last executing test programs: 7m15.995135537s ago: executing program 1 (id=157): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) mkdir(0x0, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000340)=0x8) read$dsp(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r3, 0x1f, &(0x7f0000000540)={0x28, 0x18, 0x0, r2, &(0x7f0000000440)="c91d501d75b221eb8d497d72f4000000000000000055bc94a2869787a4f801517084c801d4474cd9fe7df7b67e8a4e5c64281e5682570c7f42861532e0a8aea9fd5b8654a411760726388c99910066d27f9d891cc424f69504933b0bc1cf686504740954a23e5108800fb6d270e3c823d75f862a739e335bf51c9cf8fadb893ac5fe3313464439584ad1762f32d89785d2", 0x1, 0x8, 0x6, 0x1, {0x0, 0x0, r1, 0x10001}}, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) ioctl$GIO_SCRNMAP(r6, 0x4b40, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f0000002680)=""/4078) 7m11.08697923s ago: executing program 1 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000340)=""/102400, 0x19000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0xc0f85403, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) 7m8.747462829s ago: executing program 1 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 7m8.093748995s ago: executing program 1 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000380)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) 7m6.29822334s ago: executing program 1 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000000200)=[@exit_looper, @release, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) 7m3.850547331s ago: executing program 1 (id=180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 6m48.575983342s ago: executing program 32 (id=180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 6.896900168s ago: executing program 0 (id=2555): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x749}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x1}) 6.722410782s ago: executing program 0 (id=2557): socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpriority(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061107800000000001800000000000000000000000000000095000000000000002eb2c1c2f17a3eee4cfa6261abad1d398fd465e3b08f8b3f983e99e09e8419c0bfd06da29f498f77594385783f7a73a4b3c82821d56a5c3f11f79b5747f92c3374a7"], 0x0}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}}], 0x1, 0x4008040) r4 = socket$inet(0x2, 0xa, 0x200000) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) socket$netlink(0x10, 0x3, 0x0) 5.378574885s ago: executing program 0 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5.049092533s ago: executing program 0 (id=2561): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039ad0106000109021b0001000000000904"], 0x0) 3.651467718s ago: executing program 0 (id=2569): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardli']) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1908004500004129aab5ed89825c0c19bd994371261c00000300000290780a5d088be00db7d7c6f41e3b0fd7b4e9b8d24d5f59099688370d042c04fbf0be7263b88e003ce09e9bee32a53b06df74470b41722daba212daecde6afdcdeede77169c61fca47df76f0adbb3605651f883faa49c96074dec33373c6521fd"], 0x0) 3.651375408s ago: executing program 4 (id=2570): syz_emit_ethernet(0x31, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b5000285f000000000000000100000100001267000000000000000000000000112233"}}}, 0x0) 3.493458253s ago: executing program 4 (id=2572): syz_emit_ethernet(0x34, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a0000000000000100000100001267000000000000000000000000112233441122"}}}, 0x0) 3.480693222s ago: executing program 3 (id=2573): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a0", 0x71}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb5", 0x1f}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.094151012s ago: executing program 4 (id=2575): r0 = userfaultfd(0x80801) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) 2.581180665s ago: executing program 2 (id=2576): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000700)={0x980000, 0x6b, 0xc, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x980913, 0x1ff, '\x00', @string=0x0}}) 2.581015665s ago: executing program 3 (id=2577): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x9f, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='highspeed', 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 2.569842205s ago: executing program 4 (id=2578): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r4, 0x101, 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0x79, 0x1, 0xc, [{@multicast2}, {@local, 0x374}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 1.877156523s ago: executing program 2 (id=2579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x65e, @empty, 0x4f7}, 0x1c) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) 1.617339449s ago: executing program 2 (id=2580): syz_emit_ethernet(0x31, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b5000285f000000000000000100000100001267000000000000000000000000112233"}}}, 0x0) 1.515710002s ago: executing program 0 (id=2581): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x4f88dce6, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) read$dsp(r2, &(0x7f0000003200)=""/4088, 0x57d) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x5) read$FUSE(r1, &(0x7f0000002ec0)={0x2020}, 0x2020) pread64(r1, &(0x7f000001a240)=""/102385, 0x18ff1, 0x2a) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d0240"], 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='!:kprobes/', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x1, 0x0) write(r4, 0x0, 0x0) 1.403811254s ago: executing program 2 (id=2582): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@remote, 0x5000, 0x2001, 0x1}}, 0x44) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) 1.265197208s ago: executing program 3 (id=2583): syz_emit_ethernet(0x34, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a0000000000000100000100001267000000000000000000000000112233441122"}}}, 0x0) 1.127796632s ago: executing program 2 (id=2584): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x20008000) 972.345165ms ago: executing program 2 (id=2585): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x104add2ded159621) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') open(0x0, 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setpriority(0x0, 0x1, 0xa7a8) accept(r0, 0x0, 0x0) 972.206705ms ago: executing program 3 (id=2586): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a0", 0x71}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb5", 0x1f}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 469.136838ms ago: executing program 3 (id=2587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) 468.895998ms ago: executing program 4 (id=2588): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x28800, 0x0) 246.049183ms ago: executing program 3 (id=2589): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x28001, 0x0, 0xb46, 0x200000000002, 0x7, 0x8, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = dup(r2) read(r3, &(0x7f0000000140)=""/113, 0x71) 0s ago: executing program 4 (id=2590): syz_emit_ethernet(0x34, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b5000285f000000000000000100000100001267000000000000000000000000112233441122"}}}, 0x0) kernel console output (not intermixed with test programs): S (loop2): discard dirty block: blocknr=38, size=1024 [ 197.679420][ T6427] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 197.679436][ T6427] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 197.679450][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.679468][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.679485][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.679709][ T6427] NILFS (loop2): discard dirty page: offset=0, ino=19 [ 197.679728][ T6427] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 197.679744][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.679761][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.679777][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.681447][ T6427] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 197.681483][ T6427] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 197.681508][ T6427] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 197.681537][ T6427] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 197.681555][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.681579][ T6427] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 197.681603][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.681621][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.681638][ T6427] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 197.681655][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.681727][ T6427] NILFS (loop2): discard dirty page: offset=98304, ino=3 [ 197.681744][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.681762][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.681780][ T6427] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 197.681796][ T6427] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.026262][ T6446] syz.2.211 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 200.026296][ T6446] CPU: 0 PID: 6446 Comm: syz.2.211 Not tainted syzkaller #0 [ 200.026318][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.026330][ T6446] Call Trace: [ 200.026339][ T6446] [ 200.026349][ T6446] dump_stack_lvl+0x18c/0x250 [ 200.026382][ T6446] ? show_regs_print_info+0x20/0x20 [ 200.026407][ T6446] ? load_image+0x420/0x420 [ 200.026443][ T6446] ? ___ratelimit+0x478/0x610 [ 200.026475][ T6446] ? radix_tree_cpu_dead+0x160/0x160 [ 200.026508][ T6446] dump_header+0xd8/0x820 [ 200.026545][ T6446] oom_kill_process+0x390/0x580 [ 200.026580][ T6446] out_of_memory+0xe0e/0x1200 [ 200.026613][ T6446] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 200.026640][ T6446] ? print_unlock_imbalance_bug+0x160/0x160 [ 200.026674][ T6446] ? mutex_lock_nested+0x20/0x20 [ 200.026706][ T6446] ? unregister_oom_notifier+0x20/0x20 [ 200.026746][ T6446] mem_cgroup_out_of_memory+0x2c2/0x390 [ 200.026773][ T6446] ? try_charge_memcg+0xc91/0x17c0 [ 200.026801][ T6446] ? drain_local_stock+0x630/0x630 [ 200.026839][ T6446] ? do_raw_spin_unlock+0x121/0x230 [ 200.026872][ T6446] try_charge_memcg+0xca1/0x17c0 [ 200.026921][ T6446] ? folio_flags+0x120/0x120 [ 200.026947][ T6446] ? percpu_ref_tryget+0x15/0x180 [ 200.026974][ T6446] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 200.027007][ T6446] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 200.027033][ T6446] ? percpu_ref_tryget+0x15/0x180 [ 200.027060][ T6446] ? percpu_ref_tryget+0x15/0x180 [ 200.027086][ T6446] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 200.027113][ T6446] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 200.027143][ T6446] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 200.027174][ T6446] obj_cgroup_charge+0x36e/0x630 [ 200.027197][ T6446] ? get_obj_cgroup_from_current+0xd4/0x280 [ 200.027225][ T6446] ? obj_cgroup_charge+0xed/0x630 [ 200.027248][ T6446] ? mod_objcg_mlstate+0x320/0x320 [ 200.027271][ T6446] ? percpu_ref_tryget+0x15/0x180 [ 200.027297][ T6446] ? percpu_ref_tryget+0x15/0x180 [ 200.027328][ T6446] ? get_obj_cgroup_from_current+0xd4/0x280 [ 200.027358][ T6446] slab_pre_alloc_hook+0x2e2/0x300 [ 200.027392][ T6446] ? load_msg+0x3c/0x380 [ 200.027418][ T6446] ? load_msg+0x3c/0x380 [ 200.027449][ T6446] __kmem_cache_alloc_node+0x53/0x250 [ 200.027484][ T6446] ? load_msg+0x3c/0x380 [ 200.027509][ T6446] __kmalloc+0xa7/0x240 [ 200.027543][ T6446] load_msg+0x3c/0x380 [ 200.027568][ T6446] ? vfs_write+0x5de/0x9a0 [ 200.027601][ T6446] do_msgrcv+0x279/0x13d0 [ 200.027631][ T6446] ? do_msgrcv+0x13d0/0x13d0 [ 200.027675][ T6446] ? ksys_msgrcv+0x40/0x40 [ 200.027700][ T6446] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 200.027729][ T6446] ? lock_chain_count+0x20/0x20 [ 200.027760][ T6446] ? lockdep_hardirqs_on+0x98/0x150 [ 200.027787][ T6446] ? __x64_sys_msgrcv+0x20/0xd0 [ 200.027817][ T6446] do_syscall_64+0x55/0xb0 [ 200.027839][ T6446] ? clear_bhb_loop+0x40/0x90 [ 200.027862][ T6446] ? clear_bhb_loop+0x40/0x90 [ 200.027887][ T6446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.027910][ T6446] RIP: 0033:0x7f777a19e0d9 [ 200.027930][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.027949][ T6446] RSP: 002b:00007f777b13e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 200.027974][ T6446] RAX: ffffffffffffffda RBX: 00007f777a425fa0 RCX: 00007f777a19e0d9 [ 200.027991][ T6446] RDX: 00000000fffffcef RSI: 0000200000000000 RDI: 0000000000000000 [ 200.028006][ T6446] RBP: 00007f777a235024 R08: 0000000000004800 R09: 0000000000000000 [ 200.028020][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.028033][ T6446] R13: 00007f777a426038 R14: 00007f777a425fa0 R15: 00007ffd96d617e8 [ 200.028066][ T6446] [ 200.028075][ T6446] memory: usage 0kB, limit 0kB, failcnt 91 [ 200.028089][ T6446] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 200.028104][ T6446] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 200.028118][ T6446] Memory cgroup stats for /syz2/test: [ 200.028242][ T6446] cache 0 [ 200.028251][ T6446] rss 0 [ 200.028258][ T6446] rss_huge 0 [ 200.028267][ T6446] shmem 0 [ 200.028275][ T6446] mapped_file 0 [ 200.028284][ T6446] dirty 0 [ 200.028291][ T6446] writeback 0 [ 200.028299][ T6446] workingset_refault_anon 0 [ 200.028308][ T6446] workingset_refault_file 0 [ 200.028316][ T6446] swap 0 [ 200.028324][ T6446] pgpgin 0 [ 200.028332][ T6446] pgpgout 0 [ 200.028340][ T6446] pgfault 9 [ 200.028347][ T6446] pgmajfault 0 [ 200.028355][ T6446] inactive_anon 0 [ 200.028364][ T6446] active_anon 0 [ 200.028372][ T6446] inactive_file 0 [ 200.028379][ T6446] active_file 0 [ 200.028387][ T6446] unevictable 0 [ 200.028396][ T6446] hierarchical_memory_limit 0 [ 200.028405][ T6446] hierarchical_memsw_limit 9223372036854771712 [ 200.028414][ T6446] total_cache 0 [ 200.028422][ T6446] total_rss 0 [ 200.028437][ T6446] total_rss_huge 0 [ 200.028445][ T6446] total_shmem 0 [ 200.028454][ T6446] total_mapped_file 0 [ 200.028462][ T6446] total_dirty 0 [ 200.028470][ T6446] total_writeback 0 [ 200.028478][ T6446] total_workingset_refault_anon 0 [ 200.028487][ T6446] total_workingset_refault_file 0 [ 200.028496][ T6446] total_swap 0 [ 200.028503][ T6446] total_pgpgin 0 [ 200.028512][ T6446] total_pgpgout 0 [ 200.028520][ T6446] total_pgfault 9 [ 200.028528][ T6446] total_pgmajfault 0 [ 200.028536][ T6446] total_inactive_anon 0 [ 200.028546][ T6446] total_active_anon 0 [ 200.028554][ T6446] total_inactive_file 0 [ 200.028562][ T6446] total_active_file 0 [ 200.028571][ T6446] total_unevictable 0 [ 200.028579][ T6446] anon_cost 0 [ 200.028587][ T6446] file_cost 0 [ 200.028595][ T6446] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.211,pid=6445,uid=0 [ 200.028712][ T6446] Memory cgroup out of memory: Killed process 6445 (syz.2.211) total-vm:102244kB, anon-rss:1216kB, file-rss:22528kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 200.712966][ T6448] loop0: detected capacity change from 0 to 2048 [ 200.778715][ T6448] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.778754][ T6448] NILFS (loop0): mounting unchecked fs [ 200.962250][ T6448] NILFS (loop0): recovery complete [ 200.997599][ T6452] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.074060][ T6448] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 201.144596][ T6448] Remounting filesystem read-only [ 201.626833][ T6454] loop2: detected capacity change from 0 to 2048 [ 201.655732][ T6454] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.655771][ T6454] NILFS (loop2): mounting unchecked fs [ 201.813614][ T6454] NILFS (loop2): recovery complete [ 201.824960][ T6460] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.847822][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.849092][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.885997][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.888698][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.164182][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.165222][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.882137][ T6465] netlink: 52 bytes leftover after parsing attributes in process `syz.0.218'. [ 202.954253][ T6454] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 202.997793][ T6454] Remounting filesystem read-only [ 203.195591][ T6454] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 203.195629][ T6454] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 203.195650][ T6454] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 203.195668][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.195687][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.195706][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.195967][ T6454] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 203.195986][ T6454] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 203.196004][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.196023][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.196041][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.196392][ T6454] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 203.196411][ T6454] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 203.196429][ T6454] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 203.196446][ T6454] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 203.196463][ T6454] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 203.196487][ T6454] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 203.196503][ T6454] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 203.196521][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.196539][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.196557][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.196797][ T6454] NILFS (loop2): discard dirty page: offset=0, ino=19 [ 203.196816][ T6454] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 203.196833][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.196852][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.196870][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.198807][ T6454] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 203.198828][ T6454] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 203.198847][ T6454] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 203.198863][ T6454] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 203.198880][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.198905][ T6454] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 203.198923][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.198941][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.198959][ T6454] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 203.198976][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.199000][ T6454] NILFS (loop2): discard dirty page: offset=98304, ino=3 [ 203.199017][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.199036][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.199054][ T6454] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 203.199070][ T6454] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.609412][ T6474] syz.2.221 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 203.609437][ T6474] CPU: 1 PID: 6474 Comm: syz.2.221 Not tainted syzkaller #0 [ 203.609451][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.609461][ T6474] Call Trace: [ 203.609467][ T6474] [ 203.609473][ T6474] dump_stack_lvl+0x18c/0x250 [ 203.609498][ T6474] ? show_regs_print_info+0x20/0x20 [ 203.609515][ T6474] ? load_image+0x420/0x420 [ 203.609538][ T6474] ? ___ratelimit+0x478/0x610 [ 203.609562][ T6474] ? radix_tree_cpu_dead+0x160/0x160 [ 203.609586][ T6474] dump_header+0xd8/0x820 [ 203.609613][ T6474] oom_kill_process+0x390/0x580 [ 203.609638][ T6474] out_of_memory+0xe0e/0x1200 [ 203.609662][ T6474] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 203.609682][ T6474] ? print_unlock_imbalance_bug+0x160/0x160 [ 203.609704][ T6474] ? mutex_lock_nested+0x20/0x20 [ 203.609727][ T6474] ? unregister_oom_notifier+0x20/0x20 [ 203.609761][ T6474] mem_cgroup_out_of_memory+0x2c2/0x390 [ 203.609781][ T6474] ? try_charge_memcg+0xc91/0x17c0 [ 203.609803][ T6474] ? drain_local_stock+0x630/0x630 [ 203.609829][ T6474] ? do_raw_spin_unlock+0x121/0x230 [ 203.609854][ T6474] try_charge_memcg+0xca1/0x17c0 [ 203.609889][ T6474] ? folio_flags+0x120/0x120 [ 203.609908][ T6474] ? percpu_ref_tryget+0x15/0x180 [ 203.609928][ T6474] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 203.609952][ T6474] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 203.609972][ T6474] ? percpu_ref_tryget+0x15/0x180 [ 203.609990][ T6474] ? percpu_ref_tryget+0x15/0x180 [ 203.610009][ T6474] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 203.610028][ T6474] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 203.610049][ T6474] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 203.610071][ T6474] obj_cgroup_charge+0x36e/0x630 [ 203.610089][ T6474] ? get_obj_cgroup_from_current+0xd4/0x280 [ 203.610109][ T6474] ? obj_cgroup_charge+0xed/0x630 [ 203.610126][ T6474] ? mod_objcg_mlstate+0x320/0x320 [ 203.610142][ T6474] ? percpu_ref_tryget+0x15/0x180 [ 203.610160][ T6474] ? percpu_ref_tryget+0x15/0x180 [ 203.610183][ T6474] ? get_obj_cgroup_from_current+0xd4/0x280 [ 203.610204][ T6474] slab_pre_alloc_hook+0x2e2/0x300 [ 203.610229][ T6474] ? futex_wake+0x42a/0x4f0 [ 203.610244][ T6474] ? load_msg+0x3c/0x380 [ 203.610264][ T6474] ? load_msg+0x3c/0x380 [ 203.610281][ T6474] __kmem_cache_alloc_node+0x53/0x250 [ 203.610308][ T6474] ? load_msg+0x3c/0x380 [ 203.610326][ T6474] __kmalloc+0xa7/0x240 [ 203.610351][ T6474] load_msg+0x3c/0x380 [ 203.610369][ T6474] ? vfs_write+0x5de/0x9a0 [ 203.610393][ T6474] do_msgrcv+0x279/0x13d0 [ 203.610415][ T6474] ? do_msgrcv+0x13d0/0x13d0 [ 203.610446][ T6474] ? ksys_msgrcv+0x40/0x40 [ 203.610464][ T6474] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 203.610485][ T6474] ? lock_chain_count+0x20/0x20 [ 203.610507][ T6474] ? lockdep_hardirqs_on+0x98/0x150 [ 203.610527][ T6474] ? __x64_sys_msgrcv+0x20/0xd0 [ 203.610549][ T6474] do_syscall_64+0x55/0xb0 [ 203.610564][ T6474] ? clear_bhb_loop+0x40/0x90 [ 203.610581][ T6474] ? clear_bhb_loop+0x40/0x90 [ 203.610599][ T6474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.610615][ T6474] RIP: 0033:0x7f777a19e0d9 [ 203.610630][ T6474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.610643][ T6474] RSP: 002b:00007f777b13e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 203.610660][ T6474] RAX: ffffffffffffffda RBX: 00007f777a425fa0 RCX: 00007f777a19e0d9 [ 203.610671][ T6474] RDX: 00000000fffffcef RSI: 0000200000000000 RDI: 0000000000000000 [ 203.610681][ T6474] RBP: 00007f777a235024 R08: 0000000000004800 R09: 0000000000000000 [ 203.610691][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.610700][ T6474] R13: 00007f777a426038 R14: 00007f777a425fa0 R15: 00007ffd96d617e8 [ 203.610722][ T6474] [ 203.610727][ T6474] memory: usage 0kB, limit 0kB, failcnt 127 [ 203.610742][ T6474] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 203.610753][ T6474] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 203.610762][ T6474] Memory cgroup stats for /syz2/test: [ 203.610849][ T6474] cache 0 [ 203.610855][ T6474] rss 0 [ 203.610860][ T6474] rss_huge 0 [ 203.610866][ T6474] shmem 0 [ 203.610871][ T6474] mapped_file 0 [ 203.610876][ T6474] dirty 0 [ 203.610882][ T6474] writeback 0 [ 203.610887][ T6474] workingset_refault_anon 0 [ 203.610894][ T6474] workingset_refault_file 0 [ 203.610900][ T6474] swap 0 [ 203.610905][ T6474] pgpgin 0 [ 203.610910][ T6474] pgpgout 0 [ 203.610915][ T6474] pgfault 9 [ 203.610921][ T6474] pgmajfault 0 [ 203.610926][ T6474] inactive_anon 0 [ 203.610932][ T6474] active_anon 0 [ 203.610937][ T6474] inactive_file 0 [ 203.610942][ T6474] active_file 0 [ 203.610948][ T6474] unevictable 0 [ 203.610953][ T6474] hierarchical_memory_limit 0 [ 203.610959][ T6474] hierarchical_memsw_limit 9223372036854771712 [ 203.610966][ T6474] total_cache 0 [ 203.610971][ T6474] total_rss 0 [ 203.610977][ T6474] total_rss_huge 0 [ 203.610982][ T6474] total_shmem 0 [ 203.610988][ T6474] total_mapped_file 0 [ 203.610993][ T6474] total_dirty 0 [ 203.610999][ T6474] total_writeback 0 [ 203.611004][ T6474] total_workingset_refault_anon 0 [ 203.611011][ T6474] total_workingset_refault_file 0 [ 203.611017][ T6474] total_swap 0 [ 203.611022][ T6474] total_pgpgin 0 [ 203.611027][ T6474] total_pgpgout 0 [ 203.611033][ T6474] total_pgfault 9 [ 203.611038][ T6474] total_pgmajfault 0 [ 203.611044][ T6474] total_inactive_anon 0 [ 203.611050][ T6474] total_active_anon 0 [ 203.611056][ T6474] total_inactive_file 0 [ 203.611061][ T6474] total_active_file 0 [ 203.611067][ T6474] total_unevictable 0 [ 203.611073][ T6474] anon_cost 0 [ 203.611078][ T6474] file_cost 0 [ 203.611083][ T6474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.221,pid=6471,uid=0 [ 203.611225][ T6474] Memory cgroup out of memory: Killed process 6471 (syz.2.221) total-vm:102376kB, anon-rss:1372kB, file-rss:22528kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 203.800276][ T6459] chnl_net:caif_netlink_parms(): no params data found [ 204.092757][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.093072][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.093234][ T6459] bridge_slave_0: entered allmulticast mode [ 204.095046][ T6459] bridge_slave_0: entered promiscuous mode [ 204.098571][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.098687][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.098804][ T6459] bridge_slave_1: entered allmulticast mode [ 204.099844][ T6459] bridge_slave_1: entered promiscuous mode [ 204.136335][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.139537][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.177313][ T6459] team0: Port device team_slave_0 added [ 204.180451][ T6459] team0: Port device team_slave_1 added [ 204.217629][ T5776] Bluetooth: hci4: command tx timeout [ 204.227644][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.227661][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.227695][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.235789][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.235807][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.235832][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.288244][ T6459] hsr_slave_0: entered promiscuous mode [ 205.335437][ T6459] hsr_slave_1: entered promiscuous mode [ 205.356027][ T6396] tty tty4: ldisc open failed (-12), clearing slot 3 [ 205.637278][ T6491] netlink: 52 bytes leftover after parsing attributes in process `syz.2.226'. [ 206.296040][ T5776] Bluetooth: hci4: command tx timeout [ 206.300643][ T6459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.694429][ T6459] Cannot create hsr debugfs directory [ 206.794630][ T6425] tty tty1: ldisc open failed (-12), clearing slot 0 [ 207.223941][ T6499] syz.2.230 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 207.264797][ T6499] CPU: 1 PID: 6499 Comm: syz.2.230 Not tainted syzkaller #0 [ 207.272180][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.282287][ T6499] Call Trace: [ 207.285599][ T6499] [ 207.288542][ T6499] dump_stack_lvl+0x18c/0x250 [ 207.293235][ T6499] ? show_regs_print_info+0x20/0x20 [ 207.298450][ T6499] ? load_image+0x420/0x420 [ 207.302974][ T6499] ? ___ratelimit+0x478/0x610 [ 207.307672][ T6499] ? radix_tree_cpu_dead+0x160/0x160 [ 207.312974][ T6499] dump_header+0xd8/0x820 [ 207.317329][ T6499] oom_kill_process+0x390/0x580 [ 207.322197][ T6499] out_of_memory+0xe0e/0x1200 [ 207.326897][ T6499] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 207.332549][ T6499] ? print_unlock_imbalance_bug+0x160/0x160 [ 207.338510][ T6499] ? mutex_lock_nested+0x20/0x20 [ 207.343465][ T6499] ? unregister_oom_notifier+0x20/0x20 [ 207.348954][ T6499] mem_cgroup_out_of_memory+0x2c2/0x390 [ 207.354518][ T6499] ? try_charge_memcg+0xc91/0x17c0 [ 207.359648][ T6499] ? drain_local_stock+0x630/0x630 [ 207.364790][ T6499] ? do_raw_spin_unlock+0x121/0x230 [ 207.370033][ T6499] try_charge_memcg+0xca1/0x17c0 [ 207.375005][ T6499] ? folio_flags+0x120/0x120 [ 207.379630][ T6499] ? percpu_ref_tryget+0x15/0x180 [ 207.384670][ T6499] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 207.390432][ T6499] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 207.396605][ T6499] ? percpu_ref_tryget+0x15/0x180 [ 207.401646][ T6499] ? percpu_ref_tryget+0x15/0x180 [ 207.406856][ T6499] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 207.412595][ T6499] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 207.418331][ T6499] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 207.424168][ T6499] obj_cgroup_charge+0x36e/0x630 [ 207.429137][ T6499] ? get_obj_cgroup_from_current+0xd4/0x280 [ 207.435043][ T6499] ? obj_cgroup_charge+0xed/0x630 [ 207.440077][ T6499] ? mod_objcg_mlstate+0x320/0x320 [ 207.445199][ T6499] ? percpu_ref_tryget+0x15/0x180 [ 207.450254][ T6499] ? percpu_ref_tryget+0x15/0x180 [ 207.455296][ T6499] ? get_obj_cgroup_from_current+0xd4/0x280 [ 207.461204][ T6499] slab_pre_alloc_hook+0x2e2/0x300 [ 207.466333][ T6499] ? load_msg+0x3c/0x380 [ 207.470588][ T6499] ? load_msg+0x3c/0x380 [ 207.474864][ T6499] __kmem_cache_alloc_node+0x53/0x250 [ 207.480275][ T6499] ? load_msg+0x3c/0x380 [ 207.484529][ T6499] __kmalloc+0xa7/0x240 [ 207.488706][ T6499] load_msg+0x3c/0x380 [ 207.492787][ T6499] ? vfs_write+0x5de/0x9a0 [ 207.497248][ T6499] do_msgrcv+0x279/0x13d0 [ 207.501610][ T6499] ? do_msgrcv+0x13d0/0x13d0 [ 207.506225][ T6499] ? ksys_msgrcv+0x40/0x40 [ 207.510653][ T6499] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 207.516656][ T6499] ? lock_chain_count+0x20/0x20 [ 207.521537][ T6499] ? lockdep_hardirqs_on+0x98/0x150 [ 207.526748][ T6499] ? __x64_sys_msgrcv+0x20/0xd0 [ 207.531610][ T6499] do_syscall_64+0x55/0xb0 [ 207.536034][ T6499] ? clear_bhb_loop+0x40/0x90 [ 207.540745][ T6499] ? clear_bhb_loop+0x40/0x90 [ 207.545438][ T6499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.551363][ T6499] RIP: 0033:0x7f777a19e0d9 [ 207.555789][ T6499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.575404][ T6499] RSP: 002b:00007f777b13e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 207.583838][ T6499] RAX: ffffffffffffffda RBX: 00007f777a425fa0 RCX: 00007f777a19e0d9 [ 207.591821][ T6499] RDX: 00000000fffffcef RSI: 0000200000000000 RDI: 0000000000000000 [ 207.599826][ T6499] RBP: 00007f777a235024 R08: 0000000000004800 R09: 0000000000000000 [ 207.607805][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.615786][ T6499] R13: 00007f777a426038 R14: 00007f777a425fa0 R15: 00007ffd96d617e8 [ 207.623800][ T6499] [ 207.628805][ T6499] memory: usage 0kB, limit 0kB, failcnt 163 [ 207.634832][ T6499] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 207.642327][ T6499] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 207.649266][ T6499] Memory cgroup stats for /syz2/test: [ 207.649412][ T6499] cache 0 [ 207.660292][ T6499] rss 0 [ 207.663267][ T6499] rss_huge 0 [ 207.673387][ T6499] shmem 0 [ 207.695843][ T6499] mapped_file 0 [ 207.731589][ T6499] dirty 0 [ 207.742011][ T6499] writeback 0 [ 207.764406][ T6499] workingset_refault_anon 0 [ 207.797173][ T6499] workingset_refault_file 0 [ 207.825018][ T6499] swap 0 [ 207.848129][ T6499] pgpgin 0 [ 207.864836][ T6499] pgpgout 0 [ 207.901836][ T6499] pgfault 9 [ 207.907131][ T6503] loop0: detected capacity change from 0 to 2048 [ 207.921523][ T6499] pgmajfault 0 [ 207.935491][ T6499] inactive_anon 0 [ 207.944056][ T6499] active_anon 0 [ 207.951406][ T6499] inactive_file 0 [ 207.973342][ T6499] active_file 0 [ 208.004469][ T6499] unevictable 0 [ 208.014682][ T6503] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 208.029193][ T6459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.064136][ T6503] NILFS (loop0): mounting unchecked fs [ 208.077050][ T6499] hierarchical_memory_limit 0 [ 208.081817][ T6499] hierarchical_memsw_limit 9223372036854771712 [ 208.119091][ T6503] NILFS (loop0): recovery complete [ 208.150520][ T6506] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.184235][ T6499] total_cache 0 [ 208.204669][ T6459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.241695][ T6503] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 208.262732][ T6459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.288055][ T6503] Remounting filesystem read-only [ 208.311024][ T6502] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 208.374267][ T5776] Bluetooth: hci4: command tx timeout [ 208.397730][ T6502] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 208.418576][ T6499] total_rss 0 [ 209.114819][ T6499] total_rss_huge 0 [ 209.118632][ T6499] total_shmem 0 [ 209.122124][ T6499] total_mapped_file 0 [ 209.128390][ T6502] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 209.154176][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.165097][ T6459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.172758][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.194232][ T6499] total_dirty 0 [ 209.197771][ T6499] total_writeback 0 [ 209.216813][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.231909][ T6499] total_workingset_refault_anon 0 [ 209.314806][ T6502] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 209.321586][ T6502] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 209.351389][ T6499] total_workingset_refault_file 0 [ 209.374860][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.385871][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.404620][ T6499] total_swap 0 [ 209.408183][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.417254][ T6499] total_pgpgin 0 [ 209.424604][ T6499] total_pgpgout 0 [ 209.429435][ T6502] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 209.444169][ T6499] total_pgfault 9 [ 209.447871][ T6499] total_pgmajfault 0 [ 209.452019][ T6502] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 209.471007][ T6502] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 209.479034][ T6499] total_inactive_anon 0 [ 209.483257][ T6499] total_active_anon 0 [ 209.487466][ T6502] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 209.514411][ T6502] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 209.531176][ T6499] total_inactive_file 0 [ 209.541236][ T6502] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 209.565975][ T6502] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 209.573351][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.583762][ T6499] total_active_file 0 [ 209.599620][ T6499] total_unevictable 0 [ 209.603825][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.603847][ T6499] anon_cost 0 [ 209.603858][ T6499] file_cost 0 [ 209.620033][ T6499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.230,pid=6498,uid=0 [ 209.643495][ T6499] Memory cgroup out of memory: Killed process 6499 (syz.2.230) total-vm:102244kB, anon-rss:1244kB, file-rss:22528kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 209.674769][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.713088][ T6502] NILFS (loop0): discard dirty page: offset=0, ino=19 [ 209.728454][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.764194][ T6502] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 209.771480][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.876828][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.887604][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 209.905721][ T6502] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 209.957069][ T6502] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 210.454212][ T51] Bluetooth: hci4: command tx timeout [ 210.688270][ T6502] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 210.704181][ T6502] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 210.711547][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.755139][ T6502] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 210.785474][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.826321][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.844191][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.892110][ T6502] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 210.918813][ T6517] netlink: 52 bytes leftover after parsing attributes in process `syz.2.237'. [ 210.959041][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 211.034553][ T6502] NILFS (loop0): discard dirty page: offset=98304, ino=3 [ 211.053165][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 211.063393][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 211.081296][ T6502] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 211.089190][ T6502] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 211.192491][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.238782][ T6521] Zero length message leads to an empty skb [ 211.384408][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.976128][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.984294][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.990551][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 212.267113][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.321748][ T6459] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.363213][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.370469][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.409584][ T6536] syz.3.244 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 212.432512][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.439752][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.464537][ T6536] CPU: 0 PID: 6536 Comm: syz.3.244 Not tainted syzkaller #0 [ 212.471923][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.482027][ T6536] Call Trace: [ 212.485347][ T6536] [ 212.488312][ T6536] dump_stack_lvl+0x18c/0x250 [ 212.493045][ T6536] ? show_regs_print_info+0x20/0x20 [ 212.498301][ T6536] ? load_image+0x420/0x420 [ 212.502877][ T6536] ? ___ratelimit+0x478/0x610 [ 212.507627][ T6536] ? radix_tree_cpu_dead+0x160/0x160 [ 212.512978][ T6536] dump_header+0xd8/0x820 [ 212.517381][ T6536] oom_kill_process+0x390/0x580 [ 212.522295][ T6536] out_of_memory+0xe0e/0x1200 [ 212.527049][ T6536] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 212.532736][ T6536] ? mutex_lock_nested+0x20/0x20 [ 212.537731][ T6536] ? unregister_oom_notifier+0x20/0x20 [ 212.543257][ T6536] mem_cgroup_out_of_memory+0x2c2/0x390 [ 212.548866][ T6536] ? try_charge_memcg+0xc91/0x17c0 [ 212.554034][ T6536] ? drain_local_stock+0x630/0x630 [ 212.559206][ T6536] ? do_raw_spin_unlock+0x121/0x230 [ 212.564464][ T6536] try_charge_memcg+0xca1/0x17c0 [ 212.569478][ T6536] ? verify_lock_unused+0x140/0x140 [ 212.574730][ T6536] ? folio_flags+0x120/0x120 [ 212.579393][ T6536] ? percpu_ref_tryget+0x15/0x180 [ 212.584472][ T6536] ? get_mem_cgroup_from_mm+0x38/0x290 [ 212.589985][ T6536] charge_memcg+0x11b/0x3b0 [ 212.594544][ T6536] ? __mem_cgroup_charge+0x80/0x80 [ 212.599707][ T6536] ? get_mem_cgroup_from_mm+0x38/0x290 [ 212.605207][ T6536] ? get_mem_cgroup_from_mm+0x38/0x290 [ 212.610720][ T6536] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 212.616323][ T6536] __mem_cgroup_charge+0x25/0x80 [ 212.621309][ T6536] handle_mm_fault+0x1b00/0x4a50 [ 212.626294][ T6536] ? handle_mm_fault+0xe6/0x4a50 [ 212.631293][ T6536] ? lock_vma_under_rcu+0x52c/0x660 [ 212.636540][ T6536] ? numa_migrate_prep+0x350/0x350 [ 212.641700][ T6536] ? lock_vma_under_rcu+0xe5/0x660 [ 212.646879][ T6536] ? do_user_addr_fault+0x1cb/0x12d0 [ 212.652214][ T6536] do_user_addr_fault+0xad2/0x12d0 [ 212.657384][ T6536] ? rcu_is_watching+0x15/0xb0 [ 212.662208][ T6536] exc_page_fault+0x64/0x100 [ 212.666861][ T6536] asm_exc_page_fault+0x26/0x30 [ 212.671769][ T6536] RIP: 0033:0x7fbfb174c61f [ 212.676232][ T6536] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 212.695889][ T6536] RSP: 002b:00007fbfb26c0ff0 EFLAGS: 00010246 [ 212.702011][ T6536] RAX: 00007fbfb26c10d0 RBX: 0000000000020000 RCX: 00007fbfb26c0ff0 [ 212.710035][ T6536] RDX: 00007fbfb1851779 RSI: 0000000000000023 RDI: 00007fbfb26c10d0 [ 212.718051][ T6536] RBP: 00007fbfb26a2000 R08: 0000000000000000 R09: 00007ffdccf3a057 [ 212.726072][ T6536] R10: 0000000000000008 R11: 0000000000000206 R12: 00007fbfb26c10d0 [ 212.734089][ T6536] R13: 000000000000006e R14: 00007ffdccf39f70 R15: 00007ffdccf3a058 [ 212.742122][ T6536] [ 213.282882][ T6536] memory: usage 0kB, limit 0kB, failcnt 163 [ 213.289096][ T6536] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 213.296856][ T6536] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 213.303865][ T6536] Memory cgroup stats for /syz3/test: [ 213.304136][ T6536] cache 0 [ 213.312622][ T6536] rss 0 [ 213.315571][ T6536] rss_huge 0 [ 213.318887][ T6536] shmem 0 [ 213.321935][ T6536] mapped_file 0 [ 213.326869][ T6536] dirty 0 [ 213.329932][ T6536] writeback 0 [ 213.333322][ T6536] workingset_refault_anon 0 [ 213.338657][ T6536] workingset_refault_file 0 [ 213.343299][ T6536] swap 0 [ 213.346316][ T6536] pgpgin 0 [ 213.349456][ T6536] pgpgout 0 [ 213.352688][ T6536] pgfault 9 [ 213.355954][ T6536] pgmajfault 0 [ 213.359438][ T6536] inactive_anon 0 [ 213.363177][ T6536] active_anon 0 [ 213.366778][ T6536] inactive_file 0 [ 213.370534][ T6536] active_file 0 [ 213.374142][ T6536] unevictable 0 [ 213.377716][ T6536] hierarchical_memory_limit 0 [ 213.383043][ T6536] hierarchical_memsw_limit 9223372036854771712 [ 213.389344][ T6536] total_cache 0 [ 213.392850][ T6536] total_rss 0 [ 213.397349][ T6536] total_rss_huge 0 [ 213.401131][ T6536] total_shmem 0 [ 213.404835][ T6536] total_mapped_file 0 [ 213.408859][ T6536] total_dirty 0 [ 213.412347][ T6536] total_writeback 0 [ 213.428544][ T6536] total_workingset_refault_anon 0 [ 213.433739][ T6536] total_workingset_refault_file 0 [ 213.444344][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.246'. [ 213.483486][ T6536] total_swap 0 [ 213.488914][ T6536] total_pgpgin 0 [ 213.492522][ T6536] total_pgpgout 0 [ 213.504973][ T6536] total_pgfault 9 [ 213.508679][ T6536] total_pgmajfault 0 [ 213.512612][ T6536] total_inactive_anon 0 [ 213.544179][ T6536] total_active_anon 0 [ 213.548246][ T6536] total_inactive_file 0 [ 213.583724][ T6536] total_active_file 0 [ 213.599624][ T6536] total_unevictable 0 [ 213.603693][ T6536] anon_cost 0 [ 213.629623][ T6536] file_cost 0 [ 213.640131][ T6536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.244,pid=6532,uid=0 [ 213.715453][ T6536] Memory cgroup out of memory: Killed process 6536 (syz.3.244) total-vm:102376kB, anon-rss:1216kB, file-rss:22592kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 214.052019][ T6552] loop3: detected capacity change from 0 to 2048 [ 214.132052][ T6552] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 214.261286][ T6552] NILFS (loop3): mounting unchecked fs [ 214.690786][ T6552] NILFS (loop3): recovery complete [ 214.803235][ T6563] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.039981][ T6552] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 215.110460][ T6552] Remounting filesystem read-only [ 215.302076][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.255'. [ 215.377713][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.943651][ T6586] loop3: detected capacity change from 0 to 2048 [ 215.978971][ T6586] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 216.010561][ T6586] NILFS (loop3): mounting unchecked fs [ 216.087417][ T6586] NILFS (loop3): recovery complete [ 216.131260][ T6595] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.239011][ T6586] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 216.291685][ T6586] Remounting filesystem read-only [ 216.336665][ T6585] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 216.382030][ T6585] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 216.406880][ T6585] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 216.434227][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.451170][ T6459] veth0_vlan: entered promiscuous mode [ 216.461664][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.480919][ T6459] veth1_vlan: entered promiscuous mode [ 216.486955][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.507753][ T6585] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 216.524777][ T6585] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 216.550162][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.562567][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.583127][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.593313][ T6585] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 216.601485][ T6585] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 216.609764][ T6585] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 216.638435][ T6585] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 216.647657][ T6585] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 216.655485][ T6585] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 216.662663][ T6585] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 216.670603][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.690851][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.713839][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.744504][ T6585] NILFS (loop3): discard dirty page: offset=0, ino=19 [ 216.764292][ T6585] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 216.779472][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.799055][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.813140][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.842860][ T6585] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 216.858802][ T6585] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 216.867491][ T6585] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 216.876573][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 216.903464][ T6459] veth0_macvtap: entered promiscuous mode [ 216.912648][ T6585] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 216.933148][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.959820][ T6585] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 216.972461][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.981800][ T31] hsr_slave_0: left promiscuous mode [ 216.988603][ T31] hsr_slave_1: left promiscuous mode [ 216.989414][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.004426][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.012292][ T6585] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 217.020203][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.028539][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.039591][ T6585] NILFS (loop3): discard dirty page: offset=98304, ino=3 [ 