 0x68083, 0x0) vmsplice(r7, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x2000c12, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES64, @ANYRES64=r5, @ANYRES64=r4, @ANYRES64, @ANYRESOCT=r3, @ANYRES16=r4, @ANYRES32=r1, @ANYRES16, @ANYRES64=r4], 0x1, 0xa50, &(0x7f00000005c0)="$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") write$binfmt_register(0xffffffffffffffff, &(0x7f0000001b40)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x76, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '{\xfb-\xf0c\x89u\x1a\xf3\xa8\x99', 0x3a, './file0'}, 0x3d) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) connect$inet6(r4, &(0x7f0000001bc0)={0xa, 0x4e24, 0xfffffffc}, 0x1c) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffff3ab]}, 0x8, 0x80000) 6.573646659s ago: executing program 2 (id=265): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x240240, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/threads\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x2042) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000340)="0800000014001923", 0x8}, {&(0x7f00000003c0)="2c6f0b875a734af3ba43041bd3d3454a04a2f544656ec7153c3d678f7121dc284de15598b435a39e4dd5fda84e61f60c1433f35cd040cfa825497f7875feccab203a7e0962f01a0377ce3ea43641cc8ad9777f0d44d0a8c3a865ee38324732e1688a4ded42757ce17c6e85d3a3f65358d6065b1b266ea2000d30a173f1c2baf3d96221528401bd32605aea160ee00484801f3e587841d8b2e746783b9dba1f587be4da998ddf0d1ebf97463de319ff0c39aa0398c1e62ced6359dc9eaf20d0a880523ef8c2b3a28769a99c6e", 0xcc}, {&(0x7f00000009c0)="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", 0x106}], 0x3) 6.484697378s ago: executing program 0 (id=267): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x28000000}, 0x20008000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c40)='./sys\x00', &(0x7f0000000c80)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000d80)='1', 0x1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x4000000) 6.430879184s ago: executing program 2 (id=268): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000304000000"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000540)=""/161) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x5, 0xbf, 0xdd, 0x8, 0xc2e, 0x700, 0xd4f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x64, 0x6, 0x20, 0xb, "", [{{0x9, 0x4, 0xad, 0x8e, 0x1, 0xdf, 0x30, 0x5, 0x9e, [], [{{0x9, 0x5, 0xe, 0x12, 0x40, 0xfa, 0xfa, 0x1}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x3c, 0x0, 0x0) 6.257444531s ago: executing program 0 (id=269): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xd2d2, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0x7c, 0xf7ffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x3e7cd172}, {0x0, 0xffffffff}, {0x9, 0xffffffff}, {0x0, 0xffffffff}, {0x4, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0x3}], '\x00', 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000940)={0x0, 0x0, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r1 = syz_open_pts(r0, 0x2000) io_setup(0x200007, 0x0) eventfd(0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000009c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x693) ptrace(0x10, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000bc0)={'veth0_to_team\x00', &(0x7f0000000c00)=@ethtool_cmd={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000c80)={0x0, &(0x7f0000000cc0)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d00), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x2, 0x0) 6.206882396s ago: executing program 3 (id=271): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001ec0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001f00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001f40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001fc0), 0x0, 0x0) read$msr(r3, &(0x7f0000019880)=""/102392, 0x18ff8) prlimit64(r0, 0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x80000c, &(0x7f0000000340)={[{@part={'part', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "a7580947"}}, {@session={'session', 0x3d, 0xffffffffffffff7f}}, {@type={'type', 0x3d, "883b7f38"}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@force}, {@nodecompose}, {@part={'part', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@barrier}, {@gid}, {@nodecompose}, {}, {@force}, {@force}, {@barrier}, {@gid}, {@barrier}]}, 0x3, 0x6da, &(0x7f0000000480)="$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") ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 3.488362394s ago: executing program 4 (id=274): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) 3.480178015s ago: executing program 3 (id=275): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000280), 0x0, 0x236, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x80, &(0x7f0000000a00)=ANY=[]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TCFLSH(r5, 0x80047456, 0x800000000003) getdents64(r0, &(0x7f00000005c0)=""/252, 0xfc) 2.885603435s ago: executing program 2 (id=276): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="3f011400dc"], 0xdd12}], 0x1}, 0x20040051) 2.885412115s ago: executing program 4 (id=277): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000880)=0x1, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000c80)=ANY=[@ANYBLOB="fc0000001900010026bd70000000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffffffffffff0c00000000000000000000000000000007000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f00000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500f68000000000000000000000000000aa000000002b"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x2040010) sendto$inet6(r0, &(0x7f0000000740)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 2.769045957s ago: executing program 2 (id=279): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1800c10, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000700)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") r1 = open(&(0x7f0000000a40)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc_mnt/kcore\x00', 0x8002, 0x0) read$eventfd(r2, &(0x7f0000000bc0), 0x8) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000c00)={0x1000000000000000, 0x4, 0xe3f}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000a80)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000b40)=0x6, 0x8112) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="13000000100000000800000000000000000000006bf3625e79aa7bc53fb8f6a42c8e92d5db8883b44e5ddd240f84a9088622240ee45596b4f346c58f", @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f00000001c0), &(0x7f0000000200), 0x500}, 0x20) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000240)=[0xff, 0x6]) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r4, 0x0) syz_clone3(&(0x7f0000000140)={0x104901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.708737233s ago: executing program 4 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r1, 0x3, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15e}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x35}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 2.689505585s ago: executing program 1 (id=281): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x80) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioperm(0x9, 0x8, 0x5) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000540)={{}, 0x0, 0x0, 0x3, 0x6, 0x1}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000005c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000000700)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000740)) timer_settime(0x0, 0x1, &(0x7f0000000780)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0xf3a, 0x0) read$FUSE(r5, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000002fc0), 0xffffff98) close_range(r2, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) r7 = fsopen(&(0x7f00000002c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) r9 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r1, r10, 0x0, 0x0, @val=@kprobe_multi=@syms={0x1, 0x2, &(0x7f00000004c0)=[&(0x7f0000000440)='ip_vti0\x00', &(0x7f0000000480)='cgroup2\x00'], 0x0, 0x6}}, 0x30) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, r10, 0x0, 0x0, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r8, 0x0, 0x1, 0xce2c, &(0x7f0000000400)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000020000000000000000000000850000004f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x408, 0x2a8, 0x2a8, 0x408, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x10007}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x4}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 2.549513509s ago: executing program 4 (id=282): socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000c80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x100, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x2b}, @in6=@empty, {0x0, 0x0, 0x0, 0x8001}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x100}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.715871185s ago: executing program 1 (id=283): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000000c0)="$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") r1 = syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f00000005c0)) syz_mount_image$squashfs(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x2, &(0x7f0000001600)=ANY=[@ANYRES16=0x0, @ANYBLOB="17a478c30cddd4054be5b984b875de9098652776fff3d35a04fd34338bc2d30add41120da5cb6b3baca29d8028066e88b6b0bdd2f30adcd8027448778c99c6ca0f60", @ANYRES8], 0x4, 0x1c5, &(0x7f0000001680)="$eJzsVc2KE0EQ/nqmM5OIqGcRPBg0OaiT+IM3PUkewLMYkjEGR8Qk4A8B4ylXDz6AeMmL+A4eFA/Ggwgi8e72Ut01vZ3dnbDLsmR36Q9mvvrrrprumu4nwxfDGMD/xbiDe9AIcQZfhYAEcFEY2/3Y8O/I8DXWf0nDdbZ/Yv7GPHz95mk7y9IBCWWwYC3bhKjYtULYa3T0F9jn1EdHOJs9LIz5gN1dFYBX/CMOo7CK2eOC7AcQwnUu+OmCJuE/AblFrp6HfwzscEEuz7P21jq5wpZ6912AP3oHvyzGHRIeAVBKKbJ1zSPcmBDAZyfmvNSPCKFsDO0kKVd03AaFqqv9Z+1e2kvf/wBuJzeT5Fbz+uN+libmLZwUAbcIcR0AnakVx18C8J275RSWIZzSjL9kfTQ2cg7n2qXlsYGQdiwx5S87Y/lsD2gJHuCy9r2c5P1P1qquWkJ/UgsCISsN6dQHKATK4G3nedadQoDuFRUDyQzSztGYo5QrNNQq6Y07k7zsKXOVucU8Y54z53dWfhdJPcNP1moTIMKr9mg0aJDJSNbWtLbmOZs5QKyz/ovcjwMuxPDw8PDw8PDwOGbYDAAA//9vNFa/") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b000000850000000700000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0xe, 0x0, &(0x7f0000000800)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000001180)='a', 0x200000c1, 0x9000) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000840)={0x0, 0x217, 0x101, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000c40)={0x0, 0x506f, 0x9, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000011c0)={0x0, 0x8, 0x1, [0x72, 0x4, 0x7, 0x5, 0xffffffff], [0x4, 0x1, 0x101, 0x5, 0x5, 0xcd, 0x724, 0xd525, 0x2, 0x9, 0xb, 0x1, 0x6e3d, 0x40, 0x5, 0x4, 0x6, 0xd5, 0xdde, 0xf, 0x6, 0x3e, 0x5, 0xfd, 0x7fffffffffffffff, 0x3ff, 0x7fffffffffffffff, 0x9, 0x6, 0x1, 0x200, 0x101, 0x7fff, 0xf27, 0x8000, 0x3, 0x5, 0x800, 0x3, 0x5, 0x8, 0x5, 0x1, 0x7, 0x1, 0x100, 0xd8cc, 0x10000, 0x2, 0x7f19, 0xffffffff, 0x6, 0x1000, 0x6, 0x8, 0x1d6, 0xa, 0x4, 0xee03, 0x1, 0x3ff, 0x8, 0x4, 0x80000000, 0x4, 0x65, 0x804b38a, 0x6, 0x9, 0xb46, 0x1, 0x80, 0x7f, 0x9, 0xfd1, 0x80, 0x9, 0x7, 0x0, 0x1a8b, 0xfffffffffffffffc, 0x7, 0x5, 0x1, 0x20f, 0x1, 0x5, 0x10000, 0x81, 0x1, 0x3, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x2c0b1eb9, 0x9, 0x310, 0xf2, 0x6, 0x3, 0x9, 0x141f, 0x7, 0x9, 0x56, 0x8, 0xb7, 0x1, 0xfffffffffffffc01, 0x4, 0x3ff, 0xffffffff80000001, 0x8dd, 0x7, 0x5, 0x552]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000018c0)={0x13, 0x4, {0xc72, @struct={0x6, 0x7}, r5, 0x4, 0x82e, 0x8000000000000000, 0x7fff, 0x40, 0x480, @usage=0xda55, 0x7f, 0x1, [0x80000001, 0x8, 0x7, 0x0, 0x0, 0x101]}, {0x15ef, @struct={0x7, 0x2}, r6, 0x0, 0x23, 0x7, 0x3, 0xc, 0x0, @struct={0x0, 0xb2}, 0x0, 0x0, [0x8, 0x0, 0x432, 0x0, 0x0, 0x7d]}, {0xb, @struct={0x7, 0x32b}, r7, 0x2, 0x100000000, 0xf, 0x200000000, 0x1ff, 0x91, @struct={0x0, 0xd3}, 0x1, 0x4, [0x4, 0x7, 0x80000001, 0x51e, 0x0, 0x4]}, {0x1c3, 0x9, 0x10000}}) 1.680258068s ago: executing program 4 (id=284): r0 = fanotify_init(0x1, 0x101000) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x0, {0x0, 0x2, 0xfffffff7ffffffff}}, 0x47) 1.66340769s ago: executing program 2 (id=285): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004c0000440000000000069078ac141400ac1e0001440b08e0000002e0000002890bd7000000000000000089030000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000807800"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mysys\x00', 0x1ff) sched_getattr(0x0, &(0x7f0000000400)={0x38}, 0x38, 0x0) mount(0x0, &(0x7f0000000e40)='./mysys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x822b01) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000fc0)={{0x3, 0x1, 0xffffff21, 0x5, 0x52, 0x6}, 0x17b, [0x5, 0x3, 0xb, 0x3, 0x9f0, 0x200, 0xff, 0x3, 0x20a, 0x5, 0xfffffffe, 0x81, 0x8, 0x10, 0x7, 0x2, 0x0, 0x0, 0x6, 0x8, 0x9, 0x0, 0x1, 0x1, 0x6, 0x7fff, 0x337, 0x9, 0x10001, 0x1, 0x10000, 0x8, 0xfffffffb, 0xccbf, 0xffffff7f, 0x6, 0x2, 0xffffff43, 0x3, 0x7, 0x3c45, 0x6, 0x6214, 0x7fffffff, 0x80000000, 0x8, 0x19, 0x80000000, 0x8, 0x8, 0x80000001, 0x7d, 0xa8a, 0x9, 0x80000000, 0xcf4, 0x1, 0x6, 0x0, 0x8, 0x8, 0x5, 0x9, 0xfff, 0x80000001, 0x8, 0x6, 0x0, 0xe488, 0x1, 0x5, 0x2, 0x7, 0x2, 0x8, 0x7, 0x2, 0x32, 0x8, 0xf62b, 0xfffffffe, 0x0, 0x400, 0x3, 0x7, 0x1, 0x2, 0x55e, 0x2, 0x6, 0x2, 0x4, 0x7, 0x7fffffff, 0x401, 0x801, 0x2, 0x7, 0x10, 0xb, 0xffffffff, 0x1, 0x4, 0x5e, 0xfffff000, 0x2, 0x1, 0xed, 0x6, 0x80, 0x400, 0x6, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x7, 0xa59, 0x1, 0x6, 0x80080000, 0xa49, 0x8ba, 0x81, 0x2, 0x2, 0x4, 0x5, 0x6, 0x80000001, 0x80, 0x7, 0xe, 0x7ff, 0xfff, 0x1, 0x1ff, 0x10, 0x2, 0x4, 0x6df, 0xd, 0x6, 0xd0d4, 0xffffffff, 0x7c, 0x70d, 0x5, 0x3, 0xe, 0x1, 0x4, 0x3ff, 0x2, 0xd9, 0x8, 0x5, 0x9, 0x10001, 0xf, 0x5, 0x1, 0x8, 0x0, 0x80000000, 0x31, 0x2, 0xef, 0x8, 0x2, 0x2, 0x1, 0x1, 0xff, 0x625, 0x2, 0xfffffff7, 0x10, 0x3, 0x8, 0xde19, 0x2, 0x6, 0x3, 0x2, 0x1800000, 0x10000, 0x0, 0x7, 0x10000, 0x7, 0x7, 0x605, 0x8, 0x3ff, 0x48, 0x7, 0x6, 0x1000000, 0x198, 0x3, 0x34024418, 0x4, 0x9, 0x57c, 0x0, 0x5, 0xb, 0x0, 0x7, 0x100, 0x80000001, 0x5, 0x1, 0x4, 0x1, 0x800080, 0x7, 0xdf, 0x4, 0x4, 0x6, 0x80000001, 0x80000001, 0x9, 0x3, 0x0, 0x80, 0x4, 0x8, 0xa222, 0x9, 0x3, 0x8, 0xa5d, 0x80, 0x7, 0x7, 0x80000000, 0x3e0f, 0xfd, 0xe, 0x82, 0x4, 0x7, 0x13, 0x0, 0x10001, 0x8, 0x9, 0x9, 0x4, 0x3, 0x4, 0x7, 0xfff, 0xfff, 0x5, 0x938b, 0x3, 0x3, 0x7, 0x5, 0x7, 0x87, 0x9, 0x1ff, 0x8, 0x114, 0xffffffff, 0x6f, 0x1c, 0x8, 0x5, 0x7, 0x3ff, 0xf8d, 0x7fff, 0x2, 0x7, 0x8000000, 0xfff, 0x8, 0x9, 0x2, 0x9, 0x9, 0x2, 0x5, 0x901, 0xff, 0x6a8e, 0x8, 0x5, 0x6, 0x1, 0x7, 0x8, 0x7, 0x2, 0xbabb, 0x9, 0x6, 0xffffffff, 0x6, 0x7052, 0xc8, 0x7, 0x3, 0x8, 0xb, 0x4, 0xfffffff9, 0xe6af, 0x8, 0x1, 0xf, 0x8000, 0x2, 0xb, 0x7ff, 0x7, 0x2a04, 0xf, 0x2, 0x9, 0x351e5b2b, 0x2dd4a23d, 0x6bc, 0xffff, 0x1, 0x2, 0x4, 0x8e1c, 0x1, 0x7, 0xee, 0x1a4, 0x7, 0x506236f0, 0x8, 0x3, 0xe6, 0x1, 0xb6, 0x5, 0x9, 0x7, 0x401, 0x9f6, 0xfffffffd, 0x463ed523, 0x4, 0x3, 0x4, 0x3, 0x4, 0x1000, 0x3, 0x9, 0xfffd, 0x8, 0x7, 0x9, 0x3, 0x80, 0x20000e, 0x6, 0xfffffffc, 0x9, 0xe4b1, 0x83, 0x8, 0x9, 0xffffff3b, 0x131b, 0xb2c3, 0x8000, 0x4, 0x8000, 0x6, 0x1ff, 0x3, 0x8, 0x7fff, 0x2, 0x0, 0x2fc, 0xfffffffa, 0x101, 0x4, 0x1, 0x7, 0xffffffff, 0x3, 0x6, 0x7, 0x3, 0x3368, 0x0, 0x7, 0x4, 0x0, 0x2, 0x5, 0x1, 0x56da, 0x4, 0x775d3adb, 0x7fffffff, 0x10001, 0xfffffffa, 0x8, 0x9, 0xf31, 0x7, 0x8000, 0x1e3, 0x3c9000, 0x6, 0x3, 0x5, 0x1, 0x0, 0x2, 0x7fffffff, 0xc, 0x9ca, 0x6, 0x8, 0xb5d, 0xffffffff, 0x3e3f, 0x2f, 0x7, 0x10000, 0x8009, 0x2, 0x7fffffff, 0x3, 0x401, 0x9, 0x5, 0x28, 0x8, 0x9, 0x6, 0x8000, 0x1, 0x0, 0x2, 0x9c1f, 0xe70, 0x1, 0x0, 0x5, 0xcf, 0x1, 0x0, 0x6, 0x61fc, 0xf8, 0x7f40, 0x9ae, 0x7, 0x251e, 0x5, 0x3ff, 0x1, 0x61, 0x6, 0x2, 0x101, 0x5, 0xc7, 0x10000, 0x9, 0x4, 0x4db, 0x2f9, 0x6, 0x6, 0x2b2, 0x4, 0x5, 0x0, 0x2, 0x0, 0xfffffffd, 0xc, 0xfffffffe, 0x8f16, 0x7, 0x7f, 0x2, 0x801, 0x7, 0x47d5, 0x8, 0x3, 0x4, 0x2, 0x7, 0x6, 0x7, 0x0, 0x2, 0x4, 0xa, 0x5989, 0x7, 0x335b, 0xfffff657, 0x0, 0x3, 0x101, 0x5, 0x0, 0x100, 0x1ff, 0x7, 0x7, 0x4, 0xae37, 0x3, 0x8, 0x6, 0x5, 0xfa0, 0x3, 0x8, 0x2, 0xfff, 0x9, 0x9, 0xd8b3, 0x8000003, 0x1, 0x0, 0xbb, 0x6, 0xffffffff, 0xffff7fff, 0x1, 0x8, 0x2, 0x0, 0x7, 0x6, 0xffffff80, 0x10, 0x3, 0x6, 0x80000001, 0x8005, 0x86, 0x18000000, 0x4, 0x5, 0x6, 0x8, 0xc1, 0x7, 0xfffff644, 0x0, 0x9, 0xa, 0x80, 0x3, 0x200101, 0xf0, 0x3ff5, 0xffffffff, 0xa033, 0x3, 0xb26, 0x9, 0x8, 0x9, 0x4, 0xb, 0x81, 0x6, 0x1, 0x8, 0x3, 0x88, 0x6be, 0xcb, 0x5e76d2c9, 0x2, 0xff, 0x8, 0xb, 0x8000, 0x5, 0x1, 0x8, 0xc16, 0x6, 0xc3, 0xad9, 0x0, 0x7fff, 0x3, 0x0, 0x2, 0x60ca2fbd, 0x2, 0x80007, 0xd, 0xfffffffe, 0x4007, 0x1, 0x2, 0x4993, 0x7, 0x101, 0x5, 0x5a81, 0x200, 0x6, 0xa85, 0xb5, 0x0, 0x1, 0x6, 0x9, 0x7fff, 0xfe000000, 0x8, 0x87f, 0x0, 0x3, 0x5, 0x7, 0x4, 0x5, 0x2, 0x1, 0x10000, 0x8, 0x4, 0x3, 0x5, 0x3, 0x8, 0xd32e, 0xffffffff, 0x6, 0x2, 0x2, 0x4, 0x4, 0x210, 0x8, 0x8000, 0xdf6, 0x7, 0x5, 0x7, 0x2, 0x2, 0x124, 0x3, 