last executing test programs: 10.346270762s ago: executing program 2 (id=79): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) write(r1, &(0x7f0000000200)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002") ioctl(r2, 0x40140921, &(0x7f0000000420)="0100000001") ioctl(r2, 0x932, &(0x7f0000000440)="020000000100") connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 9.17995529s ago: executing program 2 (id=82): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd) 7.658447076s ago: executing program 2 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7.582161168s ago: executing program 1 (id=86): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aa2b77aaaa44aaaaaaaaaabb08004621002800680000e1de3c2121e486e3ac1414aa00"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 7.285746436s ago: executing program 1 (id=87): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) 6.999860903s ago: executing program 1 (id=88): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 6.68217813s ago: executing program 2 (id=89): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 5.539078128s ago: executing program 1 (id=90): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 5.00863674s ago: executing program 1 (id=93): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000800)="0473f9a9f2d0d7684e2a643a84d30f", 0xf, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xfffc, @empty, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bic', 0x3) shutdown(r0, 0x1) 4.962191511s ago: executing program 3 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 4.961947491s ago: executing program 0 (id=95): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aa2b77aaaa44aaaaaaaaaabb08004621002800680000e1de3c2121e486e3ac1414aa00"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 4.915938533s ago: executing program 3 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "7cdd"}]}}}]}, 0x54}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.815400664s ago: executing program 1 (id=97): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x904}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x4000) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x98c, 0x2a8, 0x2a8, 0x98c, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7fffffff, {0x8000}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) r6 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1000, 0x12) syz_open_dev$midi(&(0x7f0000000000), 0x4, 0x84080) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x0) 4.706123558s ago: executing program 0 (id=98): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 4.622639169s ago: executing program 3 (id=99): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0xb, &(0x7f0000000440)) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x44000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 3.420318188s ago: executing program 3 (id=100): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 3.305949681s ago: executing program 0 (id=101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 2.955501869s ago: executing program 0 (id=102): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/236, 0xec}], 0x1, 0x5, 0x6) 2.194188398s ago: executing program 2 (id=103): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r1, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x14}], 0x1}, 0x4011) 1.922537364s ago: executing program 0 (id=104): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x504, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f0000000780)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) 1.922229224s ago: executing program 2 (id=105): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="de6900000d000000020000000a0002000000000fdcb5d3ce9cc0acb5d57b010000001800000000000000"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl(r0, 0x9, &(0x7f0000000180)="058b188d56db9426239f153e650276552a7210c0adc623094dd4cd8809b7fcdb020f33c654435d37d5ffa9977b1b9e05fb74c7bfb86d40e6d4759495a4d0e8f31e6f4337f06284c35e872efbbf311ed54c3062ee5131de91df35013e7529b28cca2c5fd320a99d7a171b1462332061c4dec1dfdabd5a9ff1d590f6f0aa16898e4fb9b8eb890a5326d83b0fdbd59c418819caf1") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\x00', 0x2) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x60000, &(0x7f0000000880)={[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/cuse\x00'}}, {@euid_gt}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@obj_user={'obj_user', 0x3d, '/cuse\x00'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 460.822739ms ago: executing program 0 (id=106): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) sendto$inet6(r1, 0x0, 0x0, 0x8810, &(0x7f0000001500)={0xa, 0x4e21, 0x8, @loopback, 0xfffffffb}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x40000) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xffffffdb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 440.1379ms ago: executing program 3 (id=107): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aa2b77aaaa44aaaaaaaaaabb08004621002800680000e1de3c2121e486e3ac1414aa00"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 3 (id=108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 67.568026][ T5761] cgroup: Unknown subsys name 'net' [ 67.699368][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.041556][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.516134][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.532888][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.534070][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.549192][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.556399][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.557009][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.570391][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.577609][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.578683][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.593360][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.593773][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.603828][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.615150][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.616362][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.622927][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.630059][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.637045][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.644558][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.657635][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.658071][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.673131][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.681109][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.690879][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.705637][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.136446][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.171573][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 71.189352][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 71.256505][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 71.398162][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.406172][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.413609][ T5774] bridge_slave_0: entered allmulticast mode [ 71.420359][ T5774] bridge_slave_0: entered promiscuous mode [ 71.438960][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.446363][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.453693][ T5773] bridge_slave_0: entered allmulticast mode [ 71.460823][ T5773] bridge_slave_0: entered promiscuous mode [ 71.468504][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.475875][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.483352][ T5772] bridge_slave_0: entered allmulticast mode [ 71.490037][ T5772] bridge_slave_0: entered promiscuous mode [ 71.497734][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.504962][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.512172][ T5772] bridge_slave_1: entered allmulticast mode [ 71.519284][ T5772] bridge_slave_1: entered promiscuous mode [ 71.526912][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.538364][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.541817][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.545083][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.552403][ T5774] bridge_slave_1: entered allmulticast mode [ 71.565631][ T5774] bridge_slave_1: entered promiscuous mode [ 71.592167][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.599297][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.608841][ T5773] bridge_slave_1: entered allmulticast mode [ 71.615803][ T5773] bridge_slave_1: entered promiscuous mode [ 71.683256][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.692543][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.699731][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.707257][ T5775] bridge_slave_0: entered allmulticast mode [ 71.714183][ T5775] bridge_slave_0: entered promiscuous mode [ 71.723850][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.737610][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.748685][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.767713][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.785678][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.793270][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.800402][ T5775] bridge_slave_1: entered allmulticast mode [ 71.807380][ T5775] bridge_slave_1: entered promiscuous mode [ 71.815666][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.869804][ T5774] team0: Port device team_slave_0 added [ 71.878760][ T5773] team0: Port device team_slave_0 added [ 71.888005][ T5773] team0: Port device team_slave_1 added [ 71.913414][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.924052][ T5774] team0: Port device team_slave_1 added [ 71.942861][ T5772] team0: Port device team_slave_0 added [ 71.950574][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.999804][ T5772] team0: Port device team_slave_1 added [ 72.016929][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.024221][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.050569][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.063589][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.070537][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.096594][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.108186][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.115326][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.141474][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.154658][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.161609][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.188129][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.211826][ T5775] team0: Port device team_slave_0 added [ 72.271148][ T5775] team0: Port device team_slave_1 added [ 72.298154][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.305227][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.331466][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.348485][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.355517][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.381821][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.397227][ T5773] hsr_slave_0: entered promiscuous mode [ 72.404243][ T5773] hsr_slave_1: entered promiscuous mode [ 72.417673][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.424985][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.451226][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.463968][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.470939][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.496997][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.531197][ T5774] hsr_slave_0: entered promiscuous mode [ 72.537677][ T5774] hsr_slave_1: entered promiscuous mode [ 72.544019][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.551780][ T5774] Cannot create hsr debugfs directory [ 72.674556][ T5772] hsr_slave_0: entered promiscuous mode [ 72.681170][ T5772] hsr_slave_1: entered promiscuous mode [ 72.689739][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.697779][ T5772] Cannot create hsr debugfs directory [ 72.709312][ T5775] hsr_slave_0: entered promiscuous mode [ 72.716181][ T5775] hsr_slave_1: entered promiscuous mode [ 72.722507][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.730084][ T5775] Cannot create hsr debugfs directory [ 72.736372][ T51] Bluetooth: hci3: command tx timeout [ 72.742752][ T5090] Bluetooth: hci2: command tx timeout [ 72.748590][ T5090] Bluetooth: hci1: command tx timeout [ 72.812660][ T5090] Bluetooth: hci0: command tx timeout [ 73.066379][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.089074][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.106642][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.120614][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.134483][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.144782][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.154994][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.174733][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.256113][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.269061][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.283065][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.306981][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.398609][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.429152][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.453587][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.463143][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.491154][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.509534][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.571564][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.584166][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.598722][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.610112][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.617551][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.646552][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.653734][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.667546][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.674693][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.706240][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.721072][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.728198][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.742288][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.749414][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.795349][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.802537][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.910664][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.984982][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.037298][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.044517][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.117324][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.124484][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.198263][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.348227][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.404204][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.421693][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.520767][ T5775] veth0_vlan: entered promiscuous mode [ 74.537572][ T5773] veth0_vlan: entered promiscuous mode [ 74.552658][ T5775] veth1_vlan: entered promiscuous mode [ 74.591551][ T5773] veth1_vlan: entered promiscuous mode [ 74.627399][ T5774] veth0_vlan: entered promiscuous mode [ 74.655003][ T5774] veth1_vlan: entered promiscuous mode [ 74.685123][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.698640][ T5775] veth0_macvtap: entered promiscuous mode [ 74.711042][ T5773] veth0_macvtap: entered promiscuous mode [ 74.730774][ T5773] veth1_macvtap: entered promiscuous mode [ 74.743734][ T5775] veth1_macvtap: entered promiscuous mode [ 74.771345][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.804090][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.812956][ T5090] Bluetooth: hci1: command tx timeout [ 74.812976][ T51] Bluetooth: hci3: command tx timeout [ 74.818360][ T5090] Bluetooth: hci2: command tx timeout [ 74.831912][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.844145][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.855552][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.870976][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.885222][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.897591][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.905041][ T5090] Bluetooth: hci0: command tx timeout [ 74.918777][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.928271][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.937280][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.946143][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.964633][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.974205][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.984314][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.993133][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.008192][ T5774] veth0_macvtap: entered promiscuous mode [ 75.041601][ T5774] veth1_macvtap: entered promiscuous mode [ 75.060229][ T5772] veth0_vlan: entered promiscuous mode [ 75.098530][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.109409][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.119464][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.130287][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.144449][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.169694][ T5772] veth1_vlan: entered promiscuous mode [ 75.201616][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.215003][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.225264][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.236268][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.247508][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.295799][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.306721][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.316087][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.324958][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.343868][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.355482][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.406657][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.415016][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.441478][ T5772] veth0_macvtap: entered promiscuous mode [ 75.476722][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.487616][ T5772] veth1_macvtap: entered promiscuous mode [ 75.499591][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.583714][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.591810][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.599862][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.612804][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.623188][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.633837][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.644252][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.654934][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.666332][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.691958][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.706545][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.716598][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.727180][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.737340][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.755475][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.767210][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.804672][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.805307][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.829841][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.839261][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.849047][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.866319][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.873833][ T5834] syz.0.1: attempt to access beyond end of device [ 75.873833][ T5834] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 75.924508][ T5834] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 75.935538][ T5834] device-mapper: ioctl: error adding target to table [ 75.945426][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.953958][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.101148][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.139872][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.185599][ T5838] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.236527][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.272784][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.604210][ T5851] syz.0.6[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.607212][ T27] audit: type=1326 audit(1789066321.895:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 76.667434][ T27] audit: type=1326 audit(1789066321.895:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 76.695116][ T27] audit: type=1326 audit(1789066321.895:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 76.765548][ T27] audit: type=1326 audit(1789066321.895:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 76.799941][ T27] audit: type=1326 audit(1789066321.895:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 76.870291][ T27] audit: type=1326 audit(1789066321.895:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 76.893017][ T5090] Bluetooth: hci2: command tx timeout [ 76.895836][ T51] Bluetooth: hci3: command tx timeout [ 76.899317][ T5090] Bluetooth: hci1: command tx timeout [ 76.905014][ T5763] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.922609][ T27] audit: type=1326 audit(1789066321.895:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 76.948128][ T27] audit: type=1326 audit(1789066321.905:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 76.973942][ T5090] Bluetooth: hci0: command tx timeout [ 77.039131][ T27] audit: type=1326 audit(1789066321.905:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 77.102670][ T27] audit: type=1326 audit(1789066321.905:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc450f9e159 code=0x7ffc0000 [ 77.137148][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.181656][ T5763] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.191562][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.211672][ T5763] usb 2-1: config 0 descriptor?? [ 77.431771][ T5763] usbhid 2-1:0.0: can't add hid device: -71 [ 77.442832][ T5763] usbhid: probe of 2-1:0.0 failed with error -71 [ 77.474856][ T5763] usb 2-1: USB disconnect, device number 2 [ 77.810794][ T5868] FAULT_INJECTION: forcing a failure. [ 77.810794][ T5868] name fail_futex, interval 1, probability 0, space 0, times 1 [ 77.823918][ T5868] CPU: 1 PID: 5868 Comm: syz.2.9 Not tainted syzkaller #0 [ 77.831069][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.841164][ T5868] Call Trace: [ 77.844452][ T5868] [ 77.847385][ T5868] dump_stack_lvl+0x18c/0x250 [ 77.852085][ T5868] ? show_regs_print_info+0x20/0x20 [ 77.857302][ T5868] ? load_image+0x420/0x420 [ 77.861819][ T5868] should_fail_ex+0x394/0x4c0 [ 77.866508][ T5868] get_futex_key+0x136/0x1030 [ 77.871188][ T5868] ? futex_setup_timer+0xc0/0xc0 [ 77.876130][ T5868] futex_wake+0x127/0x4f0 [ 77.880460][ T5868] ? futex_wake_mark+0x150/0x150 [ 77.885397][ T5868] ? do_fcntl+0xbdf/0x14a0 [ 77.889814][ T5868] ? __lock_acquire+0x7d80/0x7d80 [ 77.894838][ T5868] ? __might_fault+0xaa/0x120 [ 77.899514][ T5868] do_futex+0x35d/0x3e0 [ 77.903694][ T5868] ? do_fcntl+0xbdf/0x14a0 [ 77.908117][ T5868] ? __ia32_sys_get_robust_list+0x110/0x110 [ 77.914030][ T5868] __se_sys_futex+0x3a9/0x440 [ 77.918707][ T5868] ? __x64_sys_futex+0xf0/0xf0 [ 77.923471][ T5868] ? __x64_sys_futex+0x21/0xf0 [ 77.928232][ T5868] do_syscall_64+0x55/0xb0 [ 77.932673][ T5868] ? clear_bhb_loop+0x40/0x90 [ 77.937353][ T5868] ? clear_bhb_loop+0x40/0x90 [ 77.942038][ T5868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.947948][ T5868] RIP: 0033:0x7fdf9919e159 [ 77.952375][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.971997][ T5868] RSP: 002b:00007fdf9a0f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.980423][ T5868] RAX: ffffffffffffffda RBX: 00007fdf99425fa8 RCX: 00007fdf9919e159 [ 77.988391][ T5868] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf99425fac [ 77.996359][ T5868] RBP: 00007fdf99425fa0 R08: 0000000000745a7e R09: 0000000000000000 [ 78.004327][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.012299][ T5868] R13: 00007fdf99426038 R14: 00007ffd804c2320 R15: 00007ffd804c2408 [ 78.020376][ T5868] [ 78.092844][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.150494][ T5871] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 78.242101][ T5763] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.282089][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 78.299509][ T5813] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.310058][ T5813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.323726][ T5813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 78.342358][ T5813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 78.360231][ T5813] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.371688][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.395037][ T5813] hub 1-1:1.0: bad descriptor, ignoring hub [ 78.401007][ T5813] hub: probe of 1-1:1.0 failed with error -5 [ 78.417174][ T5813] cdc_wdm 1-1:1.0: skipping garbage [ 78.425244][ T5813] cdc_wdm 1-1:1.0: skipping garbage [ 78.437323][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.441425][ T5813] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 78.458445][ T5813] cdc_wdm 1-1:1.0: Unknown control protocol [ 78.473738][ T5763] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.498678][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.520334][ T5763] usb 2-1: config 0 descriptor?? [ 78.972065][ T5090] Bluetooth: hci1: command tx timeout [ 78.982352][ T51] Bluetooth: hci2: command tx timeout [ 78.987834][ T5090] Bluetooth: hci3: command tx timeout [ 78.998315][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.005178][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.012490][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.019100][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.025371][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.031975][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.038255][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.044854][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.051170][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.057777][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.064218][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.070826][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.072765][ T5090] Bluetooth: hci0: command tx timeout [ 79.078564][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.088904][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.095410][ T5813] usb 1-1: USB disconnect, device number 2 [ 79.102270][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.108889][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.114952][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 79.142209][ T5874] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 79.179715][ T5763] usbhid 2-1:0.0: can't add hid device: -71 [ 79.192193][ T5763] usbhid: probe of 2-1:0.0 failed with error -71 [ 79.217099][ T5763] usb 2-1: USB disconnect, device number 3 [ 80.019472][ T5888] block device autoloading is deprecated and will be removed. [ 80.071727][ T5886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.102263][ T5884] md: md0 stopped. [ 80.276446][ T5895] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 80.394512][ T5888] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 81.942552][ T5911] FAULT_INJECTION: forcing a failure. [ 81.942552][ T5911] name fail_futex, interval 1, probability 0, space 0, times 0 [ 81.967480][ T5911] CPU: 0 PID: 5911 Comm: syz.3.19 Not tainted syzkaller #0 [ 81.974737][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.984820][ T5911] Call Trace: [ 81.988115][ T5911] [ 81.991051][ T5911] dump_stack_lvl+0x18c/0x250 [ 81.995770][ T5911] ? show_regs_print_info+0x20/0x20 [ 82.001001][ T5911] ? load_image+0x420/0x420 [ 82.001859][ T5913] FAULT_INJECTION: forcing a failure. [ 82.001859][ T5913] name failslab, interval 1, probability 0, space 0, times 1 [ 82.005519][ T5911] should_fail_ex+0x394/0x4c0 [ 82.005556][ T5911] get_futex_key+0x136/0x1030 [ 82.005585][ T5911] ? futex_setup_timer+0xc0/0xc0 [ 82.005612][ T5911] futex_wake+0x127/0x4f0 [ 82.037019][ T5911] ? futex_wake_mark+0x150/0x150 [ 82.041992][ T5911] ? do_fcntl+0xbdf/0x14a0 [ 82.046441][ T5911] ? __lock_acquire+0x7d80/0x7d80 [ 82.051487][ T5911] ? __might_fault+0xaa/0x120 [ 82.056185][ T5911] do_futex+0x35d/0x3e0 [ 82.060361][ T5911] ? do_fcntl+0xbdf/0x14a0 [ 82.064816][ T5911] ? __ia32_sys_get_robust_list+0x110/0x110 [ 82.070747][ T5911] __se_sys_futex+0x3a9/0x440 [ 82.075465][ T5911] ? __x64_sys_futex+0xf0/0xf0 [ 82.080253][ T5911] ? __x64_sys_futex+0x21/0xf0 [ 82.085039][ T5911] do_syscall_64+0x55/0xb0 [ 82.089480][ T5911] ? clear_bhb_loop+0x40/0x90 [ 82.094185][ T5911] ? clear_bhb_loop+0x40/0x90 [ 82.098891][ T5911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.104834][ T5911] RIP: 0033:0x7fced479e159 [ 82.109361][ T5911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.128994][ T5911] RSP: 002b:00007fced56420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.137446][ T5911] RAX: ffffffffffffffda RBX: 00007fced4a25fa8 RCX: 00007fced479e159 [ 82.145447][ T5911] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fced4a25fac [ 82.153444][ T5911] RBP: 00007fced4a25fa0 R08: 0000000000745a7e R09: 0000000000000000 [ 82.161446][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.169440][ T5911] R13: 00007fced4a26038 R14: 00007ffee264b470 R15: 00007ffee264b558 [ 82.177454][ T5911] [ 82.180484][ T5913] CPU: 1 PID: 5913 Comm: syz.2.20 Not tainted syzkaller #0 [ 82.187710][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.197779][ T5913] Call Trace: [ 82.201056][ T5913] [ 82.204001][ T5913] dump_stack_lvl+0x18c/0x250 [ 82.208711][ T5913] ? show_regs_print_info+0x20/0x20 [ 82.213919][ T5913] ? load_image+0x420/0x420 [ 82.218429][ T5913] ? __might_sleep+0xe0/0xe0 [ 82.223040][ T5913] ? __lock_acquire+0x7d80/0x7d80 [ 82.228088][ T5913] ? trace_contention_end+0x39/0xe0 [ 82.233308][ T5913] should_fail_ex+0x394/0x4c0 [ 82.238013][ T5913] should_failslab+0x9/0x20 [ 82.242524][ T5913] slab_pre_alloc_hook+0x59/0x300 [ 82.247558][ T5913] ? mutex_lock_nested+0x20/0x20 [ 82.252510][ T5913] ? io_uring_alloc_task_context+0x18e/0x5c0 [ 82.258502][ T5913] __kmem_cache_alloc_node+0x53/0x250 [ 82.263883][ T5913] ? io_uring_alloc_task_context+0x18e/0x5c0 [ 82.269863][ T5913] kmalloc_trace+0x2a/0xe0 [ 82.274287][ T5913] io_uring_alloc_task_context+0x18e/0x5c0 [ 82.280093][ T5913] ? cpu_online+0x60/0x60 [ 82.284431][ T5913] ? io_uring_show_cred+0x4d0/0x4d0 [ 82.289637][ T5913] io_sq_offload_create+0xc93/0x11e0 [ 82.294922][ T5913] ? io_kill_timeouts+0x220/0x220 [ 82.299944][ T5913] ? io_allocate_scq_urings+0x3bd/0x620 [ 82.305497][ T5913] io_uring_create+0x730/0x1330 [ 82.310361][ T5913] __se_sys_io_uring_setup+0x29f/0x2b0 [ 82.315825][ T5913] ? __x64_sys_io_uring_setup+0x60/0x60 [ 82.321383][ T5913] ? lockdep_hardirqs_on+0x98/0x150 [ 82.326584][ T5913] do_syscall_64+0x55/0xb0 [ 82.331007][ T5913] ? clear_bhb_loop+0x40/0x90 [ 82.335703][ T5913] ? clear_bhb_loop+0x40/0x90 [ 82.340384][ T5913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.346282][ T5913] RIP: 0033:0x7fdf9919e159 [ 82.350694][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.370310][ T5913] RSP: 002b:00007fdf9a0f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 82.378728][ T5913] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007fdf9919e159 [ 82.386703][ T5913] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000efe [ 82.394674][ T5913] RBP: 00007fdf9923503b R08: 0000000000000000 R09: 0000000000000000 [ 82.402648][ T5913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 82.410622][ T5913] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd804c2408 [ 82.418609][ T5913] [ 82.732278][ T5812] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.937265][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.971881][ T5812] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.036626][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.075030][ T5812] usb 1-1: config 0 descriptor?? [ 83.177988][ T5933] ======================================================= [ 83.177988][ T5933] WARNING: The mand mount option has been deprecated and [ 83.177988][ T5933] and is ignored by this kernel. Remove the mand [ 83.177988][ T5933] option from the mount to silence this warning. [ 83.177988][ T5933] ======================================================= [ 83.306574][ T5933] jffs2: notice: (5933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.336897][ T5812] usbhid 1-1:0.0: can't add hid device: -71 [ 83.372634][ T5812] usbhid: probe of 1-1:0.0 failed with error -71 [ 83.421759][ T5812] usb 1-1: USB disconnect, device number 3 [ 84.632220][ T5812] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.994680][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.035833][ T5812] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.066776][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.087993][ T5812] usb 1-1: config 0 descriptor?? [ 85.196879][ T5949] md: md0 stopped. [ 85.204649][ T5812] usbhid 1-1:0.0: can't add hid device: -71 [ 85.210641][ T5812] usbhid: probe of 1-1:0.0 failed with error -71 [ 85.237854][ T5812] usb 1-1: USB disconnect, device number 4 [ 85.345881][ T5953] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 85.483523][ T5955] FAULT_INJECTION: forcing a failure. [ 85.483523][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 85.497383][ T5955] CPU: 1 PID: 5955 Comm: syz.2.32 Not tainted syzkaller #0 [ 85.504622][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.514693][ T5955] Call Trace: [ 85.517966][ T5955] [ 85.520898][ T5955] dump_stack_lvl+0x18c/0x250 [ 85.525594][ T5955] ? show_regs_print_info+0x20/0x20 [ 85.530785][ T5955] ? load_image+0x420/0x420 [ 85.535286][ T5955] ? __might_sleep+0xe0/0xe0 [ 85.539872][ T5955] ? __lock_acquire+0x7d80/0x7d80 [ 85.544883][ T5955] ? percpu_ref_put+0x12/0x100 [ 85.549660][ T5955] should_fail_ex+0x394/0x4c0 [ 85.554346][ T5955] should_failslab+0x9/0x20 [ 85.558888][ T5955] slab_pre_alloc_hook+0x59/0x300 [ 85.563926][ T5955] kmem_cache_alloc+0x5a/0x2c0 [ 85.568693][ T5955] ? vm_area_dup+0x61/0x270 [ 85.573190][ T5955] vm_area_dup+0x61/0x270 [ 85.577516][ T5955] __split_vma+0x1a8/0xc20 [ 85.581954][ T5955] ? mmap_write_unlock+0x160/0x160 [ 85.587067][ T5955] ? lock_chain_count+0x20/0x20 [ 85.591918][ T5955] do_vmi_align_munmap+0x310/0x16a0 [ 85.597114][ T5955] ? __lock_acquire+0x1262/0x7d80 [ 85.602143][ T5955] ? do_vmi_munmap+0x2d0/0x2d0 [ 85.606937][ T5955] ? mtree_range_walk+0x68c/0x7b0 [ 85.611964][ T5955] ? mas_find_setup+0x47f/0x590 [ 85.616832][ T5955] do_vmi_munmap+0x252/0x2d0 [ 85.621432][ T5955] mmap_region+0x8d9/0x2090 [ 85.625938][ T5955] ? file_mmap_ok+0x170/0x170 [ 85.630623][ T5955] ? cap_mmap_addr+0x157/0x2b0 [ 85.635380][ T5955] ? file_mmap_ok+0x11c/0x170 [ 85.640047][ T5955] do_mmap+0x98f/0x10a0 [ 85.644201][ T5955] ? mlock_future_ok+0xf0/0xf0 [ 85.648954][ T5955] ? down_write+0x200/0x200 [ 85.653471][ T5955] vm_mmap_pgoff+0x1c4/0x3f0 [ 85.658091][ T5955] ? account_locked_vm+0x200/0x200 [ 85.663207][ T5955] ksys_mmap_pgoff+0x4c9/0x720 [ 85.667970][ T5955] ? __x64_sys_mmap+0x7a/0x130 [ 85.672731][ T5955] do_syscall_64+0x55/0xb0 [ 85.677150][ T5955] ? clear_bhb_loop+0x40/0x90 [ 85.681835][ T5955] ? clear_bhb_loop+0x40/0x90 [ 85.686506][ T5955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.692388][ T5955] RIP: 0033:0x7fdf9919e159 [ 85.696803][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.716407][ T5955] RSP: 002b:00007fdf9a0f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 85.724819][ T5955] RAX: ffffffffffffffda RBX: 00007fdf99425fa0 RCX: 00007fdf9919e159 [ 85.732789][ T5955] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 85.740759][ T5955] RBP: 00007fdf9923503b R08: 0000000000000006 R09: 0000000000000000 [ 85.748727][ T5955] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 85.756719][ T5955] R13: 00007fdf99426038 R14: 00007fdf99425fa0 R15: 00007ffd804c2408 [ 85.764698][ T5955] [ 85.806745][ T5955] binder_alloc: 5954: binder_alloc_buf, no vma [ 86.803157][ T5815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.947426][ T55] cfg80211: failed to load regulatory.db [ 87.225090][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.336492][ T5815] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.345709][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.364679][ T5815] usb 1-1: config 0 descriptor?? [ 87.418177][ T5989] FAULT_INJECTION: forcing a failure. [ 87.418177][ T5989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 87.431321][ T5989] CPU: 1 PID: 5989 Comm: syz.1.43 Not tainted syzkaller #0 [ 87.438640][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.448696][ T5989] Call Trace: [ 87.451966][ T5989] [ 87.454891][ T5989] dump_stack_lvl+0x18c/0x250 [ 87.459557][ T5989] ? show_regs_print_info+0x20/0x20 [ 87.464748][ T5989] ? load_image+0x420/0x420 [ 87.469278][ T5989] should_fail_ex+0x394/0x4c0 [ 87.473957][ T5989] get_futex_key+0x136/0x1030 [ 87.478642][ T5989] ? futex_setup_timer+0xc0/0xc0 [ 87.483613][ T5989] futex_wake+0x127/0x4f0 [ 87.487957][ T5989] ? futex_wake_mark+0x150/0x150 [ 87.492884][ T5989] ? do_fcntl+0xbdf/0x14a0 [ 87.497296][ T5989] ? __lock_acquire+0x7d80/0x7d80 [ 87.502311][ T5989] do_futex+0x35d/0x3e0 [ 87.506453][ T5989] ? do_fcntl+0xbdf/0x14a0 [ 87.510860][ T5989] ? __ia32_sys_get_robust_list+0x110/0x110 [ 87.516746][ T5989] __se_sys_futex+0x3a9/0x440 [ 87.521415][ T5989] ? __x64_sys_futex+0xf0/0xf0 [ 87.526169][ T5989] ? __x64_sys_futex+0x21/0xf0 [ 87.530921][ T5989] do_syscall_64+0x55/0xb0 [ 87.535339][ T5989] ? clear_bhb_loop+0x40/0x90 [ 87.540041][ T5989] ? clear_bhb_loop+0x40/0x90 [ 87.544749][ T5989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.550667][ T5989] RIP: 0033:0x7f7cb6b9e159 [ 87.555111][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.574819][ T5989] RSP: 002b:00007f7cb7a7d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.583241][ T5989] RAX: ffffffffffffffda RBX: 00007f7cb6e25fa8 RCX: 00007f7cb6b9e159 [ 87.591228][ T5989] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7cb6e25fac [ 87.599215][ T5989] RBP: 00007f7cb6e25fa0 R08: 0000000000745a7e R09: 0000000000000000 [ 87.607173][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.615166][ T5989] R13: 00007f7cb6e26038 R14: 00007ffea9589e90 R15: 00007ffea9589f78 [ 87.623135][ T5989] [ 87.638444][ T5815] usbhid 1-1:0.0: can't add hid device: -71 [ 87.644891][ T5815] usbhid: probe of 1-1:0.0 failed with error -71 [ 87.653632][ T5815] usb 1-1: USB disconnect, device number 5 [ 87.661881][ T5990] binder_alloc: 5988: binder_alloc_buf, no vma [ 87.797881][ T5992] md: md0 stopped. [ 88.054881][ T6002] tipc: Started in network mode [ 88.060118][ T6002] tipc: Node identity 163e1ed07f5b, cluster identity 4711 [ 88.068180][ T6002] tipc: Enabled bearer , priority 0 [ 88.086512][ T6002] tipc: Resetting bearer [ 88.113839][ T6001] tipc: Disabling bearer [ 88.275972][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 88.418913][ T5815] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.461899][ T6009] FAULT_INJECTION: forcing a failure. [ 88.461899][ T6009] name fail_futex, interval 1, probability 0, space 0, times 0 [ 88.486402][ T6009] CPU: 0 PID: 6009 Comm: syz.3.52 Not tainted syzkaller #0 [ 88.493663][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.503739][ T6009] Call Trace: [ 88.507032][ T6009] [ 88.509977][ T6009] dump_stack_lvl+0x18c/0x250 [ 88.514679][ T6009] ? show_regs_print_info+0x20/0x20 [ 