217.067390][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.077901][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.088473][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.104586][ T6585] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 217.111867][ T6585] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.121817][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.150029][ T31] bridge_slave_1: left allmulticast mode [ 217.159153][ T31] bridge_slave_1: left promiscuous mode [ 217.179796][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.209859][ T6609] loop2: detected capacity change from 0 to 2048 [ 217.225594][ T31] bridge_slave_0: left allmulticast mode [ 217.231330][ T31] bridge_slave_0: left promiscuous mode [ 217.245245][ T6609] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 217.256016][ T6609] NILFS (loop2): mounting unchecked fs [ 217.263854][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.297864][ T6609] NILFS (loop2): recovery complete [ 217.323544][ T6612] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.386372][ T6609] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 217.402931][ T31] veth1_macvtap: left promiscuous mode [ 217.409624][ T31] veth0_macvtap: left promiscuous mode [ 217.416914][ T31] veth1_vlan: left promiscuous mode [ 217.423107][ T31] veth0_vlan: left promiscuous mode [ 217.431101][ T6609] Remounting filesystem read-only [ 217.768962][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'. [ 220.015243][ T31] team0 (unregistering): Port device team_slave_1 removed [ 220.075402][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.281'. [ 220.103942][ T31] team0 (unregistering): Port device team_slave_0 removed [ 220.207051][ T6648] loop2: detected capacity change from 0 to 2048 [ 220.239352][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.241105][ T6648] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 220.270065][ T6648] NILFS (loop2): mounting unchecked fs [ 220.302167][ T5785] udevd[5785]: incorrect nilfs2 checksum on /dev/loop2 [ 220.340942][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.349240][ T6648] NILFS (loop2): recovery complete [ 220.364963][ T6651] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.893110][ T31] bond0 (unregistering): Released all slaves [ 221.017227][ T6459] veth1_macvtap: entered promiscuous mode [ 221.185864][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.226918][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.250404][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.273992][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.305206][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.327090][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.345345][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 221.356308][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.393263][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.416394][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.434164][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.454139][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.474370][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.490964][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.507161][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.522218][ T6459] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.539662][ T6459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.548756][ T6459] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.563266][ T6459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.866849][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.893090][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.001706][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.051540][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.918639][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 222.957304][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 223.339999][ T6718] loop4: detected capacity change from 0 to 2048 [ 223.402883][ T6718] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.440634][ T6718] NILFS (loop4): mounting unchecked fs [ 223.506504][ T5785] udevd[5785]: incorrect nilfs2 checksum on /dev/loop4 [ 223.632684][ T6718] NILFS (loop4): recovery complete [ 223.721282][ T6736] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.247846][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 224.281415][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 225.214765][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 225.223631][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 226.825276][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 228.537941][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 229.185045][ T6862] netlink: 68 bytes leftover after parsing attributes in process `syz.3.356'. [ 230.487748][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 231.076556][ T6901] netlink: 68 bytes leftover after parsing attributes in process `syz.0.365'. [ 232.554997][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 233.775887][ T6951] netlink: 68 bytes leftover after parsing attributes in process `syz.2.380'. [ 234.275961][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 236.007248][ T6996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.395'. [ 236.206194][ T6996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.395'. [ 236.612214][ T6996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.395'. [ 237.045282][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 241.048776][ T7080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.421'. [ 241.107231][ T7078] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 241.461498][ T7080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.421'. [ 241.485200][ T7078] CIFS mount error: No usable UNC path provided in device string! [ 241.485200][ T7078] [ 241.573009][ T7078] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 243.257700][ T7114] tipc: Started in network mode [ 243.262880][ T7114] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 243.354687][ T7114] tipc: Enabled bearer , priority 0 [ 243.434475][ T7123] CIFS mount error: No usable UNC path provided in device string! [ 243.434475][ T7123] [ 243.484946][ T7123] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 244.029585][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.433'. [ 244.365979][ T23] tipc: Node number set to 43690 [ 246.040133][ T7162] CIFS mount error: No usable UNC path provided in device string! [ 246.040133][ T7162] [ 246.104392][ T7162] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 246.155455][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 249.118727][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.460'. [ 251.404811][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'. [ 253.806614][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.485'. [ 255.508798][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.497'. [ 255.990498][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.997054][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.708571][ T7369] syz.4.505 uses obsolete (PF_INET,SOCK_PACKET) [ 256.734326][ T5817] IPVS: starting estimator thread 0... [ 256.864505][ T7371] IPVS: using max 21 ests per chain, 50400 per kthread [ 257.104831][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 258.902755][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 261.238935][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 262.671909][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 311.987601][ T8286] overlayfs: failed to clone upperpath [ 312.728706][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.873'. [ 317.426264][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.432698][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.235148][ T28] audit: type=1326 audit(1786253073.708:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.4.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf99e0d9 code=0x0 [ 322.926319][ T8601] capability: warning: `syz.0.967' uses deprecated v2 capabilities in a way that may be insecure [ 322.938665][ T178] IPVS: starting estimator thread 0... [ 323.044308][ T8603] IPVS: using max 18 ests per chain, 43200 per kthread [ 324.614257][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 326.602144][ T8705] ip_tables: iptables: counters copy to user failed while replacing table [ 327.970328][ T8733] ip_tables: iptables: counters copy to user failed while replacing table [ 329.080579][ T8769] ip_tables: iptables: counters copy to user failed while replacing table [ 330.559196][ T8786] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.678448][ T8786] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.812419][ T8786] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.069232][ T8786] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.948273][ T8801] ip_tables: iptables: counters copy to user failed while replacing table [ 334.242928][ T8852] ip_tables: iptables: counters copy to user failed while replacing table [ 334.547672][ T8855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.712420][ T8855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.947832][ T8855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.177068][ T8855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.429314][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.438951][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.448113][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.457234][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.466395][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.475528][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.484669][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.493758][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.502902][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.512030][ T8929] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 338.565866][ T8934] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1078'. [ 340.601641][ T8973] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.827088][ T8973] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.835803][ T8973] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.970847][ T8973] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.428406][ T9090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.628267][ T9090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.879525][ T9090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.038139][ T9090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.124490][ T9144] net_ratelimit: 54 callbacks suppressed [ 350.124507][ T9144] ip_tables: iptables: counters copy to user failed while replacing table [ 351.945654][ T9181] ip_tables: iptables: counters copy to user failed while replacing table [ 355.511504][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.520686][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.529813][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.538927][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.548050][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.557176][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.566276][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.575393][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.584516][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 355.593585][ T9255] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 359.874543][ T9337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.392671][ T9410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.245434][ T9445] net_ratelimit: 54 callbacks suppressed [ 364.245451][ T9445] ip_tables: iptables: counters copy to user failed while replacing table [ 364.792849][ T9464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.251290][ T9493] ip_tables: iptables: counters copy to user failed while replacing table [ 368.149703][ T9533] ip_tables: iptables: counters copy to user failed while replacing table [ 368.522979][ T9542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.560675][ T9542] wlan1: authenticate with 08:02:11:00:00:00 [ 368.582679][ T9542] wlan1: No legacy rates in association response [ 370.162248][ T9573] tipc: Started in network mode [ 370.171450][ T9573] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 370.197490][ T9573] tipc: Enabled bearer , priority 0 [ 371.406295][ T5817] tipc: Node number set to 43690 [ 371.594407][ T9597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.672140][ T9597] wlan1: authenticate with 08:02:11:00:00:00 [ 371.682492][ T9597] wlan1: No legacy rates in association response [ 372.328535][ T9625] tipc: Started in network mode [ 372.339558][ T9625] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 372.361989][ T9625] tipc: Enabled bearer , priority 0 [ 372.522139][ T9629] tipc: Started in network mode [ 372.534120][ T9629] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 372.541490][ T9629] tipc: Enabled bearer , priority 0 [ 373.005872][ T9] wlan1: authenticate with 08:02:11:00:00:00 [ 373.039729][ T9] wlan1: No legacy rates in association response [ 373.774475][ T9] tipc: Node number set to 43690 [ 373.919013][ T5844] tipc: Node number set to 43690 [ 374.362855][ T9669] wlan1: authenticate with 08:02:11:00:00:00 [ 374.372170][ T9669] wlan1: No legacy rates in association response [ 374.383903][ T9669] wlan1: authenticate with 08:02:11:00:00:00 [ 374.390482][ T9669] wlan1: No legacy rates in association response [ 374.858276][ T9683] overlayfs: missing 'lowerdir' [ 378.860219][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.867239][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.839634][ T9849] wlan1: authenticate with 08:02:11:00:00:00 [ 381.865118][ T9849] wlan1: No legacy rates in association response [ 382.072339][ T9851] wlan1: authenticate with 08:02:11:00:00:00 [ 382.091155][ T9851] wlan1: No legacy rates in association response [ 391.265273][ T9965] overlayfs: failed to resolve './file0': -2 [ 392.574880][T10043] fuse: Bad value for 'fd' [ 392.772830][T10053] ip_tables: iptables: counters copy to user failed while replacing table [ 392.877851][T10056] jffs2: notice: (10056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 406.253548][T10447] (null): rxe_set_mtu: Set mtu to 1024 [ 407.234187][T10447] infiniband syz1: set active [ 407.300942][T10447] infiniband syz1: added syz_tun [ 407.468938][T10447] RDS/IB: syz1: added [ 407.475033][T10447] smc: adding ib device syz1 with port count 1 [ 407.481698][T10447] smc: ib device syz1 port 1 has pnetid [ 408.156977][T10449] tipc: Resetting bearer [ 408.163732][T10449] syz1: rxe_set_mtu: Set mtu to 4096 [ 408.200666][T10449] infiniband syz1: set active [ 412.565033][ T5085] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 428.174490][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 428.239504][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.292116][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.273169][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 433.299527][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 435.064856][T11428] fuse: Bad value for 'fd' [ 436.661385][T11475] overlayfs: failed to resolve './file0': -2 [ 439.618164][T11523] syz.2.1819 (11523) used greatest stack depth: 20600 bytes left [ 440.302832][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.309439][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.868457][T11718] (null): rxe_set_mtu: Set mtu to 4096 [ 446.890522][T11718] lo speed is unknown, defaulting to 1000 [ 446.912745][T11718] lo speed is unknown, defaulting