last executing test programs: 29.262242211s ago: executing program 3 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000000002200000", @ANYRES32, @ANYBLOB="1400030076658e68d4f5181ab448a5498e90719b"], 0x2c}}, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) r1 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000200)={0x7, 0x345cd76e6f03b232, 0x6}, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}]) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) 22.871233759s ago: executing program 3 (id=372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) 21.811315546s ago: executing program 3 (id=378): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183842, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x3) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x10448) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000006900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 20.85102903s ago: executing program 3 (id=379): syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001240)={0xf0f041, 0x64}) 19.571408502s ago: executing program 3 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a00"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a31000000000900020073797a310000000020000000020a010000000000000000000a0000000900010073797a3100000000140000001100010000000000000000000a00000a"], 0x68}}, 0x0) 19.352819837s ago: executing program 3 (id=383): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x1e, 0x201c, 0x0, @value=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="070000000100", 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890) sendmsg$nl_xfrm(r4, 0x0, 0x24004011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 15.470740104s ago: executing program 1 (id=406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 15.254779239s ago: executing program 1 (id=407): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, 0x0, 0xfce1) 14.981817366s ago: executing program 1 (id=410): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettimeofday(&(0x7f0000001040), &(0x7f0000001080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x0, 0x1, 0x1c2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9957b00000064323723e7eecdf40c363423eb3d259266ec9c37865c6c1a3e40ce1b22bb33270450001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e65852548deb01efd54f11ed2c4998d99ece2ab1e39566153c97e4af37017ea6b16b694b94a6e4606c3fb19d1d2bd3c8c4e97b90400000000000000c2000000000000008e6827d61dcc3a633bf6ff250b5a293eb2a39e48660edb720a010000000000000044febf7ddc73fd4a5a000001c55f7f46c7084e17c809268103a0584ab40a68e528329d97afc3652e325c1eb4a3ab2e156a9744480000000800", "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"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x76, &(0x7f00000010c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[@dstopts={0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0xba85}]}], @dest_unreach={0x1, 0x0, 0x0, 0x92, '\x00', {0x8, 0x6, "178367", 0x9, 0x3a, 0xff, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 13.810802115s ago: executing program 4 (id=414): openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x680, 0x80) 13.689467258s ago: executing program 1 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) 13.62811338s ago: executing program 4 (id=417): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) 13.112059302s ago: executing program 1 (id=419): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex$unlock_pi_list64(&(0x7f0000000080)=0x2000, 0x207, 0x10001, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x3ed0907d, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc00020091"], 0x10}}, 0x40408c0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x2, 0x9], 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) io_uring_enter(r0, 0x1e61, 0x9296, 0x1, 0x0, 0x0) 10.136231477s ago: executing program 1 (id=423): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) openat$ptp0(0xffffffffffffff9c, 0x0, 0x101200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000004280)={0x2020}, 0x2020) close(r3) 8.982348515s ago: executing program 4 (id=432): ioctl(0xffffffffffffffff, 0xc138fd0e, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 8.058330998s ago: executing program 4 (id=443): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) 6.117389207s ago: executing program 4 (id=448): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001dc0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1e200}], 0x1, 0x1a00, 0x0, 0x3) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x4208, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x111, 0x5}}, 0x20) 5.880544723s ago: executing program 4 (id=450): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x402) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x400, 0x5}) 5.817819214s ago: executing program 2 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 5.665436538s ago: executing program 2 (id=454): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5829, &(0x7f00000003c0)={0x0, 0x0, 0x1890, 0x11}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5360445b, 0x1c1103) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32, @ANYBLOB="8e2b68b452613d74a541fbcb3aaff82ca9c1c815f7b7390a648fab707cd54cc38b93871faa4248165bf3f2f85f0bfdb53f0670554f781bde5236f6f90bfa3e29ce43ff9944a315fa17"], 0x1c}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000008000000087e8a298525f490e57969fdc06e55496c08f6130541d1aad8c742748eb6b997f134f0f534dcb150"], 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) pipe2$watch_queue(&(0x7f0000000040), 0x80) r3 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x5, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) keyctl$instantiate(0xc, r3, &(0x7f0000000880)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '{\x90&\xab\x1b\x81\xd7\xdc\xe8p\xe7\xb59\xb2\xa9\x9a}\t\xd1\b\xc5\xe7i\xe4^1\t\xfdd\x0f\x95\xf1\x1f\xe9\tq*\x82\xdae\xeeo<\xe5b\xa6V\xff\x9bQ\x156\xa3a\xd67Ef\x9b2:\xf6U\x9b\x96e\xf0\x1c\xc3\xfe\xf5\x86e\xf8\xb5\xd0\xab\xf5V\x93\xc6\xa2`w\xc6]\xbcK\a\x87\x8e\xc3\xecD\xa0\xd3?\xf3^\x1fQ\a3\xb6\x92Q]\x1a8P^\xc12nU\x84qF\xce\x80\xe5\xcc\x1a\xc1\x9e\xdc\xc4\xc9\x1d \xbcCy\nT\xf7\xf5\x0e\x85\\\xe7\x89-\x02\x98\x96\xfc\x96\xa7m\x9b.\xe1L\xccu\x93\x95\xe6J:\xf7\xae\xe8Rz\xe5\x8a7<\x80\x06\xe4\xb2\x84\xfdcL\xf7\xc1\xd5\xd9\x85*\x9a{\xc1\vB\xa3\xa8\xf2\xd9f\\$\x9cvd\xdepug\xa8>P&\xd2\a2kw&C\x96MJ\xd4we\x1d\xb8#\x13\x87f\xa2%\x81\x0f\x11Y\xe1\n\xe6\xd1\xc2CB'}, 0x107, r3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000006c0)={0x0, @reserved}) 3.332924397s ago: executing program 32 (id=383): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x1e, 0x201c, 0x0, @value=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="070000000100", 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890) sendmsg$nl_xfrm(r4, 0x0, 0x24004011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.938538336s ago: executing program 0 (id=460): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c0203010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0xfffffffd}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fchdir(0xffffffffffffffff) shutdown(r0, 0x1) 2.569163345s ago: executing program 5 (id=459): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) 2.518822416s ago: executing program 2 (id=461): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000280)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000001c40)=[{&(0x7f0000000540)="bea3e9366ae9e2894d43829415d34f07d0332b18bc5ea0158145094c9628cdba620fff10a6e4e1580f2f799b439e03689d33c6ee9c5d5501c693eef114856b25634646dc6133859ee01e12685f97e8a59798125597e6eafbeb0e5a2fd48532179b", 0x61}, {&(0x7f00000005c0)="e1028200b7131611028466600c2c9b15286058485e36ebec5bdbf4fd375ee8639fdab650e71386b113ac88ddbb6feea112c30c488b875b3afe963355eb265b2343704a84cc23d292bf40317cb9c40c7767d8e7", 0x53}, {&(0x7f0000000c40)}], 0x3, 0x5, 0xa, 0x14) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ip6gre0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@deltaction={0x1d8, 0x31, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0xffffffffffffffea, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x1d8}}, 0x0) 1.822131414s ago: executing program 5 (id=459): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) 1.510175951s ago: executing program 2 (id=462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) 1.247066008s ago: executing program 0 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a31000000000900020073797a310000000020000000020a010000000000000000000a0000000900010073797a3100000000140000001100010000000000000000000a00000a"], 0x68}}, 0x0) 1.099154502s ago: executing program 0 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 942.384586ms ago: executing program 0 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 897.530327ms ago: executing program 5 (id=459): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) 580.853205ms ago: executing program 0 (id=466): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10fe"], 0xa) 579.547165ms ago: executing program 2 (id=467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) mkdir(0x0, 0x3f) syz_emit_ethernet(0x42, &(0x7f0000001040)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "ffffc1", 0xc, 0x11, 0x0, @local, @local, {[], {0x4e23, 0x7f, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}}}}}}}}, 0x0) 210.853124ms ago: executing program 2 (id=468): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x40901}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 56.632668ms ago: executing program 5 (id=459): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) 0s ago: executing program 0 (id=469): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) kernel console output (not intermixed with test programs): lave_0 entered promiscuous mode [ 67.305323][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.311905][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.319581][ T4192] Cannot create hsr debugfs directory [ 67.347926][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.355246][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.381343][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.414458][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.421553][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.428629][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 67.435986][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.443725][ T4186] Cannot create hsr debugfs directory [ 67.501753][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.504011][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 67.514404][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.515170][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 67.527156][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 67.533582][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.533609][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 67.541222][ T4191] Cannot create hsr debugfs directory [ 67.811577][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.823148][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.849164][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.869569][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.909538][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.925391][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.940568][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.950534][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.015164][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.046274][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.056146][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.088393][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.114714][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.129860][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.172970][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.186917][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.200630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.211206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.226841][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.240802][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.252224][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.262209][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.273148][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.307558][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.317733][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.328440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.337474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.348587][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.377136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.390145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.399735][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.407131][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.418505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.451169][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.460899][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.472939][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.480407][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.489455][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.499620][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.508309][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.515455][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.523502][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.532947][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.562673][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.572149][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.582449][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.589625][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.601848][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.611371][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.651983][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.661233][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.672455][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.681592][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.692732][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.701880][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.711047][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.720340][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.729423][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.738272][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.747124][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.756239][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.765106][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.780256][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.788407][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.807670][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.836126][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.843159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.851968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.861759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.872016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.912328][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.938503][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.947819][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.965287][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.984269][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.009521][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.050438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.060961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.070300][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.077462][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.088095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.097054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.110143][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.117315][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.126365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.137466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.177808][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.186539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.197143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.208737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.220031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.230172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.239558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.249222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.288437][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.303909][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.321841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.332181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.342961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.351990][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.359266][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.368353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.377842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.386710][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.394038][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.401926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.411158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.421771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.430838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.439247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.447660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.455816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.465401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.475574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.485184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.495253][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.502209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.511853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.519902][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 