last executing test programs: 3.552719034s ago: executing program 2 (id=527): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xdc, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0xca, 0x8, 0x0, 0x1, [@nested={0x24, 0x12f, 0x0, 0x1, [@typed={0x1e, 0xbf, 0x0, 0x0, @str='blkio.bfq.io_service_time\x00'}]}, @generic="11193ba8650e2835d3cc5481aedfd33117950dd2ee63a119146f1716bb5cf29bc2a587a49d66c25e60c50a83bbe97c1a03b2f2795de7f806615e4d96ef2cc8dc22956d67f56edfc90f0ceca968685e012a33185e0015ae93c03e1a10b9306cf2d731b0b754f1f34639d8f9b707f86989e80aef0be1ef4b83af9c0b4f791ddad4145d", @nested={0x1d, 0xf9, 0x0, 0x1, [@nested={0x4, 0x149}, @typed={0x9, 0x4c, 0x0, 0x0, @str=',]][\x00'}, @generic="cc647319bebff7132f"]}]}]}, 0xdc}], 0x1}, 0x80) 3.539340835s ago: executing program 2 (id=530): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000600)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0xffff23fb, &(0x7f00000000c0)=0x4) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r5, 0x0, 0x0) 2.85825951s ago: executing program 3 (id=536): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) fcntl$dupfd(r0, 0x406, r1) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000080)=[0x40]}) 2.529580867s ago: executing program 3 (id=538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00003e71c5c4060000d4cba200", @ANYRES16=r1, @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x38, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfa}, @NFULA_CFG_MODE={0xa, 0x2, {0x8f2a, 0x1}}]}, 0x38}}, 0x20000000) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x3ff}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00000000000061111000000000000000000000f8f200000000000000000000000000000000c9efaa1e58a6fbe35dd9526ca015f92bee007c415291f3289697ecbd413def02e010e25aa42ad8c447f167bec2eebe6593ed204b17d1794f865306ec78b7ebc72ffc4f936f5e9e92d38a79ee2c67"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x3, r0, 'id1\x00'}) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000000100)={r2, 0x1, 0x80000001}) 2.476595011s ago: executing program 0 (id=540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 2.458120452s ago: executing program 2 (id=541): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xdc, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0xca, 0x8, 0x0, 0x1, [@nested={0x24, 0x12f, 0x0, 0x1, [@typed={0x1e, 0xbf, 0x0, 0x0, @str='blkio.bfq.io_service_time\x00'}]}, @generic="11193ba8650e2835d3cc5481aedfd33117950dd2ee63a119146f1716bb5cf29bc2a587a49d66c25e60c50a83bbe97c1a03b2f2795de7f806615e4d96ef2cc8dc22956d67f56edfc90f0ceca968685e012a33185e0015ae93c03e1a10b9306cf2d731b0b754f1f34639d8f9b707f86989e80aef0be1ef4b83af9c0b4f791ddad4145d", @nested={0x1d, 0xf9, 0x0, 0x1, [@nested={0x4, 0x149}, @typed={0x9, 0x4c, 0x0, 0x0, @str=',]][\x00'}, @generic="cc647319bebff7132f"]}]}]}, 0xdc}], 0x1}, 0x80) 2.436259164s ago: executing program 2 (id=542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) (fail_nth: 1) 2.344674001s ago: executing program 3 (id=544): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 1.521531748s ago: executing program 2 (id=548): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1010c8a, &(0x7f0000000240)=ANY=[], 0x81, 0x1eb, &(0x7f0000005cc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0xfffffaef, 0x0, 0x0, 0x0, "1eebb05412e0acba6e32e41a75222702bd994e"}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000380)='\n', 0x160a}], 0x1) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x16f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r4, r4}, &(0x7f00000000c0)=""/22, 0x16, &(0x7f0000000040)={&(0x7f0000000140)={'poly1305\x00'}}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x5e20, @private=0xa010100}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x21981e, &(0x7f0000000300)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}], [{@fsname={'fsname', 0x3d, 'discard'}}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0xc92, @remote, 0x8}], 0x3c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001640)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x6, 0x2, 0x614, 0x1, 0x15, 0x7, 0x4}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) 1.520427358s ago: executing program 1 (id=549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) fcntl$dupfd(r0, 0x406, r1) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000080)=[0x40]}) 1.476960701s ago: executing program 0 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.470652421s ago: executing program 3 (id=551): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000540)={0x0, 0x1, 0x467f, 0x8}) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.426861205s ago: executing program 0 (id=552): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xdc, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0xca, 0x8, 0x0, 0x1, [@nested={0x24, 0x12f, 0x0, 0x1, [@typed={0x1e, 0xbf, 0x0, 0x0, @str='blkio.bfq.io_service_time\x00'}]}, @generic="11193ba8650e2835d3cc5481aedfd33117950dd2ee63a119146f1716bb5cf29bc2a587a49d66c25e60c50a83bbe97c1a03b2f2795de7f806615e4d96ef2cc8dc22956d67f56edfc90f0ceca968685e012a33185e0015ae93c03e1a10b9306cf2d731b0b754f1f34639d8f9b707f86989e80aef0be1ef4b83af9c0b4f791ddad4145d", @nested={0x1d, 0xf9, 0x0, 0x1, [@nested={0x4, 0x149}, @typed={0x9, 0x4c, 0x0, 0x0, @str=',]][\x00'}, @generic="cc647319bebff7132f"]}]}]}, 0xdc}], 0x1}, 0x80) 1.415752656s ago: executing program 1 (id=553): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000600)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0xffff23fb, &(0x7f00000000c0)=0x4) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r5, 0x0, 0x0) 1.36812153s ago: executing program 0 (id=554): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x4a802, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=bind:0-', @ANYRESDEC]) name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@orangefs_parent={0x28, 0x2, {{"7c715ff7cadb2eb9468255fe98eddaf1", 0xa10}, {"43cc3a65675281b7e2d85bd241a72938", 0x5}}}, &(0x7f0000000100), 0x100) fstatfs(r1, 0x0) 928.944675ms ago: executing program 1 (id=556): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x12100) socket(0x840000000002, 0x3, 0xfa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) 844.744692ms ago: executing program 1 (id=558): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0x4) r0 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="8495002a01b4515a7581b02bd05e56f64b7f6ec6917a690f41b3688be24f7a8ccf109c2ffe90978103a1d82699670d52a1bd8ac79d2cb6e41e9d14c8cab77c5d7351af47b902fa", 0x47}, {&(0x7f0000000500)="54035d27dd6e7ec8c34c52eb591c1a3f77927656c7e4289b447740db0c7ad39efade76e39d6d9929eeac35c36dc7f9d5fe6c54d3f6d1a7b25f4c09eb5da91eb2c778c1b3b5a3ee8f794ddcbcad941369874b6233dc8e2f93a473b0662ceafe9e34b53e23111f4d87dbcf542f577b192c441950848685d0ac2c44b3e20ca2154a8bf30c0f9b6f936e6eb8374d92f2d6edb1fda47dfba2c408ee92ebef463cc57ec8d79cd4401954eb239c6bd25399c84eda77b425bff96170e97a452fb4f0289dff7485a08fe9617442b3c500c18ced", 0xcf}], 0x2) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6d3, &(0x7f00000014c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r11, 0xfffffffffffffffe, 0x29) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0xfffffffe, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25080000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00028004000480"], 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x4008090) mmap$snddsp(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 796.977036ms ago: executing program 0 (id=559): unshare(0x400) timerfd_gettime(0xffffffffffffffff, 0x0) 764.946039ms ago: executing program 0 (id=560): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 665.184797ms ago: executing