to 1000 [ 446.998600][T11718] lo speed is unknown, defaulting to 1000 [ 447.137509][T11726] raw_sendmsg: syz.3.1872 forgot to set AF_INET. Fix it! [ 448.249736][T11718] infiniband sz1: set active [ 448.264606][T11718] infiniband sz1: added lo [ 448.290333][ T5837] lo speed is unknown, defaulting to 1000 [ 448.550906][T11718] RDS/IB: sz1: added [ 448.574267][T11718] smc: adding ib device sz1 with port count 1 [ 448.591753][T11718] smc: ib device sz1 port 1 has pnetid [ 448.611390][T10326] lo speed is unknown, defaulting to 1000 [ 448.629090][T11718] lo speed is unknown, defaulting to 1000 [ 449.406647][T11718] lo speed is unknown, defaulting to 1000 [ 449.813841][T11747] lo speed is unknown, defaulting to 1000 [ 450.119047][T11718] lo speed is unknown, defaulting to 1000 [ 450.545325][T11718] lo speed is unknown, defaulting to 1000 [ 450.831430][T11718] lo speed is unknown, defaulting to 1000 [ 451.099895][T11721] smc: removing ib device syz1 [ 452.534616][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 454.199116][ T28] audit: type=1326 audit(1786253207.678:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11897 comm="syz.0.1909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc1659e0d9 code=0x0 [ 454.286785][T11903] jffs2: notice: (11903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 455.949130][T11929] lo speed is unknown, defaulting to 1000 [ 456.012890][T11934] fuse: Bad value for 'fd' [ 456.204539][ T5085] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 456.491076][T11943] fuse: Bad value for 'fd' [ 456.623864][T11935] lo speed is unknown, defaulting to 1000 [ 457.490379][T11950] overlayfs: missing 'lowerdir' [ 457.917866][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1933'. [ 458.155609][T11962] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 458.160989][T11964] bridge0: port 3(syz_tun) entered blocking state [ 458.187975][T11964] bridge0: port 3(syz_tun) entered disabled state [ 458.198581][T11964] syz_tun: entered allmulticast mode [ 458.209824][T11964] syz_tun: entered promiscuous mode [ 458.225174][T11964] bridge0: port 3(syz_tun) entered blocking state [ 458.232198][T11964] bridge0: port 3(syz_tun) entered forwarding state [ 459.006823][T11987] syz_tun: left allmulticast mode [ 459.029570][T11987] syz_tun: left promiscuous mode [ 459.046546][T11987] bridge0: port 3(syz_tun) entered disabled state [ 459.122282][T11987] bridge_slave_0: left allmulticast mode [ 459.154580][T11987] bridge_slave_0: left promiscuous mode [ 459.170669][T11987] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.207874][T11987] bridge_slave_1: left allmulticast mode [ 459.213714][T11987] bridge_slave_1: left promiscuous mode [ 459.230311][T11987] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.258230][T11987] bond0: (slave bond_slave_0): Releasing backup interface [ 459.293767][T11987] bond0: (slave bond_slave_1): Releasing backup interface [ 459.385487][T11987] team0: Port device team_slave_0 removed [ 459.415482][T11987] team0: Port device team_slave_1 removed [ 459.435180][T11987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.446862][T11987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.456459][T11987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.463926][T11987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.522679][T11998] tipc: Enabling of bearer rejected, already enabled [ 459.549266][T11993] lo speed is unknown, defaulting to 1000 [ 459.963532][T11989] lo speed is unknown, defaulting to 1000 [ 461.280852][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 461.290119][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 461.299260][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 461.308391][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 461.317494][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 461.326607][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 461.335718][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 461.344810][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 461.353891][T12019] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 463.080710][T12051] lo speed is unknown, defaulting to 1000 [ 463.613699][T12058] lo speed is unknown, defaulting to 1000 [ 465.817673][T12104] net_ratelimit: 55 callbacks suppressed [ 465.817692][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.832645][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.841764][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.850931][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.860051][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.869190][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.878332][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.887469][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.896591][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 465.906161][T12104] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 467.572427][T12120] lo speed is unknown, defaulting to 1000 [ 468.084852][T12121] lo speed is unknown, defaulting to 1000 [ 470.969404][T12162] lo speed is unknown, defaulting to 1000 [ 471.360010][T12163] lo speed is unknown, defaulting to 1000 [ 473.177725][ T5085] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 474.008833][T12203] lo speed is unknown, defaulting to 1000 [ 474.521522][T12204] lo speed is unknown, defaulting to 1000 [ 475.999169][ T5085] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 477.798715][T12259] lo speed is unknown, defaulting to 1000 [ 478.250473][T12261] lo speed is unknown, defaulting to 1000 [ 480.715378][T12290] tipc: Enabling of bearer rejected, already enabled [ 481.293681][T12306] bond0: entered promiscuous mode [ 481.300200][T12306] bond_slave_0: entered promiscuous mode [ 481.317683][T12306] bond_slave_1: entered promiscuous mode [ 481.331037][T12306] batadv0: entered promiscuous mode [ 481.344268][T12304] lo speed is unknown, defaulting to 1000 [ 481.361142][T12306] netlink: 'syz.0.2081': attribute type 10 has an invalid length. [ 481.385199][T12306] tipc: Resetting bearer [ 481.395253][T12306] syz_tun: entered promiscuous mode [ 481.448531][T12306] tipc: Resetting bearer [ 481.479097][T12306] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 481.543355][T12306] syz.0.2081 (12306) used greatest stack depth: 20104 bytes left [ 481.657770][T12307] lo speed is unknown, defaulting to 1000 [ 486.311016][T12372] lo speed is unknown, defaulting to 1000 [ 486.958897][T12374] lo speed is unknown, defaulting to 1000 [ 488.928520][T12406] tmpfs: Unknown parameter 'grpquota_block_hardli' [ 489.580243][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2118'. [ 489.839333][T12430] lo speed is unknown, defaulting to 1000 [ 490.093611][T12431] lo speed is unknown, defaulting to 1000 [ 492.533351][T12462] lo speed is unknown, defaulting to 1000 [ 492.840350][T12466] lo speed is unknown, defaulting to 1000 [ 492.851009][T12473] net_ratelimit: 54 callbacks suppressed [ 492.851026][T12473] ip_tables: iptables: counters copy to user failed while replacing table [ 492.995366][T12476] dvmrp0: entered allmulticast mode [ 493.867125][T12494] netlink: 'syz.3.2145': attribute type 1 has an invalid length. [ 494.328005][T12494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.424600][T12496] veth3: entered allmulticast mode [ 494.455270][T12496] bond1: (slave veth3): Enslaving as an active interface with a down link [ 494.670864][T12498] bond1: entered promiscuous mode [ 494.764054][T12498] bond1: entered allmulticast mode [ 495.981673][T12494] macvlan2: entered promiscuous mode [ 496.001821][T12494] macvlan2: entered allmulticast mode [ 496.009070][T12494] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 496.327168][T12520] netlink: 'syz.3.2151': attribute type 4 has an invalid length. [ 496.405264][T12523] netlink: 'syz.3.2151': attribute type 4 has an invalid length. [ 497.981021][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2168'. [ 499.114820][T12565] lo speed is unknown, defaulting to 1000 [ 499.643669][T12566] lo speed is unknown, defaulting to 1000 [ 499.802514][T12570] vlan0: entered promiscuous mode [ 499.972142][T12572] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2171'. [ 499.993143][T12572] unsupported nlmsg_type 40 [ 500.369477][T12586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2177'. [ 500.443025][T12588] netlink: 'syz.2.2178': attribute type 1 has an invalid length. [ 501.747107][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.753630][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.075629][T12610] lo speed is unknown, defaulting to 1000 [ 502.141834][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 503.622929][T12613] lo speed is unknown, defaulting to 1000 [ 503.748885][ T5085] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 504.690191][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 505.147263][T12661] netlink: 'syz.0.2205': attribute type 4 has an invalid length. [ 505.302937][T12663] netlink: 'syz.0.2205': attribute type 4 has an invalid length. [ 506.056299][T12685] bond0: Error: CAN devices cannot be enslaved [ 506.244722][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2217'. [ 507.611435][T12713] lo speed is unknown, defaulting to 1000 [ 507.865720][ T5085] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 507.875118][ T5085] Bluetooth: hci1: Injecting HCI hardware error event [ 507.885281][ T5776] Bluetooth: hci1: hardware error 0x00 [ 508.828706][T12718] lo speed is unknown, defaulting to 1000 [ 510.236035][T12745] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 510.536290][ T5776] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 512.479736][T12758] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2239'. [ 512.494937][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2239'. [ 514.361240][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2251'. [ 514.739122][T12790] lo speed is unknown, defaulting to 1000 [ 515.327768][T12792] lo speed is unknown, defaulting to 1000 [ 517.769475][ T5776] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 517.776653][ T5776] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 518.263638][T12848] fuse: Bad value for 'fd' [ 518.822644][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 520.491003][T12890] Illegal XDP return value 4294967274 on prog (id 12) dev syz_tun, expect packet loss! [ 520.623552][ T5779] tipc: Resetting bearer [ 520.722017][T12894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 520.732592][T12894] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.750560][T12894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 520.760071][T12894] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 520.772321][T12894] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 520.780780][T12894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.823512][ T5779] tipc: Disabling bearer [ 520.853799][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2293'. [ 520.932870][T12893] lo speed is unknown, defaulting to 1000 [ 520.987552][ T3432] tipc: Left network mode [ 521.746425][T12916] lo speed is unknown, defaulting to 1000 [ 522.322495][T12915] lo speed is unknown, defaulting to 1000 [ 522.459029][T12893] chnl_net:caif_netlink_parms(): no params data found [ 522.828435][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.854365][ T5776] Bluetooth: hci0: command tx timeout [ 522.944382][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.952053][T12893] bridge_slave_0: entered allmulticast mode [ 523.015874][T12893] bridge_slave_0: entered promiscuous mode [ 523.143032][T12893] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.173292][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.224245][T12893] bridge_slave_1: entered allmulticast mode [ 523.259521][T12893] bridge_slave_1: entered promiscuous mode [ 523.478343][ T3432] hsr_slave_0: left promiscuous mode [ 523.485696][ T3432] hsr_slave_1: left promiscuous mode [ 523.492068][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.502319][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.510676][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.559351][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.583555][ T3432] bridge_slave_1: left allmulticast mode [ 523.589961][ T3432] bridge_slave_1: left promiscuous mode [ 523.597142][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.617657][ T3432] bridge_slave_0: left allmulticast mode [ 523.623384][ T3432] bridge_slave_0: left promiscuous mode [ 523.629908][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.668005][ T3432] veth1_macvtap: left promiscuous mode [ 523.673873][ T3432] veth0_macvtap: left promiscuous mode [ 523.680346][ T3432] veth1_vlan: left promiscuous mode [ 523.698441][ T3432] veth0_vlan: left promiscuous mode [ 523.910916][ T3432] infiniband sz1: set down [ 524.520420][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 524.604675][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 524.692105][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.778476][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.934477][ T5776] Bluetooth: hci0: command tx timeout [ 525.328350][ T3432] bond0 (unregistering): Released all slaves [ 525.456181][ T12] smc: removing ib device sz1 [ 525.465892][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.497105][ T9] lo speed is unknown, defaulting to 1000 [ 525.566528][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.744574][T12954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2312'. [ 526.141952][T12893] team0: Port device team_slave_0 added [ 526.201991][T12893] team0: Port device team_slave_1 added [ 526.568049][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.592012][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.685355][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.697489][T12964] process 'syz.3.2316' launched './file0' with NULL argv: empty string added [ 526.793131][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.806060][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.905907][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.014641][ T5776] Bluetooth: hci0: command tx timeout [ 527.361945][T12893] hsr_slave_0: entered promiscuous mode [ 527.371402][T12893] hsr_slave_1: entered promiscuous mode [ 528.386073][ T3432] IPVS: stop unused estimator thread 0... [ 528.956173][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2318'. [ 529.094144][ T5776] Bluetooth: hci0: command tx timeout [ 529.146274][T12893] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 529.179513][T12893] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 529.228137][T12893] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 529.271158][T12893] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 529.575505][T12893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.801578][T12893] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.891791][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.899058][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.936201][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.943450][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.696246][T12893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.961822][T12893] veth0_vlan: entered promiscuous mode [ 532.011180][T12893] veth1_vlan: entered promiscuous mode [ 532.067482][T12893] veth0_macvtap: entered promiscuous mode [ 532.079794][T12893] veth1_macvtap: entered promiscuous mode [ 