0x40, 0x8, 0x0, 0xfc, 0x7, 0x2, 0x10, 0x8, 0x2, 0x2, 0xa00c, 0x6, 0x7, 0x5, 0x8, 0x4ec4, 0x2, 0xf323, 0xffff35b8, 0x9, 0x3, 0x800, 0x3, 0xb2, 0x7ff, 0x0, 0x6, 0x80000000, 0x4, 0xc, 0x0, 0x6, 0x1, 0x998c, 0x7e51caee, 0xfffffffd, 0x7, 0x5, 0x6, 0x2, 0x7, 0x3ff, 0x7f473ed4, 0x4, 0x2d6d, 0x3, 0x0, 0xf, 0x0, 0x100, 0x2, 0x0, 0x6, 0x30cd, 0x0, 0x7, 0x9543, 0x1, 0x8, 0x44, 0x2, 0x8, 0x81, 0x7f, 0xc, 0x98, 0x7, 0xe195, 0xffffffff, 0x1000, 0x1, 0x9, 0x0, 0x100, 0x8, 0x80000003, 0x3, 0x3, 0xf307, 0x49b, 0x7, 0x7, 0xfd, 0x9, 0x4, 0x4, 0x2a3, 0x822, 0x3, 0x200, 0x2, 0x400e2d, 0x5, 0x1, 0x400, 0x6, 0x1000, 0x5, 0x9, 0x6, 0x1, 0xde, 0x4c, 0x1, 0x7ff, 0x5, 0x3, 0x3, 0xff, 0xffffffff, 0x1, 0xb73, 0xa07e, 0x1ff, 0x0, 0xffff, 0x1bd, 0x81, 0x1, 0x0, 0x200, 0x1, 0x2bb, 0x2, 0x10000, 0x1, 0xfffffffe, 0x5, 0xb, 0x2f8, 0x0, 0x71de, 0xeb, 0x9, 0xb, 0x44, 0xab, 0x6, 0x1, 0x1ff, 0x35f, 0x4, 0x9, 0x7, 0x7ffc, 0x1ff, 0x6, 0x43, 0x8, 0x7fffffff, 0xf, 0x6, 0x0, 0x3, 0xc9, 0x8, 0x5, 0xc, 0x18a6, 0xc, 0x0, 0x6, 0x5, 0x6, 0x5, 0x5, 0x401, 0x9, 0x6, 0x4fa, 0x9, 0x38, 0x2, 0xb, 0x4, 0x7, 0x8, 0x2, 0x0, 0x0, 0x4, 0x4ac5, 0x6, 0x7, 0xd2b1, 0x3, 0xa, 0x6, 0x68, 0x26, 0xff, 0x8362, 0x2, 0x15a, 0x800, 0x9, 0xcc, 0xa6d, 0x167, 0x5, 0x1ff, 0x5, 0x7459, 0x40, 0x8, 0x0, 0x7, 0x40, 0x4, 0x10001, 0xe5f6, 0x6, 0x9, 0x1, 0x4, 0x9, 0x101, 0xdbe2, 0x2, 0x400, 0xc, 0x9, 0x1ff, 0x6, 0xc7ac, 0xfc0, 0x102, 0xfff, 0x4, 0x1, 0x2, 0x6cd, 0x3, 0x0, 0x0, 0x7, 0x4, 0xd, 0x10000, 0xfffffffb, 0x0, 0x7, 0x4, 0x8001, 0x5, 0x0, 0x7, 0x10, 0x203, 0xfff, 0x3, 0x8, 0xa, 0x417, 0x5, 0x6, 0xee, 0x7, 0x6, 0x9, 0x6, 0x2, 0x9, 0x3, 0x6, 0x75d5, 0x8, 0xe9a4, 0xc, 0xffff7fff, 0x0, 0x51cc, 0x6, 0xdb62, 0xa2d6, 0x7, 0x625, 0x4, 0x8, 0x9, 0x9, 0x7, 0x8, 0xfffffffd, 0x5, 0x80000, 0x3, 0x506f, 0x3, 0x8, 0x16, 0x9, 0x5, 0x8, 0xf, 0x8, 0x6, 0x47e, 0x1, 0x1ff, 0x2, 0x0, 0x80000000, 0x184, 0x6e, 0x3, 0xa86, 0x8000, 0x1, 0x1, 0x516d, 0x5f, 0x20001a, 0x752, 0x4, 0x3, 0x81, 0x7, 0x7, 0x6, 0x7, 0x4ed, 0x0, 0x400, 0xffffffd7, 0x4d, 0xfff, 0x3, 0x6, 0xffffff81, 0x81, 0x4, 0x3, 0x7ff, 0x4, 0x82, 0x10, 0x6, 0x4f3e, 0x3, 0x800, 0x8, 0x7ff, 0x8, 0xcb4c, 0x2, 0x3, 0x43, 0x6, 0x1, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0x5, 0xb6, 0x1, 0x6]}) 1.612747785s ago: executing program 4 (id=286): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000304000000"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000540)=""/161) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x5, 0xbf, 0xdd, 0x8, 0xc2e, 0x700, 0xd4f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x64, 0x6, 0x20, 0xb, "", [{{0x9, 0x4, 0xad, 0x8e, 0x1, 0xdf, 0x30, 0x5, 0x9e, [], [{{0x9, 0x5, 0xe, 0x12, 0x40, 0xfa, 0xfa, 0x1}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x3c, 0x0, 0x0) 640.309384ms ago: executing program 1 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4004) 534.163315ms ago: executing program 2 (id=288): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x23ca, &(0x7f0000000100)="$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") mknod$loop(&(0x7f0000004000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) symlink(&(0x7f0000004100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 425.628676ms ago: executing program 0 (id=289): syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x103042, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000980)={0x0, 0x0, 0x8000000}) 386.040241ms ago: executing program 1 (id=290): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000880)=0x1, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000c80)=ANY=[@ANYBLOB="fc0000001900010026bd70000000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffffffffffff0c00000000000000000000000000000007000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f00000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500f68000000000000000000000000000aa000000002b"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x2040010) sendto$inet6(r0, &(0x7f0000000740)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 261.631443ms ago: executing program 0 (id=291): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x240240, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/threads\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x2042) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000340)="0800000014001923", 0x8}, {&(0x7f00000003c0)="2c6f0b875a734af3ba43041bd3d3454a04a2f544656ec7153c3d678f7121dc284de15598b435a39e4dd5fda84e61f60c1433f35cd040cfa825497f7875feccab203a7e0962f01a0377ce3ea43641cc8ad9777f0d44d0a8c3a865ee38324732e1688a4ded42757ce17c6e85d3a3f65358d6065b1b266ea2000d30a173f1c2baf3d96221528401bd32605aea160ee00484801f3e587841d8b2e746783b9dba1f587be4da998ddf0d1ebf97463de319ff0c39aa0398c1e62ced6359dc9eaf20d0a880523ef8c2b3a28769a99c6e", 0xcc}, {&(0x7f00000009c0)="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", 0x106}], 0x3) 138.602585ms ago: executing program 1 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044005}, 0x20000800) 58.311494ms ago: executing program 0 (id=293): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_link_policy={{0x7}, {0x0, 0xc9, 0x6}}}}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) open(&(0x7f0000001740)='./file1\x00', 0x4000, 0x32) unlinkat(0xffffffffffffff9c, &(0x7f0000001780)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000017c0)='./file1\x00', 0x40042, 0x13) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1100) umount2(&(0x7f0000000080)='./file0\x00', 0xa) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x18, &(0x7f0000000940)={0x2, &(0x7f0000000380)=[{0xc, 0x72, 0x0, 0x7fff0000}, {0x3, 0xe, 0x5b, 0x7}]}) 0s ago: executing program 1 (id=294): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r0], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x37, &(0x7f0000000100)=@string={0x37, 0x3, "569a8516df2db6587ef2abccf73fa762024592051f8c98d0e9b928f0173cc3cad65003434b15796ac9f3db15efaf00d9031b207513"}}]}) kernel console output (not intermixed with test programs): interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.325986][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.347421][ T4192] device hsr_slave_0 entered promiscuous mode [ 55.354469][ T4192] device hsr_slave_1 entered promiscuous mode [ 55.360890][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.368651][ T4192] Cannot create hsr debugfs directory [ 55.374627][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.381614][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.407817][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.429307][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.436414][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.462495][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.572444][ T3854] infiniband rxe0: set active [ 55.581286][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.592852][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.599701][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.607953][ T4191] Cannot create hsr debugfs directory [ 55.619651][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.625066][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 55.626581][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 55.632286][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 55.644328][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 55.644502][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.650385][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 55.662684][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.670821][ T4189] Cannot create hsr debugfs directory [ 55.683095][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.696063][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 55.885573][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.892699][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.901170][ T4188] device bridge_slave_0 entered promiscuous mode [ 55.919155][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.926567][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.934423][ T4188] device bridge_slave_1 entered promiscuous mode [ 55.990518][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.005262][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.028323][ T4188] team0: Port device team_slave_0 added [ 56.034585][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.046500][ T4188] team0: Port device team_slave_1 added [ 56.053323][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.072968][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.081585][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.096930][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.103896][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.130333][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.148790][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.155984][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.182122][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.217689][ T4188] device hsr_slave_0 entered promiscuous mode [ 56.224704][ T4188] device hsr_slave_1 entered promiscuous mode [ 56.231439][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.239260][ T4188] Cannot create hsr debugfs directory [ 56.294007][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.303384][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.325364][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.352386][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.409521][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.434678][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.450872][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.463499][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.473658][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.513903][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.522886][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.534258][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.557357][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.567047][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.576423][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.583621][ T1525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.592728][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.610350][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.619120][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.629931][ T1525] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.637021][ T1525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.658983][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.667687][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.678772][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.691789][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.699331][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.711949][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.720445][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.735584][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.752048][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.770263][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.778771][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.790503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.800218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.808786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.818533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.827064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.840299][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.855112][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.865647][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.894992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.903167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.911224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.920140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.930574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.939130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.948337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.967737][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.986761][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.001245][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.011750][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.018901][ T1525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.049877][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.062549][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.073414][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.082351][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.091504][ T1525] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.098820][ T1525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.108533][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.117678][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.126584][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.135285][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.143561][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.152490][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.161515][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.169397][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.177687][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.207046][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.216465][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.226925][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.236089][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.244725][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.253435][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.263086][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.270192][ T1525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.280212][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.288825][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.297400][ T1525] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.304496][ T1525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.312148][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.322294][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.332521][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.347577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.367677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.380758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.418567][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.429219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.437991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.451458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.460158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.469026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.483701][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.501338][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.522083][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.533691][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.542858][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.551558][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.560837][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.593100][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.607305][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.622772][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.632391][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.646011][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.654823][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.663328][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.672222][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.680968][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.688049][ T1525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.696054][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.704642][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 57.712189][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 57.723584][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 57.728182][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.740702][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 57.747616][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 57.750730][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.765190][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.773691][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.780915][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.794012][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.803945][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.813653][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.821146][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.831399][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.847893][ T4192] device veth0_vlan entered