69.535478][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.549675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.557532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.572823][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.583829][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 69.589975][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 69.598988][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.603900][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 69.623450][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 69.652667][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.684465][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.694758][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.706258][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.713445][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.722029][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.731243][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.740757][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.747927][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.757573][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.767580][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.776343][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.785150][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.793657][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.802516][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.811805][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.821655][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.832408][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.841331][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.874203][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.888449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.908879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.921598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.936976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.949811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.959328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.969107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.979016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.995817][ T4190] device veth0_vlan entered promiscuous mode [ 70.022549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.039314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.050055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.060231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.075675][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.103518][ T4190] device veth1_vlan entered promiscuous mode [ 70.124000][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.131540][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.149184][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.159933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.175633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.240323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.251244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.264673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.274172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.283010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.304431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.330147][ T4193] device veth0_vlan entered promiscuous mode [ 70.347981][ T4190] device veth0_macvtap entered promiscuous mode [ 70.364364][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.373080][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.382876][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.417464][ T4190] device veth1_macvtap entered promiscuous mode [ 70.432293][ T4193] device veth1_vlan entered promiscuous mode [ 70.447971][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.458713][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.472409][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.485676][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.494622][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.502079][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.510857][ T4186] device veth0_vlan entered promiscuous mode [ 70.521132][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.529757][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.545310][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.561677][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.580716][ T4186] device veth1_vlan entered promiscuous mode [ 70.592334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.606150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.620477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.632520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.656793][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.674205][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.683221][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.692478][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.701504][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.727874][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.736571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.750415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.760048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.772923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.794941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.849112][ T4193] device veth0_macvtap entered promiscuous mode [ 70.879076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.899971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.936830][ T4193] device veth1_macvtap entered promiscuous mode [ 70.958983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.971233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.980169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.989805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.999127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.009050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.027319][ T4186] device veth0_macvtap entered promiscuous mode [ 71.061384][ T4192] device veth0_vlan entered promiscuous mode [ 71.074661][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.082815][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.092701][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.102096][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.111473][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.122062][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.133203][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.145420][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.160998][ T4186] device veth1_macvtap entered promiscuous mode [ 71.177080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.187783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.201056][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.211956][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.224693][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.247229][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.268897][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.279101][ T4192] device veth1_vlan entered promiscuous mode [ 71.287218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.298889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.307544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.316507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.325499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.336236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.352428][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.362744][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.371881][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.380918][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.409367][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.419988][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.432471][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.439410][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.446399][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.459451][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.470985][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.513127][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.521779][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.532613][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.542089][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.556438][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.567104][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.578387][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.584850][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 71.595875][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.610791][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.619069][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.634561][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.650390][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.660568][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.664889][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 71.679265][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.683896][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 71.694405][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 71.700522][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 71.704320][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.716896][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.725710][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.747322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.765050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.774537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.782556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.791911][ T4191] device veth0_vlan entered promiscuous mode [ 71.829563][ T4192] device veth0_macvtap entered promiscuous mode [ 71.854617][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.865042][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.881020][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.917347][ T4192] device veth1_macvtap entered promiscuous mode [ 71.945108][ T4191] device veth1_vlan entered promiscuous mode [ 71.955711][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.964650][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.999373][ T4262] loop2: detected capacity change from 0 to 512 [ 72.004767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.016404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.031714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.060601][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.074255][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.086484][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.099116][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.111076][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.122122][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.126813][ T4262] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.142854][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.164694][ T4262] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.219689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.243074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.254690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.266912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.277272][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.289184][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.301769][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.314454][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.325330][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.336074][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.350207][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.375798][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.386467][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.396612][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.405660][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.416318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.434110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.447487][ T4191] device veth0_macvtap entered promiscuous mode [ 72.464242][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.472123][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.509681][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.518571][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.537069][ T4191] device veth1_macvtap entered promiscuous mode [ 72.675626][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.675667][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.467726][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.477440][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.566022][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.624901][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.643704][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.665837][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.782202][ T4273] loop3: detected capacity change from 0 to 32768 [ 73.791929][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 73.798326][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 73.804432][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 73.810507][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 73.823555][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 73.835262][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.854089][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.869104][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.881494][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.900196][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.912638][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.926872][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.941699][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.951466][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.960395][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.988744][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.994473][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.009081][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.017848][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.149713][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.275985][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.391853][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.621928][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.677920][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.734785][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.754869][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.779272][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.814658][ T4273] JBD2: Ignoring recovery information on journal [ 