532.101251][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.111970][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.123102][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.133923][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.148821][T12893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.202309][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.244125][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.259572][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.270515][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.281944][T12893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.321453][T13021] ceph: No mds server is up or the cluster is laggy [ 532.355089][T12893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.373670][T12893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.387517][T12893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.396609][T12893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.011500][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.076601][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.409083][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.442370][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.977722][T13068] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 534.174770][T13065] syz.2.2287 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 534.191511][T13065] CPU: 0 PID: 13065 Comm: syz.2.2287 Not tainted syzkaller #0 [ 534.199053][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.209169][T13065] Call Trace: [ 534.212498][T13065] [ 534.215468][T13065] dump_stack_lvl+0x18c/0x250 [ 534.220420][T13065] ? show_regs_print_info+0x20/0x20 [ 534.225749][T13065] ? load_image+0x420/0x420 [ 534.230330][T13065] ? ___ratelimit+0x478/0x610 [ 534.235085][T13065] ? radix_tree_cpu_dead+0x160/0x160 [ 534.240435][T13065] dump_header+0xd8/0x820 [ 534.244830][T13065] oom_kill_process+0x390/0x580 [ 534.249803][T13065] out_of_memory+0xe0e/0x1200 [ 534.254548][T13065] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 534.260279][T13065] ? print_unlock_imbalance_bug+0x160/0x160 [ 534.266237][T13065] ? mutex_lock_nested+0x20/0x20 [ 534.271290][T13065] ? unregister_oom_notifier+0x20/0x20 [ 534.276787][T13065] mem_cgroup_out_of_memory+0x2c2/0x390 [ 534.282396][T13065] ? try_charge_memcg+0xc91/0x17c0 [ 534.287537][T13065] ? drain_local_stock+0x630/0x630 [ 534.292688][T13065] ? do_raw_spin_unlock+0x121/0x230 [ 534.297928][T13065] try_charge_memcg+0xca1/0x17c0 [ 534.302896][T13065] ? __lock_acquire+0x7d80/0x7d80 [ 534.307967][T13065] ? folio_flags+0x120/0x120 [ 534.312584][T13065] ? percpu_ref_tryget+0x15/0x180 [ 534.317652][T13065] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 534.323405][T13065] ? __memcg_kmem_charge_page+0xeb/0x380 [ 534.329067][T13065] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 534.334810][T13065] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 534.340558][T13065] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 534.346392][T13065] __memcg_kmem_charge_page+0x224/0x380 [ 534.351972][T13065] __alloc_pages+0x222/0x460 [ 534.356588][T13065] ? lock_vma_under_rcu+0x249/0x660 [ 534.361820][T13065] ? zone_statistics+0x170/0x170 [ 534.366801][T13065] pte_alloc_one+0x84/0x540 [ 534.371395][T13065] ? pfn_modify_allowed+0x560/0x560 [ 534.376622][T13065] ? hugepage_vma_check+0x471/0x560 [ 534.381861][T13065] handle_mm_fault+0x2f72/0x4a50 [ 534.386831][T13065] ? handle_mm_fault+0xe6/0x4a50 [ 534.391803][T13065] ? lock_vma_under_rcu+0x52c/0x660 [ 534.397027][T13065] ? numa_migrate_prep+0x350/0x350 [ 534.402165][T13065] ? lock_vma_under_rcu+0xe5/0x660 [ 534.407310][T13065] ? do_user_addr_fault+0x1cb/0x12d0 [ 534.412660][T13065] do_user_addr_fault+0xad2/0x12d0 [ 534.417836][T13065] ? rcu_is_watching+0x15/0xb0 [ 534.422652][T13065] exc_page_fault+0x64/0x100 [ 534.427285][T13065] asm_exc_page_fault+0x26/0x30 [ 534.432281][T13065] RIP: 0033:0x7fb796c72900 [ 534.436723][T13065] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 534.456357][T13065] RSP: 002b:00007ffcd2ac7c60 EFLAGS: 00010202 [ 534.462516][T13065] RAX: 000000110c42c000 RBX: ffffffff8a9671aa RCX: 0000000000000005 [ 534.470515][T13065] RDX: 00000000000011aa RSI: 00000000000019c6 RDI: 0000000000000020 [ 534.478510][T13065] RBP: 0000000000000000 R08: 00007fb797010000 R09: 00007fb797012000 [ 534.486508][T13065] R10: 000000008a9671ae R11: 0000000000000001 R12: 00007fb797026038 [ 534.494507][T13065] R13: 000000000002b942 R14: ffffffff8a967f00 R15: 00007fb797b55720 [ 534.502689][T13065] ? schedule_timeout+0x90/0x2d0 [ 534.507667][T13065] ? rt_mutex_adjust_prio_chain+0x1c7a/0x2260 [ 534.513775][T13065] [ 534.537418][T13065] memory: usage 0kB, limit 0kB, failcnt 199 [ 534.547553][T13065] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 534.594383][T13065] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 534.734118][T13065] Memory cgroup stats for /syz2/test: [ 534.734283][T13065] cache 0 [ 534.742697][T13065] rss 0 [ 534.774458][T13065] rss_huge 0 [ 534.777739][T13065] shmem 0 [ 534.780759][T13065] mapped_file 0 [ 534.800013][T13065] dirty 0 [ 534.803043][T13065] writeback 0 [ 534.822787][T13065] workingset_refault_anon 0 [ 534.850186][T13086] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2339'. [ 534.862020][T13065] workingset_refault_file 0 [ 534.885633][T13065] swap 0 [ 534.890875][T13065] pgpgin 0 [ 534.901377][T13065] pgpgout 0 [ 534.913068][T13065] pgfault 12 [ 534.925874][T13065] pgmajfault 0 [ 534.944128][T13065] inactive_anon 0 [ 534.947841][T13065] active_anon 0 [ 534.951340][T13065] inactive_file 0 [ 534.980394][T13065] active_file 0 [ 534.990522][T13065] unevictable 0 [ 535.005054][T13065] hierarchical_memory_limit 0 [ 535.025702][T13065] hierarchical_memsw_limit 9223372036854771712 [ 535.031938][T13065] total_cache 0 [ 535.058451][T13065] total_rss 0 [ 535.061820][T13065] total_rss_huge 0 [ 535.084060][T13065] total_shmem 0 [ 535.094855][T13065] total_mapped_file 0 [ 535.098923][T13065] total_dirty 0 [ 535.102416][T13065] total_writeback 0 [ 535.159168][T13065] total_workingset_refault_anon 0 [ 535.169976][T13065] total_workingset_refault_file 0 [ 535.197344][T13065] total_swap 0 [ 535.221150][T13065] total_pgpgin 0 [ 535.240391][T13065] total_pgpgout 0 [ 535.261794][T13065] total_pgfault 12 [ 535.274745][T13065] total_pgmajfault 0 [ 535.278720][T13065] total_inactive_anon 0 [ 535.302465][T13065] total_active_anon 0 [ 535.325585][T13065] total_inactive_file 0 [ 535.335014][T13065] total_active_file 0 [ 535.339061][T13065] total_unevictable 0 [ 535.369014][T13065] anon_cost 0 [ 535.372377][T13065] file_cost 0 [ 535.389251][T13065] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.2287,pid=13065,uid=0 [ 535.450282][T13065] Memory cgroup out of memory: Killed process 13065 (syz.2.2287) total-vm:102304kB, anon-rss:1216kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 535.715438][ T5786] tipc: Resetting bearer [ 535.742194][T12894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.761672][T12894] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.771347][T12894] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.810506][T12894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.820618][T12894] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 535.828979][T12894] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.911156][ T5786] tipc: Disabling bearer [ 536.592758][T13099] chnl_net:caif_netlink_parms(): no params data found [ 536.864058][T13099] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.871448][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.878877][T13099] bridge_slave_0: entered allmulticast mode [ 536.886823][T13099] bridge_slave_0: entered promiscuous mode [ 536.906438][T13099] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.924143][T13099] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.951436][T13099] bridge_slave_1: entered allmulticast mode [ 536.962730][T13099] bridge_slave_1: entered promiscuous mode [ 537.065414][T13099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.098657][T13099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.202147][T13099] team0: Port device team_slave_0 added [ 537.218723][T13099] team0: Port device team_slave_1 added [ 537.298924][T13099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.334566][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.414090][T13099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.456794][T13099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.463824][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.554955][T13099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.592755][T13151] warning: `syz.0.2353' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 537.726616][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 537.744631][T13154] bridge_slave_1: left allmulticast mode [ 537.750440][T13154] bridge_slave_1: left promiscuous mode [ 537.763078][T13154] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.786572][T13154] bridge_slave_0: left allmulticast mode [ 537.798160][T13154] bridge_slave_0: left promiscuous mode [ 537.814587][T13154] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.907251][ T5776] Bluetooth: hci2: command tx timeout [ 538.040596][T13099] hsr_slave_0: entered promiscuous mode [ 538.070144][T13099] hsr_slave_1: entered promiscuous mode [ 538.095816][T13099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.113474][T13099] Cannot create hsr debugfs directory [ 539.717206][T13194] xt_bpf: check failed: parse error [ 539.984358][ T5776] Bluetooth: hci2: command tx timeout [ 541.486437][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 541.977218][T13099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 542.021687][T13099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 542.054246][ T5776] Bluetooth: hci2: command tx timeout [ 542.079643][T13242] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 542.197143][T13099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 542.266670][T13099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 542.664951][T13258] netlink: 'syz.2.2377': attribute type 11 has an invalid length. [ 542.695508][T13258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2377'. [ 542.869757][T13099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.988231][T13099] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.063887][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.071186][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.106301][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.113632][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.055485][T13292] CIFS: Attempting to mount //127.0.0.1/share [ 544.145033][ T5776] Bluetooth: hci2: command tx timeout [ 544.364924][T13099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.540899][T13099] veth0_vlan: entered promiscuous mode [ 544.587249][T13099] veth1_vlan: entered promiscuous mode [ 544.680870][T13099] veth0_macvtap: entered promiscuous mode [ 544.695288][T13099] veth1_macvtap: entered promiscuous mode [ 544.717193][T13099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.751754][T13099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.779585][T13099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.807968][T13292] CIFS: VFS: Error connecting to socket. Aborting operation. [ 544.815719][T13292] CIFS: VFS: cifs_mount failed w/return code = -4 [ 544.848175][T13099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.883024][T13099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.902912][T13099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.921010][T13099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.933825][T13310] netlink: 'syz.0.2387': attribute type 11 has an invalid length. [ 544.943877][T13310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2387'. [ 544.999686][T13099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.031319][T13099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.057008][T13099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.109812][T13099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.133496][T13099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.156643][T13099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.177236][T13099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.231167][T13099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.243577][T13099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.261380][T13099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.270469][T13099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.714561][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.722474][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.736570][T13342] netlink: 564 bytes leftover after parsing attributes in process `syz.4.2397'. [ 546.821295][T13345] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 546.847531][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.884078][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.160001][T13358] netlink: 'syz.4.2399': attribute type 11 has an invalid length. [ 547.169736][T13358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2399'. [ 547.191655][T13359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2338'. [ 547.931483][T13373] device-mapper: ioctl: populate_table: no targets specified [ 549.567230][T13408] netlink: 'syz.3.2413': attribute type 11 has an invalid length. [ 549.594048][T13408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2413'. [ 551.221412][T13448] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2423'. [ 553.885807][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 554.135237][ T5837] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 554.166579][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.229157][ T5837] usb 3-1: config 0 descriptor?? [ 554.282517][ T5837] cp210x 3-1:0.0: cp210x converter detected [ 554.783716][ T5837] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 554.817512][T12506] tipc: Resetting bearer [ 554.837592][ T5837] usb 3-1: cp210x converter now attached to ttyUSB0 [ 554.970743][T12506] bond0: (slave syz_tun): Releasing backup interface [ 554.987683][T12506] tipc: Resetting bearer [ 555.052084][ T23] usb 3-1: USB disconnect, device number 2 [ 555.104377][T12506] tipc: Disabling bearer [ 555.119488][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 555.236124][ T23] cp210x 3-1:0.0: device disconnected [ 555.537227][T12894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 555.548415][T12894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 555.559256][T12894] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 555.577997][T12894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 555.594346][T12894] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 555.603546][T12894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 556.264080][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 556.461929][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 556.480456][T13540] chnl_net:caif_netlink_parms(): no params data found [ 556.544215][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.558885][T13052] tipc: Left network mode [ 556.565795][ T9] usb 3-1: Product: syz [ 556.583068][ T9] usb 3-1: Manufacturer: syz [ 556.623465][ T9] usb 3-1: SerialNumber: syz [ 556.870939][ T5837] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 557.185740][T13540] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.201987][T13540] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.211932][T13540] bridge_slave_0: entered allmulticast mode [ 