promiscuous mode [ 57.856340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.867083][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.876012][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.885478][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.907814][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.916400][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.923973][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.932450][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.941008][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.954768][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.965282][ T4192] device veth1_vlan entered promiscuous mode [ 57.978991][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.994174][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.001833][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.011470][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.021956][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.031507][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.040530][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.049243][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.057943][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.082497][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.092200][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.102794][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.119361][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.126462][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.136587][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.145748][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.154014][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.161096][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.168916][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.177392][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.186640][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.196157][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.205314][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.233055][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.245902][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.264258][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.272962][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.306903][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.321160][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.329886][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.339111][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.349352][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.358062][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.367215][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.375710][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.383823][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.392663][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.403392][ T4192] device veth0_macvtap entered promiscuous mode [ 58.459073][ T4190] device veth0_vlan entered promiscuous mode [ 58.479168][ T4192] device veth1_macvtap entered promiscuous mode [ 58.492456][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.501941][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.511246][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.520136][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.530665][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.538852][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.547441][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.555833][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.569275][ T4190] device veth1_vlan entered promiscuous mode [ 58.579444][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.591290][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.600049][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.628776][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.644444][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 58.652488][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 58.661385][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.670275][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.678242][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.686302][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.695985][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.713887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.721456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.734644][ T4189] device veth0_vlan entered promiscuous mode [ 58.754383][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.761826][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.769630][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.779063][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.789822][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.800665][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.811281][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.825680][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.834642][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.843328][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.852435][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.863897][ T4190] device veth0_macvtap entered promiscuous mode [ 58.872020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.880148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.889507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.901776][ T4189] device veth1_vlan entered promiscuous mode [ 58.922993][ T4190] device veth1_macvtap entered promiscuous mode [ 58.946326][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.958775][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.967737][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.976702][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.005304][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.013486][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.036971][ T4191] device veth0_vlan entered promiscuous mode [ 59.058508][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.067261][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.078313][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.087223][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.097759][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.108439][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.121017][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.130898][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.141899][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.153263][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.167362][ T4188] device veth0_vlan entered promiscuous mode [ 59.178122][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.187129][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.196406][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.205918][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.215060][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.223118][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.233283][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.241754][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.258910][ T4191] device veth1_vlan entered promiscuous mode [ 59.270969][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.279997][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.289062][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.297964][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.316629][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.326287][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.334738][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.348529][ T4189] device veth0_macvtap entered promiscuous mode [ 59.360016][ T4188] device veth1_vlan entered promiscuous mode [ 59.395683][ T4189] device veth1_macvtap entered promiscuous mode [ 59.441056][ T4191] device veth0_macvtap entered promiscuous mode [ 59.450504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 59.458695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 59.468875][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.472883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.480438][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.485364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 59.499918][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 59.509297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.517696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.525808][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.533712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.541935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.550813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.559432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.568082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.576995][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.585979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.596081][ T4188] device veth0_macvtap entered promiscuous mode [ 59.613007][ T4191] device veth1_macvtap entered promiscuous mode [ 59.623303][ T4188] device veth1_macvtap entered promiscuous mode [ 59.636301][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.647705][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.657645][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.668097][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.679363][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.702017][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.710958][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.726203][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.734188][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.742103][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.754299][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.762788][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.771640][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.781286][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.792620][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 59.794575][ T1109] Bluetooth: hci4: command 0x040f tx timeout [ 59.801783][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 59.806485][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.811463][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 59.820641][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.820658][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.821950][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.834499][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 59.866071][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.878816][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.889151][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.899645][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.909628][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.920102][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.930870][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.943429][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.956165][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.966295][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.976979][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.987059][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.998779][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.008750][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.019254][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.030966][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.038696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.049163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.057884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.066739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.075738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.084477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.095279][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.106208][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.115025][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.123732][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.144224][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.154859][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.166208][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.176903][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.187875][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.198538][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.210549][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.225980][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.242178][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.252295][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.262999][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.273818][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.284766][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.294848][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.305301][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.316057][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.326803][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.336432][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.351618][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.360808][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.372999][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.382076][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.390913][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.401417][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.432798][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.448141][ T4301] loop3: detected capacity change from 0 to 256 [ 60.454684][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.463616][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.472687][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.507038][ T1525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.515428][ T1525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.554724][ T4301] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.569899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.570697][ T4301] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 60.622577][ T4301] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 60.634236][ T1525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.648331][ T1525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.663450][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.739452][ T26] audit: type=1804 audit(1794527780.406:2): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4" name="/newroot/0/file2/bus" dev="loop3" ino=1048589 res=1 errno=0 [ 60.787537][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.801682][ T26] audit: type=1804 audit(1794527780.446:3): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4" name="/newroot/0/file2/bus" dev="loop3" ino=1048589 res=1 errno=0 [ 60.805294][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.866829][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.889114][ T4305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 60.906785][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.918381][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.934176][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.941664][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.970567][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.839903][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.866333][ T4304] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 61.881004][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 61.938115][ T4256] Bluetooth: hci2: command 0x0419 tx timeout [ 61.950352][ T390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.996469][ T390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.016151][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 62.049231][ T4256] Bluetooth: hci4: command 0x0419 tx timeout [ 62.055955][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.074527][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.079926][ T4320] loop2: detected capacity change from 0 to 32896 [ 62.088776][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.114391][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 62.122025][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.140248][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.188217][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.198834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.261127][ T4324] loop4: detected capacity change from 0 to 32896 [ 62.342425][ T4320] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.400158][ T4320] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.488294][ T4324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.629427][ T4324] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.190755][ T4337] loop0: detected capacity change from 0 to 32896 [ 63.639063][ T4339] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 63.816265][ T4337] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.838351][ T4337] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.995342][ T4345] input: syz0 as /devices/virtual/input/input5 [ 64.029347][ T4345] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 64.948921][ T4358] loop2: detected capacity change from 0 to 32896 [ 65.000559][ T4361] loop3: detected capacity change from 0 to 33280 [ 65.047964][ T4358] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.057590][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 65.067892][ T4358] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.126498][ T4361] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 65.204091][ T4361] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.824183][ T4266] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.131491][ T4365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.221251][ T4379] loop3: detected capacity change from 0 to 33792 [ 66.254333][ T4266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.265301][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.276583][ T4379] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 66.287230][ T4266] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.296984][ T4266] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.307584][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.317317][ T4379] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.350672][ T4266] usb 2-1: config 0 descriptor?? [ 66.357898][ T4267] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.359445][ T4379] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 66.382282][ T4379] System zones: 0-1, 3-36 [ 66.391130][ T4379] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 66.418379][ T4382] loop0: detected capacity change from 0 to 33280 [ 66.440706][ T4382] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 66.481202][ T4382] EXT4-fs (loop0): 1 truncate cleaned up [ 66.515851][ T4382] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 66.604168][ T4267] usb 3-1: Using ep0 maxpacket: 32 [ 67.111704][ T4389] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.434183][ T4267] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.525632][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.542248][ T4266] usb 2-1: USB disconnect, device number 2 [ 67.544360][ T4267] usb 3-1: config 129 has an invalid interface number: 6 but max is 0 [ 67.894962][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.983794][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.118266][ T7] usb 5-1: Product: syz [ 68.201698][ T7] usb 5-1: Manufacturer: syz [ 68.203241][ T4267] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 68.216969][ T4267] usb 3-1: config 129 has no interface number 0 [ 68.228344][ T7] usb 5-1: SerialNumber: syz [ 68.374554][ T4267] usb 3-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0c [ 68.424140][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.431733][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.463455][ T4267] usb 3-1: Product: 堶䖨ë·à»­é¥Šë‹ìŒœí™‘ë®è”Ÿë¤¦à»Ÿë멗ඡ쭺濖溜 [ 68.474857][ T4267] usb 3-1: Manufacturer: Ð [ 68.479602][ T4267] usb 3-1: SerialNumber: syz [ 68.610518][ T4264] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.710655][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 68.828540][ T4267] hub 3-1:129.6: bad descriptor, ignoring hub [ 68.840259][ T4267] hub: probe of 3-1:129.6 failed with error -5 [ 68.851977][ T4267] sierra 3-1:129.6: Sierra USB modem converter detected [ 68.853042][ T4428] loop0: detected capacity change from 0 to 1024 [ 68.865782][ T13] usb 4-1: config index 0 descriptor too short (expected 58651, got 27) [ 68.876906][ T13] usb 4-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 68.896353][ T4267] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 68.915829][ T13] usb 4-1: config 192 has no interfaces? [ 68.957864][ T4267] usb 3-1: USB disconnect, device number 2 [ 68.959726][ T4296] hfsplus: b-tree write err: -5, ino 25 [ 68.971413][ T4296] hfsplus: b-tree write err: -5, ino 4 [ 69.063316][ T4437] loop1: detected capacity change from 0 to 33280 [ 69.124959][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 69.152831][ T4296] hfsplus: b-tree write err: -5, ino 2 [ 69.174982][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.278120][ T13] usb 4-1: Product: syz [ 69.311157][ T13] usb 4-1: Manufacturer: syz [ 69.349261][ T13] usb 4-1: SerialNumber: syz [ 69.614494][ T7] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 69.621410][ T4267] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 69.622591][ T7] cdc_ncm 5-1:1.0: dwNtbInMaxSize=50 is too small. Using 2048 [ 69.635114][ T4267] sierra 3-1:129.6: device disconnected [ 69.737426][ T4437] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.748609][ T4437] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.771188][ T7] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 69.824289][ T7] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 69.904528][ T7] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 69.959926][ T4450] loop2: detected capacity change from 0 to 128 [ 69.967808][ T7] usb 5-1: USB disconnect, device number 2 [ 69.979662][ T7] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 70.161654][ T4458] loop0: detected capacity change from 0 to 128 [ 70.310192][ T4450] attempt to access beyond end of device [ 70.310192][ T4450] loop2: rw=2049, want=129, limit=128 [ 70.331544][ T4450] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 70.383369][ T4458] attempt to access beyond end of device [ 70.383369][ T4458] loop0: rw=2049, want=129, limit=128 [ 70.436459][ T4458] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 70.554302][ T26] audit: type=1326 audit(1794528046.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.1.30" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5b5a04d9 code=0x7ffc0000 [ 70.583699][ T4475] loop4: detected capacity change from 0 to 33280 [ 70.586143][ T4473] Cannot find set identified by id 0 to match [ 70.600958][ T26] audit: type=1326 audit(1794528046.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.1.30" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9d5b5a04d9 code=0x7ffc0000 [ 70.650133][ T4475] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 70.651763][ T4473] loop2: detected capacity change from 0 to 16 [ 70.731970][ T26] audit: type=1326 audit(1794528046.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.1.30" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5b5a04d9 code=0x7ffc0000 [ 70.769919][ T4475] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.784017][ T4475] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.33: bad orphan inode 15 [ 70.794790][ T4473] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.802794][ T13] usb 4-1: USB disconnect, device number 2 [ 70.815965][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 70.826938][ T26] audit: type=1326 audit(1794528046.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.1.30" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5b5a04d9 code=0x7ffc0000 [ 70.877197][ T4475] ext4_test_bit(bit=14, block=18) = 1 [ 70.882611][ T4475] is_bad_inode(inode)=0 [ 70.899267][ T4475] NEXT_ORPHAN(inode)=1023 [ 70.905577][ T4473] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 70.919913][ T4473] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 70.940669][ T4473] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 70.954288][ T4473] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 70.974891][ T4473] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 70.987214][ T4473] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 70.996193][ T4475] max_ino=32 [ 70.999447][ T4475] i_nlink=0 [ 71.005644][ T4475] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2928: inode #15: comm syz.4.33: corrupted xattr block 19 [ 71.056656][ T4473] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 71.068378][ T4475] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 71.097483][ T4475] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.113947][ T4477] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 71.114028][ T4473] attempt to access beyond end of device [ 71.114028][ T4473] loop2: rw=0, want=304, limit=16 [ 71.148549][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.156965][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.193610][ T4477] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 71.213811][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.303702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.313692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.323693][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 71.333686][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 71.343689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 71.353692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.363683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.373681][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.383677][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.393681][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.087984][ T4473] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 72.096309][ T4473] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 72.541025][ T4510] loop2: detected capacity change from 0 to 1024 [ 72.547907][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.576046][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.588502][ T4511] device bridge1 entered promiscuous mode [ 72.647287][ T4335] hfsplus: b-tree write err: -5, ino 25 [ 72.656224][ T4335] hfsplus: b-tree write err: -5, ino 4 [ 72.661775][ T4335] hfsplus: b-tree write err: -5, ino 2 [ 72.806354][ T13] usb 4-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 72.831128][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.833982][ T4514] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 72.844437][ T13] usb 4-1: Product: syz [ 72.852179][ T13] usb 4-1: Manufacturer: syz [ 72.860825][ T13] usb 4-1: SerialNumber: syz [ 73.401793][ T4517] FAULT_INJECTION: forcing a failure. [ 73.401793][ T4517] name failslab, interval 1, probability 0, space 0, times 1 [ 73.414950][ T4517] CPU: 0 PID: 4517 Comm: syz.1.41 Not tainted syzkaller #0 [ 73.422159][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 73.432234][ T4517] Call Trace: [ 73.435513][ T4517] [ 73.438446][ T4517] dump_stack_lvl+0x188/0x250 [ 73.443163][ T4517] ? show_regs_print_info+0x20/0x20 [ 73.448376][ T4517] ? load_image+0x410/0x410 [ 73.452911][ T4517] should_fail+0x383/0x4b0 [ 73.457343][ T4517] should_failslab+0x5/0x20 [ 73.461857][ T4517] slab_pre_alloc_hook+0x51/0xc0 [ 73.466802][ T4517] ? xas_create+0x1047/0x15a0 [ 73.471479][ T4517] kmem_cache_alloc+0x3d/0x280 [ 73.476266][ T4517] ? xas_descend+0x210/0x3b0 [ 73.480860][ T4517] xas_create+0x1047/0x15a0 [ 73.485367][ T4517] ? __kasan_kmalloc+0xaf/0xe0 [ 73.490156][ T4517] xas_store+0x9f/0x1a00 [ 73.494417][ T4517] __xa_store+0xe6/0x210 [ 73.498671][ T4517] xa_store+0x2f/0x50 [ 73.502665][ T4517] __io_uring_add_tctx_node+0x1ce/0x500 [ 73.508226][ T4517] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 73.514130][ T4517] ? _raw_spin_unlock+0x24/0x40 [ 73.518988][ T4517] ? alloc_fd+0x59e/0x650 [ 73.523349][ T4517] io_uring_install_fd+0xc0/0xf0 [ 73.528301][ T4517] __se_sys_io_uring_setup+0x2303/0x2900 [ 73.533953][ T4517] ? __x64_sys_io_uring_setup+0x60/0x60 [ 73.539540][ T4517] ? lockdep_hardirqs_on+0x94/0x140 [ 73.544735][ T4517] do_syscall_64+0x4c/0xa0 [ 73.549172][ T4517] ? clear_bhb_loop+0x30/0x80 [ 73.553836][ T4517] ? clear_bhb_loop+0x30/0x80 [ 73.558543][ T4517] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.564455][ T4517] RIP: 0033:0x7f9d5b5a04d9 [ 73.568872][ T4517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.588460][ T4517] RSP: 002b:00007f9d597ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 73.596858][ T4517] RAX: ffffffffffffffda RBX: 00007f9d5b81cfa0 RCX: 00007f9d5b5a04d9 [ 73.604819][ T4517] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000006ddd [ 73.612797][ T4517] RBP: 00007f9d5b62f04e R08: 0000000000000000 R09: 0000000000000000 [ 73.620760][ T4517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.628731][ T4517] R13: 00007f9d5b81d038 R14: 00007f9d5b81cfa0 R15: 00007fff6343add8 [ 73.636723][ T4517] [ 73.656196][ T13] usb 4-1: USB disconnect, device number 3 [ 73.710529][ T4524] syz.1.43 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 73.748706][ T7] hid (null): unknown global tag 0xd [ 73.768000][ T7] hid-generic 0005:10CF:4155.0001: unknown main item tag 0x0 [ 73.782401][ T7] hid-generic 0005:10CF:4155.0001: unknown main item tag 0x2 [ 73.795015][ T7] hid-generic 0005:10CF:4155.0001: unknown main item tag 0xe [ 73.820748][ T7] hid-generic 0005:10CF:4155.0001: unknown main item tag 0x3 [ 73.834007][ T7] hid-generic 0005:10CF:4155.0001: unknown main item tag 0x2 [ 73.841481][ T7] hid-generic 0005:10CF:4155.0001: unknown global tag 0xd [ 73.852895][ T4526] loop1: detected capacity change from 0 to 512 [ 73.853481][ T7] hid-generic 0005:10CF:4155.0001: item 0 0 1 13 parsing failed [ 73.892673][ T4530] loop0: detected capacity change from 0 to 33280 [ 73.911008][ T7] hid-generic: probe of 0005:10CF:4155.0001 failed with error -22 [ 73.969898][ T4530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.987815][ T4530] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.010562][ T4530] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.45: bad orphan inode 131083 [ 74.022477][ T4530] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 75.034825][ T4360] Bluetooth: hci5: command 0x1001 tx timeout [ 75.733907][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 75.851355][ T4550] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.351556][ T4558] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.748854][ T4552] loop1: detected capacity change from 0 to 49152 [ 76.826680][ T4552] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.853186][ T4552] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 76.922801][ T4552] EXT4-fs (loop1): mounted filesystem with ordered data mode. Opts: dioread_nolock,stripe=0x0000000000000006,data=journal,data=ordered,,errors=continue. Quota mode: journalled. [ 77.006286][ T4568] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4568] [ 77.840680][ T4577] loop4: detected capacity change from 0 to 512 [ 77.860789][ T4580] loop0: detected capacity change from 0 to 128 [ 77.984579][ T4577] ======================================================= [ 77.984579][ T4577] WARNING: The mand mount option has been deprecated and [ 77.984579][ T4577] and is ignored by this kernel. Remove the mand [ 77.984579][ T4577] option from the mount to silence this warning. [ 77.984579][ T4577] ======================================================= [ 78.065018][ T4577] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.165213][ T4578] ip_tables: iptables: counters copy to user failed while replacing table [ 78.190206][ T4584] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.272775][ T4577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.60'. [ 78.393598][ T4267] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.772947][ T4267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.784453][ T4590] bridge0: port 3(wlan1) entered blocking state [ 78.810079][ T4267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.840558][ T4590] bridge0: port 3(wlan1) entered disabled state [ 78.850488][ T4267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 78.881710][ T4267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.902129][ T4590] device wlan1 entered promiscuous mode [ 78.922390][ T4267] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.933512][ T4590] bridge0: port 3(wlan1) entered blocking state [ 78.940114][ T4590] bridge0: port 3(wlan1) entered forwarding state [ 78.969137][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.991156][ T4267] usb 1-1: config 0 descriptor?? [ 79.188158][ T4597] loop4: detected capacity change from 0 to 32896 [ 79.222674][ T4597] FAULT_INJECTION: forcing a failure. [ 79.222674][ T4597] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.236361][ T4597] CPU: 1 PID: 4597 Comm: syz.4.67 Not tainted syzkaller #0 [ 79.243547][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 79.253601][ T4597] Call Trace: [ 79.256861][ T4597] [ 79.259780][ T4597] dump_stack_lvl+0x188/0x250 [ 79.264443][ T4597] ? show_regs_print_info+0x20/0x20 [ 79.269626][ T4597] ? load_image+0x410/0x410 [ 79.274114][ T4597] ? mark_lock+0x94/0x320 [ 79.278444][ T4597] should_fail+0x383/0x4b0 [ 79.282865][ T4597] prepare_alloc_pages+0x1e3/0x5b0 [ 79.287961][ T4597] __alloc_pages+0x11b/0x480 [ 79.292540][ T4597] ? zone_statistics+0x170/0x170 [ 79.297458][ T4597] ? rcu_lock_acquire+0x30/0x30 [ 79.302292][ T4597] ? alloc_pages+0x452/0x560 [ 79.306865][ T4597] __get_free_pages+0x8/0x30 [ 79.311438][ T4597] __tlb_remove_page_size+0x1f2/0x3f0 [ 79.316792][ T4597] unmap_page_range+0xfcf/0x2410 [ 79.321726][ T4597] unmap_vmas+0x131/0x250 [ 79.326034][ T4597] ? unmap_page_range+0x2410/0x2410 [ 79.331211][ T4597] ? __mutex_lock_common+0x435/0x2400 [ 79.336564][ T4597] ? exit_mm_release+0x16/0x30 [ 79.341313][ T4597] exit_mmap+0x3b9/0x640 [ 79.345538][ T4597] ? vm_brk+0x20/0x20 [ 79.349520][ T4597] ? uprobe_clear_state+0x2f6/0x460 [ 79.354698][ T4597] __mmput+0x115/0x390 [ 79.358747][ T4597] exit_mm+0x632/0x7b0 [ 79.362796][ T4597] ? perf_pmu_migrate_context+0xb70/0xb70 [ 79.368511][ T4597] ? do_exit+0x2100/0x2100 [ 79.372903][ T4597] ? __ia32_sys_timer_delete+0x40/0x40 [ 79.378339][ T4597] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 79.383781][ T4597] ? tty_audit_exit+0x149/0x1f0 [ 79.388616][ T4597] do_exit+0x5b8/0x2100 [ 79.392755][ T4597] ? put_task_struct+0x80/0x80 [ 79.397511][ T4597] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.403475][ T4597] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.408485][ T4597] do_group_exit+0x12c/0x2f0 [ 79.413055][ T4597] ? lockdep_hardirqs_on+0x94/0x140 [ 79.418251][ T4597] get_signal+0x7eb/0x12e0 [ 79.422653][ T4597] arch_do_signal_or_restart+0xe6/0x12a0 [ 79.428308][ T4597] ? futex_exit_release+0x1c0/0x1c0 [ 79.433489][ T4597] ? get_sigframe_size+0x10/0x10 [ 79.438408][ T4597] ? __context_tracking_exit+0x4c/0x80 [ 79.443856][ T4597] ? exit_to_user_mode_loop+0x3b/0x130 [ 79.449317][ T4597] exit_to_user_mode_loop+0x9e/0x130 [ 79.454584][ T4597] exit_to_user_mode_prepare+0xee/0x180 [ 79.460128][ T4597] syscall_exit_to_user_mode+0x16/0x40 [ 79.465571][ T4597] do_syscall_64+0x58/0xa0 [ 79.469966][ T4597] ? clear_bhb_loop+0x30/0x80 [ 79.474630][ T4597] ? clear_bhb_loop+0x30/0x80 [ 79.479300][ T4597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.485170][ T4597] RIP: 0033:0x7f1c261294d9 [ 79.489563][ T4597] Code: Unable to access opcode bytes at RIP 0x7f1c261294af. [ 79.496902][ T4597] RSP: 002b:00007f1c243760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.505312][ T4597] RAX: 0000000000000001 RBX: 00007f1c263a5fa8 RCX: 00007f1c261294d9 [ 79.513280][ T4597] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1c263a5fac [ 79.521238][ T4597] RBP: 00007f1c263a5fa0 R08: 000aeb3fb3375c6d R09: 0000000000000000 [ 79.529190][ T4597] R10: 0000000016f47978 R11: 0000000000000246 R12: 0000000000000000 [ 79.537157][ T4597] R13: 00007f1c263a6038 R14: 00007ffe32d34090 R15: 00007ffe32d34178 [ 79.545130][ T4597] [ 79.567124][ T9] bridge0: port 3(wlan1) entered disabled state [ 79.786190][ T4267] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 79.844019][ T4267] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 80.015036][ T4601] loop2: detected capacity change from 0 to 49152 [ 80.100804][ T4601] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 80.113263][ T4580] plantronics 0003:047F:FFFF.0002: usb_submit_urb(out) failed: -90 [ 80.146013][ T1109] usb 1-1: USB disconnect, device number 2 [ 80.245717][ T4601] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none. [ 80.262799][ T4601] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.413276][ T4601] FAULT_INJECTION: forcing a failure. [ 80.413276][ T4601] name failslab, interval 1, probability 0, space 0, times 0 [ 80.468944][ T4612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.478746][ T4601] CPU: 1 PID: 4601 Comm: syz.2.69 Not tainted syzkaller #0 [ 80.485968][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 80.496032][ T4601] Call Trace: [ 80.499334][ T4601] [ 80.502269][ T4601] dump_stack_lvl+0x188/0x250 [ 80.506971][ T4601] ? show_regs_print_info+0x20/0x20 [ 80.512184][ T4601] ? load_image+0x410/0x410 [ 80.516706][ T4601] ? __might_sleep+0xf0/0xf0 [ 80.521305][ T4601] ? __lock_acquire+0x7d40/0x7d40 [ 80.526354][ T4601] should_fail+0x383/0x4b0 [ 80.530806][ T4601] should_failslab+0x5/0x20 [ 80.535317][ T4601] slab_pre_alloc_hook+0x51/0xc0 [ 80.540268][ T4601] ? fib_trie_unmerge+0x266/0xce0 [ 80.545303][ T4601] kmem_cache_alloc+0x3d/0x280 [ 80.550084][ T4601] fib_trie_unmerge+0x266/0xce0 [ 80.554958][ T4601] fib_unmerge+0xbc/0x350 [ 80.559307][ T4601] fib4_rule_configure+0xe0/0xb00 [ 80.564352][ T4601] fib_nl_newrule+0x131a/0x1e00 [ 80.569217][ T4601] ? __mutex_trylock_common+0x15c/0x260 [ 80.574762][ T4601] ? rcu_lock_release+0x20/0x20 [ 80.579604][ T4601] ? netlink_sendmsg+0x8ba/0xbe0 [ 80.584538][ T4601] ? ___sys_sendmsg+0x236/0x2e0 [ 80.589395][ T4601] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 80.594422][ T4601] ? fib_rules_seq_read+0xf0/0xf0 [ 80.599442][ T4601] ? __mutex_lock_common+0x435/0x2400 [ 80.604831][ T4601] ? fib_rules_seq_read+0xf0/0xf0 [ 80.609856][ T4601] rtnetlink_rcv_msg+0x7f1/0xf10 [ 80.614795][ T4601] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 80.620775][ T4601] ? rtnetlink_bind+0x80/0x80 [ 80.625445][ T4601] ? __local_bh_enable_ip+0x136/0x1c0 [ 80.630803][ T4601] ? lockdep_hardirqs_on+0x94/0x140 [ 80.635990][ T4601] ? __local_bh_enable_ip+0x136/0x1c0 [ 80.641348][ T4601] ? _local_bh_enable+0xa0/0xa0 [ 80.646190][ T4601] ? __dev_queue_xmit+0x1b64/0x2e50 [ 80.651389][ T4601] ? dev_queue_xmit+0x20/0x20 [ 80.656051][ T4601] ? __copy_skb_header+0x3ba/0x4f0 [ 80.661147][ T4601] ? memcpy+0x3c/0x60 [ 80.665113][ T4601] ? __copy_skb_header+0x3ba/0x4f0 [ 80.670212][ T4601] ? __skb_clone+0x446/0x6c0 [ 80.674791][ T4601] netlink_rcv_skb+0x1e9/0x430 [ 80.679545][ T4601] ? rtnetlink_bind+0x80/0x80 [ 80.684208][ T4601] ? netlink_ack+0xb10/0xb10 [ 80.688792][ T4601] netlink_unicast+0x804/0x9e0 [ 80.693551][ T4601] netlink_sendmsg+0x8ba/0xbe0 [ 80.698315][ T4601] ? netlink_getsockopt+0x570/0x570 [ 80.703498][ T4601] ? aa_sock_msg_perm+0x94/0x150 [ 80.708421][ T4601] ? apparmor_socket_sendmsg+0x88/0x230 [ 80.713950][ T4601] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 80.719224][ T4601] ? security_socket_sendmsg+0x7c/0xa0 [ 80.724676][ T4601] ? netlink_getsockopt+0x570/0x570 [ 80.729880][ T4601] ____sys_sendmsg+0x5be/0x8f0 [ 80.734640][ T4601] ? __sys_sendmsg_sock+0x30/0x30 [ 80.739669][ T4601] ? import_iovec+0x6f/0xa0 [ 80.744165][ T4601] ___sys_sendmsg+0x236/0x2e0 [ 80.748840][ T4601] ? __sys_sendmsg+0x290/0x290 [ 80.753618][ T4601] __se_sys_sendmsg+0x1b7/0x2a0 [ 80.758458][ T4601] ? __x64_sys_sendmsg+0x80/0x80 [ 80.763379][ T4601] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.769356][ T4601] ? lockdep_hardirqs_on+0x94/0x140 [ 80.774545][ T4601] do_syscall_64+0x4c/0xa0 [ 80.778948][ T4601] ? clear_bhb_loop+0x30/0x80 [ 80.783613][ T4601] ? clear_bhb_loop+0x30/0x80 [ 80.788277][ T4601] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.794158][ T4601] RIP: 0033:0x7f24ea6b74d9 [ 80.798565][ T4601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.818171][ T4601] RSP: 002b:00007f24e8904028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.826588][ T4601] RAX: ffffffffffffffda RBX: 00007f24ea933fa0 RCX: 00007f24ea6b74d9 [ 80.834559][ T4601] RDX: 0000000000044004 RSI: 0000200000000300 RDI: 0000000000000007 [ 80.842529][ T4601] RBP: 00007f24ea74604e R08: 0000000000000000 R09: 0000000000000000 [ 80.850495][ T4601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.858464][ T4601] R13: 00007f24ea934038 R14: 00007f24ea933fa0 R15: 00007ffd8365a198 [ 80.866451][ T4601] [ 81.371628][ T4617] loop0: detected capacity change from 0 to 164 [ 81.385756][ T23] cfg80211: failed to load regulatory.db [ 81.702615][ T4360] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 81.745526][ T4625] loop0: detected capacity change from 0 to 16 [ 81.836555][ T4625] erofs: (device loop0): mounted with root inode @ nid 36. [ 81.857505][ T4625] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 82.120299][ T4629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.167545][ T4629] loop0: detected capacity change from 0 to 33792 [ 82.919913][ T4629] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x0000000000007fff,noblock_validity,nouid32,norecovery,quota,auto_da_alloc,jqfmt=vfsold,minixdf,auto_da_alloc=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 82.922594][ T4360] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 82.945040][ T4629] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.953856][ T4360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.972092][ T4360] usb 5-1: Product: syz [ 82.976325][ T4360] usb 5-1: Manufacturer: syz [ 82.981061][ T4360] usb 5-1: SerialNumber: syz [ 83.303332][ T4205] Bluetooth: hci5: CSR: Local version failed (-110) [ 83.646626][ T4636] udc-core: couldn't find an available UDC or it's busy [ 83.677740][ T4636] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.743959][ T4635] loop3: detected capacity change from 0 to 49152 [ 83.797699][ T4635] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.822271][ T4635] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 83.884026][ T4638] loop0: detected capacity change from 0 to 34816 [ 83.919380][ T4635] EXT4-fs (loop3): mounted filesystem with ordered data mode. Opts: dioread_nolock,stripe=0x0000000000000006,data=journal,data=ordered,,errors=continue. Quota mode: journalled. [ 83.921086][ T4642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.024519][ T4638] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,. Quota mode: writeback. [ 84.050579][ T4648] loop2: detected capacity change from 0 to 32896 [ 84.120353][ T4648] FAULT_INJECTION: forcing a failure. [ 84.120353][ T4648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.133740][ T4648] CPU: 1 PID: 4648 Comm: syz.2.81 Not tainted syzkaller #0 [ 84.140945][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 84.150995][ T4648] Call Trace: [ 84.154269][ T4648] [ 84.157188][ T4648] dump_stack_lvl+0x188/0x250 [ 84.161858][ T4648] ? show_regs_print_info+0x20/0x20 [ 84.167039][ T4648] ? load_image+0x410/0x410 [ 84.171531][ T4648] ? mark_lock+0x94/0x320 [ 84.175846][ T4648] should_fail+0x383/0x4b0 [ 84.180250][ T4648] prepare_alloc_pages+0x1e3/0x5b0 [ 84.185351][ T4648] __alloc_pages+0x11b/0x480 [ 84.189929][ T4648] ? zone_statistics+0x170/0x170 [ 84.194856][ T4648] ? rcu_lock_acquire+0x30/0x30 [ 84.199692][ T4648] ? alloc_pages+0x452/0x560 [ 84.204268][ T4648] __get_free_pages+0x8/0x30 [ 84.208842][ T4648] __tlb_remove_page_size+0x1f2/0x3f0 [ 84.214208][ T4648] unmap_page_range+0xfcf/0x2410 [ 84.219151][ T4648] unmap_vmas+0x131/0x250 [ 84.223466][ T4648] ? unmap_page_range+0x2410/0x2410 [ 84.228648][ T4648] ? __mutex_lock_common+0x435/0x2400 [ 84.234010][ T4648] ? exit_mm_release+0x16/0x30 [ 84.238764][ T4648] exit_mmap+0x3b9/0x640 [ 84.242993][ T4648] ? vm_brk+0x20/0x20 [ 84.246967][ T4648] ? uprobe_clear_state+0x2f6/0x460 [ 84.252152][ T4648] __mmput+0x115/0x390 [ 84.256204][ T4648] exit_mm+0x632/0x7b0 [ 84.260256][ T4648] ? perf_pmu_migrate_context+0xb70/0xb70 [ 84.265963][ T4648] ? do_exit+0x2100/0x2100 [ 84.270361][ T4648] ? __ia32_sys_timer_delete+0x40/0x40 [ 84.275815][ T4648] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 84.281262][ T4648] ? tty_audit_exit+0x149/0x1f0 [ 84.286100][ T4648] do_exit+0x5b8/0x2100 [ 84.290243][ T4648] ? put_task_struct+0x80/0x80 [ 84.294994][ T4648] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.300965][ T4648] ? _raw_spin_lock_irq+0xb7/0xf0 [ 84.305974][ T4648] do_group_exit+0x12c/0x2f0 [ 84.310545][ T4648] ? lockdep_hardirqs_on+0x94/0x140 [ 84.315729][ T4648] get_signal+0x7eb/0x12e0 [ 84.320142][ T4648] arch_do_signal_or_restart+0xe6/0x12a0 [ 84.325771][ T4648] ? futex_exit_release+0x1c0/0x1c0 [ 84.330957][ T4648] ? get_sigframe_size+0x10/0x10 [ 84.335879][ T4648] ? __context_tracking_exit+0x4c/0x80 [ 84.341338][ T4648] ? exit_to_user_mode_loop+0x3b/0x130 [ 84.346781][ T4648] exit_to_user_mode_loop+0x9e/0x130 [ 84.352048][ T4648] exit_to_user_mode_prepare+0xee/0x180 [ 84.357581][ T4648] syscall_exit_to_user_mode+0x16/0x40 [ 84.363023][ T4648] do_syscall_64+0x58/0xa0 [ 84.367419][ T4648] ? clear_bhb_loop+0x30/0x80 [ 84.372079][ T4648] ? clear_bhb_loop+0x30/0x80 [ 84.376738][ T4648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.382612][ T4648] RIP: 0033:0x7f24ea6b74d9 [ 84.387010][ T4648] Code: Unable to access opcode bytes at RIP 0x7f24ea6b74af. [ 84.394355][ T4648] RSP: 002b:00007f24e89040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 84.402761][ T4648] RAX: 0000000000000001 RBX: 00007f24ea933fa8 RCX: 00007f24ea6b74d9 [ 84.410724][ T4648] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f24ea933fac [ 84.418676][ T4648] RBP: 00007f24ea933fa0 R08: 0004fe7e5add011e R09: 0000000000000000 [ 84.426631][ T4648] R10: 0000000036e2d244 R11: 0000000000000246 R12: 0000000000000000 [ 84.434584][ T4648] R13: 00007f24ea934038 R14: 00007ffd8365a0b0 R15: 00007ffd8365a198 [ 84.442551][ T4648] [ 84.717226][ T4654] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 84.765302][ T4656] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.804498][ T4360] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 85.740950][ T4668] loop2: detected capacity change from 0 to 33280 [ 85.759348][ T4360] usb 5-1: USB disconnect, device number 3 [ 85.786243][ T4668] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 85.810314][ T4360] usblp0: removed [ 85.961007][ T4668] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 86.728336][ T4676] syz.1.91 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 86.774447][ T4683] ptp ptp0: max value is 20 [ 86.795105][ T4680] loop0: detected capacity change from 0 to 32896 [ 86.803649][ T4676] CPU: 1 PID: 4676 Comm: syz.1.91 Not tainted syzkaller #0 [ 86.810876][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 86.820937][ T4676] Call Trace: [ 86.824226][ T4676] [ 86.827161][ T4676] dump_stack_lvl+0x188/0x250 [ 86.831854][ T4676] ? show_regs_print_info+0x20/0x20 [ 86.837064][ T4676] ? load_image+0x410/0x410 [ 86.841578][ T4676] ? local_lock_release+0x170/0x170 [ 86.846793][ T4676] ? __rwlock_init+0x140/0x140 [ 86.851565][ T4676] dump_header+0xd9/0x780 [ 86.855906][ T4676] oom_kill_process+0x20e/0x3d0 [ 86.860782][ T4676] out_of_memory+0xdb2/0x1190 [ 86.865471][ T4676] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 86.871119][ T4676] ? mutex_lock_io_nested+0x60/0x60 [ 86.876337][ T4676] ? unregister_oom_notifier+0x20/0x20 [ 86.881922][ T4676] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 86.887482][ T4676] ? mem_cgroup_oom_trylock+0x210/0x210 [ 86.893048][ T4676] ? do_raw_spin_unlock+0x11d/0x230 [ 86.897792][ T4680] FAULT_INJECTION: forcing a failure. [ 86.897792][ T4680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.898259][ T4676] try_charge_memcg+0x1075/0x15b0 [ 86.916458][ T4676] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 86.922273][ T4676] ? rcu_lock_acquire+0x30/0x30 [ 86.927141][ T4676] obj_cgroup_charge_pages+0x87/0x190 [ 86.932504][ T4676] ? __memcg_kmem_charge_page+0x380/0x380 [ 86.938219][ T4676] ? rcu_lock_acquire+0x30/0x30 [ 86.943066][ T4676] obj_cgroup_charge+0x19f/0x320 [ 86.948004][ T4676] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 86.953120][ T4676] slab_pre_alloc_hook+0x9d/0xc0 [ 86.958051][ T4676] ? __alloc_file+0x25/0x240 [ 86.962633][ T4676] kmem_cache_alloc+0x3d/0x280 [ 86.967388][ T4676] __alloc_file+0x25/0x240 [ 86.971797][ T4676] alloc_empty_file+0x90/0x180 [ 86.976551][ T4676] alloc_file+0x5c/0x510 [ 86.980780][ T4676] ? do_raw_spin_unlock+0x11d/0x230 [ 86.985971][ T4676] alloc_file_pseudo+0x180/0x200 [ 86.990901][ T4676] ? alloc_empty_file_noaccount+0x80/0x80 [ 86.996607][ T4676] ? do_raw_spin_unlock+0x11d/0x230 [ 87.001793][ T4676] ? put_pid+0xc3/0x120 [ 87.005951][ T4676] sock_alloc_file+0xb3/0x240 [ 87.010622][ T4676] __sys_socketpair+0x2cc/0x540 [ 87.015469][ T4676] __x64_sys_socketpair+0x97/0xb0 [ 87.020481][ T4676] do_syscall_64+0x4c/0xa0 [ 87.024885][ T4676] ? clear_bhb_loop+0x30/0x80 [ 87.029549][ T4676] ? clear_bhb_loop+0x30/0x80 [ 87.034219][ T4676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.040107][ T4676] RIP: 0033:0x7f9d5b5a04d9 [ 87.044517][ T4676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.064111][ T4676] RSP: 002b:00007f9d597ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 87.072517][ T4676] RAX: ffffffffffffffda RBX: 00007f9d5b81cfa0 RCX: 00007f9d5b5a04d9 [ 87.080478][ T4676] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 87.088433][ T4676] RBP: 00007f9d5b62f04e R08: 0000000000000000 R09: 0000000000000000 [ 87.096392][ T4676] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.104351][ T4676] R13: 00007f9d5b81d038 R14: 00007f9d5b81cfa0 R15: 00007fff6343add8 [ 87.112322][ T4676] [ 87.115329][ T4680] CPU: 0 PID: 4680 Comm: syz.0.92 Not tainted