88.519895][ T6009] ? load_image+0x420/0x420 [ 88.524425][ T6009] should_fail_ex+0x394/0x4c0 [ 88.529132][ T6009] get_futex_key+0x136/0x1030 [ 88.533846][ T6009] ? futex_setup_timer+0xc0/0xc0 [ 88.538817][ T6009] futex_wake+0x127/0x4f0 [ 88.543170][ T6009] ? futex_wake_mark+0x150/0x150 [ 88.548620][ T6009] ? do_fcntl+0xbdf/0x14a0 [ 88.553066][ T6009] ? __lock_acquire+0x7d80/0x7d80 [ 88.558112][ T6009] ? __might_fault+0xaa/0x120 [ 88.562812][ T6009] do_futex+0x35d/0x3e0 [ 88.566983][ T6009] ? do_fcntl+0xbdf/0x14a0 [ 88.571426][ T6009] ? __ia32_sys_get_robust_list+0x110/0x110 [ 88.577349][ T6009] __se_sys_futex+0x3a9/0x440 [ 88.582047][ T6009] ? __x64_sys_futex+0xf0/0xf0 [ 88.586836][ T6009] ? __x64_sys_futex+0x21/0xf0 [ 88.591622][ T6009] do_syscall_64+0x55/0xb0 [ 88.596064][ T6009] ? clear_bhb_loop+0x40/0x90 [ 88.600760][ T6009] ? clear_bhb_loop+0x40/0x90 [ 88.605461][ T6009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.611371][ T6009] RIP: 0033:0x7fced479e159 [ 88.615798][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.635428][ T6009] RSP: 002b:00007fced56420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.643864][ T6009] RAX: ffffffffffffffda RBX: 00007fced4a25fa8 RCX: 00007fced479e159 [ 88.651847][ T6009] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fced4a25fac [ 88.659833][ T6009] RBP: 00007fced4a25fa0 R08: 0000000000745a7e R09: 0000000000000000 [ 88.667819][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.675803][ T6009] R13: 00007fced4a26038 R14: 00007ffee264b470 R15: 00007ffee264b558 [ 88.683806][ T6009] [ 88.686958][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.377916][ T6020] FAULT_INJECTION: forcing a failure. [ 89.377916][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 89.399313][ T6020] CPU: 0 PID: 6020 Comm: syz.3.57 Not tainted syzkaller #0 [ 89.406569][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.416643][ T6020] Call Trace: [ 89.419936][ T6020] [ 89.422875][ T6020] dump_stack_lvl+0x18c/0x250 [ 89.427584][ T6020] ? show_regs_print_info+0x20/0x20 [ 89.432816][ T6020] ? load_image+0x420/0x420 [ 89.437340][ T6020] ? __might_sleep+0xe0/0xe0 [ 89.441951][ T6020] ? __lock_acquire+0x7d80/0x7d80 [ 89.446993][ T6020] should_fail_ex+0x394/0x4c0 [ 89.451696][ T6020] should_failslab+0x9/0x20 [ 89.456229][ T6020] slab_pre_alloc_hook+0x59/0x300 [ 89.461290][ T6020] ? __kernfs_new_node+0xaa/0x7f0 [ 89.466348][ T6020] ? rcu_is_watching+0x15/0xb0 [ 89.471140][ T6020] kmem_cache_alloc+0x5a/0x2c0 [ 89.475931][ T6020] ? __kernfs_new_node+0xe5/0x7f0 [ 89.480978][ T6020] __kernfs_new_node+0xe5/0x7f0 [ 89.485847][ T6020] ? down_write+0x16e/0x200 [ 89.490374][ T6020] ? kernfs_new_node+0x260/0x260 [ 89.495347][ T6020] ? up_write+0x1be/0x410 [ 89.499713][ T6020] kernfs_new_node+0x14c/0x260 [ 89.504505][ T6020] kernfs_create_dir_ns+0x44/0x120 [ 89.509637][ T6020] sysfs_create_dir_ns+0x130/0x2a0 [ 89.514766][ T6020] ? __lock_acquire+0x7d80/0x7d80 [ 89.519825][ T6020] ? sysfs_warn_dup+0xa0/0xa0 [ 89.524544][ T6020] ? do_raw_spin_unlock+0x121/0x230 [ 89.529762][ T6020] kobject_add_internal+0x617/0xc90 [ 89.534985][ T6020] kobject_add+0x164/0x240 [ 89.539424][ T6020] ? kobject_init+0x1d0/0x1d0 [ 89.544127][ T6020] ? kobject_init+0x1d0/0x1d0 [ 89.548824][ T6020] ? kobject_init+0x7f/0x1d0 [ 89.553436][ T6020] ? get_device_parent+0x366/0x390 [ 89.558571][ T6020] device_add+0x3fa/0xc40 [ 89.562949][ T6020] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 89.568431][ T6020] wakeup_source_register+0x163/0x240 [ 89.573820][ T6020] ep_insert+0xeb2/0x1990 [ 89.578192][ T6020] ? ep_loop_check+0x1b0/0x1b0 [ 89.582978][ T6020] ? __lock_acquire+0x7d80/0x7d80 [ 89.588033][ T6020] do_epoll_ctl+0x8bc/0xf40 [ 89.592566][ T6020] __x64_sys_epoll_ctl+0x166/0x1b0 [ 89.597698][ T6020] ? ep_modify+0xa80/0xa80 [ 89.602135][ T6020] ? lockdep_hardirqs_on+0x98/0x150 [ 89.607360][ T6020] do_syscall_64+0x55/0xb0 [ 89.611790][ T6020] ? clear_bhb_loop+0x40/0x90 [ 89.616485][ T6020] ? clear_bhb_loop+0x40/0x90 [ 89.621187][ T6020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.627103][ T6020] RIP: 0033:0x7fced479e159 [ 89.631537][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.651165][ T6020] RSP: 002b:00007fced5642028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 89.659610][ T6020] RAX: ffffffffffffffda RBX: 00007fced4a25fa0 RCX: 00007fced479e159 [ 89.667601][ T6020] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 89.675586][ T6020] RBP: 00007fced483503b R08: 0000000000000000 R09: 0000000000000000 [ 89.683571][ T6020] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 89.691561][ T6020] R13: 00007fced4a26038 R14: 00007fced4a25fa0 R15: 00007ffee264b558 [ 89.699567][ T6020] [ 89.702720][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.736545][ T6020] kobject: kobject_add_internal failed for wakeup12 (error: -12 parent: wakeup) [ 89.816247][ T5815] usb 1-1: device descriptor read/all, error -71 [ 90.263343][ T6030] Invalid ELF header type: 3 != 1 [ 90.879125][ T6029] tipc: Enabled bearer , priority 0 [ 90.935387][ T6029] tipc: Resetting bearer [ 90.968770][ T6028] tipc: Disabling bearer [ 90.985691][ T6035] binder: 6034:6035 ioctl c0306201 200000000680 returned -14 [ 91.125628][ T6037] binder: BINDER_SET_CONTEXT_MGR already set [ 91.152970][ T6037] binder: 6036:6037 ioctl 4018620d 200000000100 returned -16 [ 91.195732][ T6037] binder: BINDER_SET_CONTEXT_MGR already set [ 91.213513][ T6037] binder: 6036:6037 ioctl 4018620d 200000001000 returned -16 [ 91.216292][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.434687][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 91.601525][ T5863] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 91.609913][ T5863] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.620252][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.630019][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.639994][ T5863] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.653010][ T5863] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.662160][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.802358][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 91.972049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.764446][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.786110][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.805010][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.826523][ T9] usb 1-1: config 0 descriptor?? [ 93.015684][ T6055] binder: BINDER_SET_CONTEXT_MGR already set [ 93.027534][ T6055] binder: 6054:6055 ioctl 4018620d 200000000100 returned -16 [ 93.034870][ T5863] usb 3-1: usb_control_msg returned -32 [ 93.040813][ T5863] usbtmc 3-1:16.0: can't read capabilities [ 93.064619][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 93.074815][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 93.076630][ T6055] binder: BINDER_SET_CONTEXT_MGR already set [ 93.087396][ T6055] binder: 6054:6055 ioctl 4018620d 200000001000 returned -16 [ 93.089739][ T9] usb 1-1: USB disconnect, device number 8 [ 93.161778][ T6057] Invalid ELF header type: 3 != 1 [ 93.767660][ T6058] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 93.787657][ T5863] usb 3-1: USB disconnect, device number 2 [ 94.202096][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.324486][ T9] usb 1-1: device descriptor read/all, error -71 [ 95.338701][ T6076] md: md0 stopped. [ 95.972370][ T6086] Invalid ELF header type: 3 != 1 [ 97.215493][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'. [ 97.271417][ T6105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'. [ 97.308731][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'. [ 97.418976][ T6105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'. [ 97.573443][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'. [ 97.777883][ T6105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'. [ 99.582383][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.849068][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.878593][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.889466][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.914490][ T9] usb 3-1: config 0 descriptor?? [ 99.979815][ T6137] tipc: Enabled bearer , priority 0 [ 99.990596][ T6137] tipc: Resetting bearer [ 100.001296][ T6136] tipc: Disabling bearer [ 100.177494][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 100.200940][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 100.268424][ T789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.280175][ T9] usb 3-1: USB disconnect, device number 3 [ 101.522404][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 101.574171][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.600577][ T789] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.610260][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.632599][ T789] usb 2-1: config 0 descriptor?? [ 101.833279][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.849443][ T789] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 102.063466][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.126506][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.181386][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.243191][ T9] usb 3-1: config 0 descriptor?? [ 102.456555][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 102.499404][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 102.559649][ T9] usb 3-1: USB disconnect, device number 4 [ 103.855934][ T24] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 103.867186][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 96294) [ 103.882312][ T24] Buffer I/O error on device sda1, logical block 96256 [ 103.890675][ T24] device offline error, dev sda, sector 778518 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 103.902627][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 97314) [ 103.916469][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 97316) [ 103.916634][ T3574] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2033, error -5) [ 103.928203][ T24] Buffer I/O error on device sda1, logical block 97278 [ 103.947952][ T24] Buffer I/O error on device sda1, logical block 97279 [ 103.961454][ T24] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 103.972103][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 100390) [ 103.983771][ T24] Buffer I/O error on device sda1, logical block 100352 [ 103.990787][ T24] device offline error, dev sda, sector 811270 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 104.001314][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 101408) [ 104.013049][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 101413) [ 104.024692][ T24] Buffer I/O error on device sda1, logical block 101375 [ 104.031834][ T24] device offline error, dev sda, sector 815254 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 104.042483][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 101906) [ 104.054113][ T24] Buffer I/O error on device sda1, logical block 101868 [ 104.061706][ T24] Buffer I/O error on device sda1, logical block 101869 [ 104.068764][ T24] Buffer I/O error on device sda1, logical block 101870 [ 104.075764][ T24] Buffer I/O error on device sda1, logical block 101871 [ 104.082822][ T24] Buffer I/O error on device sda1, logical block 101872 [ 104.090096][ T24] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.100664][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 94246) [ 104.112309][ T24] device offline error, dev sda, sector 762134 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.122799][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95266) [ 104.135283][ T24] device offline error, dev sda, sector 729398 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.145781][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 91174) [ 104.209305][ T3510] device offline error, dev sda, sector 725302 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 104.305094][ T3574] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2036, error -5) [ 104.326283][ T3510] device offline error, dev sda, sector 704870 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.337012][ T3574] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2029, error -5) [ 104.471421][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 104.499799][ T5106] Aborting journal on device sda1-8. [ 104.506354][ T6171] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.0.106: Detected aborted journal [ 104.517080][ T24] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 104.527026][ T5106] JBD2: I/O error when updating journal superblock for sda1-8. [ 104.586736][ T1062] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 104.596484][ T6171] EXT4-fs (sda1): I/O error while writing superblock [ 104.622170][ T6171] EXT4-fs (sda1): Remounting filesystem read-only [ 104.858623][ T6177] binder: BINDER_SET_CONTEXT_MGR already set [ 104.920581][ T6177] binder: 6176:6177 ioctl 4018620d 200000000100 returned -16 [ 104.935555][ T5863] usb 2-1: USB disconnect, device number 4 [ 104.969400][ T6178] [ 104.971774][ T6178] ====================================================== [ 104.978803][ T6178] WARNING: possible circular locking dependency detected [ 104.985832][ T6178] syzkaller #0 Not tainted [ 104.990220][ T6178] ------------------------------------------------------ [ 104.997214][ T6178] syz.0.106/6178 is trying to acquire lock: [ 105.003081][ T6178] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 105.012109][ T6178] [ 105.012109][ T6178] but task is already holding lock: [ 105.019448][ T6178] ffff8880200c1550 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 105.029424][ T6178] [ 105.029424][ T6178] which lock already depends on the new lock. [ 105.029424][ T6178] [ 105.039800][ T6178] [ 105.039800][ T6178] the existing dependency chain (in reverse order) is: [ 105.048792][ T6178] [ 105.048792][ T6178] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 105.057116][ T6178] down_write+0x97/0x200 [ 105.061877][ T6178] set_blocksize+0x247/0x4b0 [ 105.066972][ T6178] sb_min_blocksize+0xbe/0x190 [ 105.072241][ T6178] ext4_fill_super+0x6e7/0x6870 [ 105.077595][ T6178] get_tree_bdev+0x3e5/0x520 [ 105.082690][ T6178] vfs_get_tree+0x8c/0x280 [ 105.087608][ T6178] do_new_mount+0x24a/0xa40 [ 105.092610][ T6178] init_mount+0xde/0x130 [ 105.097352][ T6178] do_mount_root+0x97/0x230 [ 105.102359][ T6178] mount_root_generic+0x1a6/0x3e0 [ 105.107884][ T6178] prepare_namespace+0xc2/0x100 [ 105.113235][ T6178] kernel_init_freeable+0x41a/0x560 [ 105.118933][ T6178] kernel_init+0x1d/0x1c0 [ 105.123766][ T6178] ret_from_fork+0x48/0x80 [ 105.128682][ T6178] ret_from_fork_asm+0x11/0x20 [ 105.133949][ T6178] [ 105.133949][ T6178] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 105.142536][ T6178] down_write+0x97/0x200 [ 105.147299][ T6178] set_blocksize+0x1ff/0x4b0 [ 105.152404][ T6178] sb_min_blocksize+0xbe/0x190 [ 105.157667][ T6178] ext4_fill_super+0x6e7/0x6870 [ 105.163020][ T6178] get_tree_bdev+0x3e5/0x520 [ 105.168110][ T6178] vfs_get_tree+0x8c/0x280 [ 105.173027][ T6178] do_new_mount+0x24a/0xa40 [ 105.178032][ T6178] init_mount+0xde/0x130 [ 105.182780][ T6178] do_mount_root+0x97/0x230 [ 105.187785][ T6178] mount_root_generic+0x1a6/0x3e0 [ 105.193308][ T6178] prepare_namespace+0xc2/0x100 [ 105.198660][ T6178] kernel_init_freeable+0x41a/0x560 [ 105.204358][ T6178] kernel_init+0x1d/0x1c0 [ 105.209185][ T6178] ret_from_fork+0x48/0x80 [ 105.214101][ T6178] ret_from_fork_asm+0x11/0x20 [ 105.219367][ T6178] [ 105.219367][ T6178] -> #2 (&type->s_umount_key#31){++++}-{3:3}: [ 105.227604][ T6178] down_read+0x46/0x2e0 [ 105.232265][ T6178] super_lock+0x189/0x390 [ 105.237091][ T6178] fs_bdev_mark_dead+0xad/0x1f0 [ 105.242440][ T6178] bdev_mark_dead+0x83/0x1a0 [ 105.247527][ T6178] blk_report_disk_dead+0x21c/0x3e0 [ 105.253230][ T6178] del_gendisk+0x2cb/0x8f0 [ 105.258149][ T6178] sd_remove+0x8d/0x100 [ 105.262806][ T6178] device_release_driver_internal+0x458/0x6f0 [ 105.269375][ T6178] bus_remove_device+0x43b/0x520 [ 105.274814][ T6178] device_del+0x51f/0x910 [ 105.279643][ T6178] __scsi_remove_device+0x1a2/0x390 [ 105.285342][ T6178] scsi_forget_host+0xd0/0x110 [ 