program 4 (id=561): unshare(0x400) timerfd_gettime(0xffffffffffffffff, 0x0) (fail_nth: 1) 599.073012ms ago: executing program 2 (id=562): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 598.940572ms ago: executing program 4 (id=563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) fcntl$dupfd(r0, 0x406, r1) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000080)=[0x40]}) 598.767512ms ago: executing program 1 (id=564): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0x5c, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0x4c, 0x8, 0x0, 0x1, [@nested={0x24, 0x12f, 0x0, 0x1, [@typed={0x1e, 0xbf, 0x0, 0x0, @str='blkio.bfq.io_service_time\x00'}]}, @nested={0x21, 0xf9, 0x0, 0x1, [@nested={0x4, 0x10e}, @nested={0x4, 0x149}, @typed={0x9, 0x4c, 0x0, 0x0, @str=',]][\x00'}, @generic="cc647319bebff7132f"]}]}]}, 0x5c}], 0x1}, 0x80) 596.312752ms ago: executing program 3 (id=565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20682, 0x0) read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) syz_open_procfs(r2, &(0x7f0000000040)='net/rt_acct\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) 492.86112ms ago: executing program 3 (id=566): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206010100000000000000000200000005000400000000000900420073797a30000000000500010007000000050005000a0000000c00078005001400f80000000c000300686173683a697000"], 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x0, 0x8000) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303130303030303030315e73633c8dda2482f3c5596368007d212b782b21240028015357555d6559bcf023deb29ecfc273636865641aa222ec5e1643685320205f737711eae985"], 0x3f) 463.538443ms ago: executing program 1 (id=567): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000600)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0xffff23fb, &(0x7f00000000c0)=0x4) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r5, 0x0, 0x0) 448.821744ms ago: executing program 4 (id=568): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x12100) socket(0x840000000002, 0x3, 0xfa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) 78.167224ms ago: executing program 4 (id=569): unshare(0x400) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x8, 0x4}]}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000140)=0x98000000, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@fd={0x5, 0xa, 0x4, 0x8, 0xfffff531, {0x77359400}, {0x3, 0x2, 0x7d, 0x0, 0x2f, 0x7, "1e04283f"}, 0x2}) r3 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="02650b0068696a6b4c6d6e6f70"], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0x0) timerfd_gettime(r0, 0x0) 2.43821ms ago: executing program 4 (id=570): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc0100000000000000000000ad0000010800020005000000140006"], 0x4c}}, 0x0) 0s ago: executing program 4 (id=571): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x62, {0x2, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, 'veth0_to_bond\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x42, 0x0) write$binfmt_script(r2, &(0x7f0000000880)={'#! ', './file0'}, 0xb) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x51, 0x4, 0x2, "6388e3976bbe0a92491d15cbb1d765c8", "69f7f343726913e601ba98c7c4c9f3d1c86a556a13c8a190f698f0d01fb005f7d0994700d9850068cb951a721f670196f0ddc88a5419af8d0078d0af"}, 0x51, 0x1) kernel console output (not intermixed with test programs): oup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.820903][ T4034] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.711994][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 33.722410][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 33.745269][ T4054] chnl_net:caif_netlink_parms(): no params data found [ 33.778656][ T4045] chnl_net:caif_netlink_parms(): no params data found [ 33.782321][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.783605][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.785211][ T4044] device bridge_slave_0 entered promiscuous mode [ 33.790875][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.792035][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.793507][ T4049] device bridge_slave_0 entered promiscuous mode [ 33.797302][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.798404][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.800817][ T4049] device bridge_slave_1 entered promiscuous mode [ 33.805690][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.806895][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.808577][ T4044] device bridge_slave_1 entered promiscuous mode [ 33.822988][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.830524][ T4060] chnl_net:caif_netlink_parms(): no params data found [ 33.834695][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.840332][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.851328][ T4049] team0: Port device team_slave_0 added [ 33.853192][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.858805][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.860293][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.861775][ T4054] device bridge_slave_0 entered promiscuous mode [ 33.865932][ T4049] team0: Port device team_slave_1 added [ 33.874787][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.875945][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.877416][ T4054] device bridge_slave_1 entered promiscuous mode [ 33.891411][ T4044] team0: Port device team_slave_0 added [ 33.905924][ T4044] team0: Port device team_slave_1 added [ 33.909919][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.911049][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.912430][ T4045] device bridge_slave_0 entered promiscuous mode [ 33.914519][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.915617][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.920101][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.928676][ T4054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.930257][ T4060] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.931435][ T4060] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.932877][ T4060] device bridge_slave_0 entered promiscuous mode [ 33.934508][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.935702][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.937191][ T4045] device bridge_slave_1 entered promiscuous mode [ 33.938878][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.943173][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.947032][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.952360][ T4054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.953908][ T4060] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.955093][ T4060] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.956639][ T4060] device bridge_slave_1 entered promiscuous mode [ 33.962872][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.963877][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.967651][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.970901][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.971980][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.976031][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.987384][ T4060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.993274][ T4045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.002821][ T4045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.005249][ T4060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.013786][ T4054] team0: Port device team_slave_0 added [ 34.015582][ T4054] team0: Port device team_slave_1 added [ 34.070334][ T4049] device hsr_slave_0 entered promiscuous mode [ 34.109422][ T4049] device hsr_slave_1 entered