syzkaller #0 [ 87.122537][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 87.132599][ T4680] Call Trace: [ 87.135874][ T4680] [ 87.138798][ T4680] dump_stack_lvl+0x188/0x250 [ 87.143482][ T4680] ? show_regs_print_info+0x20/0x20 [ 87.148687][ T4680] ? load_image+0x410/0x410 [ 87.153196][ T4680] ? mark_lock+0x94/0x320 [ 87.154105][ T4676] memory: usage 8kB, limit 8kB, failcnt 40 [ 87.157535][ T4680] should_fail+0x383/0x4b0 [ 87.167723][ T4680] prepare_alloc_pages+0x1e3/0x5b0 [ 87.172851][ T4680] __alloc_pages+0x11b/0x480 [ 87.177456][ T4680] ? zone_statistics+0x170/0x170 [ 87.182402][ T4680] ? rcu_lock_acquire+0x30/0x30 [ 87.187257][ T4680] ? alloc_pages+0x452/0x560 [ 87.191849][ T4680] __get_free_pages+0x8/0x30 [ 87.195478][ T4676] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 87.196439][ T4680] __tlb_remove_page_size+0x1f2/0x3f0 [ 87.209243][ T4680] unmap_page_range+0xfcf/0x2410 [ 87.214214][ T4680] unmap_vmas+0x131/0x250 [ 87.218547][ T4680] ? unmap_page_range+0x2410/0x2410 [ 87.222197][ T4676] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 87.223748][ T4680] ? __mutex_lock_common+0x435/0x2400 [ 87.230579][ T4676] Memory cgroup stats for /syz1/test [ 87.235930][ T4680] ? exit_mm_release+0x16/0x30 [ 87.245948][ T4680] exit_mmap+0x3b9/0x640 [ 87.250187][ T4680] ? vm_brk+0x20/0x20 [ 87.254160][ T4680] ? uprobe_clear_state+0x2f6/0x460 [ 87.259432][ T4680] __mmput+0x115/0x390 [ 87.263483][ T4680] exit_mm+0x632/0x7b0 [ 87.267536][ T4680] ? perf_pmu_migrate_context+0xb70/0xb70 [ 87.273246][ T4680] ? do_exit+0x2100/0x2100 [ 87.277641][ T4680] ? __ia32_sys_timer_delete+0x40/0x40 [ 87.283081][ T4680] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 87.288526][ T4680] ? tty_audit_exit+0x149/0x1f0 [ 87.293366][ T4680] do_exit+0x5b8/0x2100 [ 87.297506][ T4680] ? put_task_struct+0x80/0x80 [ 87.302251][ T4680] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 87.308217][ T4680] ? _raw_spin_lock_irq+0xb7/0xf0 [ 87.313225][ T4680] do_group_exit+0x12c/0x2f0 [ 87.317795][ T4680] ? lockdep_hardirqs_on+0x94/0x140 [ 87.322976][ T4680] get_signal+0x7eb/0x12e0 [ 87.327383][ T4680] arch_do_signal_or_restart+0xe6/0x12a0 [ 87.333009][ T4680] ? futex_exit_release+0x1c0/0x1c0 [ 87.338189][ T4680] ? get_sigframe_size+0x10/0x10 [ 87.343116][ T4680] ? __context_tracking_exit+0x4c/0x80 [ 87.348578][ T4680] ? exit_to_user_mode_loop+0x3b/0x130 [ 87.354025][ T4680] exit_to_user_mode_loop+0x9e/0x130 [ 87.359297][ T4680] exit_to_user_mode_prepare+0xee/0x180 [ 87.364827][ T4680] syscall_exit_to_user_mode+0x16/0x40 [ 87.370273][ T4680] do_syscall_64+0x58/0xa0 [ 87.374675][ T4680] ? clear_bhb_loop+0x30/0x80 [ 87.379339][ T4680] ? clear_bhb_loop+0x30/0x80 [ 87.383998][ T4680] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.389888][ T4680] RIP: 0033:0x7fad4dcf54d9 [ 87.394289][ T4680] Code: Unable to access opcode bytes at RIP 0x7fad4dcf54af. [ 87.401634][ T4680] RSP: 002b:00007fad4bf420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.410028][ T4680] RAX: 0000000000000001 RBX: 00007fad4df71fa8 RCX: 00007fad4dcf54d9 [ 87.417990][ T4680] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fad4df71fac [ 87.425941][ T4680] RBP: 00007fad4df71fa0 R08: 003381848591ee66 R09: 0000000000000000 [ 87.433893][ T4680] R10: 000000001e26ecc5 R11: 0000000000000246 R12: 0000000000000000 [ 87.441843][ T4680] R13: 00007fad4df72038 R14: 00007fff90016fc0 R15: 00007fff900170a8 [ 87.449805][ T4680] [ 87.480934][ T4676] : [ 87.481537][ T4676] anon 0 [ 87.481537][ T4676] file 0 [ 87.481537][ T4676] kernel_stack 0 [ 87.481537][ T4676] pagetables 0 [ 87.481537][ T4676] percpu 0 [ 87.481537][ T4676] sock 0 [ 87.481537][ T4676] shmem 0 [ 87.481537][ T4676] file_mapped 0 [ 87.481537][ T4676] file_dirty 0 [ 87.481537][ T4676] file_writeback 0 [ 87.481537][ T4676] swapcached 0 [ 87.481537][ T4676] anon_thp 0 [ 87.481537][ T4676] file_thp 0 [ 87.481537][ T4676] shmem_thp 0 [ 87.481537][ T4676] inactive_anon 0 [ 87.481537][ T4676] active_anon 0 [ 87.481537][ T4676] inactive_file 0 [ 87.481537][ T4676] active_file 0 [ 87.481537][ T4676] unevictable 0 [ 87.481537][ T4676] slab_reclaimable 3472 [ 87.481537][ T4676] slab_unreclaimable 4232 [ 87.481537][ T4676] slab 7704 [ 87.481537][ T4676] workingset_refault_anon 0 [ 87.481537][ T4676] workingset_refault_file 0 [ 87.481537][ T4676] workingset_activate_anon 0 [ 87.481537][ T4676] workingset_activate_file 0 [ 87.578803][ T4676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.91,pid=4675,uid=0 [ 87.595929][ T4676] Memory cgroup out of memory: Killed process 4675 (syz.1.91) total-vm:202772kB, anon-rss:1452kB, file-rss:21780kB, shmem-rss:4kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 88.968656][ T26] audit: type=1326 audit(1794528064.643:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.0.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4dcf54d9 code=0x7ffc0000 [ 89.021975][ T4701] loop4: detected capacity change from 0 to 36864 [ 89.062513][ T26] audit: type=1326 audit(1794528064.643:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.0.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4dcf54d9 code=0x7ffc0000 [ 89.179540][ T4711] loop1: detected capacity change from 0 to 32896 [ 89.203553][ T4701] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.248378][ T4717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.266697][ T4711] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.279078][ T4701] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 89.315240][ T4711] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.247962][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 90.392695][ T4739] loop0: detected capacity change from 0 to 33280 [ 90.444778][ T4739] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.487890][ T4739] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 90.553940][ T4739] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.795777][ T7] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 90.816381][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.829801][ T7] usb 3-1: Product: syz [ 90.838410][ T7] usb 3-1: Manufacturer: syz [ 90.844207][ T7] usb 3-1: SerialNumber: syz [ 90.880222][ T4752] loop4: detected capacity change from 0 to 256 [ 90.895652][ T4752] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.989525][ T4760] loop3: detected capacity change from 0 to 128 [ 91.038043][ T4760] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 91.136086][ T4762] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.574097][ T4772] udc-core: couldn't find an available UDC or it's busy [ 91.606482][ T4772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.688790][ T4790] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.706967][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.733944][ T7] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 92.751329][ T7] usb 3-1: USB disconnect, device number 3 [ 92.767424][ T4789] loop2: detected capacity change from 0 to 1764 [ 92.772506][ T7] usblp0: removed [ 93.189997][ T4806] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.471548][ T4822] loop4: detected capacity change from 0 to 32896 [ 93.533380][ T4822] FAULT_INJECTION: forcing a failure. [ 93.533380][ T4822] name fail_futex, interval 1, probability 0, space 0, times 1 [ 93.576486][ T4822] CPU: 1 PID: 4822 Comm: syz.4.141 Not tainted syzkaller #0 [ 93.583813][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.593885][ T4822] Call Trace: [ 93.597167][ T4822] [ 93.600107][ T4822] dump_stack_lvl+0x188/0x250 [ 93.604807][ T4822] ? show_regs_print_info+0x20/0x20 [ 93.610021][ T4822] ? load_image+0x410/0x410 [ 93.614545][ T4822] should_fail+0x383/0x4b0 [ 93.618977][ T4822] get_futex_key+0x1a0/0x1200 [ 93.623671][ T4822] ? __lock_acquire+0x13b3/0x7d40 [ 93.628705][ T4822] ? futex_wait_restart+0x250/0x250 [ 93.633916][ T4822] futex_wake+0x101/0x540 [ 93.638264][ T4822] ? futex_wait+0x680/0x680 [ 93.642776][ T4822] ? verify_lock_unused+0x140/0x140 [ 93.647987][ T4822] ? verify_lock_unused+0x140/0x140 [ 93.653197][ T4822] do_futex+0xd83/0x12b0 [ 93.657466][ T4822] ? futex_exit_release+0x1c0/0x1c0 [ 93.662675][ T4822] ? __context_tracking_exit+0x4c/0x80 [ 93.668146][ T4822] __se_sys_futex+0x389/0x420 [ 93.672836][ T4822] ? __x64_sys_futex+0xf0/0xf0 [ 93.677622][ T4822] ? __x64_sys_futex+0x1d/0xf0 [ 93.682396][ T4822] do_syscall_64+0x4c/0xa0 [ 93.686815][ T4822] ? clear_bhb_loop+0x30/0x80 [ 93.691502][ T4822] ? clear_bhb_loop+0x30/0x80 [ 93.696195][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.702099][ T4822] RIP: 0033:0x7f1c261294d9 [ 93.706517][ T4822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.726130][ T4822] RSP: 002b:00007f1c243760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.734643][ T4822] RAX: ffffffffffffffda RBX: 00007f1c263a5fa8 RCX: 00007f1c261294d9 [ 93.742617][ T4822] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1c263a5fac [ 93.750597][ T4822] RBP: 00007f1c263a5fa0 R08: 001e18af4e81e80f R09: 0000000000000000 [ 93.758575][ T4822] R10: 0000000037d96ebc R11: 0000000000000246 R12: 0000000000000000 [ 93.766550][ T4822] R13: 00007f1c263a6038 R14: 00007ffe32d34090 R15: 00007ffe32d34178 [ 93.774541][ T4822] [ 93.868050][ T4830] xt_SECMARK: invalid mode: 2 [ 94.266526][ T4843] loop3: detected capacity change from 0 to 33280 [ 94.772244][ T4849] loop0: detected capacity change from 0 to 33280 [ 94.946427][ T4843] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 94.982141][ T4849] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 95.017721][ T4843] EXT4-fs (loop3): 1 truncate cleaned up [ 95.040674][ T4843] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 95.105493][ T4864] loop4: detected capacity change from 0 to 32896 [ 95.204666][ T4849] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 95.425492][ T4864] FAULT_INJECTION: forcing a failure. [ 95.425492][ T4864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.438869][ T4864] CPU: 1 PID: 4864 Comm: syz.4.156 Not tainted syzkaller #0 [ 95.446158][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 95.456209][ T4864] Call Trace: [ 95.459487][ T4864] [ 95.462416][ T4864] dump_stack_lvl+0x188/0x250 [ 95.467102][ T4864] ? show_regs_print_info+0x20/0x20 [ 95.472302][ T4864] ? load_image+0x410/0x410 [ 95.476817][ T4864] ? mark_lock+0x94/0x320 [ 95.481147][ T4864] should_fail+0x383/0x4b0 [ 95.485572][ T4864] prepare_alloc_pages+0x1e3/0x5b0 [ 95.490696][ T4864] __alloc_pages+0x11b/0x480 [ 95.495286][ T4864] ? zone_statistics+0x170/0x170 [ 95.500223][ T4864] ? rcu_lock_acquire+0x30/0x30 [ 95.505073][ T4864] ? alloc_pages+0x452/0x560 [ 95.509666][ T4864] __get_free_pages+0x8/0x30 [ 95.514262][ T4864] __tlb_remove_page_size+0x1f2/0x3f0 [ 95.519643][ T4864] unmap_page_range+0xfcf/0x2410 [ 95.524623][ T4864] unmap_vmas+0x131/0x250 [ 95.528961][ T4864] ? unmap_page_range+0x2410/0x2410 [ 95.534152][ T4864] ? __mutex_lock_common+0x435/0x2400 [ 95.539527][ T4864] ? exit_mm_release+0x16/0x30 [ 95.544298][ T4864] exit_mmap+0x3b9/0x640 [ 95.548545][ T4864] ? vm_brk+0x20/0x20 [ 95.552542][ T4864] ? uprobe_clear_state+0x2f6/0x460 [ 95.557746][ T4864] __mmput+0x115/0x390 [ 95.561818][ T4864] exit_mm+0x632/0x7b0 [ 95.565885][ T4864] ? perf_pmu_migrate_context+0xb70/0xb70 [ 95.571618][ T4864] ? do_exit+0x2100/0x2100 [ 95.576037][ T4864] ? __ia32_sys_timer_delete+0x40/0x40 [ 95.581496][ T4864] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 95.586960][ T4864] ? tty_audit_exit+0x149/0x1f0 [ 95.591815][ T4864] do_exit+0x5b8/0x2100 [ 95.596021][ T4864] ? put_task_struct+0x80/0x80 [ 95.600783][ T4864] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.606767][ T4864] ? _raw_spin_lock_irq+0xb7/0xf0 [ 95.611790][ T4864] do_group_exit+0x12c/0x2f0 [ 95.616375][ T4864] ? lockdep_hardirqs_on+0x94/0x140 [ 95.621571][ T4864] get_signal+0x7eb/0x12e0 [ 95.626001][ T4864] arch_do_signal_or_restart+0xe6/0x12a0 [ 95.631649][ T4864] ? futex_exit_release+0x1c0/0x1c0 [ 95.636848][ T4864] ? get_sigframe_size+0x10/0x10 [ 95.641999][ T4864] ? __context_tracking_exit+0x4c/0x80 [ 95.647485][ T4864] ? exit_to_user_mode_loop+0x3b/0x130 [ 95.652946][ T4864] exit_to_user_mode_loop+0x9e/0x130 [ 95.658274][ T4864] exit_to_user_mode_prepare+0xee/0x180 [ 95.663828][ T4864] syscall_exit_to_user_mode+0x16/0x40 [ 95.669300][ T4864] do_syscall_64+0x58/0xa0 [ 95.673720][ T4864] ? clear_bhb_loop+0x30/0x80 [ 95.678399][ T4864] ? clear_bhb_loop+0x30/0x80 [ 95.683077][ T4864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.688976][ T4864] RIP: 0033:0x7f1c261294d9 [ 95.693391][ T4864] Code: Unable to access opcode bytes at RIP 0x7f1c261294af. [ 95.700751][ T4864] RSP: 002b:00007f1c243760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.709239][ T4864] RAX: 0000000000000001 RBX: 00007f1c263a5fa8 RCX: 00007f1c261294d9 [ 95.717204][ T4864] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1c263a5fac [ 95.725187][ T4864] RBP: 00007f1c263a5fa0 R08: 00178db96a7617ef R09: 0000000000000000 [ 95.733143][ T4864] R10: 000000000c4ccf3c R11: 0000000000000246 R12: 0000000000000000 [ 95.741103][ T4864] R13: 00007f1c263a6038 R14: 00007ffe32d34090 R15: 00007ffe32d34178 [ 95.749062][ T4864] [ 96.533042][ T4900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 96.589818][ T4907] loop2: detected capacity change from 0 to 33280 [ 96.622719][ T4893] loop0: detected capacity change from 0 to 49152 [ 96.667460][ T4907] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 96.682061][ T4893] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 96.691960][ T2301] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.717243][ T4907] EXT4-fs (loop2): 1 truncate cleaned up [ 96.743700][ T4907] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 96.751141][ T4893] EXT4-fs (loop0): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none. [ 96.832900][ T4893] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.883658][ T4920] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.902401][ T4919] FAULT_INJECTION: forcing a failure. [ 96.902401][ T4919] name failslab, interval 1, probability 0, space 0, times 0 [ 96.916337][ T4919] CPU: 1 PID: 4919 Comm: syz.2.176 Not tainted syzkaller #0 [ 96.923663][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 96.933760][ T4919] Call Trace: [ 96.937033][ T4919] [ 96.939966][ T4919] dump_stack_lvl+0x188/0x250 [ 96.944645][ T4919] ? show_regs_print_info+0x20/0x20 [ 96.949843][ T4919] ? load_image+0x410/0x410 [ 96.954338][ T4919] ? __lock_acquire+0x7d40/0x7d40 [ 96.959353][ T4919] ? lockdep_softirqs_off+0x430/0x430 [ 96.964717][ T4919] should_fail+0x383/0x4b0 [ 96.969131][ T4919] should_failslab+0x5/0x20 [ 96.973620][ T4919] slab_pre_alloc_hook+0x51/0xc0 [ 96.978543][ T4919] __kmalloc+0x6b/0x340 [ 96.982683][ T4919] ? __netlink_kernel_create+0x1f8/0x7d0 [ 96.988311][ T4919] __netlink_kernel_create+0x1f8/0x7d0 [ 96.993757][ T4919] ? __netlink_kernel_create+0x6ce/0x7d0 [ 96.999377][ T4919] ? netlink_set_err+0x3c0/0x3c0 [ 97.004300][ T4919] ? netlink_set_err+0x3c0/0x3c0 [ 97.009224][ T4919] ? genl_pernet_init+0xa4/0x170 [ 97.014153][ T4919] genl_pernet_init+0xb6/0x170 [ 97.018907][ T4919] ? ctrl_dumppolicy_done+0x60/0x60 [ 97.024094][ T4919] ? rtnetlink_net_init+0xbd/0x140 [ 97.029191][ T4919] ? genl_pernet_exit+0x60/0x60 [ 97.034049][ T4919] ? genl_rcv+0x40/0x40 [ 97.038193][ T4919] ? rtnetlink_rcv+0x20/0x20 [ 97.042778][ T4919] ops_init+0x360/0x5f0 [ 97.046925][ T4919] setup_net+0x39e/0xa10 [ 97.051159][ T4919] ? copy_net_ns+0x5b0/0x5b0 [ 97.055743][ T4919] ? copy_net_ns+0x324/0x5b0 [ 97.060324][ T4919] ? down_read_killable+0x1ce/0x340 [ 97.065514][ T4919] copy_net_ns+0x33e/0x5b0 [ 97.069919][ T4919] create_new_namespaces+0x3ce/0x700 [ 97.075200][ T4919] unshare_nsproxy_namespaces+0x116/0x160 [ 97.080911][ T4919] ksys_unshare+0x4f6/0x8e0 [ 97.085418][ T4919] ? __lock_acquire+0x7d40/0x7d40 [ 97.090453][ T4919] ? sighand_ctor+0x40/0x40 [ 97.094956][ T4919] ? lock_chain_count+0x20/0x20 [ 97.099807][ T4919] ? syscall_enter_from_user_mode+0x21/0x70 [ 97.105696][ T4919] __x64_sys_unshare+0x34/0x40 [ 97.110455][ T4919] do_syscall_64+0x4c/0xa0 [ 97.114860][ T4919] ? clear_bhb_loop+0x30/0x80 [ 97.119527][ T4919] ? clear_bhb_loop+0x30/0x80 [ 97.124193][ T4919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.130071][ T4919] RIP: 0033:0x7f24ea6b74d9 [ 97.134473][ T4919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.154071][ T4919] RSP: 002b:00007f24e8904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.162473][ T4919] RAX: ffffffffffffffda RBX: 00007f24ea933fa0 RCX: 00007f24ea6b74d9 [ 97.170437][ T4919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 97.178394][ T4919] RBP: 00007f24ea74604e R08: 0000000000000000 R09: 0000000000000000 [ 97.186350][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.194307][ T4919] R13: 00007f24ea934038 R14: 00007f24ea933fa0 R15: 00007ffd8365a198 [ 97.202280][ T4919] [ 97.208731][ T4267] Bluetooth: hci4: command 0x0405 tx timeout [ 97.223829][ T4893] FAULT_INJECTION: forcing a failure. [ 97.223829][ T4893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 97.237048][ T4893] CPU: 1 PID: 4893 Comm: syz.0.166 Not tainted syzkaller #0 [ 97.244341][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 97.254398][ T4893] Call Trace: [ 97.257680][ T4893] [ 97.260613][ T4893] dump_stack_lvl+0x188/0x250 [ 97.265307][ T4893] ? show_regs_print_info+0x20/0x20 [ 97.270509][ T4893] ? load_image+0x410/0x410 [ 97.275017][ T4893] ? __lock_acquire+0x7d40/0x7d40 [ 97.280038][ T4893] should_fail+0x383/0x4b0 [ 97.284462][ T4893] prepare_alloc_pages+0x1e3/0x5b0 [ 97.289588][ T4893] __alloc_pages+0x11b/0x480 [ 97.294171][ T4893] ? unwind_get_return_address+0x49/0x80 [ 97.299805][ T4893] ? zone_statistics+0x170/0x170 [ 97.304864][ T4893] ? alloc_pages+0x452/0x560 [ 97.309454][ T4893] stack_depot_save+0x356/0x460 [ 97.314301][ T4893] kasan_save_stack+0x4b/0x60 [ 97.318972][ T4893] ? kasan_save_stack+0x35/0x60 [ 97.323819][ T4893] ? kasan_record_aux_stack+0xb8/0x100 [ 97.329267][ T4893] ? call_rcu+0x189/0x900 [ 97.333582][ T4893] ? replace+0x237/0x5c0 [ 97.337810][ T4893] ? resize+0xfd4/0x2620 [ 97.342041][ T4893] ? fib_insert_alias+0xea0/0x1280 [ 97.347162][ T4893] ? fib_trie_unmerge+0x308/0xce0 [ 97.352172][ T4893] ? fib_unmerge+0xbc/0x350 [ 97.356665][ T4893] ? fib4_rule_configure+0xe0/0xb00 [ 97.361849][ T4893] ? fib_nl_newrule+0x131a/0x1e00 [ 97.366861][ T4893] ? rtnetlink_rcv_msg+0x7f1/0xf10 [ 97.371960][ T4893] ? netlink_rcv_skb+0x1e9/0x430 [ 97.376884][ T4893] ? netlink_unicast+0x804/0x9e0 [ 97.381809][ T4893] ? netlink_sendmsg+0x8ba/0xbe0 [ 97.386735][ T4893] ? ____sys_sendmsg+0x5be/0x8f0 [ 97.391659][ T4893] ? ___sys_sendmsg+0x236/0x2e0 [ 97.396499][ T4893] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 97.401511][ T4893] ? do_syscall_64+0x4c/0xa0 [ 97.406085][ T4893] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.412169][ T4893] kasan_record_aux_stack+0xb8/0x100 [ 97.417442][ T4893] ? resize+0x2620/0x2620 [ 97.421755][ T4893] call_rcu+0x189/0x900 [ 97.425905][ T4893] ? rcu_force_quiescent_state+0x220/0x220 [ 97.431702][ T4893] ? lockdep_rtnl_is_held+0x22/0x30 [ 97.436885][ T4893] ? update_children+0x229/0x280 [ 97.441807][ T4893] replace+0x237/0x5c0 [ 97.445872][ T4893] resize+0xfd4/0x2620 [ 97.449936][ T4893] fib_insert_alias+0xea0/0x1280 [ 97.454873][ T4893] fib_trie_unmerge+0x308/0xce0 [ 97.459717][ T4893] fib_unmerge+0xbc/0x350 [ 97.464038][ T4893] fib4_rule_configure+0xe0/0xb00 [ 97.469058][ T4893] fib_nl_newrule+0x131a/0x1e00 [ 97.473902][ T4893] ? __mutex_trylock_common+0x15c/0x260 [ 97.479439][ T4893] ? rcu_lock_release+0x20/0x20 [ 97.484275][ T4893] ? netlink_sendmsg+0x8ba/0xbe0 [ 97.489201][ T4893] ? ___sys_sendmsg+0x236/0x2e0 [ 97.494042][ T4893] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 97.499057][ T4893] ? fib_rules_seq_read+0xf0/0xf0 [ 97.504068][ T4893] ? __mutex_lock_common+0x435/0x2400 [ 97.509456][ T4893] ? fib_rules_seq_read+0xf0/0xf0 [ 97.514464][ T4893] rtnetlink_rcv_msg+0x7f1/0xf10 [ 97.519391][ T4893] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 97.525360][ T4893] ? rtnetlink_bind+0x80/0x80 [ 97.530026][ T4893] ? __local_bh_enable_ip+0x136/0x1c0 [ 97.535384][ T4893] ? lockdep_hardirqs_on+0x94/0x140 [ 97.540573][ T4893] ? __local_bh_enable_ip+0x136/0x1c0 [ 97.545930][ T4893] ? _local_bh_enable+0xa0/0xa0 [ 97.550775][ T4893] ? __dev_queue_xmit+0x1b64/0x2e50 [ 97.555975][ T4893] ? dev_queue_xmit+0x20/0x20 [ 97.560636][ T4893] ? __copy_skb_header+0x3ba/0x4f0 [ 97.565738][ T4893] ? memcpy+0x3c/0x60 [ 97.569706][ T4893] ? __copy_skb_header+0x3ba/0x4f0 [ 97.574803][ T4893] ? __skb_clone+0x446/0x6c0 [ 97.579381][ T4893] netlink_rcv_skb+0x1e9/0x430 [ 97.584132][ T4893] ? rtnetlink_bind+0x80/0x80 [ 97.588799][ T4893] ? netlink_ack+0xb10/0xb10 [ 97.593388][ T4893] netlink_unicast+0x804/0x9e0 [ 97.598151][ T4893] netlink_sendmsg+0x8ba/0xbe0 [ 97.602904][ T4893] ? netlink_getsockopt+0x570/0x570 [ 97.608090][ T4893] ? aa_sock_msg_perm+0x94/0x150 [ 97.613014][ T4893] ? apparmor_socket_sendmsg+0x88/0x230 [ 97.618551][ T4893] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 97.623823][ T4893] ? security_socket_sendmsg+0x7c/0xa0 [ 97.629271][ T4893] ? netlink_getsockopt+0x570/0x570 [ 97.634457][ T4893] ____sys_sendmsg+0x5be/0x8f0 [ 97.639218][ T4893] ? __sys_sendmsg_sock+0x30/0x30 [ 97.644245][ T4893] ? import_iovec+0x6f/0xa0 [ 97.648738][ T4893] ___sys_sendmsg+0x236/0x2e0 [ 97.653408][ T4893] ? __sys_sendmsg+0x290/0x290 [ 97.658186][ T4893] __se_sys_sendmsg+0x1b7/0x2a0 [ 97.663027][ T4893] ? __x64_sys_sendmsg+0x80/0x80 [ 97.667946][ T4893] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.673925][ T4893] ? lockdep_hardirqs_on+0x94/0x140 [ 97.679112][ T4893] do_syscall_64+0x4c/0xa0 [ 97.683515][ T4893] ? clear_bhb_loop+0x30/0x80 [ 97.688182][ T4893] ? clear_bhb_loop+0x30/0x80 [ 97.692845][ T4893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.698723][ T4893] RIP: 0033:0x7fad4dcf54d9 [ 97.703123][ T4893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.722716][ T4893] RSP: 002b:00007fad4bf42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.731117][ T4893] RAX: ffffffffffffffda RBX: 00007fad4df71fa0 RCX: 00007fad4dcf54d9 [ 97.739077][ T4893] RDX: 0000000000044004 RSI: 0000200000000300 RDI: 0000000000000006 [ 97.747041][ T4893] RBP: 00007fad4dd8404e R08: 0000000000000000 R09: 0000000000000000 [ 97.755013][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.762977][ T4893] R13: 00007fad4df72038 R14: 00007fad4df71fa0 R15: 00007fff900170a8 [ 97.770953][ T4893] [ 97.780474][ T2301] usb 4-1: Using ep0 maxpacket: 16 [ 97.931781][ T4928] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.971580][ T2301] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.990776][ T4937] loop1: detected capacity change from 0 to 32896 [ 98.050929][ T2301] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 98.250718][ T2301] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 98.296975][ T4937] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.338833][ T2301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.460605][ T4937] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.517039][ T2301] usb 4-1: Product: syz [ 98.603348][ T2301] usb 4-1: Manufacturer: syz [ 98.675866][ T2301] usb 4-1: SerialNumber: syz [ 98.727692][ T4942] loop0: detected capacity change from 0 to 16 [ 98.890186][ T4942] erofs: (device loop0): mounted with root inode @ nid 36. [ 98.964503][ T2301] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 99.001812][ T2301] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 99.030768][ T4953] loop1: detected capacity change from 0 to 764 [ 99.047155][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.189'. [ 99.167440][ T4956] netlink: 44 bytes leftover after parsing attributes in process `syz.0.190'. [ 99.180545][ T2301] usb 4-1: 2:1 : can't get High Capability descriptor [ 99.207258][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 99.395836][ T2301] usb 4-1: USB disconnect, device number 4 [ 100.025021][ T4973] loop4: detected capacity change from 0 to 33280 [ 100.099947][ T4973] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.196: bg 0: block 5: invalid block bitmap [ 100.210605][ T4973] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 100.246082][ T4973] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.196: invalid indirect mapped block 3 (level 2) [ 100.263588][ T4964] loop2: detected capacity change from 0 to 49152 [ 100.296216][ T4964] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 100.355560][ T4964] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none. [ 100.359573][ T4973] EXT4-fs (loop4): 1 orphan inode deleted [ 100.383107][ T4973] EXT4-fs (loop4): 1 truncate cleaned up [ 100.389044][ T4973] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 100.409729][ T4964] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.490269][ T4990] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.503722][ T4964] FAULT_INJECTION: forcing a failure. [ 100.503722][ T4964] name failslab, interval 1, probability 0, space 0, times 0 [ 100.529788][ T4964] CPU: 0 PID: 4964 Comm: syz.2.192 Not tainted syzkaller #0 [ 100.537118][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 100.547176][ T4964] Call Trace: [ 100.550461][ T4964] [ 100.553392][ T4964] dump_stack_lvl+0x188/0x250 [ 100.558091][ T4964] ? show_regs_print_info+0x20/0x20 [ 100.563300][ T4964] ? load_image+0x410/0x410 [ 100.567816][ T4964] ? __might_sleep+0xf0/0xf0 [ 100.572406][ T4964] ? __lock_acquire+0x7d40/0x7d40 [ 100.577438][ T4964] should_fail+0x383/0x4b0 [ 100.581235][ T4994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 100.581862][ T4964] should_failslab+0x5/0x20 [ 100.595185][ T4964] slab_pre_alloc_hook+0x51/0xc0 [ 100.600133][ T4964] kmem_cache_alloc_trace+0x47/0x290 [ 100.605422][ T4964] ? fib_insert_alias+0xa41/0x1280 [ 100.610535][ T4964] fib_insert_alias+0xa41/0x1280 [ 100.615471][ T4964] fib_trie_unmerge+0x308/0xce0 [ 100.620319][ T4964] fib_unmerge+0xbc/0x350 [ 100.624645][ T4964] fib4_rule_configure+0xe0/0xb00 [ 100.629657][ T4964] fib_nl_newrule+0x131a/0x1e00 [ 100.634500][ T4964] ? __mutex_trylock_common+0x15c/0x260 [ 100.640038][ T4964] ? rcu_lock_release+0x20/0x20 [ 100.644875][ T4964] ? netlink_sendmsg+0x8ba/0xbe0 [ 100.649805][ T4964] ? ___sys_sendmsg+0x236/0x2e0 [ 100.654641][ T4964] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 100.659656][ T4964] ? fib_rules_seq_read+0xf0/0xf0 [ 100.664670][ T4964] ? __mutex_lock_common+0x435/0x2400 [ 100.670058][ T4964] ? fib_rules_seq_read+0xf0/0xf0 [ 100.675072][ T4964] rtnetlink_rcv_msg+0x7f1/0xf10 [ 100.680005][ T4964] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 100.685978][ T4964] ? rtnetlink_bind+0x80/0x80 [ 100.690748][ T4964] ? __local_bh_enable_ip+0x136/0x1c0 [ 100.696117][ T4964] ? lockdep_hardirqs_on+0x94/0x140 [ 100.701314][ T4964] ? __local_bh_enable_ip+0x136/0x1c0 [ 100.706686][ T4964] ? _local_bh_enable+0xa0/0xa0 [ 100.711533][ T4964] ? __dev_queue_xmit+0x1b64/0x2e50 [ 100.716737][ T4964] ? dev_queue_xmit+0x20/0x20 [ 100.721435][ T4964] ? __copy_skb_header+0x3ba/0x4f0 [ 100.726535][ T4964] ? memcpy+0x3c/0x60 [ 100.730502][ T4964] ? __copy_skb_header+0x3ba/0x4f0 [ 100.735602][ T4964] ? __skb_clone+0x446/0x6c0 [ 100.740183][ T4964] netlink_rcv_skb+0x1e9/0x430 [ 100.744939][ T4964] ? rtnetlink_bind+0x80/0x80 [ 100.749600][ T4964] ? netlink_ack+0xb10/0xb10 [ 100.754204][ T4964] netlink_unicast+0x804/0x9e0 [ 100.758977][ T4964] netlink_sendmsg+0x8ba/0xbe0 [ 100.763737][ T4964] ? netlink_getsockopt+0x570/0x570 [ 100.768923][ T4964] ? aa_sock_msg_perm+0x94/0x150 [ 100.773851][ T4964] ? apparmor_socket_sendmsg+0x88/0x230 [ 100.779388][ T4964] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 100.784664][ T4964] ? security_socket_sendmsg+0x7c/0xa0 [ 100.790112][ T4964] ? netlink_getsockopt+0x570/0x570 [ 100.795301][ T4964] ____sys_sendmsg+0x5be/0x8f0 [ 100.800059][ T4964] ? __sys_sendmsg_sock+0x30/0x30 [ 100.805079][ T4964] ? import_iovec+0x6f/0xa0 [ 100.809572][ T4964] ___sys_sendmsg+0x236/0x2e0 [ 100.814240][ T4964] ? __sys_sendmsg+0x290/0x290 [ 100.819014][ T4964] __se_sys_sendmsg+0x1b7/0x2a0 [ 100.823850][ T4964] ? __x64_sys_sendmsg+0x80/0x80 [ 100.828770][ T4964] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.834751][ T4964] ? lockdep_hardirqs_on+0x94/0x140 [ 100.839975][ T4964] do_syscall_64+0x4c/0xa0 [ 100.844376][ T4964] ? clear_bhb_loop+0x30/0x80 [ 100.849046][ T4964] ? clear_bhb_loop+0x30/0x80 [ 100.853712][ T4964] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.859591][ T4964] RIP: 0033:0x7f24ea6b74d9 [ 100.863997][ T4964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.883593][ T4964] RSP: 002b:00007f24e8904028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.892014][ T4964] RAX: ffffffffffffffda RBX: 00007f24ea933fa0 RCX: 00007f24ea6b74d9 [ 100.899971][ T4964] RDX: 0000000000044004 RSI: 0000200000000300 RDI: 0000000000000006 [ 100.907935][ T4964] RBP: 00007f24ea74604e R08: 0000000000000000 R09: 0000000000000000 [ 100.915900][ T4964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.923858][ T4964] R13: 00007f24ea934038 R14: 00007f24ea933fa0 R15: 00007ffd8365a198 [ 100.931826][ T4964] [ 101.295769][ T4998] loop4: detected capacity change from 0 to 49152 [ 101.531357][ T4998] EXT4-fs (loop4): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none. [ 101.557327][ T5017] loop1: detected capacity change from 0 to 34816 [ 101.630343][ T5020] loop2: detected capacity change from 0 to 764 [ 101.735100][ T5017] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,. Quota mode: writeback. [ 102.721515][ T5030] loop0: detected capacity change from 0 to 16 [ 102.878657][ T26] audit: type=1326 audit(1794528078.554:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 102.905270][ T5030] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.935640][ T5030] attempt to access beyond end of device [ 102.935640][ T5030] loop0: rw=524288, want=34359738368, limit=16 [ 102.956553][ T5030] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 102.966701][ T26] audit: type=1326 audit(1794528078.554:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 102.970153][ T5030] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 102.999933][ T5030] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 103.010226][ T5030] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 103.019570][ T5030] attempt to access beyond end of device [ 103.019570][ T5030] loop0: rw=524288, want=56, limit=16 [ 103.070059][ T5030] attempt to access beyond end of device [ 103.070059][ T5030] loop0: rw=0, want=34359738368, limit=16 [ 103.121265][ T26] audit: type=1326 audit(1794528078.554:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 103.286531][ T26] audit: type=1326 audit(1794528078.554:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 103.304064][ T5030] attempt to access beyond end of device [ 103.304064][ T5030] loop0: rw=0, want=34359738368, limit=16 [ 103.396785][ T5030] attempt to access beyond end of device [ 103.396785][ T5030] loop0: rw=524288, want=72, limit=16 [ 103.938883][ T5030] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 104.008859][ T5030] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 104.028288][ T26] audit: type=1326 audit(1794528078.554:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 104.030149][ T5030] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 104.079887][ T5030] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 104.158020][ T26] audit: type=1326 audit(1794528078.574:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 104.163017][ T5039] loop4: detected capacity change from 0 to 49152 [ 104.211176][ T5030] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 104.231207][ T5030] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 104.259910][ T26] audit: type=1326 audit(1794528078.574:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 104.272951][ T5039] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 104.348057][ T5050] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.348668][ T5030] syz.0.217 (5030) used greatest stack depth: 20336 bytes left [ 104.364562][ T26] audit: type=1326 audit(1794528078.574:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 104.447865][ T5039] EXT4-fs (loop4): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none. [ 104.459978][ T5039] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.479723][ T26] audit: type=1326 audit(1794528078.574:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 104.610394][ T5039] FAULT_INJECTION: forcing a failure. [ 104.610394][ T5039] name failslab, interval 1, probability 0, space 0, times 0 [ 104.659797][ T5039] CPU: 0 PID: 5039 Comm: syz.4.218 Not tainted syzkaller #0 [ 104.667122][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.677183][ T5039] Call Trace: [ 104.680467][ T5039] [ 104.683403][ T5039] dump_stack_lvl+0x188/0x250 [ 104.688095][ T5039] ? show_regs_print_info+0x20/0x20 [ 104.693306][ T5039] ? load_image+0x410/0x410 [ 104.697823][ T5039] ? __might_sleep+0xf0/0xf0 [ 104.702422][ T5039] ? __lock_acquire+0x7d40/0x7d40 [ 104.707465][ T5039] should_fail+0x383/0x4b0 [ 104.711896][ T5039] should_failslab+0x5/0x20 [ 104.716404][ T5039] slab_pre_alloc_hook+0x51/0xc0 [ 104.721460][ T5039] ? fib_trie_unmerge+0x266/0xce0 [ 104.726496][ T5039] kmem_cache_alloc+0x3d/0x280 [ 104.731277][ T5039] fib_trie_unmerge+0x266/0xce0 [ 104.736144][ T5039] fib_unmerge+0xbc/0x350 [ 104.740491][ T5039] fib4_rule_configure+0xe0/0xb00 [ 104.745527][ T5039] fib_nl_newrule+0x131a/0x1e00 [ 104.750394][ T5039] ? __mutex_trylock_common+0x15c/0x260 [ 104.755955][ T5039] ? rcu_lock_release+0x20/0x20 [ 104.760816][ T5039] ? netlink_sendmsg+0x8ba/0xbe0 [ 104.765765][ T5039] ? ___sys_sendmsg+0x236/0x2e0 [ 104.770616][ T5039] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 104.775652][ T5039] ? fib_rules_seq_read+0xf0/0xf0 [ 104.780680][ T5039] ? __mutex_lock_common+0x435/0x2400 [ 104.786101][ T5039] ? fib_rules_seq_read+0xf0/0xf0 [ 104.791135][ T5039] rtnetlink_rcv_msg+0x7f1/0xf10 [ 104.796088][ T5039] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 104.802066][ T5039] ? rtnetlink_bind+0x80/0x80 [ 104.806734][ T5039] ? __local_bh_enable_ip+0x136/0x1c0 [ 104.812089][ T5039] ? lockdep_hardirqs_on+0x94/0x140 [ 104.817275][ T5039] ? __local_bh_enable_ip+0x136/0x1c0 [ 104.822631][ T5039] ? _local_bh_enable+0xa0/0xa0 [ 104.827476][ T5039] ? __dev_queue_xmit+0x1b64/0x2e50 [ 104.832675][ T5039] ? dev_queue_xmit+0x20/0x20 [ 104.837344][ T5039] ? __copy_skb_header+0x3ba/0x4f0 [ 104.842439][ T5039] ? memcpy+0x3c/0x60 [ 104.846408][ T5039] ? __copy_skb_header+0x3ba/0x4f0 [ 104.851505][ T5039] ? __skb_clone+0x446/0x6c0 [ 104.856083][ T5039] netlink_rcv_skb+0x1e9/0x430 [ 104.860833][ T5039] ? rtnetlink_bind+0x80/0x80 [ 104.865497][ T5039] ? netlink_ack+0xb10/0xb10 [ 104.870167][ T5039] netlink_unicast+0x804/0x9e0 [ 104.874927][ T5039] netlink_sendmsg+0x8ba/0xbe0 [ 104.879693][ T5039] ? netlink_getsockopt+0x570/0x570 [ 104.884882][ T5039] ? aa_sock_msg_perm+0x94/0x150 [ 104.889807][ T5039] ? apparmor_socket_sendmsg+0x88/0x230 [ 104.895337][ T5039] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 104.900611][ T5039] ? security_socket_sendmsg+0x7c/0xa0 [ 104.906060][ T5039] ? netlink_getsockopt+0x570/0x570 [ 104.911247][ T5039] ____sys_sendmsg+0x5be/0x8f0 [ 104.916004][ T5039] ? __sys_sendmsg_sock+0x30/0x30 [ 104.921026][ T5039] ? import_iovec+0x6f/0xa0 [ 104.925521][ T5039] ___sys_sendmsg+0x236/0x2e0 [ 104.930187][ T5039] ? __sys_sendmsg+0x290/0x290 [ 104.934967][ T5039] __se_sys_sendmsg+0x1b7/0x2a0 [ 104.939804][ T5039] ? __x64_sys_sendmsg+0x80/0x80 [ 104.944725][ T5039] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.950713][ T5039] ? lockdep_hardirqs_on+0x94/0x140 [ 104.955931][ T5039] do_syscall_64+0x4c/0xa0 [ 104.960332][ T5039] ? clear_bhb_loop+0x30/0x80 [ 104.964994][ T5039] ? clear_bhb_loop+0x30/0x80 [ 104.969655][ T5039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.975541][ T5039] RIP: 0033:0x7f1c261294d9 [ 104.979945][ T5039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.999534][ T5039] RSP: 002b:00007f1c24376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.007940][ T5039] RAX: ffffffffffffffda RBX: 00007f1c263a5fa0 RCX: 00007f1c261294d9 [ 105.015898][ T5039] RDX: 0000000000044004 RSI: 0000200000000300 RDI: 0000000000000006 [ 105.023851][ T5039] RBP: 00007f1c261b804e R08: 0000000000000000 R09: 0000000000000000 [ 105.031811][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.039765][ T5039] R13: 00007f1c263a6038 R14: 00007f1c263a5fa0 R15: 00007ffe32d34178 [ 105.047730][ T5039] [ 105.067673][ T26] audit: type=1326 audit(1794528078.574:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.4.214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c261294d9 code=0x7ffc0000 [ 105.383893][ T5065] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5065] [ 105.494451][ T5073] loop2: detected capacity change from 0 to 32896 [ 105.566015][ T5073] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.609688][ T5073] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.719866][ T4360] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.731710][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.232'. [ 107.571026][ T4360] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.581747][ T4360] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.591910][ T4360] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 107.604965][ T4360] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 107.614247][ T4360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.639588][ T5069] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.660700][ T4360] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 107.668525][ T4360] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 107.690423][ T4360] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 107.698212][ T4360] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 107.709291][ T2301] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 107.720730][ T4360] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 107.741727][ T4360] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 107.759279][ T4360] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 107.768960][ T4360] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 107.882087][ T4360] usb 2-1: USB disconnect, device number 3 [ 107.907832][ T4360] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 107.957618][ T4360] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 107.985604][ T4360] keyspan 2-1:1.0: device disconnected [ 108.184529][ T5102] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 108.229455][ T2301] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 108.238897][ T2301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.302543][ T5113] loop2: detected capacity change from 0 to 764 [ 108.351422][ T5115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.245'. [ 108.377289][ T5117] loop0: detected capacity change from 0 to 32896 [ 108.622037][ T2301] usb 4-1: Product: syz [ 108.657111][ T2301] usb 4-1: Manufacturer: syz [ 108.701624][ T2301] usb 4-1: SerialNumber: syz [ 108.960258][ T5117] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.998932][ T5117] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.121536][ T5123] using random self ethernet address [ 109.127854][ T5123] using random host ethernet address [ 109.403603][ T5128] loop4: detected capacity change from 0 to 1024 [ 109.471993][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 109.472007][ T26] audit: type=1326 audit(1794528085.155:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.2.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24ea6b74d9 code=0x0 [ 109.513082][ T5135] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5135] [ 109.765056][ T5138] udc-core: couldn't find an available UDC or it's busy [ 109.773598][ T5138] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.005895][ T5146] loop0: detected capacity change from 0 to 2048 [ 110.030257][ T5146] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 110.242619][ T5152] loop2: detected capacity change from 0 to 32896 [ 110.286796][ T5150] loop4: detected capacity change from 0 to 36864 [ 110.321798][ T5152] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.370862][ T5152] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.451982][ T5150] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 111.213232][ T2301] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 111.329015][ T2301] usb 4-1: USB disconnect, device number 5 [ 111.357151][ T2301] usblp0: removed [ 111.596867][ T5169] loop2: detected capacity change from 0 to 1024 [ 112.078250][ T5174] loop3: detected capacity change from 0 to 764 [ 112.393068][ T5183] loop4: detected capacity change from 0 to 34816 [ 112.434999][ T5183] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 320 [ 112.665530][ T5192] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5192] [ 112.683720][ T2241] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.219685][ T5197] loop3: detected capacity change from 0 to 1024 [ 114.588382][ C0] sched: RT throttling activated [ 115.314251][ T9] hfsplus: b-tree write err: -5, ino 25 [ 115.350509][ T9] hfsplus: b-tree write err: -5, ino 4 [ 115.361096][ T9] hfsplus: b-tree write err: -5, ino 2 [ 115.970100][ T5209] netlink: 68 bytes leftover after parsing attributes in process `syz.4.277'. [ 116.018396][ T2241] usb 3-1: device descriptor read/all, error -71 [ 116.083914][ T5214] loop2: detected capacity change from 0 to 128 [ 116.266615][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 116.297184][ T5218] xt_hashlimit: max too large, truncated to 1048576 [ 117.128979][ T5228] loop1: detected capacity change from 0 to 512 [ 118.242798][ T2241] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 118.366445][ T5244] loop0: detected capacity change from 0 to 33280 [ 118.428456][ T5244] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 118.459884][ T5244] EXT4-fs (loop0): 1 truncate cleaned up [ 118.465629][ T5244] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 118.508850][ T5247] netlink: 68 bytes leftover after parsing attributes in process `syz.1.290'. [ 118.654802][ T5240] loop2: detected capacity change from 0 to 49152 [ 118.731431][ T5240] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: journalled. [ 118.745380][ T5240] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.768273][ T2241] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 118.777337][ T2241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.806363][ T5260] loop3: detected capacity change from 0 to 32896 [ 118.825991][ T2241] usb 5-1: Product: syz [ 118.827018][ T5240] JBD2: syz.2.288 wants too many credits credits:270 rsv_credits:0 max:256 [ 118.833464][ T2241] usb 5-1: Manufacturer: syz [ 118.839719][ T5240] ------------[ cut here ]------------ [ 118.846161][ T2241] usb 5-1: SerialNumber: syz [ 118.851114][ T5240] WARNING: CPU: 0 PID: 5240 at fs/jbd2/transaction.c:354 start_this_handle+0x1399/0x1560 [ 118.864193][ T5240] Modules linked in: [ 118.868148][ T5240] CPU: 0 PID: 5240 Comm: syz.2.288 Not tainted syzkaller #0 [ 118.875641][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 118.886267][ T5240] RIP: 0010:start_this_handle+0x1399/0x1560 [ 118.888589][ T5260] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.892281][ T5240] Code: 5b ff 65 48 8b 35 c7 63 e4 7d 48 81 c6 c0 08 00 00 48 c7 c7 80 b6 3d 8a 48 8b 54 24 48 48 8b 4c 24 70 41 89 d8 e8 97 c6 a0 07 <0f> 0b b8 e4 ff ff ff 48 c7 84 24 00 01 00 00 0e 36 e0 45 48 8b 4c [ 118.923975][ T5240] RSP: 0018:ffffc9000329f860 EFLAGS: 00010246 [ 118.930374][ T5240] RAX: 0000000000000048 RBX: 0000000000000100 RCX: 3c8b595b3b3b8600 [ 118.939110][ T5240] RDX: ffffc90005f69000 RSI: 0000000000020fe7 RDI: 0000000000020fe8 [ 118.947165][ T5240] RBP: ffffc9000329fa68 R08: ffffffff91047177 R09: 1ffffffff2208e2e [ 118.955444][ T5240] R10: dffffc0000000000 R11: fffffbfff2208e2f R12: 0000000000000080 [ 118.963533][ T5240] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000000010e [ 118.970209][ T5260] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.971811][ T5240] FS: 00007f24e89046c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 118.990970][ T5240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.997618][ T5240] CR2: 00007f24ea6fece0 CR3: 000000005e641000 CR4: 00000000003506f0 [ 119.005858][ T5240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.013953][ T5240] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.022519][ T5240] Call Trace: [ 119.025864][ T5240] [ 119.030226][ T5240] ? jbd2__journal_start+0x5a0/0x5a0 [ 119.035766][ T5240] ? slab_post_alloc_hook+0x68/0x380 [ 119.041244][ T5240] ? jbd2__journal_start+0x13c/0x5a0 [ 119.046806][ T5240] ? rcu_is_watching+0x11/0xa0 [ 119.051691][ T5240] ? jbd2__journal_start+0x13c/0x5a0 [ 119.057230][ T5240] jbd2__journal_start+0x2b7/0x5a0 [ 119.063125][ T5240] __ext4_journal_start_sb+0x167/0x360 [ 119.068888][ T5240] __ext4_new_inode+0x11d9/0x3a90 [ 119.073993][ T5240] ? d_splice_alias+0x110/0x320 [ 119.079124][ T5240] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 119.084925][ T5240] ? dquot_initialize+0x20/0x20 [ 119.090072][ T1109] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.097664][ T5240] ext4_symlink+0x47e/0xcd0 [ 119.113777][ T5240] ? make_kgid+0x650/0x650 [ 119.127391][ T5240] ? ext4_unlink+0x500/0x500 [ 119.175258][ T5240] ? inode_permission+0xef/0x480 [ 119.188628][ T5240] ? bpf_lsm_inode_symlink+0x5/0x10 [ 119.194162][ T5240] ? security_inode_symlink+0xb2/0x100 [ 119.199997][ T5240] vfs_symlink+0x245/0x3d0 [ 119.204757][ T5240] do_symlinkat+0x1ab/0x6b0 [ 119.209789][ T5240] ? vfs_symlink+0x3d0/0x3d0 [ 119.214399][ T5240] ? getname_flags+0x1f9/0x4f0 [ 119.220032][ T5240] __x64_sys_symlink+0x7a/0x90 [ 119.224820][ T5240] do_syscall_64+0x4c/0xa0 [ 119.229316][ T5240] ? clear_bhb_loop+0x30/0x80 [ 119.235103][ T5240] ? clear_bhb_loop+0x30/0x80 [ 119.240513][ T5240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.246403][ T5240] RIP: 0033:0x7f24ea6b74d9 [ 119.250862][ T5240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.272036][ T5240] RSP: 002b:00007f24e8904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 119.288910][ T5240] RAX: ffffffffffffffda RBX: 00007f24ea933fa0 RCX: 00007f24ea6b74d9 [ 119.398298][ T5240] RDX: 0000000000000000 RSI: 0000200000004200 RDI: 0000200000004100 [ 119.458571][ T1109] usb 2-1: not running at top speed; connect to a high speed hub [ 119.495353][ T5240] RBP: 00007f24ea74604e R08: 0000000000000000 R09: 0000000000000000 [ 119.578554][ T1109] usb 2-1: config 1 has an invalid descriptor of length 185, skipping remainder of the config [ 119.593951][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.654051][ T1109] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 119.668413][ T5240] R13: 00007f24ea934038 R14: 00007f24ea933fa0 R15: 00007ffd8365a198 [ 119.676608][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.689864][ T5240] [ 119.692985][ T5240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.700261][ T5240] CPU: 0 PID: 5240 Comm: syz.2.288 Not tainted syzkaller #0 [ 119.707547][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 119.717656][ T5240] Call Trace: [ 119.720949][ T5240] [ 119.723880][ T5240] dump_stack_lvl+0x188/0x250 [ 119.728568][ T5240] ? show_regs_print_info+0x20/0x20 [ 119.733778][ T5240] ? load_image+0x410/0x410 [ 119.738295][ T5240] panic+0x2f8/0x850 [ 119.742204][ T5240] ? bpf_jit_dump+0xd0/0xd0 [ 119.746726][ T5240] ? start_this_handle+0x1399/0x1560 [ 119.752019][ T5240] __warn+0x248/0x2b0 [ 119.756004][ T5240] ? start_this_handle+0x1399/0x1560 [ 119.761295][ T5240] report_bug+0x1b9/0x2e0 [ 119.765636][ T5240] handle_bug+0x3a/0x70 [ 119.769794][ T5240] exc_invalid_op+0x16/0x40 [ 119.774299][ T5240] asm_exc_invalid_op+0x16/0x20 [ 119.779151][ T5240] RIP: 0010:start_this_handle+0x1399/0x1560 [ 119.785052][ T5240] Code: 5b ff 65 48 8b 35 c7 63 e4 7d 48 81 c6 c0 08 00 00 48 c7 c7 80 b6 3d 8a 48 8b 54 24 48 48 8b 4c 24 70 41 89 d8 e8 97 c6 a0 07 <0f> 0b b8 e4 ff ff ff 48 c7 84 24 00 01 00 00 0e 36 e0 45 48 8b 4c [ 119.804665][ T5240] RSP: 0018:ffffc9000329f860 EFLAGS: 00010246 [ 119.810743][ T5240] RAX: 0000000000000048 RBX: 0000000000000100 RCX: 3c8b595b3b3b8600 [ 119.818700][ T5240] RDX: ffffc90005f69000 RSI: 0000000000020fe7 RDI: 0000000000020fe8 [ 119.826650][ T5240] RBP: ffffc9000329fa68 R08: ffffffff91047177 R09: 1ffffffff2208e2e [ 119.834600][ T5240] R10: dffffc0000000000 R11: fffffbfff2208e2f R12: 0000000000000080 [ 119.842548][ T5240] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000000010e [ 119.850521][ T5240] ? jbd2__journal_start+0x5a0/0x5a0 [ 119.855794][ T5240] ? slab_post_alloc_hook+0x68/0x380 [ 119.861081][ T5240] ? jbd2__journal_start+0x13c/0x5a0 [ 119.866343][ T5240] ? rcu_is_watching+0x11/0xa0 [ 119.871097][ T5240] ? jbd2__journal_start+0x13c/0x5a0 [ 119.876361][ T5240] jbd2__journal_start+0x2b7/0x5a0 [ 119.881465][ T5240] __ext4_journal_start_sb+0x167/0x360 [ 119.886903][ T5240] __ext4_new_inode+0x11d9/0x3a90 [ 119.891924][ T5240] ? d_splice_alias+0x110/0x320 [ 119.896775][ T5240] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 119.902472][ T5240] ? dquot_initialize+0x20/0x20 [ 119.907326][ T5240] ext4_symlink+0x47e/0xcd0 [ 119.911812][ T5240] ? make_kgid+0x650/0x650 [ 119.916210][ T5240] ? ext4_unlink+0x500/0x500 [ 119.920780][ T5240] ? inode_permission+0xef/0x480 [ 119.925697][ T5240] ? bpf_lsm_inode_symlink+0x5/0x10 [ 119.930877][ T5240] ? security_inode_symlink+0xb2/0x100 [ 119.936314][ T5240] vfs_symlink+0x245/0x3d0 [ 119.940712][ T5240] do_symlinkat+0x1ab/0x6b0 [ 119.945201][ T5240] ? vfs_symlink+0x3d0/0x3d0 [ 119.949766][ T5240] ? getname_flags+0x1f9/0x4f0 [ 119.954508][ T5240] __x64_sys_symlink+0x7a/0x90 [ 119.959256][ T5240] do_syscall_64+0x4c/0xa0 [ 119.963677][ T5240] ? clear_bhb_loop+0x30/0x80 [ 119.968339][ T5240] ? clear_bhb_loop+0x30/0x80 [ 119.972998][ T5240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.978871][ T5240] RIP: 0033:0x7f24ea6b74d9 [ 119.983267][ T5240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.002871][ T5240] RSP: 002b:00007f24e8904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 120.011266][ T5240] RAX: ffffffffffffffda RBX: 00007f24ea933fa0 RCX: 00007f24ea6b74d9 [ 120.019224][ T5240] RDX: 0000000000000000 RSI: 0000200000004200 RDI: 0000200000004100 [ 120.027196][ T5240] RBP: 00007f24ea74604e R08: 0000000000000000 R09: 0000000000000000 [ 120.035147][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.043118][ T5240] R13: 00007f24ea934038 R14: 00007f24ea933fa0 R15: 00007ffd8365a198 [ 120.051080][ T5240] [ 120.054294][ T5240] Kernel Offset: disabled [ 120.058882][ T5240] Rebooting in 86400 seconds..