105.290611][ T6178] scsi_remove_host+0x1b3/0x730 [ 105.295961][ T6178] virtscsi_remove+0x130/0x1a0 [ 105.301226][ T6178] virtio_dev_remove+0x96/0x1a0 [ 105.306576][ T6178] device_release_driver_internal+0x408/0x6f0 [ 105.313153][ T6178] bus_remove_device+0x43b/0x520 [ 105.318588][ T6178] device_del+0x51f/0x910 [ 105.323425][ T6178] device_unregister+0x20/0xc0 [ 105.328687][ T6178] unregister_virtio_device+0x37/0x60 [ 105.334556][ T6178] virtio_pci_remove+0x7f/0xf0 [ 105.339822][ T6178] pci_device_remove+0x97/0x230 [ 105.345173][ T6178] device_release_driver_internal+0x408/0x6f0 [ 105.351744][ T6178] pci_stop_bus_device+0x108/0x140 [ 105.357359][ T6178] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 105.364361][ T6178] remove_store+0xe6/0x150 [ 105.369280][ T6178] kernfs_fop_write_iter+0x3a4/0x520 [ 105.375086][ T6178] vfs_write+0x474/0x9a0 [ 105.379835][ T6178] ksys_write+0x151/0x260 [ 105.384665][ T6178] do_syscall_64+0x55/0xb0 [ 105.389583][ T6178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.395980][ T6178] [ 105.395980][ T6178] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 105.404120][ T6178] __mutex_lock+0x135/0xc80 [ 105.409133][ T6178] bd_finish_claiming+0x229/0x3f0 [ 105.414655][ T6178] blkdev_get_by_dev+0x469/0x610 [ 105.420178][ T6178] bdev_open_by_dev+0x77/0x100 [ 105.425442][ T6178] setup_bdev_super+0x59/0x660 [ 105.430706][ T6178] mount_bdev+0x1ce/0x2c0 [ 105.435532][ T6178] legacy_get_tree+0xea/0x180 [ 105.440706][ T6178] vfs_get_tree+0x8c/0x280 [ 105.445622][ T6178] do_new_mount+0x24a/0xa40 [ 105.450622][ T6178] init_mount+0xde/0x130 [ 105.455393][ T6178] do_mount_root+0x97/0x230 [ 105.460397][ T6178] mount_root_generic+0x1a6/0x3e0 [ 105.465922][ T6178] prepare_namespace+0xc2/0x100 [ 105.471274][ T6178] kernel_init_freeable+0x41a/0x560 [ 105.476970][ T6178] kernel_init+0x1d/0x1c0 [ 105.481795][ T6178] ret_from_fork+0x48/0x80 [ 105.486713][ T6178] ret_from_fork_asm+0x11/0x20 [ 105.491986][ T6178] [ 105.491986][ T6178] -> #0 (bdev_lock){+.+.}-{3:3}: [ 105.499102][ T6178] __lock_acquire+0x37ef/0x7d80 [ 105.504460][ T6178] lock_acquire+0x19e/0x420 [ 105.509465][ T6178] __mutex_lock+0x135/0xc80 [ 105.514471][ T6178] bd_prepare_to_claim+0x1d9/0x4a0 [ 105.520081][ T6178] truncate_bdev_range+0x4e/0x260 [ 105.525602][ T6178] blkdev_fallocate+0x428/0x6a0 [ 105.530954][ T6178] vfs_fallocate+0x585/0x6f0 [ 105.536051][ T6178] do_madvise+0x166b/0x3790 [ 105.541074][ T6178] __x64_sys_madvise+0xa6/0xc0 [ 105.546339][ T6178] do_syscall_64+0x55/0xb0 [ 105.551261][ T6178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.557655][ T6178] [ 105.557655][ T6178] other info that might help us debug this: [ 105.557655][ T6178] [ 105.567858][ T6178] Chain exists of: [ 105.567858][ T6178] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 105.567858][ T6178] [ 105.582014][ T6178] Possible unsafe locking scenario: [ 105.582014][ T6178] [ 105.589449][ T6178] CPU0 CPU1 [ 105.594796][ T6178] ---- ---- [ 105.600152][ T6178] lock(mapping.invalidate_lock); [ 105.605245][ T6178] lock(&sb->s_type->i_mutex_key#8); [ 105.613121][ T6178] lock(mapping.invalidate_lock); [ 105.620728][ T6178] lock(bdev_lock); [ 105.624607][ T6178] [ 105.624607][ T6178] *** DEADLOCK *** [ 105.624607][ T6178] [ 105.632729][ T6178] 2 locks held by syz.0.106/6178: [ 105.637726][ T6178] #0: ffff8880200c13c0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_fallocate+0x205/0x6a0 [ 105.648404][ T6178] #1: ffff8880200c1550 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 105.658838][ T6178] [ 105.658838][ T6178] stack backtrace: [ 105.664703][ T6178] CPU: 0 PID: 6178 Comm: syz.0.106 Not tainted syzkaller #0 [ 105.671974][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.682024][ T6178] Call Trace: [ 105.685292][ T6178] [ 105.688201][ T6178] dump_stack_lvl+0x18c/0x250 [ 105.692867][ T6178] ? load_image+0x420/0x420 [ 105.697354][ T6178] ? show_regs_print_info+0x20/0x20 [ 105.702540][ T6178] ? print_circular_bug+0x12b/0x1a0 [ 105.707718][ T6178] check_noncircular+0x2fc/0x400 [ 105.712638][ T6178] ? print_deadlock_bug+0x5d0/0x5d0 [ 105.717814][ T6178] ? lockdep_lock+0xf5/0x230 [ 105.722381][ T6178] ? mark_lock+0x94/0x320 [ 105.726689][ T6178] ? _find_first_zero_bit+0xd6/0x100 [ 105.731954][ T6178] __lock_acquire+0x37ef/0x7d80 [ 105.736790][ T6178] ? verify_lock_unused+0x140/0x140 [ 105.741979][ T6178] ? finish_task_switch+0x262/0x8f0 [ 105.747174][ T6178] ? verify_lock_unused+0x140/0x140 [ 105.752353][ T6178] ? finish_task_switch+0x262/0x8f0 [ 105.757533][ T6178] ? __schedule+0x15b6/0x4660 [ 105.762195][ T6178] lock_acquire+0x19e/0x420 [ 105.766676][ T6178] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 105.771952][ T6178] ? __might_sleep+0xe0/0xe0 [ 105.776525][ T6178] ? mark_lock+0x94/0x320 [ 105.780832][ T6178] ? read_lock_is_recursive+0x20/0x20 [ 105.786202][ T6178] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.792164][ T6178] ? __lock_acquire+0x7d80/0x7d80 [ 105.797167][ T6178] ? lock_chain_count+0x20/0x20 [ 105.802002][ T6178] ? _raw_spin_lock_irq+0xbb/0xf0 [ 105.807018][ T6178] __mutex_lock+0x135/0xc80 [ 105.811521][ T6178] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 105.816784][ T6178] ? rcu_is_watching+0x15/0xb0 [ 105.821528][ T6178] ? trace_contention_end+0x3b/0x110 [ 105.826792][ T6178] ? rwsem_down_write_slowpath+0xe0f/0x1020 [ 105.832667][ T6178] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 105.837949][ T6178] ? mutex_lock_nested+0x20/0x20 [ 105.842870][ T6178] ? rwsem_down_read_slowpath+0x880/0x880 [ 105.848595][ T6178] bd_prepare_to_claim+0x1d9/0x4a0 [ 105.853703][ T6178] ? invalidate_bdev+0xc0/0xc0 [ 105.858447][ T6178] ? truncate_bdev_range+0x260/0x260 [ 105.863713][ T6178] ? down_write+0x16e/0x200 [ 105.868195][ T6178] ? down_read_killable+0x340/0x340 [ 105.873374][ T6178] truncate_bdev_range+0x4e/0x260 [ 105.878375][ T6178] blkdev_fallocate+0x428/0x6a0 [ 105.883215][ T6178] vfs_fallocate+0x585/0x6f0 [ 105.887785][ T6178] do_madvise+0x166b/0x3790 [ 105.892271][ T6178] ? __lock_acquire+0x7d80/0x7d80 [ 105.897275][ T6178] ? madvise_set_anon_name+0x440/0x440 [ 105.902717][ T6178] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 105.908590][ T6178] ? _raw_spin_unlock+0x40/0x40 [ 105.913420][ T6178] ? preempt_schedule_thunk+0x1a/0x30 [ 105.918774][ T6178] ? try_to_wake_up+0x6f5/0x10e0 [ 105.923694][ T6178] ? wake_up_q+0xca/0x100 [ 105.928007][ T6178] ? futex_wake+0x42a/0x4f0 [ 105.932503][ T6178] ? futex_wake_mark+0x150/0x150 [ 105.937446][ T6178] ? lock_chain_count+0x20/0x20 [ 105.942309][ T6178] ? do_futex+0x35d/0x3e0 [ 105.946638][ T6178] ? __ia32_sys_get_robust_list+0x110/0x110 [ 105.952521][ T6178] ? slab_free_freelist_hook+0x130/0x1a0 [ 105.958140][ T6178] ? lock_chain_count+0x20/0x20 [ 105.962979][ T6178] __x64_sys_madvise+0xa6/0xc0 [ 105.967736][ T6178] do_syscall_64+0x55/0xb0 [ 105.972140][ T6178] ? clear_bhb_loop+0x40/0x90 [ 105.976805][ T6178] ? clear_bhb_loop+0x40/0x90 [ 105.981463][ T6178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.987341][ T6178] RIP: 0033:0x7fc450f9e159 [ 105.991748][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.011369][ T6178] RSP: 002b:00007fc451da0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 106.019773][ T6178] RAX: ffffffffffffffda RBX: 00007fc451226180 RCX: 00007fc450f9e159 [ 106.027736][ T6178] RDX: 0000000000000009 RSI: 0000000000600003 RDI: 0000200000000000 [ 106.035694][ T6178] RBP: 00007fc45103503b R08: 0000000000000000 R09: 0000000000000000 [ 106.043650][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.051601][ T6178] R13: 00007fc451226218 R14: 00007fc451226180 R15: 00007ffc8ba32d28 [ 106.059559][ T6178] [ 106.067210][ T6166] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 106.414646][ T6167] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 106.436760][ T6167] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 106.458298][ T6167] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 106.517593][ T6167] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 106.527373][ T6167] virtio-pci: probe of 0000:00:03.0 failed with error -22