557.221151][T13540] bridge_slave_0: entered promiscuous mode [ 557.323190][ T178] usb 3-1: USB disconnect, device number 3 [ 557.368149][T13540] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.382419][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.399384][T13540] bridge_slave_1: entered allmulticast mode [ 557.428557][T13540] bridge_slave_1: entered promiscuous mode [ 557.593307][T13540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.654131][ T5776] Bluetooth: hci1: command tx timeout [ 557.758856][T13540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.982799][ T5837] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 558.004618][ T5837] ath9k_htc: Failed to initialize the device [ 558.057005][ T178] usb 3-1: ath9k_htc: USB layer deinitialized [ 558.283395][T13540] team0: Port device team_slave_0 added [ 558.317387][T13540] team0: Port device team_slave_1 added [ 558.594349][T13540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.609484][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.705861][T13540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.783111][T13540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.800699][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.826639][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.850908][T13540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.044273][ T5844] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 559.185950][T13540] hsr_slave_0: entered promiscuous mode [ 559.209752][T13540] hsr_slave_1: entered promiscuous mode [ 559.243433][T13540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.281112][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 559.336499][T13540] Cannot create hsr debugfs directory [ 559.447358][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.641371][ T5844] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 559.684126][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.716280][T13052] bond0: left promiscuous mode [ 559.726286][T13052] bond_slave_0: left promiscuous mode [ 559.731845][T13052] bond_slave_1: left promiscuous mode [ 559.744358][ T5776] Bluetooth: hci1: command tx timeout [ 559.794771][T13052] batadv0: left promiscuous mode [ 559.809591][ T5844] usb 4-1: config 0 descriptor?? [ 559.888880][T13052] hsr_slave_0: left promiscuous mode [ 559.901357][T13052] hsr_slave_1: left promiscuous mode [ 559.934434][T13052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.958773][T13052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.972267][T13052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.998539][T13052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.010866][T13052] bridge_slave_1: left allmulticast mode [ 560.021305][T13052] bridge_slave_1: left promiscuous mode [ 560.031300][T13052] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.048151][T13052] bridge_slave_0: left allmulticast mode [ 560.059761][T13052] bridge_slave_0: left promiscuous mode [ 560.071307][T13052] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.219279][T13625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.274718][T13625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.304372][T13052] veth1_macvtap: left promiscuous mode [ 560.309996][T13052] veth0_macvtap: left promiscuous mode [ 560.348551][T13052] veth1_vlan: left promiscuous mode [ 560.368120][T13052] veth0_vlan: left promiscuous mode [ 561.820122][ T5776] Bluetooth: hci1: command tx timeout [ 563.964052][ T5776] Bluetooth: hci1: command tx timeout [ 564.624704][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.634391][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.945762][ T5844] usbhid 4-1:0.0: can't add hid device: -71 [ 564.953452][ T5844] usbhid: probe of 4-1:0.0 failed with error -71 [ 564.981714][ T5844] usb 4-1: USB disconnect, device number 2 [ 565.637657][T13052] team0 (unregistering): Port device team_slave_1 removed [ 565.924120][T13052] team0 (unregistering): Port device team_slave_0 removed [ 566.006506][T13052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.094514][T13052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.691214][T13052] bond0 (unregistering): Released all slaves [ 569.395337][T13687] vlan0: entered promiscuous mode [ 569.849826][T13706] tipc: Started in network mode [ 569.873059][T13706] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 569.983364][T13706] tipc: Enabled bearer , priority 0 [ 570.793477][T13540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 570.817206][T13540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 570.871825][T13540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 570.950691][T13540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 571.010482][T13728] tipc: Enabling of bearer rejected, already enabled [ 571.120552][ T5844] tipc: Node number set to 43690 [ 571.288872][T13540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.311895][T13540] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.341382][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.348673][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.514806][T13052] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.522012][T13052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.582115][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 571.680577][T13737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.792913][T13747] socket: no more sockets [ 571.807239][T13737] wlan1: authenticate with 08:02:11:00:00:00 [ 571.845950][T13743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.881530][T13737] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 572.026541][ T1320] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 572.176656][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 572.306485][ T60] wlan1: authentication with 08:02:11:00:00:00 timed out [ 572.423544][T13540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.524856][T13540] veth0_vlan: entered promiscuous mode [ 572.564977][T13540] veth1_vlan: entered promiscuous mode [ 572.632054][T13540] veth0_macvtap: entered promiscuous mode [ 572.647597][T13540] veth1_macvtap: entered promiscuous mode [ 572.691619][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.704266][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.715755][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.726402][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.736339][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.749294][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.762193][T13540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.797942][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.808690][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.819260][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.830512][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.840483][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.851234][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.877326][T13540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.899573][T13540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.916049][T13540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.931376][T13540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.940662][T13540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.077620][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.099647][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.151417][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.168717][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.478566][ T3432] tipc: Left network mode [ 573.513269][T13762] loop3: detected capacity change from 0 to 32768 [ 573.592412][T13762] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 573.602429][T13762] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 573.682510][T13762] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 573.722295][ T5844] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 573.736128][ T5844] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 573.780693][ T5844] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 573.800225][ T5844] gfs2: fsid=syz:syz.0: jid=0: Done [ 573.806755][T13762] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 573.971244][T13762] gfs2: fsid=syz:syz.0: found 1 quota changes [ 574.433322][ T3432] dvmrp0 (unregistering): left allmulticast mode [ 575.704401][ T3432] hsr_slave_0: left promiscuous mode [ 575.742309][ T3432] hsr_slave_1: left promiscuous mode [ 575.937119][ T3432] veth1_macvtap: left promiscuous mode [ 575.942787][ T3432] veth0_macvtap: left promiscuous mode [ 575.977820][ T3432] veth1_vlan: left promiscuous mode [ 576.606606][T13099] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 576.606606][T13099] inode = 11 2339 [ 576.606606][T13099] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 576.625819][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.730121][T13099] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 576.746742][T13099] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:13099 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 576.764893][T13099] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 576.773292][T13099] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 576.811163][T13099] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 576.852267][T13099] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 576.872860][T13099] gfs2: fsid=syz:syz.0: File system withdrawn [ 576.894619][T13099] CPU: 0 PID: 13099 Comm: syz-executor Not tainted syzkaller #0 [ 576.900478][ T3432] bond1 (unregistering): (slave veth3): Releasing active interface [ 576.902325][T13099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.920343][T13099] Call Trace: [ 576.923671][T13099] [ 576.926652][T13099] dump_stack_lvl+0x18c/0x250 [ 576.931386][T13099] ? show_regs_print_info+0x20/0x20 [ 576.936662][T13099] ? load_image+0x420/0x420 [ 576.941236][T13099] ? kobject_uevent_env+0x368/0x890 [ 576.946583][T13099] gfs2_withdraw+0xe16/0x1400 [ 576.951342][T13099] ? gfs2_lm+0x240/0x240 [ 576.955657][T13099] ? preempt_schedule+0xc0/0xd0 [ 576.960566][T13099] ? gfs2_consist_inode_i+0xf5/0x110 [ 576.965906][T13099] gfs2_inode_refresh+0xb3c/0x11a0 [ 576.971071][T13099] ? gfs2_inode_metasync+0xf0/0xf0 [ 576.976216][T13099] ? gfs2_glock_nq+0xe2e/0x1440 [ 576.981102][T13099] gfs2_instantiate+0x162/0x220 [ 576.985985][T13099] gfs2_glock_wait+0x1d4/0x2a0 [ 576.990776][T13099] do_sync+0x4b8/0xd90 [ 576.994876][T13099] ? gfs2_quota_sync+0x411/0x5a0 [ 576.999846][T13099] ? bh_get+0x760/0x760 [ 577.004033][T13099] ? gfs2_quota_sync+0x318/0x5a0 [ 577.009004][T13099] ? gfs2_quota_sync+0x411/0x5a0 [ 577.013971][T13099] ? do_raw_spin_unlock+0x121/0x230 [ 577.019208][T13099] ? do_raw_spin_unlock+0x121/0x230 [ 577.024450][T13099] gfs2_quota_sync+0x411/0x5a0 [ 577.029260][T13099] gfs2_sync_fs+0x4c/0xb0 [ 577.033617][T13099] sync_filesystem+0xea/0x220 [ 577.038352][T13099] generic_shutdown_super+0x6f/0x2b0 [ 577.043662][T13099] kill_block_super+0x44/0x90 [ 577.048371][T13099] deactivate_locked_super+0x97/0x100 [ 577.053778][T13099] cleanup_mnt+0x3d7/0x460 [ 577.058228][T13099] task_work_run+0x1d4/0x260 [ 577.062876][T13099] ? task_work_cancel+0x220/0x220 [ 577.067936][T13099] ? exit_to_user_mode_loop+0x3b/0x110 [ 577.073433][T13099] exit_to_user_mode_loop+0xe6/0x110 [ 577.078750][T13099] exit_to_user_mode_prepare+0xee/0x180 [ 577.084328][T13099] syscall_exit_to_user_mode+0x1a/0x50 [ 577.089821][T13099] do_syscall_64+0x61/0xb0 [ 577.094268][T13099] ? clear_bhb_loop+0x40/0x90 [ 577.098984][T13099] ? clear_bhb_loop+0x40/0x90 [ 577.103691][T13099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.109623][T13099] RIP: 0033:0x7f35d6d9f317 [ 577.114065][T13099] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 577.133698][T13099] RSP: 002b:00007ffedd8c72b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 577.142141][T13099] RAX: 0000000000000000 RBX: 00007f35d6e34474 RCX: 00007f35d6d9f317 [ 577.150141][T13099] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedd8c7370 [ 577.158140][T13099] RBP: 00007ffedd8c7370 R08: 00007ffedd8c8370 R09: 00000000ffffffff [ 577.166157][T13099] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedd8c8400 [ 577.174173][T13099] R13: 00007f35d6e34474 R14: 000000000008c263 R15: 00007ffedd8c8440 [ 577.182189][T13099] [ 577.667820][ T3432] bond1 (unregistering): Released all slaves [ 578.091795][ T5788] IPVS: starting estimator thread 0... [ 578.218676][T13836] IPVS: using max 26 ests per chain, 62400 per kthread [ 581.532178][ T3432] bond0 (unregistering): Released all slaves [ 584.604521][T13890] loop2: detected capacity change from 0 to 32768 [ 584.638600][T13890] ======================================================= [ 584.638600][T13890] WARNING: The mand mount option has been deprecated and [ 584.638600][T13890] and is ignored by this kernel. Remove the mand [ 584.638600][T13890] option from the mount to silence this warning. [ 584.638600][T13890] ======================================================= [ 584.673505][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.805653][T13890] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 584.913224][T13890] JBD2: Ignoring recovery information on journal [ 585.117991][T13890] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 585.456071][T13890] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 585.569211][T13890] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 585.719743][T13890] OCFS2: File system is now read-only. [ 586.068058][T13890] (syz.2.2504,13890,0):ocfs2_search_one_group:1706 ERROR: status = -30 [ 586.118883][T13890] (syz.2.2504,13890,0):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30 [ 586.195309][T13890] (syz.2.2504,13890,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 586.244582][T13890] (syz.2.2504,13890,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 586.252841][T13890] (syz.2.2504,13890,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 586.324064][T13890] (syz.2.2504,13890,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 586.370662][T13890] (syz.2.2504,13890,1):ocfs2_mknod:385 ERROR: status = -30 [ 586.446431][T13890] (syz.2.2504,13890,0):ocfs2_mknod:502 ERROR: status = -30 [ 586.503447][T13890] (syz.2.2504,13890,0):ocfs2_mkdir:659 ERROR: status = -30 [ 587.043315][T12893] ocfs2: Unmounting device (7,2) on (node local) [ 587.384701][T13921] loop0: detected capacity change from 0 to 32768 [ 587.431684][T13921] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 587.477153][T13921] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 587.608549][T13921] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 587.651976][ T5788] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 587.673869][ T5788] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 587.830442][ T5788] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 156ms [ 587.877753][ T5788] gfs2: fsid=syz:syz.0: jid=0: Done [ 587.887830][T13921] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 588.429781][T13921] gfs2: fsid=syz:syz.0: found 1 quota changes [ 588.632537][T13540] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 588.632537][T13540] inode = 11 2339 [ 588.632537][T13540] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 588.704633][T13540] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 588.724003][T13540] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:13540 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 588.780024][T13540] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 