74.823424][ T4273] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 74.831899][ T4273] JBD2: bad block at offset 32 [ 74.925193][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.936763][ T4273] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 74.990272][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.020620][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.123291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.143293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.153295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.163296][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.173304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.183304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.193303][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.203294][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.213293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.223290][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.343795][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.471473][ T4292] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 75.492810][ T4292] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 75.502762][ T4292] OCFS2: File system is now read-only. [ 75.508644][ T4292] (syz.3.4,4292,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 75.516985][ T4292] (syz.3.4,4292,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 75.525003][ T4292] (syz.3.4,4292,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 75.532987][ T4292] (syz.3.4,4292,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 75.541547][ T4292] (syz.3.4,4292,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 75.549305][ T4292] (syz.3.4,4292,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 75.557768][ T4292] (syz.3.4,4292,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 75.567375][ T4292] (syz.3.4,4292,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 76.525783][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.605197][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.955772][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 76.980558][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.021227][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.056670][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.157321][ T4299] snd_dummy snd_dummy.0: control 4:8201:0:syz0:1 is already present [ 77.180352][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.208761][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.233045][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.245673][ T4300] loop2: detected capacity change from 0 to 64 [ 77.279136][ T4300] hfs: unable to parse mount options [ 77.321103][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.333722][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.362149][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.426616][ T4306] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11'. [ 80.197807][ T146] Bluetooth: Wrong link type (-22) [ 81.558773][ T4344] FAULT_INJECTION: forcing a failure. [ 81.558773][ T4344] name failslab, interval 1, probability 0, space 0, times 1 [ 81.603418][ T4344] CPU: 1 PID: 4344 Comm: syz.4.21 Not tainted syzkaller #0 [ 81.610783][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.621009][ T4344] Call Trace: [ 81.624413][ T4344] [ 81.627463][ T4344] dump_stack_lvl+0x188/0x250 [ 81.632208][ T4344] ? show_regs_print_info+0x20/0x20 [ 81.637540][ T4344] ? load_image+0x410/0x410 [ 81.642194][ T4344] ? __might_sleep+0xf0/0xf0 [ 81.646909][ T4344] ? __lock_acquire+0x7d40/0x7d40 [ 81.651994][ T4344] should_fail+0x383/0x4b0 [ 81.656462][ T4344] should_failslab+0x5/0x20 [ 81.661039][ T4344] slab_pre_alloc_hook+0x51/0xc0 [ 81.666020][ T4344] ? getname_flags+0xb7/0x4f0 [ 81.670824][ T4344] kmem_cache_alloc+0x3d/0x280 [ 81.675635][ T4344] getname_flags+0xb7/0x4f0 [ 81.680190][ T4344] __x64_sys_mknodat+0x94/0xc0 [ 81.685011][ T4344] do_syscall_64+0x4c/0xa0 [ 81.689474][ T4344] ? clear_bhb_loop+0x30/0x80 [ 81.694194][ T4344] ? clear_bhb_loop+0x30/0x80 [ 81.699090][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.705052][ T4344] RIP: 0033:0x7fe9b78d0159 [ 81.709506][ T4344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.729154][ T4344] RSP: 002b:00007fe9b5b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 81.737620][ T4344] RAX: ffffffffffffffda RBX: 00007fe9b7b57fa0 RCX: 00007fe9b78d0159 [ 81.745630][ T4344] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 81.753645][ T4344] RBP: 00007fe9b796706b R08: 0000000000000000 R09: 0000000000000000 [ 81.761662][ T4344] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 81.769683][ T4344] R13: 00007fe9b7b58038 R14: 00007fe9b7b57fa0 R15: 00007ffff8fb07a8 [ 81.777713][ T4344] [ 81.838556][ T4349] loop3: detected capacity change from 0 to 256 [ 81.877071][ T4350] loop2: detected capacity change from 0 to 512 [ 81.959439][ T4350] EXT4-fs (loop2): Unrecognized mount option "smackfsdef=TIPC" or missing value [ 82.038504][ T4349] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 82.201925][ T4350] loop2: detected capacity change from 0 to 1024 [ 82.281071][ T4350] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,usrquota,init_itable,nojournal_checksum,abort,,errors=continue. Quota mode: writeback. [ 82.354987][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 82.429914][ T4349] netlink: 'syz.3.22': attribute type 3 has an invalid length. [ 82.678643][ T4368] tipc: Enabling of bearer rejected, failed to enable media [ 82.878062][ T4379] Zero length message leads to an empty skb [ 83.166653][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 83.869373][ T4389] ubi0: attaching mtd0 [ 84.014674][ T4389] ubi0: scanning is finished [ 84.019355][ T4389] ubi0: empty MTD device detected [ 84.084667][ T4389] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 84.093531][ T4389] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 84.127551][ T4389] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 84.158491][ T4389] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 84.192758][ T4389] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 84.200039][ T4389] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 84.209107][ T4389] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4131975589 [ 84.220120][ T4389] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 84.242008][ T4392] ubi0: background thread "ubi_bgt0d" started, PID 4392 [ 84.572832][ T4382] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 85.928728][ T4418] loop1: detected capacity change from 0 to 256 [ 86.002030][ T4418] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 86.434143][ T4434] FAULT_INJECTION: forcing a failure. [ 86.434143][ T4434] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.448058][ T4434] CPU: 1 PID: 4434 Comm: syz.2.44 Not tainted syzkaller #0 [ 86.448168][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.448190][ T4434] Call Trace: [ 86.448199][ T4434] [ 86.472033][ T4434] dump_stack_lvl+0x188/0x250 [ 86.476752][ T4434] ? show_regs_print_info+0x20/0x20 [ 86.481983][ T4434] ? load_image+0x410/0x410 [ 86.486525][ T4434] ? uncharge_page+0x490/0x490 [ 86.491338][ T4434] should_fail+0x383/0x4b0 [ 86.495803][ T4434] prepare_alloc_pages+0x1e3/0x5b0 [ 86.500966][ T4434] __alloc_pages+0x11b/0x480 [ 86.505597][ T4434] ? zone_statistics+0x170/0x170 [ 86.510668][ T4434] ? rcu_lock_acquire+0x30/0x30 [ 86.515565][ T4434] ? alloc_pages+0x452/0x560 [ 86.520199][ T4434] __get_free_pages+0x8/0x30 [ 86.524823][ T4434] __tlb_remove_page_size+0x1f2/0x3f0 [ 86.530242][ T4434] unmap_page_range+0xfcf/0x2410 [ 86.535338][ T4434] unmap_vmas+0x131/0x250 [ 86.539714][ T4434] ? unmap_page_range+0x2410/0x2410 [ 86.544988][ T4434] ? __mutex_lock_common+0x435/0x2400 [ 86.550496][ T4434] ? exit_mm_release+0x16/0x30 [ 86.555317][ T4434] exit_mmap+0x3b9/0x640 [ 86.559608][ T4434] ? vm_brk+0x20/0x20 [ 86.563649][ T4434] ? uprobe_clear_state+0x2f6/0x460 [ 86.568899][ T4434] __mmput+0x115/0x390 [ 86.573014][ T4434] exit_mm+0x632/0x7b0 [ 86.577127][ T4434] ? perf_pmu_migrate_context+0xb70/0xb70 [ 86.583064][ T4434] ? do_exit+0x2110/0x2110 [ 86.587529][ T4434] ? __ia32_sys_timer_delete+0x40/0x40 [ 86.593031][ T4434] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 86.598541][ T4434] ? tty_audit_exit+0x149/0x1f0 [ 86.603473][ T4434] do_exit+0x5b8/0x2110 [ 86.607685][ T4434] ? put_task_struct+0x80/0x80 [ 86.612489][ T4434] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.618516][ T4434] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.623675][ T4434] do_group_exit+0x12c/0x2f0 [ 86.628306][ T4434] ? lockdep_hardirqs_on+0x94/0x140 [ 86.633557][ T4434] get_signal+0x7eb/0x12e0 [ 86.638043][ T4434] arch_do_signal_or_restart+0xe6/0x12a0 [ 86.643736][ T4434] ? futex_exit_release+0x1c0/0x1c0 [ 86.648978][ T4434] ? get_sigframe_size+0x10/0x10 [ 86.653957][ T4434] ? __context_tracking_exit+0x4c/0x80 [ 86.659431][ T4434] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.665428][ T4434] ? exit_to_user_mode_loop+0x3b/0x130 [ 86.670901][ T4434] exit_to_user_mode_loop+0x9e/0x130 [ 86.676193][ T4434] exit_to_user_mode_prepare+0xee/0x180 [ 86.681823][ T4434] syscall_exit_to_user_mode+0x16/0x40 [ 86.687322][ T4434] do_syscall_64+0x58/0xa0 [ 86.691787][ T4434] ? clear_bhb_loop+0x30/0x80 [ 86.696482][ T4434] ? clear_bhb_loop+0x30/0x80 [ 86.701212][ T4434] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.707123][ T4434] RIP: 0033:0x7f0134d8d159 [ 86.711565][ T4434] Code: Unable to access opcode bytes at RIP 0x7f0134d8d12f. [ 86.718948][ T4434] RSP: 002b:00007f0132fe50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.733957][ T4434] RAX: 0000000000000001 RBX: 00007f0135014fa8 RCX: 00007f0134d8d159 [ 86.742486][ T4434] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0135014fac [ 86.750493][ T4434] RBP: 00007f0135014fa0 R08: 00162adc5010aef2 R09: 0000000000000000 [ 86.758503][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.766488][ T4434] R13: 00007f0135015038 R14: 00007ffc96c03ef0 R15: 00007ffc96c03fd8 [ 86.774483][ T4434] [ 86.790794][ T1325] cfg80211: failed to load regulatory.db [ 87.164272][ T4451] loop3: detected capacity change from 0 to 32768 [ 88.743830][ T4451] JBD2: Ignoring recovery information on journal [ 88.752649][ T4451] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 88.761081][ T4451] JBD2: bad block at offset 32 [ 88.821761][ T4452] loop1: detected capacity change from 0 to 32768 [ 88.865100][ T4451] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 89.033584][ T4452] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 89.071562][ T4452] JBD2: Ignoring recovery information on journal [ 89.079676][ T4452] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 89.087969][ T4452] JBD2: bad block at offset 32 [ 89.114346][ T4452] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 89.893531][ T4472] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 89.914410][ T4472] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 89.924335][ T4472] OCFS2: File system is now read-only. [ 89.929832][ T4472] (syz.1.51,4472,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 89.938136][ T4472] (syz.1.51,4472,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 89.946194][ T4472] (syz.1.51,4472,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 89.954235][ T4472] (syz.1.51,4472,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 89.962706][ T4472] (syz.1.51,4472,1):ocfs2_write_cluster:1156 ERROR: status = -30 [ 89.970492][ T4472] (syz.1.51,4472,1):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 89.979007][ T4472] (syz.1.51,4472,1):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 89.987298][ T4472] (syz.1.51,4472,1):ocfs2_write_begin:1910 ERROR: status = -30 [ 90.516886][ T4475] loop0: detected capacity change from 0 to 256 [ 90.546474][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 90.579683][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 90.932663][ T4475] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 93.683570][ T4227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.973488][ T4227] usb 3-1: Using ep0 maxpacket: 8 [ 94.085247][ T4498] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.114614][ T4227] usb 3-1: config 0 has no interfaces? [ 94.303746][ T4227] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 94.312865][ T4227] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 94.334364][ T4503] device syzkaller0 entered promiscuous mode [ 94.368533][ T4227] usb 3-1: Product: syz [ 94.372781][ T4227] usb 3-1: Manufacturer: syz [ 94.386330][ T4227] usb 3-1: SerialNumber: syz [ 94.430019][ T4227] usb 3-1: config 0 descriptor?? [ 94.872966][ T4509] loop3: detected capacity change from 0 to 32768 [ 94.879926][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.906580][ T4259] usb 3-1: USB disconnect, device number 2 [ 94.966753][ T4509] JBD2: Ignoring recovery information on journal [ 94.974998][ T4509] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 94.983318][ T4509] JBD2: bad block at offset 32 [ 95.007732][ T4509] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.256667][ T4516] loop1: detected capacity change from 0 to 32768 [ 95.373964][ T1108] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.418536][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.587224][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.623352][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.780154][ T1108] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.799884][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.826993][ T1108] usb 1-1: Product: syz [ 95.839392][ T1108] usb 1-1: Manufacturer: syz [ 95.931238][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 95.965422][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 95.999082][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 96.023100][ T1108] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 96.039997][ T1108] cdc_wdm 1-1:1.0: Unknown control protocol [ 96.077148][ T4516] JBD2: Ignoring recovery information on journal [ 96.085369][ T4516] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 96.093696][ T4516] JBD2: bad block at offset 32 [ 96.146389][ T4516] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.753395][ T4531] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 96.783360][ T4531] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 96.793356][ T4531] OCFS2: File system is now read-only. [ 96.798861][ T4531] (syz.1.70,4531,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 96.807486][ T4531] (syz.1.70,4531,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 96.815564][ T4531] (syz.1.70,4531,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 96.823745][ T4531] (syz.1.70,4531,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 96.832212][ T4531] (syz.1.70,4531,1):ocfs2_write_cluster:1156 ERROR: status = -30 [ 96.840974][ T4531] (syz.1.70,4531,1):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 96.849480][ T4531] (syz.1.70,4531,1):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 96.858920][ T4531] (syz.1.70,4531,1):ocfs2_write_begin:1910 ERROR: status = -30 [ 97.450189][ T13] usb 1-1: USB disconnect, device number 2 [ 97.483243][ C1] sched: RT throttling activated [ 97.784075][ T4537] loop4: detected capacity change from 0 to 256 [ 97.949815][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 98.300435][ T4537] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 98.758247][ T4565] using random self ethernet address [ 98.786309][ T4565] using random host ethernet address [ 99.823980][ T4565] usb0: HOST MAC ba:c3:9c:2b:4d:bb [ 99.829855][ T4565] usb0: MAC 72:c3:32:13:92:cd [ 99.982065][ T4579] loop2: detected capacity change from 0 to 64 [ 100.051996][ T4579] hfs: unable to parse mount options [ 100.144692][ T4577] loop4: detected capacity change from 0 to 32768 [ 100.307504][ T1325] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.322226][ T4577] JBD2: Ignoring recovery information on journal [ 100.330256][ T4577] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 100.338608][ T4577] JBD2: bad block at offset 32 [ 100.360297][ T4585] FAULT_INJECTION: forcing a failure. [ 100.360297][ T4585] name failslab, interval 1, probability 0, space 0, times 0 [ 100.412818][ T4577] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 100.604731][ T4585] CPU: 0 PID: 4585 Comm: syz.0.90 Not tainted syzkaller #0 [ 100.612024][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.622091][ T4585] Call Trace: [ 100.625387][ T4585] [ 100.628327][ T4585] dump_stack_lvl+0x188/0x250 [ 100.633016][ T4585] ? show_regs_print_info+0x20/0x20 [ 100.638223][ T4585] ? load_image+0x410/0x410 [ 100.642759][ T4585] ? __might_sleep+0xf0/0xf0 [ 100.647373][ T4585] ? __lock_acquire+0x7d40/0x7d40 [ 100.652431][ T4585] should_fail+0x383/0x4b0 [ 100.656881][ T4585] should_failslab+0x5/0x20 [ 100.661433][ T4585] slab_pre_alloc_hook+0x51/0xc0 [ 100.666304][ T4595] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 100.687176][ T4585] kmem_cache_alloc_trace+0x47/0x290 [ 100.687251][ T4585] ? __list_lru_init+0x535/0xac0 [ 100.687282][ T4585] __list_lru_init+0x535/0xac0 [ 100.687319][ T4585] alloc_super+0x787/0x970 [ 100.687347][ T4585] ? kill_litter_super+0xa0/0xa0 [ 100.687370][ T4585] sget_fc+0x2d4/0x6f0 [ 100.687395][ T4585] ? kill_litter_super+0xa0/0xa0 [ 100.687419][ T4585] ? mqueue_get_tree+0xe0/0xe0 [ 100.687442][ T4585] get_tree_nodev+0x26/0x160 [ 100.687469][ T4585] vfs_get_tree+0x88/0x270 [ 100.687495][ T4585] fc_mount+0x18/0xa0 [ 100.687519][ T4585] mq_init_ns+0x39d/0x510 [ 100.693065][ T4595] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 100.697774][ T4585] copy_ipcs+0x2ea/0x4b0 [ 100.697802][ T4585] create_new_namespaces+0x212/0x700 [ 100.697841][ T4585] unshare_nsproxy_namespaces+0x116/0x160 [ 100.697870][ T4585] ksys_unshare+0x4f6/0x8e0 [ 100.697894][ T4585] ? __lock_acquire+0x7d40/0x7d40 [ 100.702878][ T4595] OCFS2: File system is now read-only. [ 100.707115][ T4585] ? sighand_ctor+0x40/0x40 [ 100.707143][ T4585] ? lock_chain_count+0x20/0x20 [ 100.707175][ T4585] ? syscall_enter_from_user_mode+0x21/0x70 [ 100.707209][ T4585] __x64_sys_unshare+0x34/0x40 [ 100.712350][ T4595] (syz.4.87,4595,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 100.716253][ T4585] do_syscall_64+0x4c/0xa0 [ 100.716279][ T4585] ? clear_bhb_loop+0x30/0x80 [ 100.716303][ T4585] ? clear_bhb_loop+0x30/0x80 [ 100.716327][ T4585] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.716354][ T4585] RIP: 0033:0x7f533e606159 [ 100.721492][ T4595] (syz.4.87,4595,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 100.726079][ T4585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.726099][ T4585] RSP: 002b:00007f533c85e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 100.726123][ T4585] RAX: ffffffffffffffda RBX: 00007f533e88dfa0 RCX: 00007f533e606159 [ 100.726139][ T4585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 100.726153][ T4585] RBP: 00007f533e69d06b R08: 0000000000000000 R09: 0000000000000000 [ 100.726167][ T4585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.726181][ T4585] R13: 00007f533e88e038 R14: 00007f533e88dfa0 R15: 00007ffd3cb82ca8 [ 100.726213][ T4585] [ 100.921485][ T4595] (syz.4.87,4595,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 100.929704][ T4595] (syz.4.87,4595,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 100.938317][ T4595] (syz.4.87,4595,1):ocfs2_write_cluster:1156 ERROR: status = -30 [ 100.946222][ T4595] (syz.4.87,4595,1):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 100.954847][ T4595] (syz.4.87,4595,1):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 100.963311][ T4595] (syz.4.87,4595,1):ocfs2_write_begin:1910 ERROR: status = -30 [ 101.435071][ T4596] overlayfs: failed to resolve './file0': -2 [ 101.573518][ T1325] usb 1-1: Dual-Role OTG device on HNP port [ 101.658990][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 101.769253][ T1325] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 101.788707][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.023594][ T1325] cdc_ncm 1-1:1.0: MAC-Address: ba:c3:9c:2b:4d:bb [ 102.094424][ T1325] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, ba:c3:9c:2b:4d:bb [ 104.206532][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 104.926657][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 106.426198][ T4646] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 106.463129][ T4666] loop2: detected capacity change from 0 to 1024 [ 107.903733][ T4227] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.263497][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.333024][ T4227] usb 2-1: config 0 has no interfaces? [ 108.555906][ T4227] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 108.606352][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.727229][ T4227] usb 2-1: Product: syz [ 108.784525][ T4227] usb 2-1: Manufacturer: syz [ 108.848560][ T4227] usb 2-1: SerialNumber: syz [ 109.020869][ T4227] usb 2-1: config 0 descriptor?? [ 109.309152][ T4671] udc-core: couldn't find an available UDC or it's busy [ 109.333454][ T4671] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.405680][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 109.451140][ T21] usb 2-1: USB disconnect, device number 2 [ 110.187079][ T4724] loop2: detected capacity change from 0 to 64 [ 110.659180][ T4735] loop1: detected capacity change from 0 to 1024 [ 113.424027][ T1325] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 114.779365][ T1325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.916190][ T1325] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 115.053759][ T1325] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 115.076331][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 115.112738][ T1325] usb 4-1: SerialNumber: syz [ 115.136990][ T1325] usb 4-1: config 0 descriptor?? [ 115.195489][ T1325] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 115.202661][ T1325] dvb-usb: bulk message failed: -22 (3/0) [ 115.259359][ T1325] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 115.293804][ T1325] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 115.310194][ T1325] usb 4-1: media controller created [ 115.332658][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.387238][ T1325] dvb-usb: bulk message failed: -22 (6/0) [ 115.409088][ T4792] loop1: detected capacity change from 0 to 64 [ 115.415649][ T1325] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 115.505520][ T1325] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 115.581833][ T1325] dvb-usb: schedule remote query interval to 150 msecs. [ 115.699972][ T1325] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 116.525835][ T1325] usb 4-1: USB disconnect, device number 2 [ 117.192749][ T1325] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 117.383927][ T4835] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 117.710080][ T4843] loop1: detected capacity change from 0 to 256 [ 117.831157][ T4845] FAULT_INJECTION: forcing a failure. [ 117.831157][ T4845] name failslab, interval 1, probability 0, space 0, times 0 [ 117.849517][ T4843] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 117.927719][ T4845] CPU: 0 PID: 4845 Comm: syz.2.154 Not tainted syzkaller #0 [ 117.935171][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.945269][ T4845] Call Trace: [ 117.948580][ T4845] [ 117.951551][ T4845] dump_stack_lvl+0x188/0x250 [ 117.956309][ T4845] ? show_regs_print_info+0x20/0x20 [ 117.961552][ T4845] ? load_image+0x410/0x410 [ 117.966100][ T4845] ? __might_sleep+0xf0/0xf0 [ 117.970732][ T4845] ? __lock_acquire+0x7d40/0x7d40 [ 117.975799][ T4845] should_fail+0x383/0x4b0 [ 117.980265][ T4845] should_failslab+0x5/0x20 [ 117.984803][ T4845] slab_pre_alloc_hook+0x51/0xc0 [ 117.989778][ T4845] kmem_cache_alloc_node+0x47/0x2c0 [ 117.995008][ T4845] ? dup_task_struct+0x57/0xbc0 [ 117.999904][ T4845] dup_task_struct+0x57/0xbc0 [ 118.004615][ T4845] ? _raw_spin_unlock_irq+0x1f/0x40 [ 118.009849][ T4845] ? lockdep_hardirqs_on+0x94/0x140 [ 118.015096][ T4845] copy_process+0x61f/0x3e70 [ 118.019759][ T4845] ? __pidfd_prepare+0x140/0x140 [ 118.024740][ T4845] ? verify_lock_unused+0x140/0x140 [ 118.029981][ T4845] kernel_clone+0x23f/0x990 [ 118.034560][ T4845] ? create_io_thread+0x180/0x180 [ 118.039642][ T4845] __x64_sys_clone+0x19a/0x210 [ 118.044449][ T4845] ? __ia32_sys_vfork+0x130/0x130 [ 118.049524][ T4845] ? lockdep_hardirqs_on+0x94/0x140 [ 118.054766][ T4845] do_syscall_64+0x4c/0xa0 [ 118.059213][ T4845] ? clear_bhb_loop+0x30/0x80 [ 118.063932][ T4845] ? clear_bhb_loop+0x30/0x80 [ 118.068652][ T4845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.074585][ T4845] RIP: 0033:0x7f0134d8d159 [ 118.079033][ T4845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.098676][ T4845] RSP: 002b:00007f0132fe4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 118.107137][ T4845] RAX: ffffffffffffffda RBX: 00007f0135014fa0 RCX: 00007f0134d8d159 [ 118.115142][ T4845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 118.123154][ T4845] RBP: 00007f0134e2406b R08: 0000000000000000 R09: 0000000000000000 [ 118.131254][ T4845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.139259][ T4845] R13: 00007f0135015038 R14: 00007f0135014fa0 R15: 00007ffc96c03fd8 [ 118.147286][ T4845] [ 119.390401][ T4870] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.825249][ T4881] FAULT_INJECTION: forcing a failure. [ 119.825249][ T4881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.838682][ T4881] CPU: 0 PID: 4881 Comm: syz.0.166 Not tainted syzkaller #0 [ 119.846011][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.856106][ T4881] Call Trace: [ 119.859532][ T4881] [ 119.862490][ T4881] dump_stack_lvl+0x188/0x250 [ 119.867205][ T4881] ? show_regs_print_info+0x20/0x20 [ 119.872641][ T4881] ? load_image+0x410/0x410 [ 119.877198][ T4881] ? uncharge_page+0x490/0x490 [ 119.882014][ T4881] should_fail+0x383/0x4b0 [ 119.886566][ T4881] prepare_alloc_pages+0x1e3/0x5b0 [ 119.893118][ T4881] __alloc_pages+0x11b/0x480 [ 119.897775][ T4881] ? zone_statistics+0x170/0x170 [ 119.902767][ T4881] ? rcu_lock_acquire+0x30/0x30 [ 119.907673][ T4881] ? alloc_pages+0x452/0x560 [ 119.912308][ T4881] __get_free_pages+0x8/0x30 [ 119.916935][ T4881] __tlb_remove_page_size+0x1f2/0x3f0 [ 119.922356][ T4881] unmap_page_range+0xfcf/0x2410 [ 119.927404][ T4881] unmap_vmas+0x131/0x250 [ 119.932001][ T4881] ? unmap_page_range+0x2410/0x2410 [ 119.938897][ T4881] ? __mutex_lock_common+0x435/0x2400 [ 119.944340][ T4881] ? exit_mm_release+0x16/0x30 [ 119.949158][ T4881] exit_mmap+0x3b9/0x640 [ 119.953450][ T4881] ? vm_brk+0x20/0x20 [ 119.957500][ T4881] ? uprobe_clear_state+0x2f6/0x460 [ 119.962752][ T4881] __mmput+0x115/0x390 [ 119.966863][ T4881] exit_mm+0x632/0x7b0 [ 119.970970][ T4881] ? perf_pmu_migrate_context+0xb70/0xb70 [ 119.976764][ T4881] ? do_exit+0x2110/0x2110 [ 119.981217][ T4881] ? __ia32_sys_timer_delete+0x40/0x40 [ 119.986754][ T4881] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 119.992260][ T4881] ? tty_audit_exit+0x149/0x1f0 [ 119.997156][ T4881] do_exit+0x5b8/0x2110 [ 120.001434][ T4881] ? put_task_struct+0x80/0x80 [ 120.006230][ T4881] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.012253][ T4881] ? _raw_spin_lock_irq+0xb7/0xf0 [ 120.017331][ T4881] do_group_exit+0x12c/0x2f0 [ 120.021951][ T4881] ? lockdep_hardirqs_on+0x94/0x140 [ 120.027194][ T4881] get_signal+0x7eb/0x12e0 [ 120.031661][ T4881] arch_do_signal_or_restart+0xe6/0x12a0 [ 120.037428][ T4881] ? pptp_bind+0x400/0x400 [ 120.041891][ T4881] ? futex_exit_release+0x1c0/0x1c0 [ 120.047128][ T4881] ? get_sigframe_size+0x10/0x10 [ 120.052111][ T4881] ? __context_tracking_exit+0x4c/0x80 [ 120.057624][ T4881] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.063656][ T4881] ? exit_to_user_mode_loop+0x3b/0x130 [ 120.069148][ T4881] exit_to_user_mode_loop+0x9e/0x130 [ 120.074485][ T4881] exit_to_user_mode_prepare+0xee/0x180 [ 120.080087][ T4881] syscall_exit_to_user_mode+0x16/0x40 [ 120.085584][ T4881] do_syscall_64+0x58/0xa0 [ 120.090041][ T4881] ? clear_bhb_loop+0x30/0x80 [ 120.094762][ T4881] ? clear_bhb_loop+0x30/0x80 [ 120.099485][ T4881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.105427][ T4881] RIP: 0033:0x7f533e606159 [ 120.109873][ T4881] Code: Unable to access opcode bytes at RIP 0x7f533e60612f. [ 120.117265][ T4881] RSP: 002b:00007f533c85e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.125724][ T4881] RAX: fffffffffffffe00 RBX: 00007f533e88dfa8 RCX: 00007f533e606159 [ 120.133761][ T4881] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f533e88dfa8 [ 120.141776][ T4881] RBP: 00007f533e88dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 120.149781][ T4881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.157824][ T4881] R13: 00007f533e88e038 R14: 00007ffd3cb82bc0 R15: 00007ffd3cb82ca8 [ 120.165867][ T4881] [ 120.564467][ T4887] loop2: detected capacity change from 0 to 32768 [ 120.649755][ T4887] JBD2: Ignoring recovery information on journal [ 120.659488][ T4887] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 120.667822][ T4887] JBD2: bad block at offset 32 [ 120.732884][ T4887] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.129918][ T4905] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 121.152733][ T4905] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 121.162742][ T4905] OCFS2: File system is now read-only. [ 121.168368][ T4905] (syz.2.168,4905,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 121.176882][ T4905] (syz.2.168,4905,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 121.185200][ T4905] (syz.2.168,4905,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 121.193546][ T4905] (syz.2.168,4905,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 121.202280][ T4905] (syz.2.168,4905,1):ocfs2_write_cluster:1156 ERROR: status = -30 [ 121.210354][ T4905] (syz.2.168,4905,1):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 121.219099][ T4905] (syz.2.168,4905,1):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 121.231479][ T4905] (syz.2.168,4905,1):ocfs2_write_begin:1910 ERROR: status = -30 [ 122.164664][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 122.166768][ T4914] ip_tables: iptables: counters copy to user failed while replacing table [ 123.388866][ T26] audit: type=1326 audit(1791081666.169:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 123.500363][ T26] audit: type=1326 audit(1791081666.189:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 123.529957][ T4927] loop3: detected capacity change from 0 to 256 [ 123.569283][ T26] audit: type=1326 audit(1791081666.189:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 123.693680][ T26] audit: type=1326 audit(1791081666.189:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 123.821432][ T4927] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 123.873428][ T26] audit: type=1326 audit(1791081666.199:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 123.918680][ T26] audit: type=1326 audit(1791081666.199:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 124.171266][ T26] audit: type=1326 audit(1791081666.199:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 124.266411][ T26] audit: type=1326 audit(1791081666.199:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 124.301270][ T4941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.181'. [ 125.114341][ T26] audit: type=1326 audit(1791081666.199:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 125.224054][ T26] audit: type=1326 audit(1791081666.199:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0134d8d159 code=0x7ffc0000 [ 125.870179][ T4959] loop4: detected capacity change from 0 to 32768 [ 126.028822][ T4968] loop3: detected capacity change from 0 to 32768 [ 127.282070][ T4959] JBD2: Ignoring recovery information on journal [ 127.283780][ T4968] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 127.293055][ T4959] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 127.306946][ T4959] JBD2: bad block at offset 32 [ 127.317715][ T4968] JBD2: Ignoring recovery information on journal [ 127.326455][ T4968] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 127.335181][ T4968] JBD2: bad block at offset 32 [ 127.344075][ T4959] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 127.457223][ T4979] loop2: detected capacity change from 0 to 64 [ 127.525149][ T4968] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.950210][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 128.049670][ T4995] netlink: 68 bytes leftover after parsing attributes in process `syz.2.194'. [ 128.982451][ T5002] loop2: detected capacity change from 0 to 256 [ 129.099536][ T5002] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 129.210269][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 129.231130][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 129.270712][ T5002] netlink: 'syz.2.197': attribute type 3 has an invalid length. [ 129.305874][ T5009] fuse: Bad value for 'fd' [ 129.616411][ T4736] usb 1-1: USB disconnect, device number 3 [ 129.636779][ T4736] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 130.445742][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 130.445760][ T26] audit: type=1400 audit(1791081673.219:33): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5019 comm="syz.3.200" name="p" offset=43 [ 130.846491][ T5035] loop1: detected capacity change from 0 to 32768 [ 130.883383][ T4231] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 130.937221][ T5035] JBD2: Ignoring recovery information on journal [ 130.946567][ T5035] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 130.954865][ T5035] JBD2: bad block at offset 32 [ 130.976618][ T5035] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 131.161678][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 131.293411][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.343957][ T4231] usb 5-1: not running at top speed; connect to a high speed hub [ 131.566093][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 131.689407][ T5059] loop3: detected capacity change from 0 to 64 [ 131.796088][ T5055] loop2: detected capacity change from 0 to 32768 [ 131.833404][ T4231] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 131.843337][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.853117][ T4231] usb 5-1: Product: syz [ 131.874935][ T4231] usb 5-1: Manufacturer: syz [ 131.879812][ T4231] usb 5-1: SerialNumber: syz [ 131.931729][ T5055] JBD2: Ignoring recovery information on journal [ 131.939754][ T5055] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 131.948044][ T5055] JBD2: bad block at offset 32 [ 132.017400][ T5055] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 132.350242][ T5074] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 132.371564][ T5074] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 132.381673][ T5074] OCFS2: File system is now read-only. [ 132.387257][ T5074] (syz.2.208,5074,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 132.395738][ T5074] (syz.2.208,5074,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 132.403961][ T5074] (syz.2.208,5074,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 132.412129][ T5074] (syz.2.208,5074,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 132.420762][ T5074] (syz.2.208,5074,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 132.428817][ T5074] (syz.2.208,5074,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 132.437455][ T5074] (syz.2.208,5074,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 132.446206][ T5074] (syz.2.208,5074,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 132.876872][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943065][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.073152][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 134.470453][ T26] audit: type=1400 audit(1791081677.239:34): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5083 comm="syz.1.214" name="p" offset=43 [ 134.697128][ T5101] loop3: detected capacity change from 0 to 256 [ 134.773767][ T4231] usb 5-1: MIDIStreaming interface descriptor not found [ 134.795626][ T5108] loop4: detected capacity change from 0 to 64 [ 135.112579][ T4231] usb 5-1: USB disconnect, device number 2 [ 135.297098][ T5101] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.605603][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 135.643350][ T5101] netlink: 'syz.3.217': attribute type 3 has an invalid length. [ 135.748298][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.789220][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 137.334199][ T5153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 137.592301][ T5151] loop1: detected capacity change from 0 to 32768 [ 137.719539][ T5151] JBD2: Ignoring recovery information on journal [ 137.727576][ T5151] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 137.735853][ T5151] JBD2: bad block at offset 32 [ 138.466507][ T26] audit: type=1400 audit(1791081681.219:35): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5156 comm="syz.2.229" name="p" offset=43 [ 139.061005][ T5151] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.108388][ T5172] syz.3.232 uses obsolete (PF_INET,SOCK_PACKET) [ 140.818348][ T5200] loop4: detected capacity change from 0 to 256 [ 140.955583][ T5200] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 141.107045][ T5208] loop3: detected capacity change from 0 to 1024 [ 141.883814][ T5213] FAULT_INJECTION: forcing a failure. [ 141.883814][ T5213] name failslab, interval 1, probability 0, space 0, times 0 [ 141.906550][ T5213] CPU: 0 PID: 5213 Comm: syz.2.242 Not tainted syzkaller #0 [ 141.914066][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.924205][ T5213] Call Trace: [ 141.927526][ T5213] [ 141.930492][ T5213] dump_stack_lvl+0x188/0x250 [ 141.931299][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 141.935206][ T5213] ? show_regs_print_info+0x20/0x20 [ 141.935233][ T5213] ? load_image+0x410/0x410 [ 141.935257][ T5213] ? __lock_acquire+0x7d40/0x7d40 [ 141.935282][ T5213] ? _raw_spin_lock_irq+0xb7/0xf0 [ 141.935310][ T5213] should_fail+0x383/0x4b0 [ 141.965935][ T5213] should_failslab+0x5/0x20 [ 141.970481][ T5213] slab_pre_alloc_hook+0x51/0xc0 [ 141.975468][ T5213] kmem_cache_alloc_trace+0x47/0x290 [ 141.980804][ T5213] ? copy_ipcs+0x12e/0x4b0 [ 141.985273][ T5213] copy_ipcs+0x12e/0x4b0 [ 141.989561][ T5213] create_new_namespaces+0x212/0x700 [ 141.994912][ T5213] unshare_nsproxy_namespaces+0x116/0x160 [ 142.000675][ T5213] ksys_unshare+0x4f6/0x8e0 [ 142.005212][ T5213] ? __lock_acquire+0x7d40/0x7d40 [ 142.010264][ T5213] ? sighand_ctor+0x40/0x40 [ 142.014797][ T5213] ? lock_chain_count+0x20/0x20 [ 142.019670][ T5213] ? syscall_enter_from_user_mode+0x21/0x70 [ 142.025783][ T5213] __x64_sys_unshare+0x34/0x40 [ 142.030650][ T5213] do_syscall_64+0x4c/0xa0 [ 142.035085][ T5213] ? clear_bhb_loop+0x30/0x80 [ 142.039785][ T5213] ? clear_bhb_loop+0x30/0x80 [ 142.044484][ T5213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.050403][ T5213] RIP: 0033:0x7f0134d8d159 [ 142.054842][ T5213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.074499][ T5213] RSP: 002b:00007f0132fe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 142.083028][ T5213] RAX: ffffffffffffffda RBX: 00007f0135014fa0 RCX: 00007f0134d8d159 [ 142.091041][ T5213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 142.099035][ T5213] RBP: 00007f0134e2406b R08: 0000000000000000 R09: 0000000000000000 [ 142.107039][ T5213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.115047][ T5213] R13: 00007f0135015038 R14: 00007f0135014fa0 R15: 00007ffc96c03fd8 [ 142.123056][ T5213] [ 142.536165][ T5226] netlink: 68 bytes leftover after parsing attributes in process `syz.0.247'. [ 142.851097][ T5239] loop1: detected capacity change from 0 to 32768 [ 143.135778][ T5239] JBD2: Ignoring recovery information on journal [ 143.143905][ T5239] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 143.152128][ T5239] JBD2: bad block at offset 32 [ 143.254315][ T5239] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 143.970167][ T5251] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 143.991051][ T5251] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 144.000945][ T5251] OCFS2: File system is now read-only. [ 144.006465][ T5251] (syz.1.243,5251,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 144.014857][ T5251] (syz.1.243,5251,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 144.023017][ T5251] (syz.1.243,5251,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 144.031155][ T5251] (syz.1.243,5251,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 144.039730][ T5251] (syz.1.243,5251,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 144.047607][ T5251] (syz.1.243,5251,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 144.056176][ T5251] (syz.1.243,5251,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 144.064564][ T5251] (syz.1.243,5251,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 144.660473][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 144.816402][ T5259] loop4: detected capacity change from 0 to 1024 [ 145.727375][ T5271] loop1: detected capacity change from 0 to 64 [ 146.118899][ T5249] loop3: detected capacity change from 0 to 32768 [ 146.257509][ T5249] (syz.3.253,5249,0):ocfs2_initialize_super:2311 ERROR: status = -12 [ 146.271314][ T5285] loop1: detected capacity change from 0 to 256 [ 146.297967][ T5249] (syz.3.253,5249,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 146.596175][ T5292] netlink: 68 bytes leftover after parsing attributes in process `syz.3.262'. [ 146.669633][ T5285] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 147.020378][ T5305] fuse: Bad value for 'fd' [ 149.923077][ T5331] loop1: detected capacity change from 0 to 1024 [ 150.776011][ T5333] loop4: detected capacity change from 0 to 64 [ 151.299480][ T5339] loop4: detected capacity change from 0 to 32768 [ 151.427664][ T5339] JBD2: Ignoring recovery information on journal [ 151.435208][ T5339] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 151.443561][ T5339] JBD2: bad block at offset 32 [ 151.503504][ T5339] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 152.050886][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 152.157348][ T5357] netlink: 68 bytes leftover after parsing attributes in process `syz.1.273'. [ 152.938717][ T5365] loop3: detected capacity change from 0 to 32768 [ 153.968555][ T5365] JBD2: Ignoring recovery information on journal [ 153.977177][ T5365] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 153.985521][ T5365] JBD2: bad block at offset 32 [ 154.050144][ T5365] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 154.313364][ T5382] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 154.334397][ T5382] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 154.344347][ T5382] OCFS2: File system is now read-only. [ 154.349898][ T5382] (syz.3.277,5382,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 154.358379][ T5382] (syz.3.277,5382,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 154.366630][ T5382] (syz.3.277,5382,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 154.374829][ T5382] (syz.3.277,5382,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 154.383882][ T5382] (syz.3.277,5382,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 154.391805][ T5382] (syz.3.277,5382,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 154.400541][ T5382] (syz.3.277,5382,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 154.409384][ T5382] (syz.3.277,5382,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 154.816513][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 154.848184][ T5380] loop4: detected capacity change from 0 to 256 [ 154.856934][ T5385] loop2: detected capacity change from 0 to 64 [ 155.235748][ T5380] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 156.265008][ T5404] netlink: 'syz.3.288': attribute type 3 has an invalid length. [ 156.698649][ T5404] netlink: 224 bytes leftover after parsing attributes in process `syz.3.288'. [ 159.539621][ T5439] loop1: detected capacity change from 0 to 1024 [ 162.970132][ T5455] loop2: detected capacity change from 0 to 32768 [ 163.021652][ T5455] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.303 (5455) [ 163.202989][ T5455] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 163.213370][ T5455] BTRFS info (device loop2): use zlib compression, level 3 [ 163.220638][ T5455] BTRFS info (device loop2): turning on sync discard [ 163.227835][ T5455] BTRFS info (device loop2): using free space tree [ 163.234414][ T5455] BTRFS info (device loop2): has skinny extents [ 163.396253][ T5486] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 163.563368][ T5455] BTRFS info (device loop2): enabling ssd optimizations [ 164.018106][ T26] audit: type=1800 audit(1791081706.719:36): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.303" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 164.461603][ T5510] loop3: detected capacity change from 0 to 1024 [ 165.011237][ T5517] loop4: detected capacity change from 0 to 64 [ 166.243995][ T5544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.321'. [ 167.187489][ T5569] 0x000000000001-0x000000010001 : "" [ 167.374191][ T5567] loop1: detected capacity change from 0 to 32768 [ 167.419895][ T5569] ftl_cs: FTL header not found. [ 167.503966][ T5567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.323 (5567) [ 167.520260][ T5567] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 167.529041][ T5567] BTRFS info (device loop1): use zlib compression, level 3 [ 167.536662][ T5567] BTRFS info (device loop1): turning on sync discard [ 167.543525][ T5567] BTRFS info (device loop1): using free space tree [ 167.550099][ T5567] BTRFS info (device loop1): has skinny extents [ 167.858761][ T5565] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.023551][ T5567] BTRFS info (device loop1): enabling ssd optimizations [ 168.114420][ T5607] device ipvlan2 entered promiscuous mode [ 168.263604][ T5565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.294505][ T5565] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 168.378625][ T26] audit: type=1800 audit(1791081711.139:37): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.323" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 168.399627][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 168.618309][ T5615] netlink: 68 bytes leftover after parsing attributes in process `syz.3.332'. [ 168.763476][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 168.883593][ T4231] usb 1-1: config 0 has no interfaces? [ 168.961171][ T5565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.043454][ T4231] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 169.054626][ T5565] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 169.062061][ T4231] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 169.062491][ T5565] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 169.086805][ T4231] usb 1-1: Product: syz [ 169.103464][ T5565] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 169.117976][ T5565] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 169.120183][ T4231] usb 1-1: Manufacturer: syz [ 169.132166][ T5565] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 169.146851][ T4231] usb 1-1: SerialNumber: syz [ 169.157300][ T4231] usb 1-1: config 0 descriptor?? [ 169.234734][ T5565] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 169.252661][ T5565] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 169.261005][ T5565] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 169.303434][ T5565] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 169.465596][ T5617] loop3: detected capacity change from 0 to 32768 [ 169.617408][ T5617] JBD2: Ignoring recovery information on journal [ 169.625383][ T5617] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 169.633889][ T5617] JBD2: bad block at offset 32 [ 169.726313][ T5617] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 169.732709][ T1108] usb 1-1: USB disconnect, device number 4 [ 170.689561][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 170.848519][ T5638] netlink: 64 bytes leftover after parsing attributes in process `syz.3.338'. [ 170.950691][ T5633] loop2: detected capacity change from 0 to 1024 [ 171.410796][ T5640] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 171.578960][ T1111] usb 5-1: USB disconnect, device number 3 [ 171.638940][ T1111] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 171.727936][ T1111] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 171.764053][ T1111] keyspan 5-1:1.0: device disconnected [ 171.864489][ T5655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.342'. [ 173.593404][ T5660] smpboot: CPU 1 is now offline [ 174.175720][ T5681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.344'. [ 174.208331][ T5672] loop3: detected capacity change from 0 to 32768 [ 174.254349][ T5672] JBD2: Ignoring recovery information on journal [ 174.255360][ T5672] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 174.255376][ T5672] JBD2: bad block at offset 32 [ 174.271286][ T5672] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 175.826963][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 177.701397][ T5695] loop1: detected capacity change from 0 to 1024 [ 178.852058][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 178.903405][ T26] audit: type=1326 audit(1791081721.679:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 179.105042][ T5724] loop4: detected capacity change from 0 to 32768 [ 180.297298][ T5724] JBD2: Ignoring recovery information on journal [ 180.304772][ T5724] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 180.313046][ T5724] JBD2: bad block at offset 32 [ 180.841029][ T5724] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 