last executing test programs: 5m7.940395817s ago: executing program 2 (id=561): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 5m6.21906486s ago: executing program 2 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, 0x0) getdents(r3, &(0x7f0000000ec0)=""/4096, 0x1000) 5m2.955922397s ago: executing program 2 (id=572): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3a003300d0000000080211000001080211000000080211000001f00f0c050bfa652632e2f51199a4c200147312505050505050ffffffffffffffffffffffff6804be1606000000"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4m56.460904531s ago: executing program 2 (id=580): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 4m53.822115109s ago: executing program 2 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) 4m39.93245684s ago: executing program 2 (id=617): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002") ioctl(r0, 0x932, &(0x7f0000000440)="020000000100") 4m39.547080878s ago: executing program 32 (id=617): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002") ioctl(r0, 0x932, &(0x7f0000000440)="020000000100") 2m32.276500435s ago: executing program 1 (id=833): bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e24, 0x2, 'sh\x00', 0x0, 0x80000000, 0x29}, 0x2c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x81c5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) 2m30.731733029s ago: executing program 1 (id=835): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2m28.348517284s ago: executing program 1 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x1, &(0x7f0000000280)='\\\':\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10) bind$inet(r1, &(0x7f00000028c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r3, 0x1) r4 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000340)={0x2, r4, 0x80000}) 2m27.061050327s ago: executing program 1 (id=845): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f0000000140), 0x6, 0x52b, &(0x7f0000001180)="$eJzs3cFvI1cZAPBvZjcbd7s0KVQqIKBLKSxotfbG266qnsoFhKpKiIoTh21IvFEUJ45ipzRhpSb/AxKVOCA4cUYCwaFSTxwR3ODWSzkgFViBGqQejGY8zrqJvXF3vbawfz9p5Hkzk/neG2vey3yJ/QKYWZcj4iAiLkTE6xGxUGxPiiVe7izZcR/evbNydPfOShLt9mv/TPL92bbo+ZnM48U5SxHxvW9H/DA5Hbe5t7+xXK/XdopypbW5XWnu7V9b31xeq63VtqrVm0s3r79444XqUO0oDXHMM5u//uBb6698/53ff/H9Px9848dZtS4V+3rbMUqdps8dx8mcj4hXHkWwCThXtOfCpCvCA0kj4tMR8Wx+/y/EufzdHE6f2xoA+D/Qbi9Ee6G3DABMuzTPgSVpucgFXIo0LZc7Obyn4mJabzRbV283drdWO7myxZhLb6/Xa9eLXOFizCVZeemtbP1euRofL9+IiCcj4ifzj+Xl8srweQYAYLQePzH+/2e+M/4DAFOu7z/P9D6f3xpfXQCA8Rjmn2cBgOli/AeA2XNv/L840XoAAOPj+R8AZk8p4qP2pCsBAIzRe93n/3OTrgkAMBbfffXVbGkfFd9/vfrG3u5G441rq7XmRnlzd6W80tjZLq81Gmv1WnmlsXnW+eqNxvbS87H7ZqVVa7Yqzb39W5uN3a3Wrfx7vW/V5sbSKgDgfp585t2/JhFx8NJj+RI9czkYq2G6pZOuADAxcv4wu3wLN8wuz/gwu35TfOL3rLk8B35E6O0HCNp+6wF+CBi1K5+T/4dZJf8Ps0v+H2aX/D/MrnY7GTTnf3p8CAAwVT5hjt+fBGAKjfXv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlLuXLYk85TcvliPmIWIy55PZ6vXY9Ip6IiL/Mz81n5aWJ1hgAeHjp35Ni/q8rC89dOrn3QvLf+fw1In70s9d++uZyq7WzlG3/1/H21tvF9uok6g8AnKU7TnfH8a4P795Z6S7jrM8H3+xMLprFPSqWzp7zcT57+VMpn3T44r+TTrmQ/b5ybgTxDw4j4rNRilPtT/LcyGIx8+nJ+FnsT40ufp/rfzJ++rH4ab6v85pdi8+cOvP8wJhnzfUKs+LdrP95ud/9l8bl/LXUd/LjUt5DPbxu/3d0qv/r3u+lvK/p1/9dHjbG83/4zsB9hxGfP98vfnIcPxkQ/7kh47/3hS89e1w40Wm3fxFxJfrH741VaW1uV5p7+9eyC19bq21VqzeXbl5/8cYL1Uqeo650M9W9OsH+8dLVJwa2/1e/KzrK0/FLZ7T/q/dtdfu4A/7lR6//4MuD4h9GfP0r/d//p+4TPxsTv1asD+7pO5Yv/nbg9N1Z/NXO9T/8pO//1TPidr3/t/3VIQ8FAMagube/sVyv13ZGujIXIz5hz0ryiOpsZQIrMcZY2a/JD3uep4uU2XL3/uk95o8/f+fpbNvEr+pIVibXJwHjce+mn3RNAAAAAAAAAAAAAACAQR75x4nSSbcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAafa/AAAA//+w6MZg") socket(0x1e, 0xa, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x48820, 0x0, 0x0, 0x0, 0x0) gettid() mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 2m23.989770925s ago: executing program 1 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2m19.900589813s ago: executing program 1 (id=861): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 2m18.528082799s ago: executing program 33 (id=861): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 1m27.677398565s ago: executing program 4 (id=955): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ec0), 0x781, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='2', 0x1) 1m26.219386045s ago: executing program 4 (id=958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x75, 0xa, 0x9, 0xe}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000001580)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x29}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x101f}}, 0x0}}], 0x0, 0x0, 0x0}) 1m24.784455445s ago: executing program 4 (id=960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x1, &(0x7f0000000280)='\\\':\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10) bind$inet(r1, &(0x7f00000028c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r3, 0x1) r4 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000340)={0x2, r4, 0x80000}) 1m23.680658228s ago: executing program 4 (id=961): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000130021080000", @ANYRES32=r1, @ANYBLOB="0600000021a500000c0001"], 0x2c}], 0x1}, 0x0) 1m23.442471709s ago: executing program 4 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x1, &(0x7f0000000280)='\\\':\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10) bind$inet(r1, &(0x7f00000028c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r3, 0x1) r4 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000340)={0x2, r4, 0x80000}) 1m22.467706826s ago: executing program 4 (id=963): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 1m6.143508355s ago: executing program 34 (id=963): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 18.722208325s ago: executing program 0 (id=1081): syz_open_dev$vim2m(0x0, 0x20023, 0x2) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, 0x0, &(0x7f00000000c0), 0xa7c, r1}, 0x38) 16.76170642s ago: executing program 0 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3009042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 14.201147264s ago: executing program 5 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) 13.571503334s ago: executing program 0 (id=1087): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvram(0xffffffffffffff9c, 0x0, 0x781, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='2', 0x1) 12.296385796s ago: executing program 3 (id=1089): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ec0), 0x781, 0x0) close(0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) 10.480736793s ago: executing program 0 (id=1090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 10.480250373s ago: executing program 5 (id=1091): syz_open_dev$vim2m(0x0, 0x20023, 0x2) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, 0x0, &(0x7f00000000c0), 0xa7c, r1}, 0x38) 7.03179329s ago: executing program 5 (id=1092): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x48, 0x0, r1, 0x0, 0x0, 0x0, 0x800, 0x1, {0x0, 0x0, 0x3}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000180)}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x7ff, 0x12) 7.03094408s ago: executing program 3 (id=1093): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc01c586b, &(0x7f0000000440)={r0, &(0x7f0000000180)='$&}[&*{\x00', 0x20000, &(0x7f00000001c0)={@_ha_fsid={[0xe, 0x1]}, {0x6, 0x5, 0x2, 0x2}}, 0x5, &(0x7f00000003c0), &(0x7f0000000400)=0x8}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) 5.745979762s ago: executing program 5 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) 5.745011802s ago: executing program 3 (id=1095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x75, 0xa, 0x9, 0xe}, 0x0, 0x0) 4.503389992s ago: executing program 0 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3009042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 4.492900972s ago: executing program 5 (id=1097): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x1, &(0x7f0000000280)='\\\':\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10) bind$inet(r1, &(0x7f00000028c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r3, 0x1) r4 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000340)={0x2, r4, 0x80000}) 3.496240671s ago: executing program 3 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) 3.348367298s ago: executing program 0 (id=1099): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ec0), 0x781, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='2', 0x1) 2.180177624s ago: executing program 3 (id=1100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) fsopen(0x0, 0x1) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x70bd2a, 0x4, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@local, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x2, 0x70}}, 0xf0}}, 0x0) 207.02µs ago: executing program 5 (id=1101): syz_open_dev$vim2m(0x0, 0x20023, 0x2) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, 0x0, &(0x7f00000000c0), 0xa7c, r1}, 0x38) 0s ago: executing program 3 (id=1102): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0xa, @sliced={0x4, [0xfff1, 0x8001, 0x3, 0x1, 0x8, 0x7ff, 0xff64, 0x6, 0x0, 0xe21, 0x8, 0x4, 0xfff, 0x7, 0x1, 0x9, 0x8, 0x8, 0x200, 0x6, 0x6, 0xff81, 0x8, 0x6, 0x5, 0x5, 0x7e6d, 0xf000, 0x82, 0x5, 0x2, 0x6, 0xb6, 0x4, 0xfff, 0xfff8, 0x0, 0xe, 0xd, 0x6, 0xfff8, 0x9, 0x5, 0x3, 0x1, 0x5, 0x804, 0x8], 0x5}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. [ 64.940992][ T4259] cgroup: Unknown subsys name 'net' [ 65.071690][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.352610][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.392755][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.400511][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.408840][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.417101][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.426485][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.429284][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.434008][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.441630][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.449164][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.456233][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.463098][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.469259][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.476399][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.483767][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.490437][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.505280][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.505451][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.512625][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.527171][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.528105][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.534378][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.541957][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.549428][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.556690][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.563749][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.570036][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.576754][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.584274][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.591575][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.627749][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.002727][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 69.032491][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 69.113150][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 69.176587][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 69.185459][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 69.221892][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.229138][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.238359][ T4272] device bridge_slave_0 entered promiscuous mode [ 69.252995][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.260381][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.268274][ T4272] device bridge_slave_1 entered promiscuous mode [ 69.294433][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.301622][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.309433][ T4274] device bridge_slave_0 entered promiscuous mode [ 69.330710][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.338080][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.345827][ T4274] device bridge_slave_1 entered promiscuous mode [ 69.386998][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.394137][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.402880][ T4285] device bridge_slave_0 entered promiscuous mode [ 69.415017][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.435418][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.442711][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.450719][ T4285] device bridge_slave_1 entered promiscuous mode [ 69.459267][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.477417][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.488795][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.522225][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.529550][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.537938][ T4276] device bridge_slave_0 entered promiscuous mode [ 69.560213][ T4274] team0: Port device team_slave_0 added [ 69.580272][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.587532][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.595551][ T4276] device bridge_slave_1 entered promiscuous mode [ 69.611537][ T4274] team0: Port device team_slave_1 added [ 69.618893][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.632000][ T4272] team0: Port device team_slave_0 added [ 69.642502][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.650470][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.658336][ T4273] device bridge_slave_0 entered promiscuous mode [ 69.673761][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.691088][ T4272] team0: Port device team_slave_1 added [ 69.697339][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.704484][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.712349][ T4273] device bridge_slave_1 entered promiscuous mode [ 69.732990][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.740047][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.766573][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.785037][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.792087][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.818141][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.831276][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.868953][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.884851][ T4285] team0: Port device team_slave_0 added [ 69.892871][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.903120][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.910735][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.936932][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.962653][ T4285] team0: Port device team_slave_1 added [ 69.970082][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.989598][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.996870][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.023057][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.037211][ T4276] team0: Port device team_slave_0 added [ 70.074137][ T4276] team0: Port device team_slave_1 added [ 70.092848][ T4274] device hsr_slave_0 entered promiscuous mode [ 70.099546][ T4274] device hsr_slave_1 entered promiscuous mode [ 70.122358][ T4273] team0: Port device team_slave_0 added [ 70.138761][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.145745][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.172011][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.195193][ T4273] team0: Port device team_slave_1 added [ 70.211109][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.218147][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.244307][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.281306][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.288874][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.315570][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.342299][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.349372][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.375492][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.392110][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.400236][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.426595][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.445618][ T4272] device hsr_slave_0 entered promiscuous mode [ 70.452941][ T4272] device hsr_slave_1 entered promiscuous mode [ 70.459830][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.467795][ T4272] Cannot create hsr debugfs directory [ 70.473769][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.480783][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.507266][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.572582][ T4276] device hsr_slave_0 entered promiscuous mode [ 70.579219][ T4276] device hsr_slave_1 entered promiscuous mode [ 70.585610][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.593603][ T4276] Cannot create hsr debugfs directory [ 70.646960][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 70.653648][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 70.656181][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 70.662828][ T4285] device hsr_slave_0 entered promiscuous mode [ 70.675776][ T4285] device hsr_slave_1 entered promiscuous mode [ 70.682847][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.690657][ T4285] Cannot create hsr debugfs directory [ 70.726589][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 70.732807][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 70.745903][ T4273] device hsr_slave_0 entered promiscuous mode [ 70.752932][ T4273] device hsr_slave_1 entered promiscuous mode [ 70.760213][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.767885][ T4273] Cannot create hsr debugfs directory [ 70.982812][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.011191][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.023020][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.071607][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.087788][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.111065][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.119820][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.134296][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.219937][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.244935][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.254683][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.283961][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.294857][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.295139][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.301417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.332820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.342288][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.351722][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.363114][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.378033][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.403057][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.428173][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.450121][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.459581][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.470025][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.477369][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.486570][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.497354][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.509144][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.516243][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.523978][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.557926][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.575507][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.589134][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.608994][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.622037][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.631647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.662581][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.676961][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.685478][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.705519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.716829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.726716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.735218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.753073][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.764037][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.782130][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.795322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.806193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.814503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.824269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.833482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.844137][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.871672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.886737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.895439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.906814][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.913933][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.939046][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.968868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.977263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.985885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.996490][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.003594][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.015001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.028549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.040392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.051477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.061524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.071580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.095018][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.103799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.112581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.131585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.142782][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.149948][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.159686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.169487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.178333][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.185426][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.193386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.203344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.212820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.260281][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.270159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.279667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.288302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.297841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.307398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.315066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.323501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.332692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.355377][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.368914][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.390079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.408124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.426600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.435339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.444450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.452689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.463845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.473220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.482401][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.489578][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.525888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.551321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.562110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.579715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.592763][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.600479][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.613370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.622408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.635642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.644389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.659979][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.673811][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.694134][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.704256][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.718761][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.726800][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 