588.812871][T13540] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 588.852260][T13540] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 588.874246][T13540] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 588.886792][T13540] gfs2: fsid=syz:syz.0: File system withdrawn [ 588.911644][T13540] CPU: 1 PID: 13540 Comm: syz-executor Not tainted syzkaller #0 [ 588.919366][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.929475][T13540] Call Trace: [ 588.932796][T13540] [ 588.935768][T13540] dump_stack_lvl+0x18c/0x250 [ 588.940502][T13540] ? show_regs_print_info+0x20/0x20 [ 588.945754][T13540] ? load_image+0x420/0x420 [ 588.950315][T13540] ? kobject_uevent_env+0x368/0x890 [ 588.955578][T13540] gfs2_withdraw+0xe16/0x1400 [ 588.960327][T13540] ? gfs2_lm+0x240/0x240 [ 588.964638][T13540] ? gfs2_consist_inode_i+0xf5/0x110 [ 588.969987][T13540] gfs2_inode_refresh+0xb3c/0x11a0 [ 588.975168][T13540] ? gfs2_inode_metasync+0xf0/0xf0 [ 588.980337][T13540] ? gfs2_glock_nq+0xe2e/0x1440 [ 588.985249][T13540] gfs2_instantiate+0x162/0x220 [ 588.990155][T13540] gfs2_glock_wait+0x1d4/0x2a0 [ 588.994984][T13540] do_sync+0x4b8/0xd90 [ 588.999112][T13540] ? gfs2_quota_sync+0x411/0x5a0 [ 589.004110][T13540] ? bh_get+0x760/0x760 [ 589.008332][T13540] ? gfs2_quota_sync+0x318/0x5a0 [ 589.013328][T13540] ? gfs2_quota_sync+0x411/0x5a0 [ 589.018320][T13540] ? do_raw_spin_unlock+0x121/0x230 [ 589.023581][T13540] ? do_raw_spin_unlock+0x121/0x230 [ 589.028839][T13540] gfs2_quota_sync+0x411/0x5a0 [ 589.033675][T13540] gfs2_sync_fs+0x4c/0xb0 [ 589.038069][T13540] sync_filesystem+0xea/0x220 [ 589.042881][T13540] generic_shutdown_super+0x6f/0x2b0 [ 589.048222][T13540] kill_block_super+0x44/0x90 [ 589.052953][T13540] deactivate_locked_super+0x97/0x100 [ 589.058385][T13540] cleanup_mnt+0x3d7/0x460 [ 589.062867][T13540] task_work_run+0x1d4/0x260 [ 589.067521][T13540] ? task_work_cancel+0x220/0x220 [ 589.072615][T13540] ? exit_to_user_mode_loop+0x3b/0x110 [ 589.078136][T13540] exit_to_user_mode_loop+0xe6/0x110 [ 589.083478][T13540] exit_to_user_mode_prepare+0xee/0x180 [ 589.089084][T13540] syscall_exit_to_user_mode+0x1a/0x50 [ 589.094598][T13540] do_syscall_64+0x61/0xb0 [ 589.099059][T13540] ? clear_bhb_loop+0x40/0x90 [ 589.103833][T13540] ? clear_bhb_loop+0x40/0x90 [ 589.108575][T13540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.114513][T13540] RIP: 0033:0x7fa8cd99f317 [ 589.118986][T13540] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 589.138634][T13540] RSP: 002b:00007ffcb4023648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 589.147075][T13540] RAX: 0000000000000000 RBX: 00007fa8cda34474 RCX: 00007fa8cd99f317 [ 589.155096][T13540] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb4023700 [ 589.163079][T13540] RBP: 00007ffcb4023700 R08: 00007ffcb4024700 R09: 00000000ffffffff [ 589.171069][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb4024790 [ 589.179078][T13540] R13: 00007fa8cda34474 R14: 000000000008eda7 R15: 00007ffcb40247d0 [ 589.187095][T13540] [ 593.806408][ T5844] IPVS: starting estimator thread 0... [ 593.914223][T14040] IPVS: using max 17 ests per chain, 40800 per kthread [ 598.054470][T13968] Set syz1 is full, maxelem 65536 reached [ 598.859650][T14121] tmpfs: Unknown parameter 'grpquota_block_hardli' [ 600.602149][T14139] CIFS: Attempting to mount //127.0.0.1/share [ 601.655141][T14139] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 601.737319][T14139] CIFS: VFS: cifs_mount failed w/return code = -112 [ 602.234153][T10217] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 602.385092][T14179] tmpfs: Unknown parameter 'grpquota_block_hardli' [ 602.484401][T10217] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 602.513167][T10217] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 602.559184][T10217] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 602.570017][T10217] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 602.747529][T10217] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 602.758116][T10217] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 602.791602][T10217] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 603.633521][T10217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 603.641692][T10217] usb 3-1: Product: syz [ 603.645972][T10217] usb 3-1: Manufacturer: syz [ 603.677675][T14166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 603.747158][T14166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 603.762112][T14166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 603.783842][T14166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 603.817751][T14166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 603.829739][T14166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 603.841792][T10217] usb 3-1: USB2VGA dongle found at address 4 [ 603.880086][T10217] usb 3-1: Allocated 8 output buffers [ 603.929813][T10217] usb 3-1: Failed to early initialize device [ 604.344280][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 604.524353][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 604.532490][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.561997][ T23] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 604.574002][ T23] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 604.594117][ T23] usb 1-1: Product: syz [ 604.598550][ T23] usb 1-1: Manufacturer: syz [ 604.617267][ T23] usb 1-1: config 0 descriptor?? [ 604.627316][T14218] CIFS: Attempting to mount //127.0.0.1/share [ 604.647662][ T23] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 604.829967][ T23] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 604.857531][ T23] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 604.895663][ T23] usb 1-1: USB disconnect, device number 2 [ 605.366298][ T5837] usb 3-1: USB disconnect, device number 4 [ 605.423037][T14218] CIFS: VFS: cifs_mount failed w/return code = -112 [ 605.752774][T14254] tmpfs: Unknown parameter 'grpquota_block_hardli' [ 608.154187][T10217] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 608.386976][T10217] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 608.415243][T14312] CIFS: Attempting to mount //127.0.0.1/share [ 608.424278][T10217] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 608.437918][T10217] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 608.449056][T10217] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 608.486717][T10217] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 608.506700][T10217] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 608.530520][T10217] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 608.554488][T10217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 608.596159][T10217] usb 1-1: Product: syz [ 608.609933][T10217] usb 1-1: Manufacturer: syz [ 608.641039][T14294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.669194][T14294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.695233][T14294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.734387][T14294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.772242][T14294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.804127][T14294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.837097][T10217] usb 1-1: USB2VGA dongle found at address 3 [ 608.875557][T10217] usb 1-1: Allocated 8 output buffers [ 608.914069][T10217] usb 1-1: Failed to early initialize device [ 609.161234][T14312] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 609.183153][T14312] ------------[ cut here ]------------ [ 609.189430][T14312] WARNING: CPU: 0 PID: 14312 at fs/smb/client/smb2ops.c:97 smb2_add_credits+0x1365/0x2600 [ 609.199663][T14312] Modules linked in: [ 609.204256][T14312] CPU: 0 PID: 14312 Comm: syz.2.2585 Not tainted syzkaller #0 [ 609.211932][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.222348][T14312] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 609.228331][T14312] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 c5 b1 3c ff 49 8b 34 24 48 c7 c7 a0 1f f7 8a e8 45 21 de 07 e9 eb f9 ff ff e8 3b 2f e4 fe <0f> 0b e9 d9 ef ff ff e8 2f 2f e4 fe c6 05 5f bd d3 0b 01 48 c7 c7 [ 609.248284][T14312] RSP: 0018:ffffc9000553f400 EFLAGS: 00010283 [ 609.255667][T14312] RAX: ffffffff82a34245 RBX: ffff88807e7da2c0 RCX: 0000000000080000 [ 609.264144][T14312] RDX: ffffc90011ef7000 RSI: 000000000000fbac RDI: 000000000000fbad [ 609.272194][T14312] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 609.280344][T14312] R10: dffffc0000000000 R11: fffff52000aa7e70 R12: 1ffff1100fcfb458 [ 609.288467][T14312] R13: dffffc0000000000 R14: ffff88807e7da000 R15: 0000000000000000 [ 609.296634][T14312] FS: 00007fb797c596c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 609.306315][T14312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.313122][T14312] CR2: 00007f9cbfc18998 CR3: 0000000076f72000 CR4: 00000000003506f0 [ 609.321285][T14312] Call Trace: [ 609.324682][T14312] [ 609.327674][T14312] compound_send_recv+0x1254/0x3040 [ 609.332968][T14312] ? cifs_pick_channel+0x320/0x320 [ 609.338258][T14312] ? __rwlock_init+0x150/0x150 [ 609.343104][T14312] ? do_raw_spin_unlock+0x121/0x230 [ 609.348446][T14312] cifs_send_recv+0x40/0x50 [ 609.353023][T14312] SMB2_negotiate+0x16b5/0x4270 [ 609.358059][T14312] ? smb3_encryption_required+0x2f0/0x2f0 [ 609.363952][T14312] ? smb2_negotiate+0x5c/0x70 [ 609.368738][T14312] ? do_raw_spin_unlock+0x121/0x230 [ 609.374168][T14312] ? _raw_spin_unlock+0x28/0x40 [ 609.379105][T14312] cifs_negotiate_protocol+0x445/0x670 [ 609.384696][T14312] cifs_get_smb_ses+0x8d6/0x1b00 [ 609.389728][T14312] cifs_mount_get_session+0xef/0x440 [ 609.395185][T14312] dfs_mount_share+0x1e9/0x7b0 [ 609.400020][T14312] cifs_mount+0xbc/0x650 [ 609.404419][T14312] ? __rwlock_init+0x150/0x150 [ 609.409869][T14312] ? cifs_is_path_remote+0x6f0/0x6f0 [ 609.415478][T14312] ? do_raw_spin_unlock+0x121/0x230 [ 609.420803][T14312] ? smb3_update_mnt_flags+0x52f/0xc10 [ 609.426438][T14312] ? cifs_setup_cifs_sb+0x52f/0x840 [ 609.431738][T14312] cifs_smb3_do_mount+0x2e5/0x710 [ 609.437027][T14312] ? cifs_sb_deactive+0x80/0x80 [ 609.441995][T14312] smb3_get_tree+0x5a5/0xa90 [ 609.446703][T14312] vfs_get_tree+0x8c/0x280 [ 609.451187][T14312] do_new_mount+0x24a/0xa40 [ 609.455851][T14312] __se_sys_mount+0x2e7/0x3d0 [ 609.460601][T14312] ? __x64_sys_mount+0xc0/0xc0 [ 609.465580][T14312] ? lockdep_hardirqs_on+0x98/0x150 [ 609.470889][T14312] ? __x64_sys_mount+0x20/0xc0 [ 609.475794][T14312] do_syscall_64+0x55/0xb0 [ 609.480283][T14312] ? clear_bhb_loop+0x40/0x90 [ 609.485099][T14312] ? clear_bhb_loop+0x40/0x90 [ 609.489852][T14312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.495952][T14312] RIP: 0033:0x7fb796d9e0d9 [ 609.500437][T14312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.520872][T14312] RSP: 002b:00007fb797c59028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 609.529514][T14312] RAX: ffffffffffffffda RBX: 00007fb797025fa0 RCX: 00007fb796d9e0d9 [ 609.537767][T14312] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 609.546013][T14312] RBP: 00007fb796e35024 R08: 0000200000000300 R09: 0000000000000000 [ 609.554172][T14312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.562223][T14312] R13: 00007fb797026038 R14: 00007fb797025fa0 R15: 00007ffcd2ac7c18 [ 609.570375][T14312] [ 609.573459][T14312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.580780][T14312] CPU: 0 PID: 14312 Comm: syz.2.2585 Not tainted syzkaller #0 [ 609.588294][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.598580][T14312] Call Trace: [ 609.601889][T14312] [ 609.604874][T14312] dump_stack_lvl+0x18c/0x250 [ 609.609601][T14312] ? show_regs_print_info+0x20/0x20 [ 609.614841][T14312] ? load_image+0x420/0x420 [ 609.619393][T14312] panic+0x2ca/0x720 [ 609.623328][T14312] ? bpf_jit_dump+0xd0/0xd0 [ 609.627885][T14312] __warn+0x2e0/0x470 [ 609.631900][T14312] ? smb2_add_credits+0x1365/0x2600 [ 609.637143][T14312] ? smb2_add_credits+0x1365/0x2600 [ 609.642374][T14312] report_bug+0x2be/0x4f0 [ 609.646771][T14312] ? smb2_add_credits+0x1365/0x2600 [ 609.652029][T14312] ? smb2_add_credits+0x1365/0x2600 [ 609.657264][T14312] ? smb2_add_credits+0x1367/0x2600 [ 609.662528][T14312] handle_bug+0xcf/0x120 [ 609.666801][T14312] exc_invalid_op+0x1a/0x50 [ 609.671344][T14312] asm_exc_invalid_op+0x1a/0x20 [ 609.676231][T14312] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 609.682079][T14312] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 c5 b1 3c ff 49 8b 34 24 48 c7 c7 a0 1f f7 8a e8 45 21 de 07 e9 eb f9 ff ff e8 3b 2f e4 fe <0f> 0b e9 d9 ef ff ff e8 2f 2f e4 fe c6 05 5f bd d3 0b 01 48 c7 c7 [ 609.702006][T14312] RSP: 0018:ffffc9000553f400 EFLAGS: 00010283 [ 609.708104][T14312] RAX: ffffffff82a34245 RBX: ffff88807e7da2c0 RCX: 0000000000080000 [ 609.716102][T14312] RDX: ffffc90011ef7000 RSI: 000000000000fbac RDI: 000000000000fbad [ 609.724103][T14312] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 609.732098][T14312] R10: dffffc0000000000 R11: fffff52000aa7e70 R12: 1ffff1100fcfb458 [ 609.740096][T14312] R13: dffffc0000000000 R14: ffff88807e7da000 R15: 0000000000000000 [ 609.748128][T14312] ? smb2_add_credits+0x1365/0x2600 [ 609.753382][T14312] compound_send_recv+0x1254/0x3040 [ 609.758632][T14312] ? cifs_pick_channel+0x320/0x320 [ 609.763787][T14312] ? __rwlock_init+0x150/0x150 [ 609.768596][T14312] ? do_raw_spin_unlock+0x121/0x230 [ 609.773843][T14312] cifs_send_recv+0x40/0x50 [ 609.778466][T14312] SMB2_negotiate+0x16b5/0x4270 [ 609.783355][T14312] ? smb3_encryption_required+0x2f0/0x2f0 [ 609.789121][T14312] ? smb2_negotiate+0x5c/0x70 [ 609.793844][T14312] ? do_raw_spin_unlock+0x121/0x230 [ 609.799077][T14312] ? _raw_spin_unlock+0x28/0x40 [ 609.803971][T14312] cifs_negotiate_protocol+0x445/0x670 [ 609.809474][T14312] cifs_get_smb_ses+0x8d6/0x1b00 [ 609.814449][T14312] cifs_mount_get_session+0xef/0x440 [ 609.819772][T14312] dfs_mount_share+0x1e9/0x7b0 [ 609.824576][T14312] cifs_mount+0xbc/0x650 [ 609.828851][T14312] ? __rwlock_init+0x150/0x150 [ 609.833648][T14312] ? cifs_is_path_remote+0x6f0/0x6f0 [ 609.838961][T14312] ? do_raw_spin_unlock+0x121/0x230 [ 609.844196][T14312] ? smb3_update_mnt_flags+0x52f/0xc10 [ 609.849701][T14312] ? cifs_setup_cifs_sb+0x52f/0x840 [ 609.855391][T14312] cifs_smb3_do_mount+0x2e5/0x710 [ 609.860477][T14312] ? cifs_sb_deactive+0x80/0x80 [ 609.865429][T14312] smb3_get_tree+0x5a5/0xa90 [ 609.870079][T14312] vfs_get_tree+0x8c/0x280 [ 609.874640][T14312] do_new_mount+0x24a/0xa40 [ 609.879184][T14312] __se_sys_mount+0x2e7/0x3d0 [ 609.883887][T14312] ? __x64_sys_mount+0xc0/0xc0 [ 609.888686][T14312] ? lockdep_hardirqs_on+0x98/0x150 [ 609.893915][T14312] ? __x64_sys_mount+0x20/0xc0 [ 609.898715][T14312] do_syscall_64+0x55/0xb0 [ 609.903163][T14312] ? clear_bhb_loop+0x40/0x90 [ 609.907869][T14312] ? clear_bhb_loop+0x40/0x90 [ 609.912574][T14312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.918499][T14312] RIP: 0033:0x7fb796d9e0d9 [ 609.922940][T14312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.942576][T14312] RSP: 002b:00007fb797c59028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 609.951018][T14312] RAX: ffffffffffffffda RBX: 00007fb797025fa0 RCX: 00007fb796d9e0d9 [ 609.959014][T14312] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 609.967008][T14312] RBP: 00007fb796e35024 R08: 0000200000000300 R09: 0000000000000000 [ 609.975013][T14312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.983006][T14312] R13: 00007fb797026038 R14: 00007fb797025fa0 R15: 00007ffcd2ac7c18 [ 609.991022][T14312] [ 609.994651][T14312] Kernel Offset: disabled [ 609.999072][T14312] Rebooting in 86400 seconds..