181.016086][ T26] audit: type=1326 audit(1791081721.899:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 181.041812][ T5731] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 181.062762][ T5731] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 181.072701][ T5731] OCFS2: File system is now read-only. [ 181.078216][ T5731] (syz.4.365,5731,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 181.086573][ T5731] (syz.4.365,5731,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 181.094678][ T5731] (syz.4.365,5731,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 181.102839][ T5731] (syz.4.365,5731,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 181.111390][ T5731] (syz.4.365,5731,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 181.119235][ T5731] (syz.4.365,5731,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 181.127797][ T5731] (syz.4.365,5731,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 181.137759][ T5731] (syz.4.365,5731,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 182.984009][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 183.050302][ T5734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.367'. [ 183.156986][ T26] audit: type=1326 audit(1791081721.899:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 183.193606][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 185.024123][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f6 instead [ 185.104198][ T26] audit: type=1326 audit(1791081721.899:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 185.320767][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x3048 instead [ 185.336234][ T5751] netlink: 68 bytes leftover after parsing attributes in process `syz.3.372'. [ 185.372491][ T26] audit: type=1326 audit(1791081721.899:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 185.805461][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 185.838541][ T26] audit: type=1326 audit(1791081721.899:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 185.863231][ T5565] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 185.920898][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 185.952306][ T26] audit: type=1326 audit(1791081721.899:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 186.046988][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 186.127413][ T26] audit: type=1326 audit(1791081721.899:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 186.203492][ T5565] usb 2-1: not running at top speed; connect to a high speed hub [ 186.226596][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 186.392155][ T5763] loop3: detected capacity change from 0 to 32768 [ 186.443471][ T5565] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 186.493478][ T26] audit: type=1326 audit(1791081721.899:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 186.519178][ T5565] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 186.542356][ T5763] JBD2: Ignoring recovery information on journal [ 186.549878][ T5763] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 186.558215][ T5763] JBD2: bad block at offset 32 [ 186.585250][ T5763] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 186.769871][ T5767] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 186.791330][ T5767] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 186.801194][ T5767] OCFS2: File system is now read-only. [ 186.806742][ T5767] (syz.3.378,5767,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 186.815110][ T5767] (syz.3.378,5767,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 186.823223][ T5767] (syz.3.378,5767,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 186.831287][ T5767] (syz.3.378,5767,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 186.839833][ T5767] (syz.3.378,5767,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 186.848696][ T5767] (syz.3.378,5767,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 186.857261][ T5767] (syz.3.378,5767,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 186.865659][ T5767] (syz.3.378,5767,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 186.892909][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 186.923083][ T5565] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 187.000877][ T5565] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 187.026574][ T26] audit: type=1326 audit(1791081721.899:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 187.170688][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 187.185942][ T5565] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 187.268600][ T5565] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 187.309177][ T26] audit: type=1326 audit(1791081721.899:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 187.373391][ T5717] jffs2: Further such events for this erase block will not be printed [ 187.422157][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 187.498454][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 187.547103][ T5565] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 187.556483][ T26] audit: type=1326 audit(1791081721.899:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 187.617253][ T5565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.678591][ T5565] usb 2-1: Product: syz [ 187.713335][ T5565] usb 2-1: Manufacturer: syz [ 187.735872][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 187.758386][ T5565] usb 2-1: SerialNumber: syz [ 187.780307][ T26] audit: type=1326 audit(1791081721.909:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.0.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f533e606159 code=0x7ffc0000 [ 187.853636][ T5746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.891374][ T5746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.952374][ T5746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.984256][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f6 instead [ 188.020473][ T5746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.063449][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 188.083473][ T5746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.094720][ T5565] usb 2-1: USB2VGA dongle found at address 3 [ 188.133812][ T5565] usb 2-1: Allocated 8 output buffers [ 188.140618][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x3048 instead [ 188.185976][ T5565] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 188.215974][ T5771] vivid-001: disconnect [ 188.257073][ T5769] vivid-001: reconnect [ 188.269260][ T5565] Bluetooth: hci2: command 0x0406 tx timeout [ 188.286200][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 188.366381][ T5564] usb 2-1: USB disconnect, device number 3 [ 188.473315][ T5565] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 188.548106][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 188.684591][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 188.830799][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 188.830858][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 188.830884][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 188.830896][ T5717] jffs2: Further such events for this erase block will not be printed [ 188.831185][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 188.831198][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 188.831212][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x48f6 instead [ 188.831227][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x3048 instead [ 188.831267][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 188.831280][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 188.831293][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x48f6 instead [ 188.831308][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x3048 instead [ 188.831340][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 188.831352][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 188.831366][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x48f6 instead [ 188.831380][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x3048 instead [ 188.831412][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 188.831425][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 188.831438][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x48f6 instead [ 188.831453][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x3048 instead [ 188.831485][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 188.831497][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 188.831510][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x48f6 instead [ 188.831524][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x3048 instead [ 188.831556][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 188.831568][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 188.831581][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x48f6 instead [ 188.831596][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x3048 instead [ 188.831628][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 188.831640][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 188.831653][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x48f6 instead [ 188.831668][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x3048 instead [ 188.831699][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 188.845253][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 188.845276][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x48f6 instead [ 188.845291][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x3048 instead [ 188.845332][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 188.845345][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 188.845358][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x48f6 instead [ 188.845373][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x3048 instead [ 188.845405][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 188.845418][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 188.845431][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x48f6 instead [ 188.845447][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x3048 instead [ 188.845480][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 188.845492][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 188.845506][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x48f6 instead [ 188.845521][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x3048 instead [ 188.845568][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 188.845581][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 188.845595][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x48f6 instead [ 188.845609][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x3048 instead [ 188.845642][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 188.845654][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 188.845668][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x48f6 instead [ 188.845683][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x3048 instead [ 188.845715][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 188.845728][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 188.845741][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x48f6 instead [ 188.845756][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x3048 instead [ 188.845788][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 188.845801][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 188.845815][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x48f6 instead [ 188.845830][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x3048 instead [ 188.845862][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 188.845875][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 188.845888][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x48f6 instead [ 188.845903][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x3048 instead [ 188.845935][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 188.845947][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 188.845961][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x48f6 instead [ 188.845975][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x3048 instead [ 188.846007][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 188.846020][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 188.846033][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x48f6 instead [ 188.846048][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x3048 instead [ 188.846080][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 188.846093][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 188.846106][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x48f6 instead [ 188.846121][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x3048 instead [ 188.846153][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 188.846165][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 188.846179][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x48f6 instead [ 188.846193][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x3048 instead [ 188.846225][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 188.863708][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 188.863728][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x48f6 instead [ 188.863743][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x3048 instead [ 188.863782][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 188.863794][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 188.863808][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x48f6 instead [ 188.863822][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x3048 instead [ 188.863853][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 188.863865][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 188.863878][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x48f6 instead [ 188.863937][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x3048 instead [ 188.863970][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 188.863982][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 188.864010][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x48f6 instead [ 188.864025][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x3048 instead [ 188.864071][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 188.864084][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 188.864097][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x48f6 instead [ 188.864112][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x3048 instead [ 188.864144][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 188.864156][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 188.864170][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x48f6 instead [ 188.864185][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x3048 instead [ 188.864216][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 188.864229][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 188.864242][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x48f6 instead [ 188.864263][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x3048 instead [ 188.864294][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 188.864308][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 188.864321][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x48f6 instead [ 188.864336][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x3048 instead [ 188.864367][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 188.864379][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 188.864392][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x48f6 instead [ 188.864407][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x3048 instead [ 188.864439][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 188.864451][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 188.864465][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x48f6 instead [ 188.864479][ T5717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x3048 instead [ 188.864520][ T5717] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 188.864527][ T5717] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 189.548972][ T5788] loop5: detected capacity change from 0 to 7 [ 189.558364][ T4180] loop5: [ 189.558416][ T4180] loop5: partition table partially beyond EOD, truncated [ 189.571686][ T5788] loop5: [ 189.571705][ T5788] loop5: partition table partially beyond EOD, truncated [ 189.857947][ T5797] netlink: 68 bytes leftover after parsing attributes in process `syz.4.388'. [ 190.742774][ T5809] netlink: 64 bytes leftover after parsing attributes in process `syz.4.393'. [ 191.272234][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 