72.726954][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 72.726979][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 72.769453][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.778408][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.787796][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.801989][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.809689][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 72.815724][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 72.835062][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.855808][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.878336][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.905724][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.928279][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.946571][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.995554][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.024146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.050456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.091058][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.102609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.110920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.121482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.132941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.141980][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.149145][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.159296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.168558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.186581][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.193705][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.229237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.242552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.267203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.277088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.307212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.329560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.393108][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.402346][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.411548][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.429760][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.443721][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.455863][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.467248][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.475835][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.485121][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.494555][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.517034][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.552002][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.574723][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.614477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.622633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.635947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.645045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.669539][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.681201][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.702580][ T4276] device veth0_vlan entered promiscuous mode [ 73.711603][ T4274] device veth0_vlan entered promiscuous mode [ 73.719241][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.727393][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.735359][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.744447][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.786832][ T4276] device veth1_vlan entered promiscuous mode [ 73.800890][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.811360][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.820493][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.830537][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.841848][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.851836][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.861389][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.883941][ T4272] device veth0_vlan entered promiscuous mode [ 73.898078][ T4274] device veth1_vlan entered promiscuous mode [ 73.923686][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.934770][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.943594][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.952230][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.961367][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.970275][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.981932][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.990562][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.007181][ T4273] device veth0_vlan entered promiscuous mode [ 74.024801][ T4272] device veth1_vlan entered promiscuous mode [ 74.035875][ T4276] device veth0_macvtap entered promiscuous mode [ 74.052963][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.062092][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.070346][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.078885][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.088046][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.096459][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.104216][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.112678][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.120825][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.133146][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.151412][ T4276] device veth1_macvtap entered promiscuous mode [ 74.163481][ T4273] device veth1_vlan entered promiscuous mode [ 74.212109][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.221024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.230277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.239402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.248839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.267293][ T4274] device veth0_macvtap entered promiscuous mode [ 74.277271][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.295186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.304355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.313387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.327473][ T4274] device veth1_macvtap entered promiscuous mode [ 74.344510][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.354228][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.363234][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.372176][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.389737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.398161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.407947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.416764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.425182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.449217][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.460294][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.487785][ T4272] device veth0_macvtap entered promiscuous mode [ 74.504840][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.519406][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.530953][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.543154][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.553870][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.564773][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.573741][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.586461][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.594180][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.603615][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.613492][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.622071][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.630986][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.640077][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.649710][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.660813][ T4272] device veth1_macvtap entered promiscuous mode [ 74.672511][ T4273] device veth0_macvtap entered promiscuous mode [ 74.683447][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.694458][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.703938][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.714404][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.745673][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.758089][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.768454][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.779370][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.791859][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.802000][ T4273] device veth1_macvtap entered promiscuous mode [ 74.809102][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 74.815112][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 74.816264][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 74.831691][ T4285] device veth0_vlan entered promiscuous mode [ 74.841723][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.852680][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.861182][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.869717][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.878772][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.887657][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 74.887667][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 74.896557][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.910345][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.920435][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.931015][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.942435][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.972805][ T4285] device veth1_vlan entered promiscuous mode [ 74.991753][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.002281][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.011848][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.024157][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.033483][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042369][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052796][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.105238][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.118076][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.128523][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.139842][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.150484][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.160965][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.172024][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.183074][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.193706][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.204316][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.221010][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.231085][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.241689][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.252837][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.269886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.280910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.291599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.300326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.309212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.331722][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342286][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.351410][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.360248][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.398182][ T4285] device veth0_macvtap entered promiscuous mode [ 75.418175][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.427997][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.437700][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.465473][ T4285] device veth1_macvtap entered promiscuous mode [ 75.472922][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.489463][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.490287][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.504998][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.540160][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.549486][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.557964][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.618234][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.631962][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.642199][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.657543][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.667674][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.678654][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.689365][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.700171][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.711815][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.727279][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.727986][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.735091][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.737039][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.761048][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.770319][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.779402][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.787433][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.842159][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.854428][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.866157][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.878347][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.888888][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.899510][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.910263][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.921027][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.940390][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.959095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.983101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.998153][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.007865][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.018213][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.027752][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.039451][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.044098][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.080914][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.091775][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.113274][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.136529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.199164][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.229604][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.263418][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.296194][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.304072][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.313086][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.332417][ T4362] tipc: Started in network mode [ 76.337583][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.345391][ T4362] tipc: Node identity 565764c1f6fa, cluster identity 4711 [ 76.354388][ T4362] tipc: Enabled bearer , priority 0 [ 76.364864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.384771][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.504086][ T4360] tipc: Disabling bearer [ 76.976476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 77.376030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.386014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 77.396013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 77.408421][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 77.415046][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 77.415068][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 77.421156][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 77.427117][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 77.628942][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.646026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.656008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.666005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.676007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.686008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.696006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.330894][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.387153][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.566310][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.730799][ T4385] loop2: detected capacity change from 0 to 256 [ 80.636831][ T4387] loop0: detected capacity change from 0 to 4096 [ 82.110221][ T4399] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.194199][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 84.297011][ T4402] syz.1.12: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 84.358834][ T4402] CPU: 0 PID: 4402 Comm: syz.1.12 Not tainted syzkaller #0 [ 84.366095][ T4402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.376185][ T4402] Call Trace: [ 84.379482][ T4402] [ 84.382425][ T4402] dump_stack_lvl+0x188/0x24e [ 84.387148][ T4402] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 84.393588][ T4402] ? show_regs_print_info+0x12/0x12 [ 84.398817][ T4402] ? load_image+0x410/0x410 [ 84.403350][ T4402] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 84.409789][ T4402] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 84.416318][ T4402] warn_alloc+0x242/0x330 [ 84.420687][ T4402] ? zone_watermark_ok_safe+0x270/0x270 [ 84.426274][ T4402] ? __mutex_trylock_common+0x15c/0x260 [ 84.431841][ T4402] __vmalloc_node_range+0x11e/0x1380 [ 84.437153][ T4402] ? rcu_is_watching+0x11/0xa0 [ 84.441926][ T4402] ? trace_contention_end+0x5f/0x170 [ 84.447215][ T4402] ? __mutex_lock+0x1ab/0xae0 [ 84.451892][ T4402] ? __kmem_cache_free+0xb6/0x200 [ 84.456918][ T4402] ? tomoyo_path_number_perm+0x205/0x650 [ 84.462548][ T4402] ? tomoyo_path_number_perm+0x5a4/0x650 [ 84.468180][ T4402] ? dvb_dvr_do_ioctl+0x75/0x220 [ 84.473111][ T4402] ? tomoyo_path_number_perm+0x205/0x650 [ 84.478741][ T4402] ? free_vm_area+0x50/0x50 [ 84.483247][ T4402] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 84.488268][ T4402] vmalloc+0x75/0x80 [ 84.492167][ T4402] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 84.497185][ T4402] dvb_dvr_do_ioctl+0x12a/0x220 [ 84.502044][ T4402] dvb_usercopy+0x191/0x2b0 [ 84.506559][ T4402] ? dvb_dvr_release+0x3d0/0x3d0 [ 84.511509][ T4402] ? dvb_generic_ioctl+0xb0/0xb0 [ 84.516471][ T4402] ? dvb_dvr_poll+0x230/0x230 [ 84.521175][ T4402] dvb_dvr_ioctl+0x25/0x30 [ 84.525589][ T4402] __se_sys_ioctl+0xfa/0x170 [ 84.530186][ T4402] do_syscall_64+0x4c/0xa0 [ 84.534630][ T4402] ? clear_bhb_loop+0x60/0xb0 [ 84.539313][ T4402] ? clear_bhb_loop+0x60/0xb0 [ 84.543991][ T4402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.549882][ T4402] RIP: 0033:0x7fb43bf9e159 [ 84.554309][ T4402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.574007][ T4402] RSP: 002b:00007fb43ceeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.582419][ T4402] RAX: ffffffffffffffda RBX: 00007fb43c225fa0 RCX: 00007fb43bf9e159 [ 84.590389][ T4402] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 84.598379][ T4402] RBP: 00007fb43c03503b R08: 0000000000000000 R09: 0000000000000000 [ 84.606361][ T4402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.614326][ T4402] R13: 00007fb43c226038 R14: 00007fb43c225fa0 R15: 00007ffdd48db488 [ 84.622310][ T4402] [ 85.548720][ T4402] Mem-Info: [ 85.551900][ T4402] active_anon:19796 inactive_anon:0 isolated_anon:0 [ 85.551900][ T4402] active_file:12746 inactive_file:39949 isolated_file:0 [ 85.551900][ T4402] unevictable:768 dirty:1776 writeback:0 [ 85.551900][ T4402] slab_reclaimable:21103 slab_unreclaimable:91969 [ 85.551900][ T4402] mapped:29357 shmem:15360 pagetables:526 [ 85.551900][ T4402] sec_pagetables:0 bounce:0 [ 85.551900][ T4402] kernel_misc_reclaimable:0 [ 85.551900][ T4402] free:1307646 free_pcp:16785 free_cma:0 [ 85.613429][ T4402] Node 0 active_anon:70884kB inactive_anon:0kB active_file:50984kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117428kB dirty:7104kB writeback:0kB shmem:51404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10512kB pagetables:2104kB sec_pagetables:0kB all_unreclaimable? no [ 85.691961][ T4402] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 85.757325][ T4402] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.876182][ T4402] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 85.881973][ T4402] Node 0 DMA32 free:1366824kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:50656kB inactive_anon:0kB active_file:51080kB inactive_file:159596kB unevictable:1536kB writepending:7132kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:30292kB local_pcp:8724kB free_cma:0kB [ 86.036627][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 86.129013][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.142852][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.153551][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.164796][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.175645][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.691915][ T127] cfg80211: failed to load regulatory.db [ 88.532986][ T4433] FAULT_INJECTION: forcing a failure. [ 88.532986][ T4433] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.723479][ T4433] CPU: 0 PID: 4433 Comm: syz.4.20 Not tainted syzkaller #0 [ 88.730743][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.740850][ T4433] Call Trace: [ 88.744142][ T4433] [ 88.747085][ T4433] dump_stack_lvl+0x188/0x24e [ 88.751794][ T4433] ? show_regs_print_info+0x12/0x12 [ 88.757017][ T4433] ? load_image+0x410/0x410 [ 88.761541][ T4433] ? __lock_acquire+0x7c40/0x7c40 [ 88.766598][ T4433] should_fail_ex+0x390/0x4c0 [ 88.771300][ T4433] prepare_alloc_pages+0x1e1/0x5b0 [ 88.776452][ T4433] __alloc_pages+0x130/0x4f0 [ 88.781070][ T4433] ? zone_statistics+0x170/0x170 [ 88.786044][ T4433] __pmd_alloc+0xa6/0x760 [ 88.790391][ T4433] ? __pud_alloc+0x150/0x150 [ 88.795013][ T4433] ? count_memcg_event_mm+0x36b/0x3c0 [ 88.800401][ T4433] ? __lock_acquire+0x7c40/0x7c40 [ 88.805448][ T4433] ? count_memcg_event_mm+0x8a/0x3c0 [ 88.810760][ T4433] ? put_page+0x270/0x270 [ 88.815108][ T4433] ? hugepage_vma_check+0x461/0x540 [ 88.820337][ T4433] handle_mm_fault+0xa06/0x3d40 [ 88.825206][ T4433] ? mt_find+0x157/0x830 [ 88.829488][ T4433] ? numa_migrate_prep+0x250/0x250 [ 88.834634][ T4433] ? lock_chain_count+0x20/0x20 [ 88.839516][ T4433] ? lock_mm_and_find_vma+0xae/0x2f0 [ 88.844819][ T4433] do_user_addr_fault+0x58e/0xb20 [ 88.849877][ T4433] exc_page_fault+0x60/0x100 [ 88.854494][ T4433] ? clear_bhb_loop+0x60/0xb0 [ 88.859231][ T4433] asm_exc_page_fault+0x22/0x30 [ 88.864131][ T4433] RIP: 0033:0x7f5a4dc52c43 [ 88.868569][ T4433] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 88.888366][ T4433] RSP: 002b:00007f5a4ebe9fd0 EFLAGS: 00010246 [ 88.894453][ T4433] RAX: 00007f5a4dc52c00 RBX: 00007f5a4e025fa0 RCX: 0000000000000000 [ 88.902442][ T4433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.910435][ T4433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.918430][ T4433] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 88.926418][ T4433] R13: 00007f5a4e026038 R14: 00007f5a4e025fa0 R15: 00007ffc9c024a68 [ 88.934425][ T4433] [ 89.264655][ T4402] lowmem_reserve[]: 0 0 1 1 1 [ 89.270822][ T4402] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 89.298063][ T4402] lowmem_reserve[]: 0 0 0 0 0 [ 89.302898][ T4402] Node 1 Normal free:3890248kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:24352kB local_pcp:11200kB free_cma:0kB [ 89.335508][ T4402] lowmem_reserve[]: 0 0 0 0 0 [ 89.341512][ T4402] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 89.358915][ T4402] Node 0 DMA32: 850*4kB (M) 2098*8kB (UME) 1257*16kB (UME) 439*32kB (ME) 332*64kB (ME) 41*128kB (ME) 31*256kB (M) 25*512kB (ME) 15*1024kB (M) 3*2048kB (UM) 309*4096kB (M) = 1388744kB [ 89.378257][ T4402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 89.390172][ T4402] Node 1 Normal: 254*4kB (U) 56*8kB (UE) 35*16kB (UME) 23*32kB (UME) 18*64kB (UME) 10*128kB (UME) 2*256kB (UM) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3890248kB [ 89.408186][ T4402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 89.418100][ T4402] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 89.427903][ T4402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 89.438755][ T4402] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 89.448981][ T4433] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 89.556081][ T4402] 54127 total pagecache pages [ 89.577373][ T4402] 0 pages in swap cache [ 89.605841][ T4402] Free swap = 124996kB [ 89.617518][ T4402] Total swap = 124996kB [ 89.651249][ T4402] 2097051 pages RAM [ 89.708893][ T4402] 0 pages HighMem/MovableOnly [ 89.724306][ T4402] 415223 pages reserved [ 89.758772][ T4402] 0 pages cma reserved [ 91.514480][ T4446] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.130018][ T4456] loop3: detected capacity change from 0 to 1024 [ 94.710722][ T4468] device syzkaller0 entered promiscuous mode [ 94.713157][ T4471] FAULT_INJECTION: forcing a failure. [ 94.713157][ T4471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.786207][ T4471] CPU: 0 PID: 4471 Comm: syz.1.34 Not tainted syzkaller #0 [ 94.793465][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.803634][ T4471] Call Trace: [ 94.806931][ T4471] [ 94.809875][ T4471] dump_stack_lvl+0x188/0x24e [ 94.814590][ T4471] ? show_regs_print_info+0x12/0x12 [ 94.819820][ T4471] ? load_image+0x410/0x410 [ 94.824364][ T4471] ? __lock_acquire+0x7c40/0x7c40 [ 94.829425][ T4471] ? __schedule+0x1087/0x4030 [ 94.834137][ T4471] should_fail_ex+0x390/0x4c0 [ 94.838848][ T4471] prepare_alloc_pages+0x1e1/0x5b0 [ 94.844000][ T4471] __alloc_pages+0x130/0x4f0 [ 94.848717][ T4471] ? zone_statistics+0x170/0x170 [ 94.853700][ T4471] __pmd_alloc+0xa6/0x760 [ 94.858061][ T4471] ? __pud_alloc+0x150/0x150 [ 94.862666][ T4471] ? count_memcg_event_mm+0x36b/0x3c0 [ 94.868063][ T4471] ? __lock_acquire+0x7c40/0x7c40 [ 94.873113][ T4471] ? count_memcg_event_mm+0x8a/0x3c0 [ 94.878413][ T4471] ? put_page+0x270/0x270 [ 94.882751][ T4471] ? hugepage_vma_check+0x461/0x540 [ 94.887958][ T4471] handle_mm_fault+0xa06/0x3d40 [ 94.892825][ T4471] ? mt_find+0x157/0x830 [ 94.897099][ T4471] ? numa_migrate_prep+0x250/0x250 [ 94.902225][ T4471] ? lock_chain_count+0x20/0x20 [ 94.907101][ T4471] ? lock_mm_and_find_vma+0xae/0x2f0 [ 94.912398][ T4471] do_user_addr_fault+0x58e/0xb20 [ 94.917444][ T4471] exc_page_fault+0x60/0x100 [ 94.922048][ T4471] ? clear_bhb_loop+0x60/0xb0 [ 94.926750][ T4471] asm_exc_page_fault+0x22/0x30 [ 94.931631][ T4471] RIP: 0033:0x7fb43be52c43 [ 94.936073][ T4471] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 94.955683][ T4471] RSP: 002b:00007fb43ceeafd0 EFLAGS: 00010246 [ 94.961752][ T4471] RAX: 00007fb43be52c00 RBX: 00007fb43c225fa0 RCX: 0000000000000000 [ 94.969727][ T4471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.977696][ T4471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.985659][ T4471] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 94.993627][ T4471] R13: 00007fb43c226038 R14: 00007fb43c225fa0 R15: 00007ffdd48db488 [ 95.001629][ T4471] [ 95.161391][ T4464] loop4: detected capacity change from 0 to 32768 [ 95.182882][ T4464] ======================================================= [ 95.182882][ T4464] WARNING: The mand mount option has been deprecated and [ 95.182882][ T4464] and is ignored by this kernel. Remove the mand [ 95.182882][ T4464] option from the mount to silence this warning. [ 95.182882][ T4464] ======================================================= [ 95.373793][ T4464] XFS (loop4): Mounting V5 Filesystem [ 95.421286][ T4471] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 95.520417][ T4464] XFS (loop4): Ending clean mount [ 95.563783][ T4464] XFS (loop4): Quotacheck needed: Please wait. [ 95.759194][ T4464] XFS (loop4): Quotacheck: Done. [ 98.191604][ T4274] XFS (loop4): Unmounting Filesystem [ 99.083403][ T4523] loop2: detected capacity change from 0 to 1024 [ 99.101476][ T4523] EXT4-fs: Ignoring removed orlov option [ 99.142869][ T4521] loop3: detected capacity change from 0 to 4096 [ 100.354427][ T4523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.393529][ T4531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.074037][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 106.102885][ T4577] loop0: detected capacity change from 0 to 1024 [ 106.360088][ T4577] EXT4-fs: Ignoring removed orlov option [ 106.846157][ T4578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.934040][ T4577] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.946564][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 106.955296][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 107.562353][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 108.967617][ T4617] syz.4.73 uses obsolete (PF_INET,SOCK_PACKET) [ 110.484301][ T4620] FAULT_INJECTION: forcing a failure. [ 110.484301][ T4620] name failslab, interval 1, probability 0, space 0, times 1 [ 111.538509][ T4620] CPU: 0 PID: 4620 Comm: syz.3.72 Not tainted syzkaller #0 [ 111.545777][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.556029][ T4620] Call Trace: [ 111.559323][ T4620] [ 111.562247][ T4620] dump_stack_lvl+0x188/0x24e [ 111.566943][ T4620] ? show_regs_print_info+0x12/0x12 [ 111.572172][ T4620] ? load_image+0x410/0x410 [ 111.577120][ T4620] ? __lock_acquire+0x7c40/0x7c40 [ 111.582200][ T4620] ? pointer+0x870/0xfe0 [ 111.586450][ T4620] should_fail_ex+0x390/0x4c0 [ 111.591138][ T4620] should_failslab+0x5/0x20 [ 111.595643][ T4620] slab_pre_alloc_hook+0x59/0x300 [ 111.600675][ T4620] ? kasprintf+0xdf/0x130 [ 111.605012][ T4620] __kmem_cache_alloc_node+0x4f/0x270 [ 111.610398][ T4620] ? kasprintf+0xdf/0x130 [ 111.614726][ T4620] __kmalloc_node_track_caller+0xa0/0x240 [ 111.620459][ T4620] kvasprintf+0xe8/0x1a0 [ 111.624701][ T4620] ? bust_spinlocks+0xd0/0xd0 [ 111.629386][ T4620] kasprintf+0xdf/0x130 [ 111.633552][ T4620] ? kvasprintf_const+0x240/0x240 [ 111.638580][ T4620] ? mark_lock+0x94/0x320 [ 111.642953][ T4620] logfc+0x152/0x4f0 [ 111.646867][ T4620] ? vfs_parse_fs_param_source+0x190/0x190 [ 111.652685][ T4620] ceph_get_tree+0x372/0x1350 [ 111.657369][ T4620] vfs_get_tree+0x88/0x270 [ 111.661789][ T4620] vfs_fsconfig_locked+0x22f/0x400 [ 111.666909][ T4620] __se_sys_fsconfig+0x69e/0x7e0 [ 111.671857][ T4620] ? __x64_sys_fsconfig+0xc0/0xc0 [ 111.676893][ T4620] ? lockdep_hardirqs_on+0x94/0x140 [ 111.682093][ T4620] ? __x64_sys_fsconfig+0x1c/0xc0 [ 111.687124][ T4620] do_syscall_64+0x4c/0xa0 [ 111.691550][ T4620] ? clear_bhb_loop+0x60/0xb0 [ 111.696234][ T4620] ? clear_bhb_loop+0x60/0xb0 [ 111.700917][ T4620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.706813][ T4620] RIP: 0033:0x7f2a5ef9e159 [ 111.711234][ T4620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.730856][ T4620] RSP: 002b:00007f2a5ff0b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 111.739273][ T4620] RAX: ffffffffffffffda RBX: 00007f2a5f226180 RCX: 00007f2a5ef9e159 [ 111.747241][ T4620] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 111.755379][ T4620] RBP: 00007f2a5f03503b R08: 0000000000000000 R09: 0000000000000000 [ 111.763368][ T4620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.771512][ T4620] R13: 00007f2a5f226218 R14: 00007f2a5f226180 R15: 00007ffec8ceb108 [ 111.779850][ T4620] [ 112.447117][ T4631] device syzkaller0 entered promiscuous mode [ 113.991237][ T4290] Bluetooth: Wrong link type (-22) [ 117.140183][ T4673] loop3: detected capacity change from 0 to 1024 [ 117.157000][ T4673] EXT4-fs: Ignoring removed orlov option [ 117.213027][ T4673] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.215156][ T4674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.763771][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 121.817324][ T4700] loop3: detected capacity change from 0 to 512 [ 121.842529][ T4700] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.564315][ T4706] FAULT_INJECTION: forcing a failure. [ 122.564315][ T4706] name failslab, interval 1, probability 0, space 0, times 0 [ 122.620035][ T4706] CPU: 1 PID: 4706 Comm: syz.2.98 Not tainted syzkaller #0 [ 122.627287][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.637377][ T4706] Call Trace: [ 122.640672][ T4706] [ 122.643621][ T4706] dump_stack_lvl+0x188/0x24e [ 122.648339][ T4706] ? show_regs_print_info+0x12/0x12 [ 122.653573][ T4706] ? load_image+0x410/0x410 [ 122.658090][ T4706] ? __might_sleep+0xd0/0xd0 [ 122.662681][ T4706] ? __lock_acquire+0x7c40/0x7c40 [ 122.667718][ T4706] should_fail_ex+0x390/0x4c0 [ 122.672405][ T4706] should_failslab+0x5/0x20 [ 122.676904][ T4706] slab_pre_alloc_hook+0x59/0x300 [ 122.681930][ T4706] ? ceph_create_client+0x6b/0x300 [ 122.687045][ T4706] __kmem_cache_alloc_node+0x4f/0x270 [ 122.692417][ T4706] ? ceph_create_client+0x6b/0x300 [ 122.697529][ T4706] kmalloc_trace+0x26/0xe0 [ 122.701957][ T4706] ceph_create_client+0x6b/0x300 [ 122.706913][ T4706] ceph_get_tree+0x1c1/0x1350 [ 122.711588][ T4706] ? bpf_lsm_capable+0x5/0x10 [ 122.716264][ T4706] ? security_capable+0x85/0xb0 [ 122.721127][ T4706] vfs_get_tree+0x88/0x270 [ 122.725542][ T4706] vfs_fsconfig_locked+0x22f/0x400 [ 122.730663][ T4706] __se_sys_fsconfig+0x69e/0x7e0 [ 122.735641][ T4706] ? __x64_sys_fsconfig+0xc0/0xc0 [ 122.740679][ T4706] ? lockdep_hardirqs_on+0x94/0x140 [ 122.745880][ T4706] ? __x64_sys_fsconfig+0x1c/0xc0 [ 122.750908][ T4706] do_syscall_64+0x4c/0xa0 [ 122.755328][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 122.760009][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 122.764711][ T4706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.770630][ T4706] RIP: 0033:0x7f124979e159 [ 122.775078][ T4706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.794706][ T4706] RSP: 002b:00007f124a5d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 122.803134][ T4706] RAX: ffffffffffffffda RBX: 00007f1249a26180 RCX: 00007f124979e159 [ 122.811113][ T4706] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 122.819086][ T4706] RBP: 00007f124983503b R08: 0000000000000000 R09: 0000000000000000 [ 122.827063][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.835038][ T4706] R13: 00007f1249a26218 R14: 00007f1249a26180 R15: 00007ffe961daa08 [ 122.843024][ T4706] [ 123.145594][ T4721] loop3: detected capacity change from 0 to 1024 [ 124.341017][ T4721] EXT4-fs: Ignoring removed orlov option [ 124.727568][ T4378] wlan1: Trigger new scan to find an IBSS to join [ 125.327784][ T4721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.788771][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 126.447841][ T4750] loop3: detected capacity change from 0 to 512 [ 126.482618][ T4750] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.636360][ T4736] loop1: detected capacity change from 0 to 32768 [ 127.592278][ T26] audit: type=1800 audit(1789256759.977:2): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.109" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 127.621468][ T4760] ialloc: diAlloc returned -5! [ 127.766583][ T4695] wlan1: Trigger new scan to find an IBSS to join [ 130.125056][ T4336] wlan1: Trigger new scan to find an IBSS to join [ 130.132447][ T4434] wlan1: Trigger new scan to find an IBSS to join [ 130.607955][ T4336] wlan1: Creating new IBSS network, BSSID 76:5f:e0:07:c3:1b [ 130.643981][ T4772] loop1: detected capacity change from 0 to 1024 [ 130.702028][ T4772] EXT4-fs: Ignoring removed orlov option [ 130.793749][ T4772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.085899][ T4787] batman_adv: batadv0: Adding interface: veth0 [ 131.189283][ T4787] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.232351][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 131.273931][ T4787] batman_adv: batadv0: Interface activated: veth0 [ 131.296349][ T4787] batman_adv: batadv0: Interface deactivated: veth0 [ 131.371111][ T4792] loop1: detected capacity change from 0 to 512 [ 131.425913][ T4792] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.514386][ T4787] batman_adv: batadv0: Removing interface: veth0 [ 132.805829][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812219][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.825101][ T31] wlan1: Trigger new scan to find an IBSS to join [ 132.825314][ T4491] wlan1: Trigger new scan to find an IBSS to join [ 132.961926][ T31] wlan1: Creating new IBSS network, BSSID 52:6c:80:cd:99:13 [ 135.369137][ T4822] loop0: detected capacity change from 0 to 4096 [ 136.437407][ T4842] syz.3.130: attempt to access beyond end of device [ 136.437407][ T4842] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 136.451000][ T4842] gfs2: error 10 reading superblock [ 137.776207][ T57] wlan1: Trigger new scan to find an IBSS to join [ 138.391481][ T4845] loop2: detected capacity change from 0 to 512 [ 138.930617][ T4845] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.678901][ T31] wlan1: Trigger new scan to find an IBSS to join [ 143.130731][ T4869] loop2: detected capacity change from 0 to 4096 [ 144.744731][ T9] wlan1: Creating new IBSS network, BSSID 96:12:27:35:6e:a2 [ 144.809011][ T11] wlan1: Trigger new scan to find an IBSS to join [ 147.766598][ T9] wlan1: Trigger new scan to find an IBSS to join [ 149.766198][ T4336] wlan1: Creating new IBSS network, BSSID ce:aa:75:ff:9e:e4 [ 153.378607][ T4930] loop4: detected capacity change from 0 to 4096 [ 153.774524][ T31] wlan1: Trigger new scan to find an IBSS to join [ 155.842569][ T4951] device syzkaller0 entered promiscuous mode [ 155.907665][ T4951] tipc: Started in network mode [ 155.912611][ T4951] tipc: Node identity 42b4f5741df6, cluster identity 4711 [ 155.982112][ T4951] tipc: Enabled bearer , priority 0 [ 156.040290][ T4948] tipc: Resetting bearer [ 156.132493][ T4959] comedi: valid board names for 8255 driver are: [ 156.139271][ T4959] 8255 [ 156.142118][ T4959] comedi: valid board names for vmk80xx driver are: [ 156.148952][ T4959] vmk80xx [ 156.152069][ T4959] comedi: valid board names for usbduxsigma driver are: [ 156.159429][ T4959] usbduxsigma [ 156.162954][ T4959] comedi: valid board names for usbduxfast driver are: [ 156.170171][ T4959] usbduxfast [ 156.173717][ T4959] comedi: valid board names for usbdux driver are: [ 156.180349][ T4959] usbdux [ 156.183738][ T4959] comedi: valid board names for ni6501 driver are: [ 156.190751][ T4959] ni6501 [ 156.193833][ T4959] comedi: valid board names for dt9812 driver are: [ 156.200610][ T4959] dt9812 [ 156.203670][ T4959] comedi: valid board names for ni_labpc_cs driver are: [ 156.210840][ T4959] ni_labpc_cs [ 156.214373][ T4959] comedi: valid board names for ni_daq_700 driver are: [ 156.221529][ T4959] ni_daq_700 [ 156.224929][ T4959] comedi: valid board names for labpc_pci driver are: [ 156.231945][ T4959] labpc_pci [ 156.235295][ T4959] comedi: valid board names for adl_pci9118 driver are: [ 156.242569][ T4959] pci9118dg [ 156.245878][ T4959] pci9118hg [ 156.250359][ T4959] pci9118hr [ 156.253791][ T4959] comedi: valid board names for 8255_pci driver are: [ 156.261182][ T4959] 8255_pci [ 156.264509][ T4959] comedi: valid board names for s526 driver are: [ 156.271090][ T4959] s526 [ 156.274053][ T4959] comedi: valid board names for multiq3 driver are: [ 156.280881][ T4959] multiq3 [ 156.284077][ T4959] comedi: valid board names for pcmuio driver are: [ 156.291114][ T4959] pcmuio48 [ 156.294384][ T4959] pcmuio96 [ 156.297769][ T4959] comedi: valid board names for pcmmio driver are: [ 156.304426][ T4959] pcmmio [ 156.308323][ T4959] comedi: valid board names for pcmda12 driver are: [ 156.316901][ T4959] pcmda12 [ 156.320164][ T4959] comedi: valid board names for pcmad driver are: [ 156.326805][ T4959] pcmad12 [ 156.330019][ T4959] pcmad16 [ 156.333228][ T4959] comedi: valid board names for ni_labpc driver are: [ 156.340071][ T4959] lab-pc-1200 [ 156.343614][ T4959] lab-pc-1200ai [ 156.347319][ T4959] lab-pc+ [ 156.350532][ T4959] comedi: valid board names for atmio16 driver are: [ 156.357315][ T4959] atmio16 [ 156.360507][ T4959] atmio16d [ 156.363760][ T4959] comedi: valid board names for ni_at_ao driver are: [ 156.370609][ T4959] at-ao-6 [ 156.373807][ T4959] at-ao-10 [ 156.377053][ T4959] comedi: valid board names for ni_at_a2150 driver are: [ 156.384144][ T4959] ni_at_a2150 [ 156.387719][ T4959] comedi: valid board names for adq12b driver are: [ 156.394620][ T4959] adq12b [ 156.397828][ T4959] comedi: valid board names for mpc624 driver are: [ 156.404537][ T4959] mpc624 [ 156.408156][ T4959] comedi: valid board names for c6xdigio driver are: [ 156.414988][ T4959] c6xdigio [ 156.418304][ T4959] comedi: valid board names for aio_iiro_16 driver are: [ 156.425425][ T4959] aio_iiro_16 [ 156.428994][ T4959] comedi: valid board names for aio_aio12_8 driver are: [ 156.436063][ T4959] aio_aio12_8 [ 156.439572][ T4959] aio_ai12_8 [ 156.442979][ T4959] aio_ao12_4 [ 156.446489][ T4959] comedi: valid board names for fl512 driver are: [ 156.453102][ T4959] fl512 [ 156.456113][ T4959] comedi: valid board names for dmm32at driver are: [ 156.462911][ T4959] dmm32at [ 156.466082][ T4959] comedi: valid board names for dt282x driver are: [ 156.472779][ T4959] dt2821 [ 156.475838][ T4959] dt2821-f [ 156.479155][ T4959] dt2821-g [ 156.482405][ T4959] dt2823 [ 156.485489][ T4959] dt2824-pgh [ 156.488923][ T4959] dt2824-pgl [ 156.492384][ T4959] dt2825 [ 156.495676][ T4959] dt2827 [ 156.498814][ T4959] dt2828 [ 156.501893][ T4959] dt2829 [ 156.504977][ T4959] dt21-ez [ 156.508163][ T4959] dt23-ez [ 156.511310][ T4959] dt24-ez [ 156.514496][ T4959] dt24-ez-pgl [ 156.518070][ T4959] comedi: valid board names for dt2817 driver are: [ 156.524748][ T4959] dt2817 [ 156.527863][ T4959] comedi: valid board names for dt2815 driver are: [ 156.534531][ T4959] dt2815 [ 156.537650][ T4959] comedi: valid board names for dt2814 driver are: [ 156.544328][ T4959] dt2814 [ 156.547449][ T4959] comedi: valid board names for dt2811 driver are: [ 156.554173][ T4959] dt2811-pgh [ 156.557622][ T4959] dt2811-pgl [ 156.561085][ T4959] comedi: valid board names for dt2801 driver are: [ 156.567919][ T4959] dt2801 [ 156.571045][ T4959] comedi: valid board names for das6402 driver are: [ 156.577813][ T4959] das6402-12 [ 156.581228][ T4959] das6402-16 [ 156.584630][ T4959] comedi: valid board names for das1800 driver are: [ 156.591559][ T4959] das-1701st [ 156.595005][ T4959] das-1701st-da [ 156.599030][ T4959] das-1702st [ 156.602576][ T4959] das-1702st-da [ 156.606531][ T4959] das-1702hr [ 156.610122][ T4959] das-1702hr-da [ 156.613857][ T4959] das-1701ao [ 156.617429][ T4959] das-1702ao [ 156.621623][ T4959] das-1801st [ 156.625250][ T4959] das-1801st-da [ 156.629022][ T4959] das-1802st [ 156.632531][ T4959] das-1802st-da [ 156.636248][ T4959] das-1802hr [ 156.639693][ T4959] das-1802hr-da [ 156.643383][ T4959] das-1801hc [ 156.646881][ T4959] das-1802hc [ 156.650514][ T4959] das-1801ao [ 156.653926][ T4959] das-1802ao [ 156.657369][ T4959] comedi: valid board names for das800 driver are: [ 156.664052][ T4959] das-800 [ 156.667271][ T4959] cio-das800 [ 156.670678][ T4959] das-801 [ 156.673904][ T4959] cio-das801 [ 156.677384][ T4959] das-802 [ 156.680784][ T4959] cio-das802 [ 156.684308][ T4959] cio-das802/16 [ 156.688217][ T4959] comedi: valid board names for isa-das08 driver are: [ 156.695426][ T4959] isa-das08 [ 156.699263][ T4959] das08-pgm [ 156.702807][ T4959] das08-pgh [ 156.707486][ T4959] das08-pgl [ 156.711463][ T4959] das08-aoh [ 156.714840][ T4959] das08-aol [ 156.718247][ T4959] das08-aom [ 156.721848][ T4959] das08/jr-ao [ 156.726125][ T4959] das08jr-16-ao [ 156.730366][ T4959] pc104-das08 [ 156.733956][ T4959] das08jr/16 [ 156.738014][ T4959] comedi: valid board names for das16m1 driver are: [ 156.744934][ T4959] das16m1 [ 156.748176][ T4959] comedi: valid board names for dac02 driver are: [ 156.754746][ T4959] dac02 [ 156.757784][ T4959] comedi: valid board names for rti802 driver are: [ 156.764462][ T4959] rti802 [ 156.767732][ T4959] comedi: valid board names for rti800 driver are: [ 156.774510][ T4959] rti800 [ 156.777620][ T4959] rti815 [ 156.780833][ T4959] comedi: valid board names for pcm3724 driver are: [ 156.787579][ T4959] pcm3724 [ 157.005189][ T4959] comedi: valid board names for pcl818 driver are: [ 157.012159][ T4959] pcl818l [ 157.015236][ T4959] pcl818h [ 157.018453][ T4959] pcl818hd [ 157.021621][ T4959] pcl818hg [ 157.024747][ T4959] pcl818 [ 157.027796][ T4959] pcl718 [ 157.030794][ T4959] pcm3718 [ 157.033845][ T4959] comedi: valid board names for pcl816 driver are: [ 157.040564][ T4959] pcl816 [ 157.043519][ T4959] pcl814b [ 157.056434][ T4959] comedi: valid board names for pcl812 driver are: [ 157.157135][ T4948] tipc: Disabling bearer [ 157.201068][ T1182] tipc: Node number set to 1598223732 [ 157.312098][ T4959] pcl812 [ 157.338277][ T4959] pcl812pg [ 157.341409][ T4959] acl8112pg [ 157.344588][ T4959] acl8112dg [ 157.380445][ T4959] acl8112hg [ 157.383678][ T4959] a821pgl [ 157.414309][ T4959] a821pglnda [ 157.427518][ T4959] a821pgh [ 157.430552][ T4959] a822pgl [ 157.433569][ T4959] a822pgh [ 157.486774][ T4959] a823pgl [ 157.489838][ T4959] a823pgh [ 157.492932][ T4959] pcl813 [ 157.495852][ T4959] pcl813b [ 157.558318][ T4959] acl8113 [ 157.561368][ T4959] iso813 [ 157.564291][ T4959] acl8216 [ 157.599545][ T4959] a826pg [ 157.602604][ T4959] comedi: valid board names for pcl730 driver are: [ 157.832260][ T4491] wlan1: Trigger new scan to find an IBSS to join [ 157.875135][ T4959] pcl730 [ 157.909194][ T4959] iso730 [ 157.943513][ T4959] acl7130 [ 158.141190][ T4959] pcm3730 [ 158.165410][ T4959] pcl725 [ 158.276262][ T4959] p8r8dio [ 158.279320][ T4959] acl7225b [ 158.282414][ T4959] p16r16dio [ 158.285593][ T4959] pcl733 [ 158.329465][ T4959] pcl734 [ 158.344639][ T4959] opmm-1616-xt [ 158.356440][ T4959] pearl-mm-p [ 158.360098][ T4959] ir104-pbf [ 158.366353][ T4959] comedi: valid board names for pcl726 driver are: [ 158.389274][ T4959] pcl726 [ 158.394275][ T4959] pcl727 [ 158.405175][ T4959] pcl728 [ 158.420697][ T4959] acl6126 [ 158.430355][ T4959] acl6128 [ 158.433464][ T4959] comedi: valid board names for pcl724 driver are: [ 158.448348][ T4959] pcl724 [ 158.457558][ T4959] pcl722 [ 158.485263][ T4959] pcl731 [ 158.498902][ T4959] acl7122 [ 158.501950][ T4959] acl7124 [ 158.504979][ T4959] pet48dio [ 158.519630][ T4959] pcmio48 [ 158.529687][ T4959] onyx-mm-dio [ 158.533083][ T4959] comedi: valid board names for pcl711 driver are: [ 158.566309][ T4959] pcl711 [ 158.569306][ T4959] pcl711b [ 159.571758][ T4959] acl8112hg [ 159.574988][ T4959] acl8112dg [ 159.646524][ T4959] comedi: valid board names for amplc_pc263 driver are: [ 159.653971][ T4959] pc263 [ 159.661843][ T4973] loop3: detected capacity change from 0 to 1024 [ 159.667203][ T4959] comedi: valid board names for amplc_pc236 driver are: [ 160.392990][ T11] wlan1: Trigger new scan to find an IBSS to join [ 160.420889][ T4973] EXT4-fs: Ignoring removed orlov option [ 160.446837][ T4959] pc36at [ 160.676783][ T4959] comedi: valid board names for amplc_dio200 driver are: [ 160.683829][ T4959] pc212e [ 160.695082][ T4959] pc214e [ 160.711962][ T4959] pc215e [ 160.714934][ T4959] pc218e [ 160.742730][ T4959] pc272e [ 160.745713][ T4959] comedi: valid board names for comedi_parport driver are: [ 160.822860][ T4973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.937065][ T4959] comedi_parport [ 160.940745][ T4959] comedi: valid board names for comedi_test driver are: [ 160.951552][ T31] wlan1: Creating new IBSS network, BSSID ea:61:8a:1b:18:d0 [ 160.969816][ T4959] comedi_test [ 160.973211][ T4959] comedi: valid board names for comedi_bond driver are: [ 161.409253][ T4959] comedi_bond [ 161.421672][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 161.466278][ T4999] loop0: detected capacity change from 0 to 256 [ 161.992533][ T5012] tipc: Enabling of bearer rejected, failed to enable media [ 167.239340][ T5046] loop1: detected capacity change from 0 to 1024 [ 167.248738][ T5046] EXT4-fs: Ignoring removed orlov option [ 167.322514][ T5046] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.462766][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 168.778818][ T5051] loop3: detected capacity change from 0 to 32768 [ 168.836810][ T5051] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.188 (5051) [ 168.872375][ T5051] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.883774][ T5051] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 168.899302][ T5051] BTRFS info (device loop3): force clearing of disk cache [ 168.908573][ T5051] BTRFS info (device loop3): metadata ratio 0 [ 168.914689][ T5051] BTRFS info (device loop3): using free space tree [ 169.046297][ T4318] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 169.136100][ T5051] BTRFS info (device loop3): enabling ssd optimizations [ 169.171082][ T5051] BTRFS info (device loop3): rebuilding free space tree [ 169.349396][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.458793][ T4318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.589137][ T4318] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.782537][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.866251][ T4318] usb 2-1: Product: syz [ 169.951161][ T5095] tipc: Enabling of bearer rejected, failed to enable media [ 169.976029][ T4318] usb 2-1: Manufacturer: syz [ 170.004901][ T4318] usb 2-1: SerialNumber: syz [ 170.382361][ T4272] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.293378][ T4318] usb 2-1: 0:2 : does not exist [ 171.542876][ T5107] loop0: detected capacity change from 0 to 40427 [ 171.577060][ T5107] F2FS-fs (loop0): invalid crc value [ 171.595672][ T4318] usb 2-1: USB disconnect, device number 2 [ 171.603681][ T5107] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.760569][ T5107] F2FS-fs (loop0): Start checkpoint disabled! [ 171.836224][ T5107] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 173.020197][ T4434] kworker/u4:15: attempt to access beyond end of device [ 173.020197][ T4434] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 175.476573][ T5168] tipc: Enabling of bearer rejected, failed to enable media [ 178.847386][ T5201] device syzkaller1 entered promiscuous mode [ 178.863652][ T5196] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 178.873375][ T5196] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 178.883025][ T5196] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 178.886142][ T26] audit: type=1800 audit(1789256811.247:3): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.219" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 181.405523][ T5223] sched: RT throttling activated [ 182.427448][ T5229] tipc: Enabling of bearer rejected, failed to enable media [ 184.108078][ T5243] loop3: detected capacity change from 0 to 256 [ 188.117860][ T5271] tipc: Enabling of bearer rejected, failed to enable media [ 190.891342][ T5301] loop1: detected capacity change from 0 to 1024 [ 190.917056][ T5301] EXT4-fs: Ignoring removed orlov option [ 191.014831][ T5301] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.082493][ T5308] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 191.090883][ T5308] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 191.099453][ T5308] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 191.126056][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 191.132170][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 191.138277][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 191.138312][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 191.144442][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 191.766677][ T4434] wlan1: Trigger new scan to find an IBSS to join [ 192.979448][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 194.169986][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176356][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.255433][ T5323] loop4: detected capacity change from 0 to 512 [ 194.806127][ T11] wlan1: Trigger new scan to find an IBSS to join [ 195.186486][ T5323] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 195.199742][ T5323] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.223335][ T5323] EXT4-fs (loop4): 1 truncate cleaned up [ 195.230640][ T5323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 195.766528][ T4431] wlan1: Trigger new scan to find an IBSS to join [ 196.876450][ T5348] tipc: Enabling of bearer rejected, failed to enable media [ 197.003807][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 197.219337][ T5355] loop0: detected capacity change from 0 to 1024 [ 197.240664][ T5357] loop4: detected capacity change from 0 to 1024 [ 197.271408][ T5355] EXT4-fs: Ignoring removed orlov option [ 197.438797][ T5355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 198.500481][ T4434] wlan1: Trigger new scan to find an IBSS to join [ 198.660848][ T4434] wlan1: Creating new IBSS network, BSSID 9e:7e:61:45:33:f8 [ 199.038621][ T5364] overlayfs: statfs failed on './file0' [ 199.050117][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 200.432681][ T5374] binder: 5372:5374 ioctl c0306201 0 returned -14 [ 201.050624][ T57] wlan1: Trigger new scan to find an IBSS to join [ 201.157647][ T57] wlan1: Creating new IBSS network, BSSID b6:9a:2a:8e:52:25 [ 203.877116][ T11] wlan1: Trigger new scan to find an IBSS to join [ 204.242867][ T5413] FAULT_INJECTION: forcing a failure. [ 204.242867][ T5413] name failslab, interval 1, probability 0, space 0, times 0 [ 204.255937][ T5413] CPU: 1 PID: 5413 Comm: syz.4.274 Not tainted syzkaller #0 [ 204.263252][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.273342][ T5413] Call Trace: [ 204.276641][ T5413] [ 204.279130][ T5412] loop1: detected capacity change from 0 to 1024 [ 204.279603][ T5413] dump_stack_lvl+0x188/0x24e [ 204.290641][ T5413] ? show_regs_print_info+0x12/0x12 [ 204.295873][ T5413] ? load_image+0x410/0x410 [ 204.300428][ T5413] should_fail_ex+0x390/0x4c0 [ 204.305145][ T5413] should_failslab+0x5/0x20 [ 204.309674][ T5413] slab_pre_alloc_hook+0x59/0x300 [ 204.314329][ T5412] EXT4-fs: Ignoring removed orlov option [ 204.320435][ T5413] kmem_cache_alloc+0x56/0x2f0 [ 204.320464][ T5413] ? __sigqueue_alloc+0x40c/0x520 [ 204.320494][ T5413] ? __sigqueue_alloc+0x32/0x520 [ 204.320521][ T5413] __sigqueue_alloc+0x40c/0x520 [ 204.320549][ T5413] __send_signal_locked+0x22f/0xde0 [ 204.320581][ T5413] force_sig_info_to_task+0x2f0/0x3c0 [ 204.351117][ T5413] force_sig_fault+0xd9/0x130 [ 204.355828][ T5413] ? page_fault_oops+0x8c0/0x8c0 [ 204.360799][ T5413] ? force_sig_fault_to_task+0x130/0x130 [ 204.366469][ T5413] ? do_user_addr_fault+0x3a5/0xb20 [ 204.371700][ T5413] ? __bad_area_nosemaphore+0x311/0x660 [ 204.377277][ T5413] exc_page_fault+0x60/0x100 [ 204.381897][ T5413] ? clear_bhb_loop+0x60/0xb0 [ 204.386608][ T5413] asm_exc_page_fault+0x22/0x30 [ 204.391484][ T5413] RIP: 0033:0x7f5a4dc52c43 [ 204.395946][ T5413] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 204.415575][ T5413] RSP: 002b:00007f5a4ebe9fd0 EFLAGS: 00010246 [ 204.421680][ T5413] RAX: 00007f5a4dc52c00 RBX: 00007f5a4e025fa0 RCX: 0000000000000000 [ 204.429760][ T5413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.437755][ T5413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.445745][ T5413] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 204.453738][ T5413] R13: 00007f5a4e026038 R14: 00007f5a4e025fa0 R15: 00007ffc9c024a68 [ 204.461746][ T5413] [ 204.564481][ T5414] tipc: Enabling of bearer rejected, failed to enable media [ 204.575140][ T5412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 206.629301][ T5446] netlink: 'syz.4.277': attribute type 10 has an invalid length. [ 206.806210][ T4431] wlan1: Trigger new scan to find an IBSS to join [ 206.834517][ T5444] loop0: detected capacity change from 0 to 1024 [ 207.622592][ T5446] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 208.861863][ T5455] md: md0 stopped. [ 209.800845][ T4407] wlan1: Trigger new scan to find an IBSS to join [ 210.045202][ T4431] wlan1: Creating new IBSS network, BSSID f2:0e:2b:57:27:d8 [ 210.565892][ T5468] FAULT_INJECTION: forcing a failure. [ 210.565892][ T5468] name failslab, interval 1, probability 0, space 0, times 0 [ 210.578528][ T5468] CPU: 1 PID: 5468 Comm: syz.4.287 Not tainted syzkaller #0 [ 210.585812][ T5468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.595858][ T5468] Call Trace: [ 210.599127][ T5468] [ 210.602076][ T5468] dump_stack_lvl+0x188/0x24e [ 210.606750][ T5468] ? show_regs_print_info+0x12/0x12 [ 210.611938][ T5468] ? load_image+0x410/0x410 [ 210.616458][ T5468] should_fail_ex+0x390/0x4c0 [ 210.621178][ T5468] should_failslab+0x5/0x20 [ 210.625705][ T5468] slab_pre_alloc_hook+0x59/0x300 [ 210.630762][ T5468] kmem_cache_alloc+0x56/0x2f0 [ 210.635556][ T5468] ? __sigqueue_alloc+0x40c/0x520 [ 210.640615][ T5468] ? __sigqueue_alloc+0x32/0x520 [ 210.645583][ T5468] __sigqueue_alloc+0x40c/0x520 [ 210.650440][ T5468] __send_signal_locked+0x22f/0xde0 [ 210.655637][ T5468] force_sig_info_to_task+0x2f0/0x3c0 [ 210.661004][ T5468] force_sig_fault+0xd9/0x130 [ 210.665697][ T5468] ? page_fault_oops+0x8c0/0x8c0 [ 210.670644][ T5468] ? force_sig_fault_to_task+0x130/0x130 [ 210.676268][ T5468] ? do_user_addr_fault+0x3a5/0xb20 [ 210.681458][ T5468] ? __bad_area_nosemaphore+0x311/0x660 [ 210.687015][ T5468] exc_page_fault+0x60/0x100 [ 210.691601][ T5468] ? clear_bhb_loop+0x60/0xb0 [ 210.696289][ T5468] asm_exc_page_fault+0x22/0x30 [ 210.701323][ T5468] RIP: 0033:0x7f5a4dc52c43 [ 210.705727][ T5468] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 210.725326][ T5468] RSP: 002b:00007f5a4ebe9fd0 EFLAGS: 00010246 [ 210.731381][ T5468] RAX: 00007f5a4dc52c00 RBX: 00007f5a4e025fa0 RCX: 0000000000000000 [ 210.739345][ T5468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.747367][ T5468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.755352][ T5468] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 210.763313][ T5468] R13: 00007f5a4e026038 R14: 00007f5a4e025fa0 R15: 00007ffc9c024a68 [ 210.771290][ T5468] [ 211.251801][ T5480] tipc: Enabling of bearer rejected, failed to enable media [ 211.504834][ T5487] block device autoloading is deprecated and will be removed. [ 212.656768][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 212.958870][ T4261] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 213.686232][ T4261] usb 5-1: Using ep0 maxpacket: 16 [ 214.483719][ T4261] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 214.502011][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.515578][ T4261] usb 5-1: Product: syz [ 214.520272][ T4261] usb 5-1: Manufacturer: syz [ 215.096037][ T4261] usb 5-1: SerialNumber: syz [ 215.126799][ T4261] r8152-cfgselector 5-1: config 0 descriptor?? [ 216.308555][ T4261] r8152-cfgselector 5-1: Unknown version 0x0000 [ 216.315259][ T4261] r8152-cfgselector 5-1: bad CDC descriptors [ 216.437998][ T4261] r8152-cfgselector 5-1: Unknown version 0x0000 [ 216.467561][ T4261] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 216.545483][ T5527] loop1: detected capacity change from 0 to 1024 [ 218.246261][ T5529] FAULT_INJECTION: forcing a failure. [ 218.246261][ T5529] name failslab, interval 1, probability 0, space 0, times 0 [ 218.258903][ T5529] CPU: 1 PID: 5529 Comm: syz.2.300 Not tainted syzkaller #0 [ 218.266213][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.276290][ T5529] Call Trace: [ 218.279591][ T5529] [ 218.282535][ T5529] dump_stack_lvl+0x188/0x24e [ 218.287286][ T5529] ? show_regs_print_info+0x12/0x12 [ 218.292521][ T5529] ? load_image+0x410/0x410 [ 218.297065][ T5529] should_fail_ex+0x390/0x4c0 [ 218.301775][ T5529] should_failslab+0x5/0x20 [ 218.306302][ T5529] slab_pre_alloc_hook+0x59/0x300 [ 218.311543][ T5529] kmem_cache_alloc+0x56/0x2f0 [ 218.316608][ T5529] ? __sigqueue_alloc+0x40c/0x520 [ 218.321675][ T5529] ? __sigqueue_alloc+0x32/0x520 [ 218.326652][ T5529] __sigqueue_alloc+0x40c/0x520 [ 218.331812][ T5529] __send_signal_locked+0x22f/0xde0 [ 218.337049][ T5529] force_sig_info_to_task+0x2f0/0x3c0 [ 218.342475][ T5529] force_sig_fault+0xd9/0x130 [ 218.347198][ T5529] ? page_fault_oops+0x8c0/0x8c0 [ 218.352173][ T5529] ? force_sig_fault_to_task+0x130/0x130 [ 218.357848][ T5529] ? do_user_addr_fault+0x3a5/0xb20 [ 218.363089][ T5529] ? __bad_area_nosemaphore+0x311/0x660 [ 218.368692][ T5529] exc_page_fault+0x60/0x100 [ 218.373313][ T5529] ? clear_bhb_loop+0x60/0xb0 [ 218.378033][ T5529] asm_exc_page_fault+0x22/0x30 [ 218.382922][ T5529] RIP: 0033:0x7f1249652c43 [ 218.387364][ T5529] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 218.406995][ T5529] RSP: 002b:00007f124a613fd0 EFLAGS: 00010246 [ 218.413093][ T5529] RAX: 00007f1249652c00 RBX: 00007f1249a25fa0 RCX: 0000000000000000 [ 218.421133][ T5529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.429143][ T5529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.437147][ T5529] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 218.445151][ T5529] R13: 00007f1249a26038 R14: 00007f1249a25fa0 R15: 00007ffe961daa08 [ 218.453169][ T5529] [ 218.509412][ T5546] loop0: detected capacity change from 0 to 1024 [ 218.553493][ T5546] EXT4-fs: Ignoring removed orlov option [ 218.627018][ T5546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 218.782338][ T5547] tipc: Enabling of bearer rejected, failed to enable media [ 219.730612][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 222.136084][ T5566] loop1: detected capacity change from 0 to 512 [ 222.147726][ T5566] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.944425][ T5566] EXT4-fs (loop1): 1 truncate cleaned up [ 222.952513][ T5566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.921610][ T5582] loop3: detected capacity change from 0 to 2048 [ 224.831494][ T5582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.965429][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 225.151209][ T5591] loop4: detected capacity change from 0 to 32768 [ 225.257973][ T5591] XFS (loop4): Mounting V5 Filesystem [ 225.326180][ T5598] loop1: detected capacity change from 0 to 1024 [ 225.387507][ T5591] XFS (loop4): Ending clean mount [ 225.405405][ T5598] EXT4-fs: Ignoring removed orlov option [ 225.459636][ T5591] XFS (loop4): Quotacheck needed: Please wait. [ 225.567188][ T5614] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 227.164444][ T5614] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 227.613010][ T5598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.654805][ T5610] tipc: Enabling of bearer rejected, failed to enable media [ 228.660996][ T5591] XFS (loop4): Quotacheck: Done. [ 228.820153][ T4274] XFS (loop4): Unmounting Filesystem [ 228.901987][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 229.887227][ T5632] Zero length message leads to an empty skb [ 234.310132][ T26] audit: type=1326 audit(1789256866.697:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 234.395482][ T26] audit: type=1326 audit(1789256866.727:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 234.451599][ T5656] loop4: detected capacity change from 0 to 512 [ 234.470229][ T26] audit: type=1326 audit(1789256866.727:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 234.530229][ T26] audit: type=1326 audit(1789256866.737:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 234.638673][ T26] audit: type=1326 audit(1789256866.737:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 234.668664][ T5656] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.333: missing EA_INODE flag [ 234.725883][ T5656] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.333: error while reading EA inode 2 err=-117 [ 234.781244][ T26] audit: type=1326 audit(1789256866.737:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 234.871400][ T5656] EXT4-fs (loop4): 1 orphan inode deleted [ 234.878063][ T5656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.896465][ T26] audit: type=1326 audit(1789256866.737:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 234.992508][ T26] audit: type=1326 audit(1789256866.737:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 235.085328][ T26] audit: type=1326 audit(1789256866.737:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 235.117435][ T5648] syz.4.333 (pid 5648) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 235.196253][ T26] audit: type=1326 audit(1789256866.737:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.3.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ef9e159 code=0x7ffc0000 [ 237.345581][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 240.428544][ T5706] tipc: Enabling of bearer rejected, failed to enable media [ 241.697753][ T5713] loop0: detected capacity change from 0 to 32768 [ 241.824475][ T5713] XFS (loop0): Mounting V5 Filesystem [ 241.919414][ T5713] XFS (loop0): Ending clean mount [ 241.930987][ T5713] XFS (loop0): Quotacheck needed: Please wait. [ 242.002582][ T5713] XFS (loop0): Quotacheck: Done. [ 242.161729][ T5696] loop1: detected capacity change from 0 to 40427 [ 242.185195][ T5696] F2FS-fs (loop1): invalid crc value [ 242.217556][ T5716] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 242.252475][ T5696] F2FS-fs (loop1): Found nat_bits in checkpoint [ 242.414959][ T26] kauditd_printk_skb: 111 callbacks suppressed [ 242.415432][ T26] audit: type=1800 audit(1789256874.767:125): pid=5727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.337" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 242.559301][ T26] audit: type=1800 audit(1789256874.797:126): pid=5727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.337" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 242.789226][ T4276] XFS (loop0): Unmounting Filesystem [ 242.836651][ T5696] F2FS-fs (loop1): Start checkpoint disabled! [ 242.892483][ T5696] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 243.221098][ T5696] syz.1.345: attempt to access beyond end of device [ 243.221098][ T5696] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.997928][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 244.011470][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 244.021487][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 244.033856][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 244.043600][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 244.070013][ T5739] 9pnet_virtio: no channels available for device syz [ 245.722021][ T4431] kworker/u4:14: attempt to access beyond end of device [ 245.722021][ T4431] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 250.481941][ T5763] FAULT_INJECTION: forcing a failure. [ 250.481941][ T5763] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 251.076345][ T5763] CPU: 0 PID: 5763 Comm: syz.2.360 Not tainted syzkaller #0 [ 251.083678][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.089465][ T5768] device syzkaller0 entered promiscuous mode [ 251.093730][ T5763] Call Trace: [ 251.102983][ T5763] [ 251.105902][ T5763] dump_stack_lvl+0x188/0x24e [ 251.110598][ T5763] ? show_regs_print_info+0x12/0x12 [ 251.115789][ T5763] ? load_image+0x410/0x410 [ 251.120285][ T5763] ? __lock_acquire+0x7c40/0x7c40 [ 251.125308][ T5763] should_fail_ex+0x390/0x4c0 [ 251.129980][ T5763] _copy_from_user+0x2c/0x170 [ 251.134646][ T5763] __sys_bpf+0x2ea/0x780 [ 251.138904][ T5763] ? bpf_link_show_fdinfo+0x380/0x380 [ 251.144274][ T5763] ? lock_chain_count+0x20/0x20 [ 251.149123][ T5763] __x64_sys_bpf+0x78/0x90 [ 251.153532][ T5763] do_syscall_64+0x4c/0xa0 [ 251.157940][ T5763] ? clear_bhb_loop+0x60/0xb0 [ 251.162604][ T5763] ? clear_bhb_loop+0x60/0xb0 [ 251.167278][ T5763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.173162][ T5763] RIP: 0033:0x7f124979e159 [ 251.177578][ T5763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.197265][ T5763] RSP: 002b:00007f124a614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.205669][ T5763] RAX: ffffffffffffffda RBX: 00007f1249a25fa0 RCX: 00007f124979e159 [ 251.213658][ T5763] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 251.221637][ T5763] RBP: 00007f124983503b R08: 0000000000000000 R09: 0000000000000000 [ 251.229603][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.237580][ T5763] R13: 00007f1249a26038 R14: 00007f1249a25fa0 R15: 00007ffe961daa08 [ 251.245580][ T5763] [ 251.435734][ T5772] tipc: Started in network mode [ 251.456431][ T5772] tipc: Node identity b61061caf3c9, cluster identity 4711 [ 251.504125][ T5772] tipc: Enabled bearer , priority 0 [ 251.580026][ T5765] tipc: Resetting bearer [ 251.771070][ T5776] loop2: detected capacity change from 0 to 32768 [ 251.821816][ T5765] tipc: Disabling bearer [ 251.882926][ T5776] XFS (loop2): Mounting V5 Filesystem [ 251.968573][ T5776] XFS (loop2): Ending clean mount [ 251.995209][ T5776] XFS (loop2): Quotacheck needed: Please wait. [ 252.081309][ T5776] XFS (loop2): Quotacheck: Done. [ 252.384989][ T26] audit: type=1800 audit(1789256884.747:127): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.362" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 253.412760][ T4285] XFS (loop2): Unmounting Filesystem [ 253.608917][ T26] audit: type=1800 audit(1789256884.767:128): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.362" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 255.617691][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.624118][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.290906][ T5827] device syzkaller0 entered promiscuous mode [ 257.306746][ T5827] tipc: Enabled bearer , priority 0 [ 257.346314][ T5824] tipc: Resetting bearer [ 257.578437][ T5824] tipc: Disabling bearer [ 257.810477][ T5834] loop4: detected capacity change from 0 to 512 [ 257.851784][ T5834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.029146][ T5834] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 259.104483][ T5834] EXT4-fs (loop4): 1 truncate cleaned up [ 259.116011][ T5834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 259.804452][ T4274] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 259.869103][ T4274] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 260.426057][ T4274] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 261.030949][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 267.120942][ T5895] null_blk: disk nullb1 created [ 267.936041][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 268.074447][ T5897] FAULT_INJECTION: forcing a failure. [ 268.074447][ T5897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.302037][ T5897] CPU: 1 PID: 5897 Comm: syz.0.398 Not tainted syzkaller #0 [ 268.309395][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.319470][ T5897] Call Trace: [ 268.322763][ T5897] [ 268.325712][ T5897] dump_stack_lvl+0x188/0x24e [ 268.330433][ T5897] ? show_regs_print_info+0x12/0x12 [ 268.335665][ T5897] ? load_image+0x410/0x410 [ 268.339561][ T5901] device syzkaller0 entered promiscuous mode [ 268.340178][ T5897] ? __lock_acquire+0x7c40/0x7c40 [ 268.351203][ T5897] should_fail_ex+0x390/0x4c0 [ 268.355919][ T5897] _copy_from_user+0x2c/0x170 [ 268.360628][ T5897] __sys_bpf+0x2ea/0x780 [ 268.364147][ T5901] tipc: Enabled bearer , priority 0 [ 268.364887][ T5897] ? bpf_link_show_fdinfo+0x380/0x380 [ 268.376890][ T5897] ? lock_chain_count+0x20/0x20 [ 268.381774][ T5897] __x64_sys_bpf+0x78/0x90 [ 268.386214][ T5897] do_syscall_64+0x4c/0xa0 [ 268.390651][ T5897] ? clear_bhb_loop+0x60/0xb0 [ 268.395356][ T5897] ? clear_bhb_loop+0x60/0xb0 [ 268.400069][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.405986][ T5897] RIP: 0033:0x7f716f39e159 [ 268.410416][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.430040][ T5897] RSP: 002b:00007f717023a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.438478][ T5897] RAX: ffffffffffffffda RBX: 00007f716f625fa0 RCX: 00007f716f39e159 [ 268.446468][ T5897] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 268.454463][ T5897] RBP: 00007f716f43503b R08: 0000000000000000 R09: 0000000000000000 [ 268.462454][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.470441][ T5897] R13: 00007f716f626038 R14: 00007f716f625fa0 R15: 00007fff433518b8 [ 268.478434][ T5897] [ 268.510320][ T5900] tipc: Resetting bearer [ 268.543838][ T5906] loop2: detected capacity change from 0 to 1024 [ 268.551268][ T5906] EXT4-fs: Ignoring removed i_version option [ 269.317109][ T5906] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 269.556367][ T5902] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.563860][ T5902] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 269.587012][ T5900] tipc: Disabling bearer [ 270.934695][ T5902] device hsr_slave_0 left promiscuous mode [ 270.947636][ T5902] device hsr_slave_1 left promiscuous mode [ 271.027491][ T4322] tipc: Node number set to 2695718081 [ 273.604643][ T5926] loop0: detected capacity change from 0 to 1024 [ 273.797239][ T5926] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 274.654054][ T5939] /dev/sg0: Can't open blockdev [ 275.697387][ T5945] FAULT_INJECTION: forcing a failure. [ 275.697387][ T5945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.824084][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 275.866205][ T5945] CPU: 1 PID: 5945 Comm: syz.3.410 Not tainted syzkaller #0 [ 275.873542][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.883615][ T5945] Call Trace: [ 275.886918][ T5945] [ 275.889865][ T5945] dump_stack_lvl+0x188/0x24e [ 275.894575][ T5945] ? show_regs_print_info+0x12/0x12 [ 275.899787][ T5945] ? load_image+0x410/0x410 [ 275.904292][ T5945] ? __lock_acquire+0x7c40/0x7c40 [ 275.909323][ T5945] should_fail_ex+0x390/0x4c0 [ 275.914007][ T5945] _copy_from_user+0x2c/0x170 [ 275.918690][ T5945] __sys_bpf+0x2ea/0x780 [ 275.922945][ T5945] ? bpf_link_show_fdinfo+0x380/0x380 [ 275.928333][ T5945] ? lock_chain_count+0x20/0x20 [ 275.933190][ T5945] __x64_sys_bpf+0x78/0x90 [ 275.937608][ T5945] do_syscall_64+0x4c/0xa0 [ 275.942027][ T5945] ? clear_bhb_loop+0x60/0xb0 [ 275.946709][ T5945] ? clear_bhb_loop+0x60/0xb0 [ 275.951387][ T5945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.957281][ T5945] RIP: 0033:0x7f2a5ef9e159 [ 275.961697][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.981302][ T5945] RSP: 002b:00007f2a5ff4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.989727][ T5945] RAX: ffffffffffffffda RBX: 00007f2a5f225fa0 