191.272268][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 191.868229][ T5826] FAULT_INJECTION: forcing a failure. [ 191.868229][ T5826] name failslab, interval 1, probability 0, space 0, times 0 [ 191.868260][ T5826] CPU: 0 PID: 5826 Comm: syz.2.399 Not tainted syzkaller #0 [ 191.868279][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.868293][ T5826] Call Trace: [ 191.868298][ T5826] [ 191.868304][ T5826] dump_stack_lvl+0x188/0x250 [ 191.868335][ T5826] ? show_regs_print_info+0x20/0x20 [ 191.868351][ T5826] ? load_image+0x410/0x410 [ 191.868369][ T5826] ? __might_sleep+0xf0/0xf0 [ 191.868385][ T5826] ? __lock_acquire+0x7d40/0x7d40 [ 191.868407][ T5826] should_fail+0x383/0x4b0 [ 191.868428][ T5826] should_failslab+0x5/0x20 [ 191.868443][ T5826] slab_pre_alloc_hook+0x51/0xc0 [ 191.868460][ T5826] __kmalloc_node+0x6d/0x3a0 [ 191.868474][ T5826] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 191.868494][ T5826] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 191.868512][ T5826] slab_post_alloc_hook+0xba/0x380 [ 191.868532][ T5826] __kmalloc_node+0x1ae/0x3a0 [ 191.868546][ T5826] ? kvmalloc_node+0x84/0x130 [ 191.868564][ T5826] kvmalloc_node+0x84/0x130 [ 191.868579][ T5826] xt_alloc_table_info+0x37/0xa0 [ 191.868597][ T5826] do_ipt_set_ctl+0x868/0xd70 [ 191.868616][ T5826] ? nf_setsockopt+0x218/0x280 [ 191.868633][ T5826] ? ipt_unregister_table_exit+0x220/0x220 [ 191.868648][ T5826] ? __lock_acquire+0x7d40/0x7d40 [ 191.868665][ T5826] ? __mutex_lock_common+0x435/0x2400 [ 191.868691][ T5826] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 191.868708][ T5826] ? mutex_unlock+0x10/0x10 [ 191.868725][ T5826] ? __local_bh_enable_ip+0x136/0x1c0 [ 191.868741][ T5826] ? lockdep_hardirqs_on+0x94/0x140 [ 191.868760][ T5826] ? __local_bh_enable_ip+0x136/0x1c0 [ 191.868777][ T5826] nf_setsockopt+0x25f/0x280 [ 191.868798][ T5826] ip_setsockopt+0x29c3/0x31e0 [ 191.868820][ T5826] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 191.868844][ T5826] ? __might_sleep+0xf0/0xf0 [ 191.868861][ T5826] ? rcu_lock_release+0x9/0x20 [ 191.868879][ T5826] tcp_setsockopt+0x229/0x1e60 [ 191.868897][ T5826] ? aa_sk_perm+0x7dc/0x910 [ 191.868913][ T5826] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 191.868931][ T5826] ? aa_af_perm+0x340/0x340 [ 191.868947][ T5826] ? __fget_files+0x402/0x470 [ 191.868964][ T5826] ? aa_sock_opt_perm+0x74/0x100 [ 191.868987][ T5826] ? sock_common_setsockopt+0x32/0xb0 [ 191.869004][ T5826] ? sock_common_recvmsg+0x1c0/0x1c0 [ 191.869022][ T5826] __sys_setsockopt+0x2bf/0x3d0 [ 191.869042][ T5826] __x64_sys_setsockopt+0xb1/0xc0 [ 191.869061][ T5826] do_syscall_64+0x4c/0xa0 [ 191.869076][ T5826] ? clear_bhb_loop+0x30/0x80 [ 191.869092][ T5826] ? clear_bhb_loop+0x30/0x80 [ 191.869110][ T5826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.869128][ T5826] RIP: 0033:0x7f0134d8d159 [ 191.869142][ T5826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.869156][ T5826] RSP: 002b:00007f0132fe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.869173][ T5826] RAX: ffffffffffffffda RBX: 00007f0135014fa0 RCX: 00007f0134d8d159 [ 191.869185][ T5826] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 191.869194][ T5826] RBP: 00007f0134e2406b R08: 0000000000000220 R09: 0000000000000000 [ 191.869204][ T5826] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000000 [ 191.869214][ T5826] R13: 00007f0135015038 R14: 00007f0135014fa0 R15: 00007ffc96c03fd8 [ 191.869236][ T5826] [ 192.091799][ T5836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.403'. [ 192.241447][ T5838] netlink: 64 bytes leftover after parsing attributes in process `syz.2.404'. [ 194.300240][ T5868] netlink: 64 bytes leftover after parsing attributes in process `syz.0.415'. [ 194.310688][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.310749][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.884627][ T5874] FAULT_INJECTION: forcing a failure. [ 194.884627][ T5874] name failslab, interval 1, probability 0, space 0, times 0 [ 194.884726][ T5874] CPU: 0 PID: 5874 Comm: syz.0.418 Not tainted syzkaller #0 [ 194.884742][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.884751][ T5874] Call Trace: [ 194.884756][ T5874] [ 194.884762][ T5874] dump_stack_lvl+0x188/0x250 [ 194.884784][ T5874] ? show_regs_print_info+0x20/0x20 [ 194.884801][ T5874] ? load_image+0x410/0x410 [ 194.884835][ T5874] should_fail+0x383/0x4b0 [ 194.884855][ T5874] should_failslab+0x5/0x20 [ 194.884870][ T5874] slab_pre_alloc_hook+0x51/0xc0 [ 194.884887][ T5874] kmem_cache_alloc_trace+0x47/0x290 [ 194.884902][ T5874] ? nfc_genl_rcv_nl_event+0xa4/0x2a0 [ 194.884919][ T5874] ? lockdep_hardirqs_on+0x94/0x140 [ 194.884941][ T5874] nfc_genl_rcv_nl_event+0xa4/0x2a0 [ 194.884959][ T5874] blocking_notifier_call_chain+0x103/0x1b0 [ 194.884980][ T5874] netlink_release+0xf03/0x1790 [ 194.885003][ T5874] ? netlink_sock_destruct+0x190/0x190 [ 194.885024][ T5874] sock_close+0xbf/0x210 [ 194.885042][ T5874] ? sock_mmap+0x90/0x90 [ 194.885058][ T5874] __fput+0x212/0x8c0 [ 194.885079][ T5874] task_work_run+0x125/0x1a0 [ 194.885101][ T5874] exit_to_user_mode_loop+0x10f/0x130 [ 194.885117][ T5874] exit_to_user_mode_prepare+0xee/0x180 [ 194.885132][ T5874] syscall_exit_to_user_mode+0x16/0x40 [ 194.885146][ T5874] do_syscall_64+0x58/0xa0 [ 194.885161][ T5874] ? clear_bhb_loop+0x30/0x80 [ 194.885177][ T5874] ? clear_bhb_loop+0x30/0x80 [ 194.885194][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.885211][ T5874] RIP: 0033:0x7f533e5c698e [ 194.885225][ T5874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.885237][ T5874] RSP: 002b:00007f533c85cf38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 194.885253][ T5874] RAX: 0000000000000000 RBX: 00007f533c85e6c0 RCX: 00007f533e5c698e [ 194.885264][ T5874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.885272][ T5874] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 194.885281][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.885290][ T5874] R13: 00007f533e88e038 R14: 00007f533e88dfa0 R15: 00007ffd3cb82ca8 [ 194.885312][ T5874] [ 195.126083][ T5885] netlink: 68 bytes leftover after parsing attributes in process `syz.0.420'. [ 198.020142][ T5900] fuse: Bad value for 'fd' [ 198.980066][ T5917] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 199.081670][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 199.845820][ T5942] FAULT_INJECTION: forcing a failure. [ 199.845820][ T5942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.845849][ T5942] CPU: 0 PID: 5942 Comm: syz.2.441 Not tainted syzkaller #0 [ 199.845865][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.845876][ T5942] Call Trace: [ 199.845881][ T5942] [ 199.845887][ T5942] dump_stack_lvl+0x188/0x250 [ 199.845910][ T5942] ? show_regs_print_info+0x20/0x20 [ 199.845927][ T5942] ? load_image+0x410/0x410 [ 199.845945][ T5942] ? __lock_acquire+0x7d40/0x7d40 [ 199.845971][ T5942] should_fail+0x383/0x4b0 [ 199.845992][ T5942] prepare_alloc_pages+0x1e3/0x5b0 [ 199.846016][ T5942] __alloc_pages+0x11b/0x480 [ 199.846036][ T5942] ? zone_statistics+0x170/0x170 [ 199.846052][ T5942] ? __alloc_pages+0x282/0x480 [ 199.846071][ T5942] ? zone_statistics+0x170/0x170 [ 199.846091][ T5942] ? alloc_pages+0x452/0x560 [ 199.846111][ T5942] get_zeroed_page+0x13/0x30 [ 199.846127][ T5942] get_image_page+0x41/0x310 [ 199.846148][ T5942] alloc_rtree_node+0xde/0x150 [ 199.846168][ T5942] memory_bm_create+0x4ee/0x950 [ 199.846195][ T5942] create_basic_memory_bitmaps+0x95/0x370 [ 199.846217][ T5942] snapshot_open+0x19b/0x260 [ 199.846233][ T5942] ? snapshot_compat_ioctl+0x90/0x90 [ 199.846253][ T5942] misc_open+0x31f/0x390 [ 199.846273][ T5942] chrdev_open+0x585/0x5f0 [ 199.846292][ T5942] ? cd_forget+0x160/0x160 [ 199.846315][ T5942] ? fsnotify_perm+0x3a7/0x560 [ 199.846333][ T5942] ? cd_forget+0x160/0x160 [ 199.846349][ T5942] do_dentry_open+0x7f7/0xf90 [ 199.846366][ T5942] ? vfs_open+0x2b/0x80 [ 199.846385][ T5942] path_openat+0x2718/0x2fb0 [ 199.846424][ T5942] ? __kasan_slab_alloc+0xa9/0xc0 [ 199.846448][ T5942] ? do_filp_open+0x400/0x400 [ 199.846478][ T5942] do_filp_open+0x1df/0x400 [ 199.846499][ T5942] ? vfs_tmpfile+0x300/0x300 [ 199.846530][ T5942] ? _raw_spin_unlock+0x24/0x40 [ 199.846547][ T5942] ? alloc_fd+0x59e/0x650 [ 199.846568][ T5942] do_sys_openat2+0x14b/0x500 [ 199.846583][ T5942] ? __lock_acquire+0x7d40/0x7d40 [ 199.846602][ T5942] ? do_sys_open+0xe0/0xe0 [ 199.846616][ T5942] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 199.846637][ T5942] ? lock_chain_count+0x20/0x20 [ 199.846658][ T5942] __x64_sys_openat+0x135/0x160 [ 199.846677][ T5942] do_syscall_64+0x4c/0xa0 [ 199.846692][ T5942] ? clear_bhb_loop+0x30/0x80 [ 199.846708][ T5942] ? clear_bhb_loop+0x30/0x80 [ 199.846726][ T5942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.846743][ T5942] RIP: 0033:0x7f0134d8d159 [ 199.846758][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.846771][ T5942] RSP: 002b:00007f0132fe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.846789][ T5942] RAX: ffffffffffffffda RBX: 00007f0135014fa0 RCX: 00007f0134d8d159 [ 199.846801][ T5942] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 199.846812][ T5942] RBP: 00007f0134e2406b R08: 0000000000000000 R09: 0000000000000000 [ 199.846821][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.846831][ T5942] R13: 00007f0135015038 R14: 00007f0135014fa0 R15: 00007ffc96c03fd8 [ 199.846853][ T5942] [ 200.623303][ T5564] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 200.863701][ T5564] usb 1-1: Using ep0 maxpacket: 8 [ 200.983456][ T5564] usb 1-1: config 0 has no interfaces? [ 201.143484][ T5564] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 201.143508][ T5564] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 201.143523][ T5564] usb 1-1: Product: syz [ 201.143534][ T5564] usb 1-1: Manufacturer: syz [ 201.143545][ T5564] usb 1-1: SerialNumber: syz [ 201.145941][ T5564] usb 1-1: config 0 descriptor?? [ 201.388317][ T5564] usb 1-1: USB disconnect, device number 5 [ 201.933047][ T26] kauditd_printk_skb: 213 callbacks suppressed [ 201.933061][ T26] audit: type=1800 audit(1791081744.709:264): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.448" name="file2" dev="sda1" ino=2050 res=0 errno=0 [ 202.270951][ T5974] FAULT_INJECTION: forcing a failure. [ 202.270951][ T5974] name failslab, interval 1, probability 0, space 0, times 0 [ 202.271054][ T5974] CPU: 0 PID: 5974 Comm: syz.0.453 Not tainted syzkaller #0 [ 202.271071][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.271081][ T5974] Call Trace: [ 202.271085][ T5974] [ 202.271092][ T5974] dump_stack_lvl+0x188/0x250 [ 202.271115][ T5974] ? show_regs_print_info+0x20/0x20 [ 202.271132][ T5974] ? load_image+0x410/0x410 [ 202.271151][ T5974] ? __lock_acquire+0x7d40/0x7d40 [ 202.271175][ T5974] should_fail+0x383/0x4b0 [ 202.271197][ T5974] should_failslab+0x5/0x20 [ 202.271211][ T5974] slab_pre_alloc_hook+0x51/0xc0 [ 202.271229][ T5974] __kmalloc_node+0x6d/0x3a0 [ 202.271243][ T5974] ? kvmalloc_node+0x84/0x130 [ 202.271262][ T5974] kvmalloc_node+0x84/0x130 [ 202.271287][ T5974] nf_hook_entries_grow+0x31a/0x760 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 202.271314][ T5974] __nf_register_net_hook+0x234/0x850 [ 202.271337][ T5974] nf_register_net_hook+0xae/0x190 [ 202.271355][ T5974] nf_register_net_hooks+0x40/0x1a0 [ 202.271373][ T5974] ip_vs_register_hooks+0xca/0x140 [ 202.271394][ T5974] ip_vs_add_service+0x2c2/0x1230 [ 202.271413][ T5974] ? __ip_vs_service_find+0x3da/0x470 [ 202.271438][ T5974] do_ip_vs_set_ctl+0x8eb/0xa10 [ 202.271460][ T5974] ? local_bh_enable+0x20/0x20 [ 202.271508][ T5974] ? mutex_unlock+0x10/0x10 [ 202.271526][ T5974] ? __local_bh_enable_ip+0x136/0x1c0 [ 202.271542][ T5974] ? lockdep_hardirqs_on+0x94/0x140 [ 202.271560][ T5974] ? __local_bh_enable_ip+0x136/0x1c0 [ 202.271578][ T5974] nf_setsockopt+0x25f/0x280 [ 202.271598][ T5974] ip_setsockopt+0x29c3/0x31e0 [ 202.271621][ T5974] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 202.271646][ T5974] ? __might_sleep+0xf0/0xf0 [ 202.271666][ T5974] ? rcu_lock_release+0x9/0x20 [ 202.271684][ T5974] tcp_setsockopt+0x229/0x1e60 [ 202.271702][ T5974] ? aa_sk_perm+0x7dc/0x910 [ 202.271718][ T5974] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 202.271736][ T5974] ? aa_af_perm+0x340/0x340 [ 202.271751][ T5974] ? __fget_files+0x402/0x470 [ 202.271768][ T5974] ? aa_sock_opt_perm+0x74/0x100 [ 202.271784][ T5974] ? sock_common_setsockopt+0x32/0xb0 [ 202.271800][ T5974] ? sock_common_recvmsg+0x1c0/0x1c0 [ 202.271817][ T5974] __sys_setsockopt+0x2bf/0x3d0 [ 202.271837][ T5974] __x64_sys_setsockopt+0xb1/0xc0 [ 202.271855][ T5974] do_syscall_64+0x4c/0xa0 [ 202.271870][ T5974] ? clear_bhb_loop+0x30/0x80 [ 202.271886][ T5974] ? clear_bhb_loop+0x30/0x80 [ 202.271903][ T5974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.271920][ T5974] RIP: 0033:0x7f533e606159 [ 202.271934][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.271947][ T5974] RSP: 002b:00007f533c85e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.271964][ T5974] RAX: ffffffffffffffda RBX: 00007f533e88dfa0 RCX: 00007f533e606159 [ 202.271976][ T5974] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000006 [ 202.271985][ T5974] RBP: 00007f533e69d06b R08: 000000000000002c R09: 0000000000000000 [ 202.271995][ T5974] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 202.272004][ T5974] R13: 00007f533e88e038 R14: 00007f533e88dfa0 R15: 00007ffd3cb82ca8 [ 202.272026][ T5974] [ 202.463445][ T5976] tmpfs: Unknown parameter 'usrquota' [ 203.032498][ T5987] FAULT_INJECTION: forcing a failure. [ 203.032498][ T5987] name failslab, interval 1, probability 0, space 0, times 0 [ 203.032525][ T5987] CPU: 0 PID: 5987 Comm: syz.0.457 Not tainted syzkaller #0 [ 203.032543][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.032556][ T5987] Call Trace: [ 203.032562][ T5987] [ 203.032568][ T5987] dump_stack_lvl+0x188/0x250 [ 203.032590][ T5987] ? show_regs_print_info+0x20/0x20 [ 203.032607][ T5987] ? load_image+0x410/0x410 [ 203.032625][ T5987] ? __might_sleep+0xf0/0xf0 [ 203.032641][ T5987] ? __lock_acquire+0x7d40/0x7d40 [ 203.032663][ T5987] should_fail+0x383/0x4b0 [ 203.032684][ T5987] should_failslab+0x5/0x20 [ 203.032699][ T5987] slab_pre_alloc_hook+0x51/0xc0 [ 203.032716][ T5987] kmem_cache_alloc_trace+0x47/0x290 [ 203.032731][ T5987] ? do_seccomp+0x9e6/0x16a0 [ 203.032750][ T5987] do_seccomp+0x9e6/0x16a0 [ 203.032768][ T5987] ? __lock_acquire+0x7d40/0x7d40 [ 203.032788][ T5987] ? prctl_set_seccomp+0x60/0x60 [ 203.032803][ T5987] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 203.032830][ T5987] ? lockdep_hardirqs_on+0x94/0x140 [ 203.032850][ T5987] do_syscall_64+0x4c/0xa0 [ 203.032865][ T5987] ? clear_bhb_loop+0x30/0x80 [ 203.032883][ T5987] ? clear_bhb_loop+0x30/0x80 [ 203.032901][ T5987] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.032918][ T5987] RIP: 0033:0x7f533e606159 [ 203.032932][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.032946][ T5987] RSP: 002b:00007f533c85e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 203.032964][ T5987] RAX: ffffffffffffffda RBX: 00007f533e88dfa0 RCX: 00007f533e606159 [ 203.032976][ T5987] RDX: 0000200000000040 RSI: 000000000000001d RDI: 0000000000000001 [ 203.032986][ T5987] RBP: 00007f533e69d06b R08: 0000000000000000 R09: 0000000000000000 [ 203.032996][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.033005][ T5987] R13: 00007f533e88e038 R14: 00007f533e88dfa0 R15: 00007ffd3cb82ca8 [ 203.033026][ T5987] [ 203.151829][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 203.151851][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 203.151866][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f6 instead [ 203.151881][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x3048 instead [ 203.151893][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 203.151906][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 203.151919][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 203.151936][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 203.151961][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 203.151986][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 203.151998][ T5989] jffs2: Further such events for this erase block will not be printed [ 203.152299][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 203.152312][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 203.152326][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f6 instead [ 203.152341][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x3048 instead [ 203.152354][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 