RCX: 00007f2a5ef9e159 [ 275.997710][ T5945] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 276.005702][ T5945] RBP: 00007f2a5f03503b R08: 0000000000000000 R09: 0000000000000000 [ 276.013678][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.021654][ T5945] R13: 00007f2a5f226038 R14: 00007f2a5f225fa0 R15: 00007ffec8ceb108 [ 276.029642][ T5945] [ 277.093494][ T5954] loop3: detected capacity change from 0 to 1024 [ 277.101129][ T5954] EXT4-fs: Ignoring removed i_version option [ 278.026163][ T5954] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 278.038304][ T5954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.044708][ T5954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.106722][ T5954] device hsr_slave_0 left promiscuous mode [ 278.126124][ T5954] device hsr_slave_1 left promiscuous mode [ 280.322751][ T5975] loop2: detected capacity change from 0 to 512 [ 280.366959][ T5975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.470543][ T5975] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 280.487909][ T5977] device syzkaller0 entered promiscuous mode [ 280.511667][ T5977] tipc: Enabled bearer , priority 0 [ 280.549030][ T5975] EXT4-fs (loop2): 1 truncate cleaned up [ 280.572049][ T5976] tipc: Resetting bearer [ 280.604316][ T5975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.694451][ T5981] loop4: detected capacity change from 0 to 4096 [ 280.747576][ T5976] tipc: Disabling bearer [ 280.798296][ T5983] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.786177][ T5986] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 281.795254][ T4285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 281.846781][ T4285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 281.878995][ T5986] team0: Port device netdevsim0 added [ 281.906553][ T5989] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 281.916649][ T4285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 281.969854][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 282.078266][ T5992] FAULT_INJECTION: forcing a failure. [ 282.078266][ T5992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.126738][ T5992] CPU: 0 PID: 5992 Comm: syz.1.424 Not tainted syzkaller #0 [ 282.134079][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.144161][ T5992] Call Trace: [ 282.147455][ T5992] [ 282.150395][ T5992] dump_stack_lvl+0x188/0x24e [ 282.155108][ T5992] ? show_regs_print_info+0x12/0x12 [ 282.160367][ T5992] ? load_image+0x410/0x410 [ 282.164909][ T5992] ? __lock_acquire+0x7c40/0x7c40 [ 282.169985][ T5992] should_fail_ex+0x390/0x4c0 [ 282.174696][ T5992] _copy_from_user+0x2c/0x170 [ 282.179391][ T5992] __sys_bpf+0x2ea/0x780 [ 282.183649][ T5992] ? bpf_link_show_fdinfo+0x380/0x380 [ 282.189040][ T5992] ? lock_chain_count+0x20/0x20 [ 282.193907][ T5992] __x64_sys_bpf+0x78/0x90 [ 282.198334][ T5992] do_syscall_64+0x4c/0xa0 [ 282.202759][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 282.207459][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 282.212150][ T5992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.218047][ T5992] RIP: 0033:0x7fb43bf9e159 [ 282.222459][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.242068][ T5992] RSP: 002b:00007fb43ceeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.250485][ T5992] RAX: ffffffffffffffda RBX: 00007fb43c225fa0 RCX: 00007fb43bf9e159 [ 282.258451][ T5992] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 282.266417][ T5992] RBP: 00007fb43c03503b R08: 0000000000000000 R09: 0000000000000000 [ 282.274387][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.282355][ T5992] R13: 00007fb43c226038 R14: 00007fb43c225fa0 R15: 00007ffdd48db488 [ 282.290347][ T5992] [ 287.658755][ T6024] loop3: detected capacity change from 0 to 512 [ 287.717764][ T6025] device syzkaller0 entered promiscuous mode [ 287.773028][ T6025] tipc: Started in network mode [ 287.786405][ T6025] tipc: Node identity 96c691329b69, cluster identity 4711 [ 287.793676][ T6025] tipc: Enabled bearer , priority 0 [ 287.851570][ T6023] tipc: Resetting bearer [ 287.967387][ T6023] tipc: Disabling bearer [ 288.021684][ T6027] loop3: detected capacity change from 0 to 512 [ 288.040645][ T6027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.069965][ T6027] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 288.177156][ T6027] EXT4-fs (loop3): 1 truncate cleaned up [ 288.187208][ T6027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 290.618113][ T4272] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 290.766442][ T4272] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 290.821982][ T4272] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 290.885171][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 290.892262][ T6042] FAULT_INJECTION: forcing a failure. [ 290.892262][ T6042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.916689][ T6042] CPU: 1 PID: 6042 Comm: syz.0.435 Not tainted syzkaller #0 [ 290.924019][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.934104][ T6042] Call Trace: [ 290.937382][ T6042] [ 290.940314][ T6042] dump_stack_lvl+0x188/0x24e [ 290.945006][ T6042] ? show_regs_print_info+0x12/0x12 [ 290.950225][ T6042] ? load_image+0x410/0x410 [ 290.954732][ T6042] ? __lock_acquire+0x7c40/0x7c40 [ 290.959764][ T6042] should_fail_ex+0x390/0x4c0 [ 290.964452][ T6042] _copy_from_user+0x2c/0x170 [ 290.969131][ T6042] __sys_bpf+0x2ea/0x780 [ 290.973379][ T6042] ? bpf_link_show_fdinfo+0x380/0x380 [ 290.978771][ T6042] ? lock_chain_count+0x20/0x20 [ 290.983639][ T6042] __x64_sys_bpf+0x78/0x90 [ 290.988065][ T6042] do_syscall_64+0x4c/0xa0 [ 290.992485][ T6042] ? clear_bhb_loop+0x60/0xb0 [ 290.997165][ T6042] ? clear_bhb_loop+0x60/0xb0 [ 291.001844][ T6042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.007742][ T6042] RIP: 0033:0x7f716f39e159 [ 291.012153][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.031758][ T6042] RSP: 002b:00007f717023a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.040182][ T6042] RAX: ffffffffffffffda RBX: 00007f716f625fa0 RCX: 00007f716f39e159 [ 291.048339][ T6042] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 291.056319][ T6042] RBP: 00007f716f43503b R08: 0000000000000000 R09: 0000000000000000 [ 291.064339][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.072326][ T6042] R13: 00007f716f626038 R14: 00007f716f625fa0 R15: 00007fff433518b8 [ 291.080323][ T6042] [ 293.987105][ T6061] loop1: detected capacity change from 0 to 512 [ 294.072067][ T6061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 294.096152][ T6061] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.147244][ T6066] device syzkaller0 entered promiscuous mode [ 294.227835][ T6061] ext4: Unknown parameter '0x0000000000000000' [ 294.243482][ T6066] tipc: Enabled bearer , priority 0 [ 294.316298][ T6058] tipc: Resetting bearer [ 294.322913][ T6072] EXT4-fs (loop1): shut down requested (0) [ 294.336377][ T6061] EXT4-fs error (device loop1): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.1.445: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 294.420604][ T6058] tipc: Disabling bearer [ 294.580207][ T6075] loop4: detected capacity change from 0 to 32768 [ 294.636235][ T6061] EXT4-fs (loop1): Remounting filesystem read-only [ 294.677439][ T6061] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #12: comm syz.1.445: directory missing '.' [ 294.726689][ T6075] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 294.812487][ T6061] EXT4-fs (loop1): Remounting filesystem read-only [ 295.066985][ T6085] ubi0: attaching mtd0 [ 295.080218][ T6085] ubi0: scanning is finished [ 295.084880][ T6085] ubi0: empty MTD device detected [ 295.684059][ T6085] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 296.067401][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 296.183546][ T6092] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.190020][ T6092] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 296.949112][ T6092] device hsr_slave_0 left promiscuous mode [ 297.006812][ T6075] syz.4.449 (6075) used greatest stack depth: 18688 bytes left [ 297.079914][ T6092] device hsr_slave_1 left promiscuous mode [ 299.230167][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 299.354213][ T6116] loop2: detected capacity change from 0 to 32768 [ 299.480258][ T6116] XFS (loop2): Mounting V5 Filesystem [ 300.102008][ T22] nvmet: connect request for invalid subsystem t! [ 300.113864][ T6116] XFS (loop2): Ending clean mount [ 300.122610][ T6116] XFS (loop2): Quotacheck needed: Please wait. [ 300.199643][ T6114] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 300.269048][ T6116] XFS (loop2): Quotacheck: Done. [ 300.616036][ T26] audit: type=1800 audit(1789256932.887:129): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.461" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 300.817256][ T4285] XFS (loop2): Unmounting Filesystem [ 303.553893][ T6161] device syzkaller0 entered promiscuous mode [ 306.600732][ T6187] loop3: detected capacity change from 0 to 256 [ 306.655588][ T6187] exfat: Deprecated parameter 'utf8' [ 307.564522][ T6187] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 308.656392][ T6203] FAULT_INJECTION: forcing a failure. [ 308.656392][ T6203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.858270][ T6208] loop2: detected capacity change from 0 to 2048 [ 309.043073][ T6209] device syzkaller0 entered promiscuous mode [ 309.068149][ T6203] CPU: 1 PID: 6203 Comm: syz.0.485 Not tainted syzkaller #0 [ 309.075486][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.085554][ T6203] Call Trace: [ 309.088844][ T6203] [ 309.091783][ T6203] dump_stack_lvl+0x188/0x24e [ 309.096487][ T6203] ? show_regs_print_info+0x12/0x12 [ 309.101706][ T6203] ? load_image+0x410/0x410 [ 309.106224][ T6203] ? __lock_acquire+0x7c40/0x7c40 [ 309.111276][ T6203] should_fail_ex+0x390/0x4c0 [ 309.115975][ T6203] _copy_from_user+0x2c/0x170 [ 309.120671][ T6203] __sys_bpf+0x2ea/0x780 [ 309.124934][ T6203] ? bpf_link_show_fdinfo+0x380/0x380 [ 309.130342][ T6203] ? lock_chain_count+0x20/0x20 [ 309.135221][ T6203] __x64_sys_bpf+0x78/0x90 [ 309.139656][ T6203] do_syscall_64+0x4c/0xa0 [ 309.144093][ T6203] ? clear_bhb_loop+0x60/0xb0 [ 309.148786][ T6203] ? clear_bhb_loop+0x60/0xb0 [ 309.153480][ T6203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.159419][ T6203] RIP: 0033:0x7f716f39e159 [ 309.163844][ T6203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.183468][ T6203] RSP: 002b:00007f717023a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.191900][ T6203] RAX: ffffffffffffffda RBX: 00007f716f625fa0 RCX: 00007f716f39e159 [ 309.199882][ T6203] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 309.207862][ T6203] RBP: 00007f716f43503b R08: 0000000000000000 R09: 0000000000000000 [ 309.215838][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.223813][ T6203] R13: 00007f716f626038 R14: 00007f716f625fa0 R15: 00007fff433518b8 [ 309.231811][ T6203] [ 309.245502][ T6208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.299157][ T6210] tipc: Enabled bearer , priority 0 [ 309.350099][ T6207] tipc: Resetting bearer [ 309.587356][ T6207] tipc: Disabling bearer [ 311.256266][ T5119] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 312.105981][ T5119] usb 3-1: Using ep0 maxpacket: 16 [ 312.117364][ T5119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.175970][ T5119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.234838][ T5119] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.276658][ T5119] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.306508][ T5119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.331086][ T5119] usb 3-1: config 0 descriptor?? [ 313.854310][ T5119] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input24 [ 313.881547][ T5119] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 313.900401][ T5119] usb 3-1: USB disconnect, device number 2 [ 314.403756][ T6230] fido_id[6230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 316.129206][ T6256] device syzkaller0 entered promiscuous mode [ 316.147961][ T6256] tipc: Started in network mode [ 316.152874][ T6256] tipc: Node identity 0aaad257a6, cluster identity 4711 [ 316.160416][ T6256] tipc: Enabled bearer , priority 0 [ 316.169330][ T6255] tipc: Resetting bearer [ 316.230823][ T6255] tipc: Disabling bearer [ 317.050241][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.057311][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.805369][ T6275] loop4: detected capacity change from 0 to 32768 [ 321.905002][ T6275] JBD2: Ignoring recovery information on journal [ 322.039430][ T6275] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 322.311396][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 322.427493][ T6293] loop3: detected capacity change from 0 to 512 [ 322.503901][ T6293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.836034][ T6293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 322.910700][ T6293] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.507: Invalid block bitmap block 0 in block_group 0 [ 323.017491][ T6293] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 323.081449][ T6293] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.507: attempt to clear invalid blocks 983261 len 1 [ 323.201533][ T6293] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.507: Invalid inode table block 0 in block_group 0 [ 323.375751][ T6293] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 323.495609][ T6293] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 323.596044][ T6293] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.507: Invalid inode table block 0 in block_group 0 [ 323.711794][ T6293] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 323.783298][ T6293] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.507: mark_inode_dirty error [ 323.804863][ T6293] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 323.967708][ T6293] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.507: Invalid inode table block 0 in block_group 0 [ 324.080581][ T6293] EXT4-fs (loop3): 1 truncate cleaned up [ 324.175231][ T6293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 326.185699][ T6315] device syzkaller0 entered promiscuous mode [ 326.208343][ T6317] loop2: detected capacity change from 0 to 256 [ 326.250266][ T6315] tipc: Enabled bearer , priority 0 [ 326.256770][ T6317] exfat: Deprecated parameter 'utf8' [ 326.267231][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 326.275271][ T6314] tipc: Resetting bearer [ 326.326863][ T6317] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 326.422675][ T6314] tipc: Disabling bearer [ 327.659764][ T6331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.525'. [ 331.375440][ T6354] loop0: detected capacity change from 0 to 256 [ 331.413499][ T6354] FAT-fs (loop0): Unrecognized mount option "uh¤á1" or missing value [ 332.895158][ T6359] x86/PAT: syz.0.531:6359 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 333.231393][ T6365] loop0: detected capacity change from 0 to 256 [ 333.243719][ T6365] FAT-fs (loop0): Directory bread(block 1285) failed [ 333.251272][ T6365] FAT-fs (loop0): Directory bread(block 1286) failed [ 333.261399][ T6365] FAT-fs (loop0): Directory bread(block 1287) failed [ 333.268522][ T6365] FAT-fs (loop0): Directory bread(block 1288) failed [ 334.116987][ T6365] FAT-fs (loop0): Directory bread(block 1285) failed [ 334.137185][ T6365] FAT-fs (loop0): Directory bread(block 1286) failed [ 334.156047][ T6365] FAT-fs (loop0): Directory bread(block 1287) failed [ 334.162973][ T6365] FAT-fs (loop0): Directory bread(block 1288) failed [ 334.269596][ T6368] FAT-fs (loop0): Directory bread(block 1285) failed [ 334.296482][ T6368] FAT-fs (loop0): Directory bread(block 1286) failed [ 334.594370][ T6372] device syzkaller0 entered promiscuous mode [ 334.646414][ T6372] tipc: Enabled bearer , priority 0 [ 334.654420][ T6371] tipc: Resetting bearer [ 334.737210][ T6371] tipc: Disabling bearer [ 336.386674][ T6369] loop2: detected capacity change from 0 to 40427 [ 336.675334][ T6369] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value [ 337.222479][ T6392] loop4: detected capacity change from 0 to 1024 [ 337.286939][ T6392] EXT4-fs: Ignoring removed bh option [ 338.435790][ T6392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 340.075704][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 343.121720][ T6437] device syzkaller0 entered promiscuous mode [ 343.165323][ T6437] tipc: Enabled bearer , priority 0 [ 343.203530][ T6435] tipc: Resetting bearer [ 344.254904][ T6435] tipc: Disabling bearer [ 344.412361][ T4318] tipc: Node number set to 229609778 [ 351.467759][ T6483] device syzkaller0 entered promiscuous mode [ 351.500141][ T6483] tipc: Enabled bearer , priority 0 [ 351.566345][ T6482] tipc: Resetting bearer [ 351.634457][ T6482] tipc: Disabling bearer [ 354.380424][ T6488] loop1: detected capacity change from 0 to 32768 [ 359.639558][ T6523] loop2: detected capacity change from 0 to 1024 [ 359.651672][ T6523] EXT4-fs: Ignoring removed bh option [ 360.156741][ T6523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 360.203451][ T6536] device syzkaller0 entered promiscuous mode [ 360.270424][ T6536] tipc: Enabled bearer , priority 0 [ 360.323833][ T6535] tipc: Resetting bearer [ 360.477376][ T6535] tipc: Disabling bearer [ 360.720724][ T4285] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 361.227317][ T6546] binder: 6542:6546 ioctl c0306201 0 returned -14 [ 361.939330][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 362.082738][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 362.161181][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 362.348653][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 362.388654][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 362.565365][ T6557] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 362.603331][ T6557] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 363.336006][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 363.342762][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 363.426836][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 363.486626][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 363.657293][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 363.681364][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 363.694168][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 363.755408][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 363.784184][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 363.850310][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 363.981370][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 364.000817][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 364.879708][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 364.893922][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 365.036675][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 365.046138][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 365.986905][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 366.112631][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.136302][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.170908][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.186154][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 366.213906][ T6578] loop0: detected capacity change from 0 to 512 [ 366.217799][ T6580] device syzkaller0 entered promiscuous mode [ 366.236565][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.257939][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.267489][ T6580] tipc: Enabled bearer , priority 0 [ 366.278614][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.306429][ T6579] tipc: Resetting bearer [ 366.312440][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 366.329942][ T4400] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.552389][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.634246][ T6578] Bluetooth: MGMT ver 1.22 [ 366.694039][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.757338][ T6579] tipc: Disabling bearer [ 366.832025][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 366.940112][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 367.111102][ T4285] EXT4-fs error: 8 callbacks suppressed [ 367.111121][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 367.195905][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 367.230763][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 368.543553][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 368.568454][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 369.743328][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 369.809083][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 369.856538][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 369.991519][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 370.032550][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 370.055797][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 370.246366][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 370.286222][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 370.326302][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 370.412596][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 370.498957][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 370.643727][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 370.782797][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 371.137308][ T4285] EXT4-fs: 56 callbacks suppressed [ 371.137325][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.186411][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.206036][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.216016][ T4285] EXT4-fs warning: 12 callbacks suppressed [ 371.216031][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 371.254549][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.266563][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.281871][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.293455][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 371.327719][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.336650][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.522526][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.754457][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 371.917306][ T6622] libceph: resolve 'c' (ret=-3): failed [ 371.923757][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 371.948209][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 371.978331][ T6626] loop3: detected capacity change from 0 to 256 [ 371.992059][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 372.019192][ T6626] FAT-fs (loop3): Directory bread(block 1285) failed [ 372.037977][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 372.069235][ T6626] FAT-fs (loop3): Directory bread(block 1286) failed [ 372.106916][ T6626] FAT-fs (loop3): Directory bread(block 1287) failed [ 372.114941][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 372.136725][ T6626] FAT-fs (loop3): Directory bread(block 1288) failed [ 372.166359][ T4285] EXT4-fs error: 68 callbacks suppressed [ 372.166380][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 372.215829][ T6626] FAT-fs (loop3): Directory bread(block 1285) failed [ 372.215932][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 372.230287][ T6626] FAT-fs (loop3): Directory bread(block 1286) failed [ 372.246120][ T6626] FAT-fs (loop3): Directory bread(block 1287) failed [ 372.264366][ T6626] FAT-fs (loop3): Directory bread(block 1288) failed [ 372.279270][ T6628] FAT-fs (loop3): Directory bread(block 1285) failed [ 372.286841][ T6628] FAT-fs (loop3): Directory bread(block 1286) failed [ 372.300017][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 372.351273][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 372.388357][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 372.423344][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 372.451143][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 372.469315][ T4318] usb 1-1: config 2 has an invalid interface number: 45 but max is 0 [ 372.498233][ T4318] usb 1-1: config 2 has no interface number 0 [ 372.504433][ T4318] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 372.528364][ T4318] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.539355][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 372.569330][ T4318] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 372.587225][ T6635] FAULT_INJECTION: forcing a failure. [ 372.587225][ T6635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.603757][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.613113][ T4318] usb 1-1: Product: syz [ 372.617549][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 372.628210][ T6637] tipc: Enabled bearer , priority 0 [ 372.637749][ T4318] usb 1-1: Manufacturer: syz [ 372.650144][ T6635] CPU: 1 PID: 6635 Comm: syz.1.611 Not tainted syzkaller #0 [ 372.657448][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.667497][ T6635] Call Trace: [ 372.670826][ T6635] [ 372.673857][ T6635] dump_stack_lvl+0x188/0x24e [ 372.678663][ T6635] ? show_regs_print_info+0x12/0x12 [ 372.683912][ T6635] ? load_image+0x410/0x410 [ 372.688425][ T6635] ? __lock_acquire+0x7c40/0x7c40 [ 372.693519][ T6635] should_fail_ex+0x390/0x4c0 [ 372.698234][ T6635] _copy_from_user+0x2c/0x170 [ 372.702938][ T6635] do_fcntl+0x48d/0x1280 [ 372.707207][ T6635] ? __ia32_sys_get_robust_list+0x100/0x100 [ 372.713131][ T6635] ? __lock_acquire+0x7c40/0x7c40 [ 372.718156][ T6635] ? kill_fasync+0x4b0/0x4b0 [ 372.722761][ T6635] ? __fget_files+0x28/0x460 [ 372.727344][ T6635] ? __fget_files+0x3fc/0x460 [ 372.732015][ T6635] ? tomoyo_file_fcntl+0x74/0x210 [ 372.737085][ T6635] ? bpf_lsm_file_fcntl+0x5/0x10 [ 372.742056][ T6635] ? security_file_fcntl+0x7c/0xa0 [ 372.747186][ T6635] __se_sys_fcntl+0xc9/0x190 [ 372.751768][ T6635] do_syscall_64+0x4c/0xa0 [ 372.756173][ T6635] ? clear_bhb_loop+0x60/0xb0 [ 372.760900][ T6635] ? clear_bhb_loop+0x60/0xb0 [ 372.765565][ T6635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.771445][ T6635] RIP: 0033:0x7fb43bf9e159 [ 372.775888][ T6635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.795599][ T6635] RSP: 002b:00007fb43ceeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 372.804001][ T6635] RAX: ffffffffffffffda RBX: 00007fb43c225fa0 RCX: 00007fb43bf9e159 [ 372.811974][ T6635] RDX: 0000200000000080 RSI: 0000000000000024 RDI: 0000000000000004 [ 372.819933][ T6635] RBP: 00007fb43c03503b R08: 0000000000000000 R09: 0000000000000000 [ 372.827890][ T6635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.835846][ T6635] R13: 00007fb43c226038 R14: 00007fb43c225fa0 R15: 00007ffdd48db488 [ 372.843822][ T6635] [ 372.857033][ T4318] usb 1-1: SerialNumber: syz [ 372.869011][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 372.879711][ T4318] kobil_sct 1-1:2.45: KOBIL USB smart card terminal converter detected [ 372.905815][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 372.906226][ T4318] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 372.983502][ T6636] tipc: Disabling bearer [ 373.006682][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 373.031561][ T4285] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 373.053681][ T4285] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 373.068273][ T4285] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 373.173657][ T4261] usb 1-1: USB disconnect, device number 2 [ 373.221336][ T4261] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 373.305304][ T4261] kobil_sct 1-1:2.45: device disconnected [ 374.652612][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.871216][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.181164][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.340801][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.296595][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.307066][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.314790][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.322812][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.331212][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 377.338791][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.512798][ T6672] tipc: Enabled bearer , priority 0 [ 377.619929][ T6677] kAFS: No cell specified [ 377.679743][ T6671] tipc: Disabling bearer [ 377.775365][ T9] tipc: Left network mode [ 378.610599][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.616959][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.366773][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 380.429873][ T6669] chnl_net:caif_netlink_parms(): no params data found [ 380.628196][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 380.673622][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.863129][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.456017][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 383.501318][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.526091][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 383.582600][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.337479][ T6669] device bridge_slave_0 entered promiscuous mode [ 385.394866][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.426224][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.434346][ T6669] device bridge_slave_1 entered promiscuous mode [ 385.606894][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 386.529832][ T6669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.572777][ T6669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.169098][ T6746] binder: 6744:6746 ioctl c0306201 0 returned -14 [ 388.763935][ T6669] team0: Port device team_slave_0 added [ 388.844384][ T6669] team0: Port device team_slave_1 added [ 388.934526][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.965915][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.041831][ T6669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.566762][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.574028][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.729246][ T6669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.790140][ T6768] tipc: Enabled bearer , priority 0 [ 390.015327][ T6756] tipc: Disabling bearer [ 390.312308][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.326055][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.400600][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.473729][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.575683][ T9] device bridge_slave_1 left promiscuous mode [ 390.642321][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.832326][ T9] device bridge_slave_0 left promiscuous mode [ 390.960148][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.269636][ T9] device veth1_macvtap left promiscuous mode [ 391.927750][ T9] device veth0_macvtap left promiscuous mode [ 392.885076][ T6789] loop3: detected capacity change from 0 to 128 [ 392.933904][ T9] device veth1_vlan left promiscuous mode [ 392.951168][ T6789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 392.962238][ T6789] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.985373][ T9] device veth0_vlan left promiscuous mode [ 395.213813][ T9] team0 (unregistering): Port device team_slave_1 removed [ 395.276048][ T9] team0 (unregistering): Port device team_slave_0 removed [ 395.342775][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.446914][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.454241][ T9] bond0 (unregistering): Released all slaves [ 397.204636][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 397.601731][ T6669] device hsr_slave_0 entered promiscuous mode [ 397.642047][ T6669] device hsr_slave_1 entered promiscuous mode [ 397.729670][ T6815] device syzkaller0 entered promiscuous mode [ 398.443365][ T6823] tipc: Enabled bearer , priority 0 [ 398.559954][ T6827] loop3: detected capacity change from 0 to 512 [ 398.596303][ T6814] tipc: Resetting bearer [ 398.691574][ T6814] tipc: Disabling bearer [ 401.618914][ T6669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 401.661679][ T6669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 401.707688][ T6669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 401.734491][ T6669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 401.869478][ T6669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.885078][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.909702][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.948914][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.963343][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.973771][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.987061][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.994145][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.004450][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.035250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.045367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.054595][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.061737][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.081558][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.094245][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.108347][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.125829][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.135199][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.153497][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.165039][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.181597][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.195996][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.207557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.221274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.232093][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.511594][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.527840][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.541277][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.004037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 403.013575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 403.038137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.047347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.065609][ T6669] device veth0_vlan entered promiscuous mode [ 403.073377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.082138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.104660][ T6669] device veth1_vlan entered promiscuous mode [ 403.134515][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 403.149815][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 403.162196][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 403.174343][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 403.193043][ T6669] device veth0_macvtap entered promiscuous mode [ 403.204478][ T6669] device veth1_macvtap entered promiscuous mode [ 403.233776][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.252215][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.262551][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.278893][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.291681][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.305634][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.320414][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.335384][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.349279][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.362002][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 403.372854][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 403.384953][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 403.396483][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 403.412276][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.423304][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.434611][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.446640][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.459336][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.470405][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.481923][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.491764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 403.504651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 403.519072][ T6669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.528302][ T6669] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.539053][ T6669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.548068][ T6669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.638836][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.651284][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.660658][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 403.689980][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.698003][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.705670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.721726][ T6959] syz.4.664 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 410.728112][ T6974] udevd[6974]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 411.828391][ T7006] device syzkaller0 entered promiscuous mode [ 411.851055][ T7006] tipc: Started in network mode [ 411.872819][ T7006] tipc: Node identity ca34def28cef, cluster identity 4711 [ 411.895608][ T7006] tipc: Enabled bearer , priority 0 [ 411.931305][ T7005] tipc: Resetting bearer [ 412.059203][ T7005] tipc: Disabling bearer [ 412.497550][ T7016] binder: BINDER_SET_CONTEXT_MGR already set [ 412.533801][ T7016] binder: 7014:7016 ioctl 4018620d 200000004a80 returned -16 [ 412.733633][ T7018] binder: 7014:7018 ioctl c0306201 2000000004c0 returned -22 [ 419.462279][ T7067] device syzkaller0 entered promiscuous mode [ 419.705966][ T7065] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 421.011153][ T7083] loop5: detected capacity change from 0 to 512 [ 428.153356][ T7133] device syzkaller0 entered promiscuous mode [ 428.173529][ T7133] tipc: Enabled bearer , priority 0 [ 428.984321][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 429.002259][ T7129] tipc: Resetting bearer [ 429.092380][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 429.262806][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x77ff instead [ 429.354929][ T7129] tipc: Disabling bearer [ 429.481365][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x107a instead [ 429.768144][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 429.778824][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 429.789570][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 429.800780][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 429.811511][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 429.822173][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 429.832931][ T7137] jffs2: Further such events for this erase block will not be printed [ 429.841827][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 429.853016][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 429.863724][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x77ff instead [ 429.874383][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x107a instead [ 429.885090][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 429.898516][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 429.909422][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 430.014549][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 430.258201][ T7152] binder_alloc: 7149: binder_alloc_buf, no vma [ 431.114627][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 431.316051][ T7137] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 431.673960][ T7137] jffs2: Further such events for this erase block will not be printed [ 431.726384][ T7137] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 431.776175][ T7137] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 431.885775][ T7165] netlink: 'syz.5.709': attribute type 1 has an invalid length. [ 432.340876][ T7177] use of bytesused == 0 is deprecated and will be removed in the future, [ 432.349929][ T7177] use the actual size instead. [ 432.527760][ T7171] loop0: detected capacity change from 0 to 4096 [ 433.120225][ T7180] loop4: detected capacity change from 0 to 32768 [ 433.239245][ T7180] XFS (loop4): Mounting V5 Filesystem [ 433.305153][ T7180] XFS (loop4): Ending clean mount [ 433.315325][ T7180] XFS (loop4): Quotacheck needed: Please wait. [ 433.477517][ T7180] XFS (loop4): Quotacheck: Done. [ 434.694755][ T26] audit: type=1800 audit(1789257066.117:130): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.711" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 434.833277][ T4274] XFS (loop4): Unmounting Filesystem [ 435.012238][ T7201] device syzkaller0 entered promiscuous mode [ 435.084488][ T7205] tipc: Enabled bearer , priority 0 [ 435.187945][ T7200] tipc: Resetting bearer [ 436.033112][ T7200] tipc: Disabling bearer [ 436.240868][ T6966] tipc: Node number set to 1171874250 [ 439.928935][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.935330][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.948405][ T7244] process 'syz.4.724' launched './file2' with NULL argv: empty string added [ 441.340074][ T7255] loop4: detected capacity change from 0 to 32768 [ 441.702806][ T7255] XFS (loop4): Mounting V5 Filesystem [ 441.799833][ T7255] XFS (loop4): Ending clean mount [ 441.825041][ T7255] XFS (loop4): Quotacheck needed: Please wait. [ 442.416558][ T7255] XFS (loop4): Quotacheck: Done. [ 443.526671][ T26] audit: type=1800 audit(1789257075.027:131): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.726" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 443.576739][ T4274] XFS (loop4): Unmounting Filesystem [ 444.016224][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 444.113973][ T7281] syz.0.723: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 444.132365][ T7281] CPU: 0 PID: 7281 Comm: syz.0.723 Not tainted syzkaller #0 [ 444.140612][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.150948][ T7281] Call Trace: [ 444.154241][ T7281] [ 444.157179][ T7281] dump_stack_lvl+0x188/0x24e [ 444.161912][ T7281] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 444.168399][ T7281] ? show_regs_print_info+0x12/0x12 [ 444.173618][ T7281] ? load_image+0x410/0x410 [ 444.178133][ T7281] ? __rcu_read_unlock+0x78/0xd0 [ 444.183143][ T7281] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 444.189561][ T7281] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 444.196075][ T7281] warn_alloc+0x242/0x330 [ 444.200486][ T7281] ? zone_watermark_ok_safe+0x270/0x270 [ 444.206047][ T7281] ? __mutex_trylock_common+0x15c/0x260 [ 444.211602][ T7281] __vmalloc_node_range+0x11e/0x1380 [ 444.216889][ T7281] ? rcu_is_watching+0x11/0xa0 [ 444.221762][ T7281] ? trace_contention_end+0x5f/0x170 [ 444.227072][ T7281] ? __mutex_lock+0x1ab/0xae0 [ 444.231769][ T7281] ? dvb_dvr_do_ioctl+0x75/0x220 [ 444.236776][ T7281] ? free_vm_area+0x50/0x50 [ 444.241377][ T7281] ? release_firmware_map_entry+0x187/0x187 [ 444.247279][ T7281] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 444.252299][ T7281] vmalloc+0x75/0x80 [ 444.256201][ T7281] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 444.261222][ T7281] dvb_dvr_do_ioctl+0x12a/0x220 [ 444.266080][ T7281] dvb_usercopy+0x191/0x2b0 [ 444.270661][ T7281] ? dvb_dvr_release+0x3d0/0x3d0 [ 444.275593][ T7281] ? dvb_generic_ioctl+0xb0/0xb0 [ 444.280547][ T7281] ? dvb_dvr_ioctl+0x11/0x30 [ 444.285136][ T7281] ? dvb_dvr_release+0x3d0/0x3d0 [ 444.290077][ T7281] ? dvb_dvr_poll+0x230/0x230 [ 444.294750][ T7281] dvb_dvr_ioctl+0x25/0x30 [ 444.299163][ T7281] __se_sys_ioctl+0xfa/0x170 [ 444.303760][ T7281] do_syscall_64+0x4c/0xa0 [ 444.308181][ T7281] ? clear_bhb_loop+0x60/0xb0 [ 444.312869][ T7281] ? clear_bhb_loop+0x60/0xb0 [ 444.317558][ T7281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.323459][ T7281] RIP: 0033:0x7f716f39e159 [ 444.327870][ T7281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.347480][ T7281] RSP: 002b:00007f71701f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.355899][ T7281] RAX: ffffffffffffffda RBX: 00007f716f626180 RCX: 00007f716f39e159 [ 444.363955][ T7281] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 444.371922][ T7281] RBP: 00007f716f43503b R08: 0000000000000000 R09: 0000000000000000 [ 444.379890][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.387854][ T7281] R13: 00007f716f626218 R14: 00007f716f626180 R15: 00007fff433518b8 [ 444.395837][ T7281] [ 444.421544][ T7281] Mem-Info: [ 444.428555][ T7281] active_anon:30436 inactive_anon:11928 isolated_anon:0 [ 444.428555][ T7281] active_file:8652 inactive_file:14002 isolated_file:0 [ 444.428555][ T7281] unevictable:768 dirty:50 writeback:0 [ 444.428555][ T7281] slab_reclaimable:18734 slab_unreclaimable:95922 [ 444.428555][ T7281] mapped:45430 shmem:37422 pagetables:773 [ 444.428555][ T7281] sec_pagetables:0 bounce:0 [ 444.428555][ T7281] kernel_misc_reclaimable:0 [ 444.428555][ T7281] free:510514 free_pcp:12082 free_cma:0 [ 444.476257][ T7281] Node 0 active_anon:86428kB inactive_anon:47712kB active_file:29984kB inactive_file:55780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:181008kB dirty:204kB writeback:0kB shmem:113236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11332kB pagetables:2968kB sec_pagetables:0kB all_unreclaimable? no [ 444.509846][ T7281] Node 1 active_anon:35208kB inactive_anon:0kB active_file:4624kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:704kB dirty:0kB writeback:0kB shmem:36448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:48kB pagetables:60kB sec_pagetables:0kB all_unreclaimable? no [ 444.541673][ T7281] Node 0 DMA free:10352kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:760kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 444.572177][ T7281] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 444.578294][ T7281] Node 0 DMA32 free:64756kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:83468kB inactive_anon:47712kB active_file:29984kB inactive_file:55780kB unevictable:1536kB writepending:204kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:17976kB local_pcp:14960kB free_cma:0kB [ 444.609154][ T7281] lowmem_reserve[]: 0 0 1 1 1 [ 444.614176][ T7281] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.641189][ T7281] lowmem_reserve[]: 0 0 0 0 0 [ 444.646276][ T7281] Node 1 Normal free:1966948kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:35208kB inactive_anon:0kB active_file:4624kB inactive_file:228kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:32588kB local_pcp:2040kB free_cma:0kB [ 444.676525][ T7281] lowmem_reserve[]: 0 0 0 0 0 [ 444.681499][ T7281] Node 0 DMA: 0*4kB 2*8kB (UM) 2*16kB (UE) 6*32kB (UE) 4*64kB (UE) 3*128kB (UE) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10352kB [ 444.698224][ T7281] Node 0 DMA32: 885*4kB (UME) 246*8kB (UME) 259*16kB (UME) 418*32kB (UME) 192*64kB (UME) 66*128kB (UME) 16*256kB (UME) 15*512kB (UM) 9*1024kB (UM) 0*2048kB 0*4096kB = 64756kB [ 444.717253][ T7281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 444.729256][ T7281] Node 1 Normal: 1*4kB (U) 4*8kB (UME) 2*16kB (UM) 1*32kB (M) 64*64kB (UE) 28*128kB (UE) 23*256kB (UE) 3*512kB (UE) 0*1024kB 5*2048kB (UME) 474*4096kB (UM) = 1966948kB [ 444.747231][ T7281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.756937][ T7281] Node 0 hugepages_total=666 hugepages_free=666 hugepages_surp=0 hugepages_size=2048kB [ 444.766824][ T7281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.776553][ T7281] Node 1 hugepages_total=914 hugepages_free=914 hugepages_surp=0 hugepages_size=2048kB [ 444.786362][ T7281] 59514 total pagecache pages [ 444.791154][ T7281] 10 pages in swap cache [ 444.795414][ T7281] Free swap = 119656kB [ 444.799695][ T7281] Total swap = 124996kB [ 444.803893][ T7281] 2097051 pages RAM [ 444.807843][ T7281] 0 pages HighMem/MovableOnly [ 444.812563][ T7281] 415223 pages reserved [ 444.816855][ T7281] 0 pages cma reserved [ 445.042720][ T7283] device syzkaller0 entered promiscuous mode [ 445.078419][ T7283] tipc: Enabled bearer , priority 0 [ 445.130279][ T7282] tipc: Resetting bearer [ 445.211492][ T7282] tipc: Disabling bearer [ 449.135387][ T26] audit: type=1326 audit(1789257081.517:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.4.743" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a4dd9e159 code=0x0 [ 450.658581][ T7337] loop1: detected capacity change from 0 to 32768 [ 450.794370][ T7339] device syzkaller0 entered promiscuous mode [ 450.833122][ T7339] tipc: Enabled bearer , priority 0 [ 450.904565][ T7334] tipc: Resetting bearer [ 450.913014][ T7337] XFS (loop1): Mounting V5 Filesystem [ 451.054539][ T7337] XFS (loop1): Ending clean mount [ 451.064386][ T7337] XFS (loop1): Quotacheck needed: Please wait. [ 451.327441][ T7337] XFS (loop1): Quotacheck: Done. [ 451.445305][ T26] audit: type=1800 audit(1789257083.837:133): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.741" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 451.548160][ T7334] tipc: Disabling bearer [ 451.701655][ T4273] XFS (loop1): Unmounting Filesystem [ 454.744347][ T7372] FAULT_INJECTION: forcing a failure. [ 454.744347][ T7372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.878920][ T7372] CPU: 0 PID: 7372 Comm: syz.3.755 Not tainted syzkaller #0 [ 454.886264][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.896342][ T7372] Call Trace: [ 454.899620][ T7372] [ 454.902552][ T7372] dump_stack_lvl+0x188/0x24e [ 454.907225][ T7372] ? show_regs_print_info+0x12/0x12 [ 454.912433][ T7372] ? load_image+0x410/0x410 [ 454.916966][ T7372] ? __lock_acquire+0x7c40/0x7c40 [ 454.922013][ T7372] ? __kmem_cache_alloc_node+0x19d/0x270 [ 454.927749][ T7372] should_fail_ex+0x390/0x4c0 [ 454.932458][ T7372] _copy_from_user+0x2c/0x170 [ 454.937153][ T7372] __se_sys_add_key+0x2a0/0x410 [ 454.942101][ T7372] ? __x64_sys_add_key+0xc0/0xc0 [ 454.947060][ T7372] ? lockdep_hardirqs_on+0x94/0x140 [ 454.952343][ T7372] ? __x64_sys_add_key+0x1c/0xc0 [ 454.957303][ T7372] do_syscall_64+0x4c/0xa0 [ 454.961744][ T7372] ? clear_bhb_loop+0x60/0xb0 [ 454.966443][ T7372] ? clear_bhb_loop+0x60/0xb0 [ 454.971150][ T7372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.977067][ T7372] RIP: 0033:0x7f2a5ef9e159 [ 454.981496][ T7372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.001209][ T7372] RSP: 002b:00007f2a5ff4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 455.009649][ T7372] RAX: ffffffffffffffda RBX: 00007f2a5f225fa0 RCX: 00007f2a5ef9e159 [ 455.017636][ T7372] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 455.025623][ T7372] RBP: 00007f2a5f03503b R08: fffffffffffffffe R09: 0000000000000000 [ 455.033611][ T7372] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 455.041608][ T7372] R13: 00007f2a5f226038 R14: 00007f2a5f225fa0 R15: 00007ffec8ceb108 [ 455.049614][ T7372] [ 457.225959][ T1182] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 458.157444][ T7396] device syzkaller0 entered promiscuous mode [ 458.205026][ T7396] tipc: Enabled bearer , priority 0 [ 458.307120][ T1182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 458.318293][ T7395] tipc: Resetting bearer [ 458.335938][ T1182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.373829][ T1182] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 458.396307][ T1182] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 458.423363][ T1182] usb 1-1: Manufacturer: syz [ 458.434902][ T7395] tipc: Disabling bearer [ 458.463589][ T1182] usb 1-1: config 0 descriptor?? [ 458.919816][ T1182] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 458.946602][ T1182] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 458.974088][ T1182] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 458.984217][ T1182] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 459.004547][ T1182] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 459.147060][ T1182] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 459.211515][ T1182] usb 1-1: USB disconnect, device number 3 [ 459.825200][ T7424] loop4: detected capacity change from 0 to 32768 [ 459.929821][ T7424] XFS (loop4): Mounting V5 Filesystem [ 459.944855][ T7419] loop5: detected capacity change from 0 to 4096 [ 460.013612][ T7424] XFS (loop4): Ending clean mount [ 460.021152][ T7424] XFS (loop4): Quotacheck needed: Please wait. [ 460.071389][ T7419] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 460.191079][ T7424] XFS (loop4): Quotacheck: Done. [ 460.549091][ T26] audit: type=1800 audit(1789257092.857:134): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.758" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 461.177087][ T7420] udevd[7420]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 461.189758][ T4274] XFS (loop4): Unmounting Filesystem [ 461.193388][ T7419] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 461.288767][ T7419] ntfs3: loop5: Failed to load $Extend. [ 461.755414][ T7440] overlayfs: upper fs does not support tmpfile. [ 461.856431][ T7440] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 461.944604][ T7440] ntfs3: loop5: ino=1b, "file0" attr_set_size [ 462.762485][ T7440] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 462.827696][ T7440] overlayfs: failed to verify upper root origin [ 465.126656][ T7466] loop1: detected capacity change from 0 to 128 [ 466.230145][ T7471] device syzkaller0 entered promiscuous mode [ 466.450481][ T7472] tipc: Enabled bearer , priority 0 [ 467.006641][ T7470] tipc: Resetting bearer [ 467.129014][ T7470] tipc: Disabling bearer [ 469.184841][ T7492] autofs4:pid:7492:autofs_fill_super: called with bogus options [ 472.603274][ T7524] syz.1.783: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 472.617997][ T7524] CPU: 1 PID: 7524 Comm: syz.1.783 Not tainted syzkaller #0 [ 472.625264][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.635305][ T7524] Call Trace: [ 472.638569][ T7524] [ 472.641483][ T7524] dump_stack_lvl+0x188/0x24e [ 472.646157][ T7524] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 472.652559][ T7524] ? show_regs_print_info+0x12/0x12 [ 472.657750][ T7524] ? load_image+0x410/0x410 [ 472.662257][ T7524] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 472.668660][ T7524] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 472.675151][ T7524] warn_alloc+0x242/0x330 [ 472.679476][ T7524] ? zone_watermark_ok_safe+0x270/0x270 [ 472.685022][ T7524] ? __mutex_trylock_common+0x15c/0x260 [ 472.690555][ T7524] __vmalloc_node_range+0x11e/0x1380 [ 472.695834][ T7524] ? rcu_is_watching+0x11/0xa0 [ 472.700610][ T7524] ? trace_contention_end+0x5f/0x170 [ 472.705895][ T7524] ? __mutex_lock+0x1ab/0xae0 [ 472.710596][ T7524] ? __kmem_cache_free+0xb6/0x200 [ 472.715613][ T7524] ? tomoyo_path_number_perm+0x205/0x650 [ 472.721233][ T7524] ? tomoyo_path_number_perm+0x5a4/0x650 [ 472.726849][ T7524] ? dvb_dvr_do_ioctl+0x75/0x220 [ 472.731769][ T7524] ? tomoyo_path_number_perm+0x205/0x650 [ 472.737390][ T7524] ? free_vm_area+0x50/0x50 [ 472.741901][ T7524] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 472.746907][ T7524] vmalloc+0x75/0x80 [ 472.750789][ T7524] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 472.755795][ T7524] dvb_dvr_do_ioctl+0x12a/0x220 [ 472.760659][ T7524] dvb_usercopy+0x191/0x2b0 [ 472.765154][ T7524] ? dvb_dvr_release+0x3d0/0x3d0 [ 472.770086][ T7524] ? dvb_generic_ioctl+0xb0/0xb0 [ 472.775025][ T7524] ? dvb_dvr_poll+0x230/0x230 [ 472.779686][ T7524] dvb_dvr_ioctl+0x25/0x30 [ 472.784091][ T7524] __se_sys_ioctl+0xfa/0x170 [ 472.788678][ T7524] do_syscall_64+0x4c/0xa0 [ 472.793083][ T7524] ? clear_bhb_loop+0x60/0xb0 [ 472.797755][ T7524] ? clear_bhb_loop+0x60/0xb0 [ 472.802438][ T7524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.808323][ T7524] RIP: 0033:0x7fb43bf9e159 [ 472.812723][ T7524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.832316][ T7524] RSP: 002b:00007fb43ceca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.840716][ T7524] RAX: ffffffffffffffda RBX: 00007fb43c226090 RCX: 00007fb43bf9e159 [ 472.848692][ T7524] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 472.856662][ T7524] RBP: 00007fb43c03503b R08: 0000000000000000 R09: 0000000000000000 [ 472.864634][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.872599][ T7524] R13: 00007fb43c226128 R14: 00007fb43c226090 R15: 00007ffdd48db488 [ 472.880575][ T7524] [ 472.884009][ T7524] Mem-Info: [ 472.887384][ T7524] active_anon:45943 inactive_anon:4261 isolated_anon:0 [ 472.887384][ T7524] active_file:11471 inactive_file:12269 isolated_file:0 [ 472.887384][ T7524] unevictable:768 dirty:98 writeback:0 [ 472.887384][ T7524] slab_reclaimable:18937 slab_unreclaimable:95700 [ 472.887384][ T7524] mapped:42568 shmem:45447 pagetables:728 [ 472.887384][ T7524] sec_pagetables:0 bounce:0 [ 472.887384][ T7524] kernel_misc_reclaimable:0 [ 472.887384][ T7524] free:488684 free_pcp:23749 free_cma:0 [ 472.932951][ T7524] Node 0 active_anon:104908kB inactive_anon:17044kB active_file:32280kB inactive_file:48840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169568kB dirty:392kB writeback:0kB shmem:101408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11304kB pagetables:2900kB sec_pagetables:0kB all_unreclaimable? no [ 472.966013][ T7524] Node 1 active_anon:78864kB inactive_anon:0kB active_file:13604kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:704kB dirty:0kB writeback:0kB shmem:80380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:20kB pagetables:12kB sec_pagetables:0kB all_unreclaimable? no [ 472.997502][ T7524] Node 0 DMA free:10356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:596kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:4kB free_cma:0kB [ 473.024920][ T7524] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 473.030689][ T7524] Node 0 DMA32 free:67320kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:104312kB inactive_anon:17044kB active_file:32280kB inactive_file:48840kB unevictable:1536kB writepending:392kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:35432kB local_pcp:21112kB free_cma:0kB [ 473.061440][ T7524] lowmem_reserve[]: 0 0 1 1 1 [ 473.066221][ T7524] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.093072][ T7524] lowmem_reserve[]: 0 0 0 0 0 [ 473.097797][ T7524] Node 1 Normal free:1877060kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:78864kB inactive_anon:0kB active_file:13604kB inactive_file:236kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:59512kB local_pcp:31468kB free_cma:0kB [ 473.128112][ T7524] lowmem_reserve[]: 0 0 0 0 0 [ 473.132800][ T7524] Node 0 DMA: 3*4kB (U) 5*8kB (UM) 2*16kB (UE) 1*32kB (E) 4*64kB (UME) 4*128kB (UME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10356kB [ 473.148929][ T7524] Node 0 DMA32: 1377*4kB (UME) 715*8kB (UME) 402*16kB (UME) 440*32kB (UME) 277*64kB (UME) 102*128kB (UME) 9*256kB (UME) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 67388kB [ 473.165836][ T7524] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 473.177334][ T7524] Node 1 Normal: 74*4kB (UM) 13*8kB (UME) 20*16kB (UM) 12*32kB (UM) 14*64kB (UM) 21*128kB (UME) 26*256kB (UM) 6*512kB (UME) 3*1024kB (M) 4*2048kB (UME) 452*4096kB (UM) = 1877072kB [ 473.195194][ T7524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.204741][ T7524] Node 0 hugepages_total=666 hugepages_free=666 hugepages_surp=0 hugepages_size=2048kB [ 473.214440][ T7524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.224108][ T7524] Node 1 hugepages_total=916 hugepages_free=916 hugepages_surp=0 hugepages_size=2048kB [ 473.233741][ T7524] 69199 total pagecache pages [ 473.238422][ T7524] 15 pages in swap cache [ 473.242640][ T7524] Free swap = 121960kB [ 473.246787][ T7524] Total swap = 124996kB [ 473.250920][ T7524] 2097051 pages RAM [ 473.254704][ T7524] 0 pages HighMem/MovableOnly [ 473.259374][ T7524] 415223 pages reserved [ 473.263516][ T7524] 0 pages cma reserved [ 474.986442][ T7546] kAFS: No cell specified [ 476.087726][ T7560] device syzkaller0 entered promiscuous mode [ 476.142452][ T7560] tipc: Enabled bearer , priority 0 [ 476.250034][ T7559] tipc: Resetting bearer [ 477.867247][ T7559] tipc: Disabling bearer [ 478.673502][ T7574] capability: warning: `syz.1.786' uses deprecated v2 capabilities in a way that may be insecure [ 478.699641][ T7574] tmpfs: Unknown parameter 'quota' [ 487.837053][ T7626] loop4: detected capacity change from 0 to 128 [ 490.492638][ T7637] loop3: detected capacity change from 0 to 32768 [ 490.688967][ T7637] XFS (loop3): Mounting V5 Filesystem [ 490.892906][ T7637] XFS (loop3): Ending clean mount [ 490.911071][ T7637] XFS (loop3): Quotacheck needed: Please wait. [ 490.974110][ T7637] XFS (loop3): Quotacheck: Done. [ 491.232620][ T4272] XFS (loop3): Unmounting Filesystem [ 491.853143][ T7656] loop1: detected capacity change from 0 to 32768 [ 492.881320][ T7656] JBD2: Ignoring recovery information on journal [ 492.990659][ T7656] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 493.870429][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 496.201688][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 501.996859][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.003162][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.288423][ T7748] loop1: detected capacity change from 0 to 32768 [ 503.108345][ T7748] XFS (loop1): Mounting V5 Filesystem [ 503.187750][ T7748] XFS (loop1): Ending clean mount [ 503.194097][ T7748] XFS (loop1): Quotacheck needed: Please wait. [ 503.291723][ T7748] XFS (loop1): Quotacheck: Done. [ 503.502228][ T26] audit: type=1800 audit(1789257135.887:135): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.833" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 503.838161][ T4273] XFS (loop1): Unmounting Filesystem [ 505.417765][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 508.374109][ T7803] loop1: detected capacity change from 0 to 512 [ 509.068874][ T7803] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 509.094854][ T7803] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.252398][ T7810] kAFS: No cell specified [ 510.426306][ T4273] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 510.513434][ T4273] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 513.579552][ T7834] loop4: detected capacity change from 0 to 32768 [ 513.765996][ T6650] EXT4-fs (loop1): unmounting filesystem. [ 514.610682][ T7834] XFS (loop4): Mounting V5 Filesystem [ 514.684135][ T7834] XFS (loop4): Ending clean mount [ 514.699454][ T7834] XFS (loop4): Quotacheck needed: Please wait. [ 514.730496][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.811146][ T7834] XFS (loop4): Quotacheck: Done. [ 515.686216][ T26] audit: type=1800 audit(1789257147.907:136): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.859" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 515.794328][ T4274] XFS (loop4): Unmounting Filesystem [ 515.870429][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.533213][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.711430][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.986290][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.996781][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.004946][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 520.012802][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 520.022260][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 520.029832][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.309194][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 522.835729][ T31] tipc: Left network mode [ 524.325992][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 526.021822][ T8007] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 526.445997][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 528.486943][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 531.046370][ T8007] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 531.392283][ T7873] chnl_net:caif_netlink_parms(): no params data found [ 531.560875][ T31] device hsr_slave_0 left promiscuous mode [ 531.568288][ T31] device hsr_slave_1 left promiscuous mode [ 531.592807][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.330987][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.376638][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.422521][ T8048] binder_alloc: 8044: binder_alloc_buf, no vma [ 532.471974][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.632234][ T31] device bridge_slave_1 left promiscuous mode [ 532.723000][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.897032][ T31] device bridge_slave_0 left promiscuous mode [ 532.989319][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.374473][ T31] device veth1_macvtap left promiscuous mode [ 533.391184][ T31] device veth0_macvtap left promiscuous mode [ 533.415974][ T31] device veth1_vlan left promiscuous mode [ 533.421994][ T31] device veth0_vlan left promiscuous mode [ 537.897900][ T31] bond1 (unregistering): Released all slaves [ 539.681716][ T8141] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 539.921959][ T8146] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 540.047353][ T31] team0 (unregistering): Port device team_slave_1 removed [ 540.095042][ T8149] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 540.111319][ T31] team0 (unregistering): Port device team_slave_0 removed [ 540.164991][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.203970][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.485437][ T31] bond0 (unregistering): Released all slaves [ 540.594583][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 540.617475][ T8151] tipc: Enabled bearer , priority 0 [ 542.761259][ T22] tipc: Node number set to 1188814578 [ 542.858805][ T8144] tipc: Disabling bearer [ 542.863694][ T8146] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 542.864705][ T8149] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 542.890895][ T8146] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 542.970012][ T8149] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 543.046947][ T8146] request_module: sigkill sent for modprobe syzkaller0, giving up [ 543.125112][ T8149] request_module: sigkill sent for modprobe syzkaller0, giving up [ 543.385643][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.436135][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.456760][ T7873] device bridge_slave_0 entered promiscuous mode [ 543.503045][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.533019][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.566042][ T7873] device bridge_slave_1 entered promiscuous mode [ 543.653274][ T7873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.889439][ T7873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.948551][ T8177] binder: BINDER_SET_CONTEXT_MGR already set [ 543.986131][ T8177] binder: 8176:8177 ioctl 4018620d 200000004a80 returned -16 [ 544.725921][ T8141] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 544.849146][ T7873] team0: Port device team_slave_0 added [ 544.995215][ T7873] team0: Port device team_slave_1 added [ 547.532291][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 547.620140][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.650624][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.713938][ T7873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.727010][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.733976][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.764432][ T7873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.799849][ T7873] device hsr_slave_0 entered promiscuous mode [ 548.866580][ T7873] device hsr_slave_1 entered promiscuous mode [ 548.913551][ T7873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.933746][ T7873] Cannot create hsr debugfs directory [ 548.969982][ T8238] device syzkaller0 entered promiscuous mode [ 549.059421][ T8265] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 549.066758][ T8266] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 550.185269][ T7873] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 550.218546][ T8243] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 550.218578][ T8243] request_module: sigkill sent for modprobe syzkaller0, giving up [ 551.188915][ T7873] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 551.228353][ T8274] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 551.240468][ T7873] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 551.327532][ T7873] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 552.490255][ T8282] binder_alloc: 8275: binder_alloc_buf, no vma [ 552.750416][ T7873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.782704][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 552.810506][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.947882][ T7873] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.993189][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.111623][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.716369][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.723517][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.916222][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.961839][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.996951][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.034516][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.041688][ T7951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.095945][ T8265] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 554.107698][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.211060][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.342818][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.424719][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.492912][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.596894][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.700404][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.888600][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.953434][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.125626][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.254101][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.329684][ T7873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 555.445737][ T8356] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 555.446300][ T8350] device syzkaller0 entered promiscuous mode [ 555.482974][ T8354] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 558.666937][ T8378] binder_alloc: 8372: binder_alloc_buf, no vma [ 560.486497][ T8356] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 560.486936][ T8354] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 562.820023][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.855956][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.083292][ T8475] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 563.701666][ T8478] device syzkaller0 entered promiscuous mode [ 563.787930][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 563.799961][ T8480] binder: 8479:8480 ioctl 4018620d 200000004a80 returned -16 [ 566.172107][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 566.216971][ T8490] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 566.217022][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 566.793763][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 567.954393][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 567.971114][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 568.086065][ T8475] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 568.187223][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 568.492064][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 568.694173][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 568.858728][ T8565] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 568.862959][ T8564] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 568.959372][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 569.562633][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 569.598959][ T8569] binder_alloc: 8568: binder_alloc_buf, no vma [ 569.639162][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 569.685869][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 569.732648][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 569.762472][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 569.769627][ T8573] device syzkaller0 entered promiscuous mode [ 569.892047][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 570.038434][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 570.868080][ T8583] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 570.938429][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'. [ 571.906245][ T8583] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 571.906286][ T8583] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 571.943003][ T8583] request_module: sigkill sent for modprobe syzkaller0, giving up [ 573.926012][ T8565] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 574.856280][ T8619] binder_alloc: 8614: binder_alloc_buf, no vma [ 575.025049][ T8643] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 575.031089][ T8644] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 575.061753][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'. [ 576.913957][ T8656] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 577.035137][ T8658] device syzkaller0 entered promiscuous mode [ 578.253402][ T8655] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 578.325660][ T8668] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 578.366330][ T8655] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 579.227007][ T8668] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 579.227037][ T8668] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 579.252845][ T8668] request_module: sigkill sent for modprobe syzkaller0, giving up [ 579.336983][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 579.390379][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 579.399598][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 579.408211][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 579.417830][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 579.425278][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 579.848127][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.982'. [ 580.086201][ T8643] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 580.197794][ T8696] binder_alloc: 8695: binder_alloc_buf, no vma [ 581.446219][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 583.186434][ T8742] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 583.194715][ T8743] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 583.347110][ T8749] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 583.526126][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 584.121707][ T8747] device syzkaller0 entered promiscuous mode [ 584.338044][ T8749] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 584.338072][ T8749] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 584.356371][ T8749] request_module: sigkill sent for modprobe syzkaller0, giving up [ 585.211928][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 585.975904][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 586.125317][ T8779] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 586.310891][ T31] device hsr_slave_0 left promiscuous mode [ 586.358900][ T31] device hsr_slave_1 left promiscuous mode [ 586.378291][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.401562][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.428838][ T31] device bridge_slave_1 left promiscuous mode [ 586.435147][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.481655][ T31] device bridge_slave_0 left promiscuous mode [ 586.491213][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.190187][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 588.245845][ T8742] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 588.245995][ T8743] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 589.519026][ T31] team0 (unregistering): Port device team_slave_1 removed [ 589.645031][ T8849] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 589.650782][ T8848] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 589.768159][ T31] team0 (unregistering): Port device team_slave_0 removed [ 589.827180][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.837959][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.853290][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.872233][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.892105][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 589.907453][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 590.001369][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.082185][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.342449][ T8858] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 590.379907][ T31] bond0 (unregistering): Released all slaves [ 590.495276][ T8682] chnl_net:caif_netlink_parms(): no params data found [ 590.542903][ T8862] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 590.666822][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 590.695753][ T8857] device syzkaller0 entered promiscuous mode [ 590.707530][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 592.316975][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 592.376043][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 592.400989][ T8858] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 592.401019][ T8858] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 592.401111][ T8862] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 592.420242][ T8858] request_module: sigkill sent for modprobe syzkaller0, giving up [ 592.482782][ T8682] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.505533][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.514699][ T8682] device bridge_slave_0 entered promiscuous mode [ 592.525051][ T8862] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 592.525081][ T8862] request_module: sigkill sent for modprobe syzkaller0, giving up [ 592.537469][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.571166][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.579613][ T8682] device bridge_slave_1 entered promiscuous mode [ 592.641553][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.745030][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.886465][ T8850] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module rtnl-link-nicvf, throttling... [ 593.022512][ T8682] team0: Port device team_slave_0 added [ 593.089607][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 594.336533][ T8682] team0: Port device team_slave_1 added [ 594.344572][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 594.362977][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 594.406059][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 594.419312][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 594.436609][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 594.472854][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 594.508000][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.516043][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.546244][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 595.085834][ T8848] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 595.086176][ T8849] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 595.163068][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 595.231136][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 595.260945][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 595.279388][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 595.377063][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.391820][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.399035][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.521337][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.548238][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 595.717076][ T3933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 595.732989][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2004: comm dhcpcd: checksumming directory block 0 [ 595.828705][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.031735][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 597.051732][ T8682] device hsr_slave_0 entered promiscuous mode [ 597.088684][ T8682] device hsr_slave_1 entered promiscuous mode [ 597.115739][ T8682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.124518][ T8682] Cannot create hsr debugfs directory [ 597.185394][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.854268][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.955394][ T8977] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 598.973855][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.055963][ T4292] Bluetooth: hci5: command 0x0419 tx timeout [ 599.062810][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 600.009867][ T31] tipc: Left network mode [ 601.899066][ T9021] device syzkaller0 entered promiscuous mode [ 604.716982][ T8977] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 604.955731][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 605.651952][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1024'. [ 608.396091][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.547482][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.577934][ T8850] device bridge_slave_0 entered promiscuous mode [ 609.606890][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.655964][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.674774][ T8850] device bridge_slave_1 entered promiscuous mode [ 609.874886][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.908440][ T9071] device syzkaller0 entered promiscuous mode [ 610.278408][ T8682] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 610.293283][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.322803][ T8682] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 611.195376][ T9139] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 611.196700][ T9138] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 611.225427][ T8682] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 611.258766][ T8850] team0: Port device team_slave_0 added [ 611.271580][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.286667][ T9141] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 611.297044][ T9140] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 611.310233][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.336747][ T9142] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 611.337466][ T9143] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 611.385087][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.423704][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.473458][ T31] device bridge_slave_1 left promiscuous mode [ 611.510776][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.583396][ T31] device bridge_slave_0 left promiscuous mode [ 611.624539][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.882433][ T31] device veth1_macvtap left promiscuous mode [ 611.928564][ T31] device veth0_macvtap left promiscuous mode [ 611.979735][ T31] device veth1_vlan left promiscuous mode [ 612.016549][ T31] device veth0_vlan left promiscuous mode [ 615.236260][ T31] team0 (unregistering): Port device team_slave_1 removed [ 615.515109][ T31] team0 (unregistering): Port device team_slave_0 removed [ 615.758378][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.800454][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.050464][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 616.059301][ T4319] infiniband syz1: ib_query_port failed (-19) [ 616.106870][ T31] bond0 (unregistering): Released all slaves [ 616.198539][ T8682] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 616.213755][ T8850] team0: Port device team_slave_1 added [ 616.223833][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 616.246220][ T5909] bond0 speed is unknown, defaulting to 1000 [ 616.326207][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 616.333673][ T9141] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 616.344125][ T9142] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 616.366865][ T9143] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 616.377731][ T9165] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 616.390671][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.896245][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.983063][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.994523][ T9226] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 618.007812][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.011244][ T9221] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 618.020372][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.066138][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.056235][ T8850] device hsr_slave_0 entered promiscuous mode [ 620.063909][ T8850] device hsr_slave_1 entered promiscuous mode [ 620.089987][ T8850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.105872][ T8850] Cannot create hsr debugfs directory [ 620.146437][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.212037][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 620.237396][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.287769][ T8682] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.377456][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 620.397048][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 620.436635][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.443777][ T7941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.463658][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 620.489776][ T9240] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 620.504838][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 620.535180][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 620.544581][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.551754][ T8002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.565382][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 620.575457][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 620.654059][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 620.663466][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 620.711368][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.722174][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.731780][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.743199][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.753348][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.782283][ T9241] device syzkaller0 entered promiscuous mode [ 621.382323][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 621.443991][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 621.773302][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 621.846211][ T8682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 621.901736][ T9240] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 621.901769][ T9240] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 621.914025][ T8682] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-nicvf0, throttling... [ 622.006181][ T9240] request_module: sigkill sent for modprobe syzkaller0, giving up [ 622.138747][ T8850] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 622.157247][ T8850] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 622.217065][ T8850] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 622.247894][ T8850] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 622.409196][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.613158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.631602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.675287][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.957077][ T9221] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 623.958076][ T9226] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 624.028099][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.120335][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.240396][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.246771][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.286208][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.293349][ T7941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.318437][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.341451][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.361337][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.431692][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.438874][ T7997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.516107][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 625.536826][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 625.574722][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 625.591509][ T9319] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 625.596999][ T9320] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 625.630437][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 625.717302][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.726485][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.743461][ T8850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.787087][ T8850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.806509][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.818740][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.830628][ T9325] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 625.848113][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.901192][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.921629][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.959708][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.980186][ T8850] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-nicvf0, throttling... [ 625.981587][ T9322] device syzkaller0 entered promiscuous mode [ 626.262783][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1062'. [ 627.305630][ T9325] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 627.305662][ T9325] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 627.385960][ T9325] request_module: sigkill sent for modprobe syzkaller0, giving up [ 630.710230][ T9319] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 630.725920][ T9320] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 632.126842][ T9404] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 632.136582][ T9403] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 635.417368][ T9426] device syzkaller0 entered promiscuous mode [ 637.205908][ T9404] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 637.800501][ T9456] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 637.806353][ T9460] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 637.825023][ T9461] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 643.046582][ T9460] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 643.065993][ T9456] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 643.657344][ T9500] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 646.335116][ T9509] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 646.416106][ T9510] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 646.495884][ T9511] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-syzkaller0, throttling... [ 647.003260][ T7983] device hsr_slave_0 left promiscuous mode [ 647.036910][ T7983] device hsr_slave_1 left promiscuous mode [ 647.064647][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.092192][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.111811][ T7983] device bridge_slave_1 left promiscuous mode [ 647.131119][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.168131][ T7983] device bridge_slave_0 left promiscuous mode [ 647.174365][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.884226][ T7983] team0 (unregistering): Port device team_slave_1 removed [ 647.955511][ T7983] team0 (unregistering): Port device team_slave_0 removed [ 648.025060][ T7983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.084080][ T9509] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 648.084110][ T9509] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 648.110342][ T9510] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 648.129735][ T7983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.136108][ T9511] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 648.147597][ T9510] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 648.158801][ T9509] request_module: sigkill sent for modprobe syzkaller0, giving up [ 648.172198][ T9511] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module syzkaller0, throttling... [ 648.181153][ T9510] request_module: sigkill sent for modprobe syzkaller0, giving up [ 648.198427][ T9511] request_module: sigkill sent for modprobe syzkaller0, giving up [ 648.530215][ T7983] bond0 (unregistering): Released all slaves [ 648.725963][ T9500] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now Connection to 10.128.1.183 closed by remote host. [ 652.566560][ T9598] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 655.074222][ T9609] EXT4-fs error (device sda1): ext4_validate_block_bitmap:420: comm syz-executor: bg 2: bad block bitmap checksum [ 655.504960][ T9609] EXT4-fs error (device sda1): ext4_discard_preallocations:5124: comm syz-executor: Error -74 loading buddy information for 2 [ 655.538181][ T9609] EXT4-fs error (device sda1) in ext4_free_inode:362: Corrupt filesystem [ 655.556334][ T9609] EXT4-fs error (device sda1): ext4_validate_block_bitmap:420: comm syz-executor: bg 3: bad block bitmap checksum [ 655.590746][ T9609] EXT4-fs error (device sda1): ext4_discard_preallocations:5124: comm syz-executor: Error -74 loading buddy information for 3 [ 655.700642][ T9609] EXT4-fs error (device sda1): ext4_discard_preallocations:5124: comm syz-executor: Error -117 loading buddy information for 2 [ 655.849755][ T9609] EXT4-fs error (device sda1) in ext4_free_inode:362: Corrupt filesystem [ 655.903277][ T9609] EXT4-fs error (device sda1): ext4_discard_preallocations:5124: comm syz-executor: Error -117 loading buddy information for 2 [ 656.290952][ T9609] EXT4-fs error (device sda1): ext4_ext_remove_space:2993: inode #2022: comm syz-executor: pblk 64971 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 656.314246][ T9609] EXT4-fs error (device sda1): ext4_evict_inode:292: comm syz-executor: couldn't truncate inode 2022 (err -117) [ 656.699311][ T8002] device hsr_slave_0 left promiscuous mode [ 656.710202][ T8002] device hsr_slave_1 left promiscuous mode [ 656.718139][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.730203][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.738080][ T8002] device bridge_slave_1 left promiscuous mode [ 656.744283][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.760047][ T8002] device bridge_slave_0 left promiscuous mode [ 656.769107][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.109711][ T8002] team0 (unregistering): Port device team_slave_1 removed [ 657.162707][ T8002] team0 (unregistering): Port device team_slave_0 removed [ 657.214999][ T8002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.273580][ T8002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.582216][ T8002] bond0 (unregistering): Released all slaves [ 657.699263][ T9598] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 658.247684][ T8002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.341558][ T8002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.402077][ T8002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.467949][ T8002] team0: Port device netdevsim0 removed [ 658.475326][ T8002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.660153][ T8002] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.749626][ T8002] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.833312][ T8002] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.930586][ T8002] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.079148][ T8002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.158578][ T8002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.240697][ T8002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.315318][ T8002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.634595][ T8002] tipc: Left network mode [ 659.654651][ T8002] tipc: Left network mode [ 659.675312][ T8002] tipc: Left network mode [ 661.652985][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.662468][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.671468][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.682274][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.691076][ T8002] device bridge_slave_1 left promiscuous mode [ 661.699375][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.709584][ T8002] device bridge_slave_0 left promiscuous mode [ 661.715911][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.728814][ T8002] device hsr_slave_0 left promiscuous mode [ 661.735131][ T8002] device hsr_slave_1 left promiscuous mode [ 661.741742][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.749518][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.757463][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.764868][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.773218][ T8002] device bridge_slave_1 left promiscuous mode [ 661.779729][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.790149][ T8002] device bridge_slave_0 left promiscuous mode [ 661.796657][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.808855][ T8002] device hsr_slave_0 left promiscuous mode [ 661.815150][ T8002] device hsr_slave_1 left promiscuous mode [ 661.821966][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.829752][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.839789][ T8002] device bridge_slave_1 left promiscuous mode [ 661.846887][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.855306][ T8002] device bridge_slave_0 left promiscuous mode [ 661.864852][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.935370][ T8002] device veth1_macvtap left promiscuous mode [ 661.941566][ T8002] device veth0_macvtap left promiscuous mode [ 661.947974][ T8002] device veth1_vlan left promiscuous mode [ 661.953806][ T8002] device veth0_vlan left promiscuous mode [ 661.961644][ T8002] device veth1_macvtap left promiscuous mode [ 661.970843][ T8002] device veth0_macvtap left promiscuous mode [ 661.978477][ T8002] device veth1_vlan left promiscuous mode [ 661.984286][ T8002] device veth0_vlan left promiscuous mode [ 661.997216][ T8002] device veth1_macvtap left promiscuous mode [ 662.003254][ T8002] device veth0_macvtap left promiscuous mode [ 662.010955][ T8002] device veth1_vlan left promiscuous mode [ 662.016976][ T8002] device veth0_vlan left promiscuous mode [ 662.918196][ T8002] team0 (unregistering): Port device team_slave_1 removed [ 662.976738][ T8002] team0 (unregistering): Port device team_slave_0 removed [ 663.030633][ T8002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.089678][ T8002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.564649][ T8002] bond0 (unregistering): Released all slaves [ 664.272248][ T8002] team0 (unregistering): Port device team_slave_1 removed [ 664.322179][ T8002] team0 (unregistering): Port device team_slave_0 removed [ 664.383112][ T8002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.447207][ T8002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.862323][ T8002] bond0 (unregistering): Released all slaves [ 665.487596][ T8002] team0 (unregistering): Port device team_slave_1 removed [ 665.542283][ T8002] team0 (unregistering): Port device team_slave_0 removed [ 665.599919][ T8002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.653981][ T8002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.043445][ T8002] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 666.122156][ T8002] bond0 (unregistering): Released all slaves