203.152366][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 203.152379][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 203.152395][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 203.152420][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 203.152445][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 203.152457][ T5989] jffs2: Further such events for this erase block will not be printed [ 203.152728][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 203.152741][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 203.152755][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x48f6 instead [ 203.152770][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x3048 instead [ 203.152802][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 203.152815][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 203.152828][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x48f6 instead [ 203.152843][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x3048 instead [ 203.152876][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 203.152888][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 203.152902][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x48f6 instead [ 203.152917][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x3048 instead [ 203.152949][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 203.152962][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 203.152976][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x48f6 instead [ 203.152991][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x3048 instead [ 203.153023][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 203.153036][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 203.153050][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x48f6 instead [ 203.153064][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x3048 instead [ 203.153112][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 203.153125][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 203.153139][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x48f6 instead [ 203.153159][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x3048 instead [ 203.162474][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 203.162494][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 203.162509][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x48f6 instead [ 203.162524][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x3048 instead [ 203.162557][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 203.162570][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 203.162584][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x48f6 instead [ 203.162599][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x3048 instead [ 203.162633][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 203.162645][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 203.162659][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x48f6 instead [ 203.162675][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x3048 instead [ 203.162707][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 203.162720][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 203.162734][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x48f6 instead [ 203.162749][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x3048 instead [ 203.162781][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 203.162794][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 203.162807][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x48f6 instead [ 203.162822][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x3048 instead [ 203.162854][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 203.162866][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 203.162880][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x48f6 instead [ 203.162895][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x3048 instead [ 203.162927][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 203.162940][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 203.162954][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x48f6 instead [ 203.162969][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x3048 instead [ 203.163001][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 203.163014][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 203.163028][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x48f6 instead [ 203.163043][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x3048 instead [ 203.163075][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 203.163088][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 203.163102][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x48f6 instead [ 203.163117][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x3048 instead [ 203.163156][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 203.163170][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 203.175666][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x48f6 instead [ 203.175689][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x3048 instead [ 203.176631][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 203.176648][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 203.176662][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x48f6 instead [ 203.176676][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x3048 instead [ 203.176710][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 203.176723][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 203.176736][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x48f6 instead [ 203.176751][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x3048 instead [ 203.176796][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 203.176809][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 203.176823][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x48f6 instead [ 203.176838][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x3048 instead [ 203.176869][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 203.176882][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 203.176896][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x48f6 instead [ 203.176910][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x3048 instead [ 203.176942][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 203.176955][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 203.176968][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x48f6 instead [ 203.176983][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x3048 instead [ 203.177014][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 203.177026][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 203.177039][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x48f6 instead [ 203.177054][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x3048 instead [ 203.177085][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 203.177098][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 203.177111][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x48f6 instead [ 203.177125][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x3048 instead [ 203.177182][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 203.177195][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 203.177209][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x48f6 instead [ 203.177224][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x3048 instead [ 203.177256][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 203.177269][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 203.177283][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x48f6 instead [ 203.177298][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x3048 instead [ 203.177334][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 203.177348][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 203.177361][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x48f6 instead [ 203.177376][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x3048 instead [ 203.177408][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 203.177421][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 203.177435][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x48f6 instead [ 203.177450][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x3048 instead [ 203.177482][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 203.177495][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 203.177509][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x48f6 instead [ 203.177524][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x3048 instead [ 203.177563][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 203.177576][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 203.177590][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x48f6 instead [ 203.177605][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x3048 instead [ 203.177637][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 203.177650][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 203.177664][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x48f6 instead [ 203.177679][ T5989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x3048 instead [ 203.177707][ T5989] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 203.177714][ T5989] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 205.390977][ T5565] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 205.583835][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 205.624842][ T5565] usb 1-1: Using ep0 maxpacket: 8 [ 205.746799][ T5565] usb 1-1: config 0 has no interfaces? [ 205.830041][ T6001] 9pnet_virtio: no channels available for device syz [ 205.912055][ T5565] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 205.912081][ T5565] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 205.912095][ T5565] usb 1-1: Product: syz [ 205.912106][ T5565] usb 1-1: Manufacturer: syz [ 205.912117][ T5565] usb 1-1: SerialNumber: syz [ 205.922520][ T5565] usb 1-1: config 0 descriptor?? [ 206.254289][ T5623] usb 1-1: USB disconnect, device number 6 [ 206.651286][ T6008] netlink: 68 bytes leftover after parsing attributes in process `syz.2.462'. [ 208.034644][ T6026] device vlan2 entered promiscuous mode [ 208.034658][ T6026] device bridge0 entered promiscuous mode [ 208.451231][ T26] audit: type=1804 audit(1791081751.229:265): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.468769][ T26] audit: type=1804 audit(1791081751.249:266): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.477061][ T26] audit: type=1804 audit(1791081751.259:267): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.477535][ T26] audit: type=1804 audit(1791081751.259:268): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.477996][ T26] audit: type=1804 audit(1791081751.259:269): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.485863][ T26] audit: type=1804 audit(1791081751.269:270): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.486317][ T26] audit: type=1804 audit(1791081751.269:271): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.487196][ T26] audit: type=1804 audit(1791081751.269:272): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.487684][ T26] audit: type=1804 audit(1791081751.269:273): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 208.488125][ T26] audit: type=1804 audit(1791081751.269:274): pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/79/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 209.235495][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.259812][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.262270][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.262965][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.266667][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.354261][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.355935][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.356433][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.372502][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 209.727304][ T4191] syz-executor (4191) used greatest stack depth: 21072 bytes left [ 209.972603][ T3559] udevd[3559]: could not touch /run/udev/queue: No such file or directory [ 212.549968][ T1239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.645724][ T1239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.726139][ T1239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.778804][ T1239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.000489][ T1239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.075227][ T1239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.109709][ T1239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.168831][ T1239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.355856][ T1239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.395853][ T1239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.437673][ T1239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.480082][ T1239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.489994][ T1239] device hsr_slave_0 left promiscuous mode [ 215.490447][ T1239] device hsr_slave_1 left promiscuous mode [ 215.490889][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.490941][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.495919][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.495942][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.496361][ T1239] device bridge_slave_1 left promiscuous mode [ 215.497669][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.522882][ T1239] device bridge_slave_0 left promiscuous mode [ 215.522999][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.532644][ T1239] device hsr_slave_0 left promiscuous mode [ 215.533019][ T1239] device hsr_slave_1 left promiscuous mode [ 215.552423][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.552460][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.552933][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.552952][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.556165][ T1239] device bridge_slave_1 left promiscuous mode [ 215.556255][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.558580][ T1239] device bridge_slave_0 left promiscuous mode [ 215.558662][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.562534][ T1239] device hsr_slave_0 left promiscuous mode [ 215.562901][ T1239] device hsr_slave_1 left promiscuous mode [ 215.565564][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.565593][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.566069][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.566088][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.566450][ T1239] device bridge_slave_1 left promiscuous mode [ 215.566529][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.567612][ T1239] device bridge_slave_0 left promiscuous mode [ 215.567690][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.597105][ T1239] device veth1_macvtap left promiscuous mode [ 215.597303][ T1239] device veth0_macvtap left promiscuous mode [ 215.597373][ T1239] device veth1_vlan left promiscuous mode [ 215.597534][ T1239] device veth0_vlan left promiscuous mode [ 215.618746][ T1239] device veth1_macvtap left promiscuous mode [ 215.618790][ T1239] device veth0_macvtap left promiscuous mode [ 215.618856][ T1239] device veth1_vlan left promiscuous mode [ 215.618906][ T1239] device veth0_vlan left promiscuous mode [ 215.620596][ T1239] device veth1_macvtap left promiscuous mode [ 215.620636][ T1239] device veth0_macvtap left promiscuous mode [ 215.621144][ T1239] device veth1_vlan left promiscuous mode [ 215.621203][ T1239] device veth0_vlan left promiscuous mode [ 216.488015][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 216.498264][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 216.506685][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.512206][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.671088][ T1239] bond0 (unregistering): Released all slaves [ 216.868425][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 216.905241][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 216.910403][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.919953][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.048304][ T1239] bond0 (unregistering): Released all slaves [ 217.268691][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 217.290929][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 217.300952][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.321729][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.472898][ T1239] bond0 (unregistering): Released all slaves