promiscuous mode [ 34.155733][ T4060] team0: Port device team_slave_0 added [ 34.180398][ T4044] device hsr_slave_0 entered promiscuous mode [ 34.209444][ T4044] device hsr_slave_1 entered promiscuous mode [ 34.259407][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.260623][ T4044] Cannot create hsr debugfs directory [ 34.261730][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.262871][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.266836][ T4054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.271040][ T4045] team0: Port device team_slave_0 added [ 34.273058][ T4060] team0: Port device team_slave_1 added [ 34.274648][ T4045] team0: Port device team_slave_1 added [ 34.276096][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.277159][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.281183][ T4054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.307028][ T4060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.308117][ T4060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.312194][ T4060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.314180][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.315261][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.319094][ T4045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.326971][ T4060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.328171][ T4060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.332961][ T4060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.335070][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.336225][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.340744][ T4045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.430315][ T4054] device hsr_slave_0 entered promiscuous mode [ 34.499511][ T4054] device hsr_slave_1 entered promiscuous mode [ 34.539350][ T4054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.540529][ T4054] Cannot create hsr debugfs directory [ 34.610298][ T4060] device hsr_slave_0 entered promiscuous mode [ 34.649407][ T4060] device hsr_slave_1 entered promiscuous mode [ 34.699286][ T4060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.700428][ T4060] Cannot create hsr debugfs directory [ 34.770367][ T4045] device hsr_slave_0 entered promiscuous mode [ 34.812505][ T4045] device hsr_slave_1 entered promiscuous mode [ 34.849337][ T4045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.850465][ T4045] Cannot create hsr debugfs directory [ 34.954126][ T4049] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.971411][ T4049] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.020497][ T4049] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.071468][ T4049] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.162311][ T4044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.206495][ T4044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.263190][ T4044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.304487][ T4044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.354454][ T4054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.387967][ T4054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.420530][ T4054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.471549][ T4060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.531465][ T4054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.572612][ T4060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.609671][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 35.609787][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 35.611840][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 35.612867][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 35.614004][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 35.617936][ T4060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.674152][ T4060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.714740][ T4045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.750872][ T4045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.812656][ T4045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.850489][ T4045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.928235][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.932411][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.944794][ T4054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.961295][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.965102][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.966974][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.968395][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.971627][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.973364][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.974538][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.976170][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.977692][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.980868][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.987441][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.989032][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.991052][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.992207][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.996061][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.999103][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.000750][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.002229][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.006998][ T4054] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.015177][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.016871][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.018514][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.021010][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.022156][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.023698][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.025413][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.026890][ T264] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.027924][ T264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.036051][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.037577][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.040509][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.042174][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.043680][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.044809][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.046156][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.047820][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.050260][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.051837][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.064221][ T4060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.067320][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.069076][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.070904][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.072454][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.077800][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.079653][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.081220][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.082655][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.084083][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.085192][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.093205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.094999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.096582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.097943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.102353][ T4060] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.104648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.109000][ T4049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.111189][ T4049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.116045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.117566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.121014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.122683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.124116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.125606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.127099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.139916][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.141491][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.142929][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.144524][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.146008][ T585] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.147182][ T585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.148434][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.150504][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.152013][ T585] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.153131][ T585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.154485][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.156109][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.158057][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.168148][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.170224][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.172343][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.174215][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.175896][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.177417][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.185069][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.186578][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.188091][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.197892][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.200535][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.202253][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.203792][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.205312][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.206828][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.208509][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.213529][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.215882][ T4054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.220981][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.222649][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.228100][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.230246][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.238688][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.241356][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.243342][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.245841][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.250457][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.252146][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.253641][ T585] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.254730][ T585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.256136][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.271905][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.273560][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.274984][ T585] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.276111][ T585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.277423][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.290774][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.292117][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.296902][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.301548][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.302885][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.314271][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.322346][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.324108][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.332035][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.334492][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.335796][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.339222][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.343796][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.345572][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.349769][ T4054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.354266][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.355838][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.358370][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.359971][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.370717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.372407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.379478][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.384518][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.386181][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.400647][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.401939][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.403144][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.404678][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.406247][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.407952][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.410968][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.412539][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.418613][ T4060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.424178][ T4044] device veth0_vlan entered promiscuous mode [ 36.430191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.431669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.433322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.434719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.437952][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.440064][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.441657][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.443043][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.447588][ T4049] device veth0_vlan entered promiscuous mode [ 36.451648][ T4054] device veth0_vlan entered promiscuous mode [ 36.455802][ T4054] device veth1_vlan entered promiscuous mode [ 36.461510][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.463006][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.464240][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.477625][ T4049] device veth1_vlan entered promiscuous mode [ 36.484421][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.489969][ T4044] device veth1_vlan entered promiscuous mode [ 36.497652][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.499197][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.501491][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.502847][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.504348][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.505844][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.507359][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.518645][ T4054] device veth0_macvtap entered promiscuous mode [ 36.521776][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.523275][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.524788][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.526952][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.528478][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.534213][ T4054] device veth1_macvtap entered promiscuous mode [ 36.542162][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.543684][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.545275][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.548070][ T4049] device veth0_macvtap entered promiscuous mode [ 36.553187][ T4044] device veth0_macvtap entered promiscuous mode [ 36.558278][ T4044] device veth1_macvtap entered promiscuous mode [ 36.563005][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.564564][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.566060][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.567551][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.569122][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.571756][ T4049] device veth1_macvtap entered promiscuous mode [ 36.576074][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.583175][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.584670][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.586130][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.587647][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.589076][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.591451][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.593476][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.601176][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.602851][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.604969][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.606992][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.608950][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.611985][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.613448][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.615034][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.617170][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.618365][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.623979][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.625580][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.627220][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.628866][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.631415][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.633288][ T4045] device veth0_vlan entered promiscuous mode [ 36.638860][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.641414][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.643569][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.644819][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.646288][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.647803][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.649679][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.651367][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.652862][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.654830][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.656443][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.657993][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.661232][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.663309][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.664563][ T4060] device veth0_vlan entered promiscuous mode [ 36.667052][ T4054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.668517][ T4054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.670818][ T4054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.672209][ T4054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.676015][ T4045] device veth1_vlan entered promiscuous mode [ 36.677979][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.679546][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.681055][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.684326][ T4049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.685636][ T4049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.686914][ T4049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.688241][ T4049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.699862][ T4060] device veth1_vlan entered promiscuous mode [ 36.708663][ T4044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.711438][ T4044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.712855][ T4044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.714288][ T4044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.720251][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.721773][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.723258][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.724729][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.726382][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.729138][ T4045] device veth0_macvtap entered promiscuous mode [ 36.741706][ T4045] device veth1_macvtap entered promiscuous mode [ 36.769223][ T264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.770042][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.770644][ T264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.772130][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.774690][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.776059][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.777604][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.779170][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.782282][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.784538][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.786198][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.787689][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.789095][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.792058][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.793731][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.796310][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.806288][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.807903][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.810320][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.811776][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.813454][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.814970][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.816566][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.818116][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.822267][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.825021][ T4060] device veth0_macvtap entered promiscuous mode [ 36.844041][ T4060] device veth1_macvtap entered promiscuous mode [ 36.845345][ T1642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.845398][ T585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.846601][ T1642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.847836][ T585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.855154][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.856813][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.858759][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.860557][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.867317][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.868615][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.869826][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.869838][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.869845][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.869852][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.869859][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.878194][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.880802][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.882580][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.884937][ T4060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.887227][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.889095][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.891634][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.893284][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.894801][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.896413][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.897788][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.899748][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.904658][ T4060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.906324][ T4045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.907683][ T4045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.909029][ T4045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.910659][ T4045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.913222][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.914657][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.916211][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.918114][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.920346][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.931290][ T4060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.932650][ T4060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.933928][ T4060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.935356][ T4060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.950606][ T1642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.951860][ T1642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.966329][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.018685][ T1642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.020096][ T1642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.022212][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.038123][ T1642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.039539][ T1642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.041589][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.069210][ T585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.078216][ T585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.105237][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.450863][ T585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.452460][ T585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.454048][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.468615][ T585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.470211][ T585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.471860][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.866585][ T4153] Bluetooth: hci3: command 0x041b tx timeout [ 37.867874][ T4153] Bluetooth: hci0: command 0x041b tx timeout [ 37.869366][ T4153] Bluetooth: hci1: command 0x041b tx timeout [ 37.870419][ T4153] Bluetooth: hci4: command 0x041b tx timeout [ 37.871460][ T4153] Bluetooth: hci2: command 0x041b tx timeout [ 38.015936][ T4178] mmap: syz.1.2 (4178) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 38.538488][ T4158] loop0: detected capacity change from 0 to 65536 [ 38.611546][ T26] audit: type=1400 audit(38.590:2): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4187 comm="syz.4.11" [ 38.891293][ T4158] ======================================================= [ 38.891293][ T4158] WARNING: The mand mount option has been deprecated and [ 38.891293][ T4158] and is ignored by this kernel. Remove the mand [ 38.891293][ T4158] option from the mount to silence this warning. [ 38.891293][ T4158] ======================================================= [ 38.977678][ T4158] XFS (loop0): Mounting V5 Filesystem [ 39.072678][ T4158] XFS (loop0): Ending clean mount [ 39.075649][ T4158] XFS (loop0): Quotacheck needed: Please wait. [ 39.091007][ T4158] XFS (loop0): Quotacheck: Done. [ 39.590286][ T4202] loop3: detected capacity change from 0 to 32768 [ 39.656070][ T4202] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 40.664602][ T4049] XFS (loop0): Unmounting Filesystem [ 40.752612][ T4044] ocfs2: Unmounting device (7,3) on (node local) [ 41.229034][ T3626] Bluetooth: hci2: command 0x040f tx timeout [ 41.230242][ T3626] Bluetooth: hci4: command 0x040f tx timeout [ 41.233215][ T3626] Bluetooth: hci1: command 0x040f tx timeout [ 41.234286][ T3626] Bluetooth: hci0: command 0x040f tx timeout [ 41.235252][ T3626] Bluetooth: hci3: command 0x040f tx timeout [ 42.969253][ C1] sched: RT throttling activated [ 43.493558][ T4098] Bluetooth: hci3: command 0x0419 tx timeout [ 43.496799][ T4098] Bluetooth: hci0: command 0x0419 tx timeout [ 43.499987][ T4098] Bluetooth: hci1: command 0x0419 tx timeout [ 43.501295][ T4098] Bluetooth: hci4: command 0x0419 tx timeout [ 43.502349][ T4098] Bluetooth: hci2: command 0x0419 tx timeout [ 46.075200][ T26] audit: type=1400 audit(46.050:3): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4283 comm="syz.1.33" [ 46.910478][ T4316] loop0: detected capacity change from 0 to 512 [ 46.992502][ T4316] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 47.839168][ T4337] FAULT_INJECTION: forcing a failure. [ 47.839168][ T4337] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.847050][ T4337] CPU: 0 PID: 4337 Comm: syz.2.45 Not tainted 5.15.189-syzkaller #0 [ 47.848381][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.849955][ T4337] Call trace: [ 47.850416][ T4337] dump_backtrace+0x0/0x43c [ 47.851050][ T4337] show_stack+0x2c/0x3c [ 47.851731][ T4337] __dump_stack+0x30/0x40 [ 47.852468][ T4337] dump_stack_lvl+0xf8/0x160 [ 47.853189][ T4337] dump_stack+0x1c/0x5c [ 47.853836][ T4337] should_fail+0x3c0/0x51c [ 47.854589][ T4337] should_fail_usercopy+0x20/0x30 [ 47.855457][ T4337] __copy_msghdr_from_user+0xb8/0x4f8 [ 47.856337][ T4337] ___sys_sendmsg+0x140/0x240 [ 47.857051][ T4337] __arm64_sys_sendmsg+0x1a8/0x254 [ 47.857940][ T4337] invoke_syscall+0x98/0x2b8 [ 47.858727][ T4337] el0_svc_common+0x138/0x258 [ 47.859500][ T4337] do_el0_svc+0x58/0x14c [ 47.860205][ T4337] el0_svc+0x78/0x1e0 [ 47.860767][ T4337] el0t_64_sync_handler+0xcc/0xe4 [ 47.861528][ T4337] el0t_64_sync+0x1a0/0x1a4 [ 47.880017][ T4333] loop1: detected capacity change from 0 to 4096 [ 47.906283][ T4333] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 47.919117][ T4333] ntfs: volume version 3.1. [ 47.934650][ T4341] loop0: detected capacity change from 0 to 736 [ 48.368303][ T4354] udc-core: couldn't find an available UDC or it's busy [ 48.378849][ T4354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.405224][ T4356] Zero length message leads to an empty skb [ 50.157856][ T26] audit: type=1400 audit(50.020:4): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4374 comm="syz.0.60" [ 51.515135][ T4431] udc-core: couldn't find an available UDC or it's busy [ 51.516537][ T4431] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.698283][ T26] audit: type=1400 audit(51.670:5): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4427 comm="syz.4.75" [ 52.206943][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 52.954338][ T26] audit: type=1400 audit(52.900:6): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4444 comm="syz.3.90" [ 53.543073][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 55.211662][ T4501] udc-core: couldn't find an available UDC or it's busy [ 55.212811][ T4501] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.418363][ T26] audit: type=1400 audit(55.390:7): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4507 comm="syz.2.102" [ 56.449958][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.834866][ T4578] process 'syz.3.124' launched '/dev/fd/6' with NULL argv: empty string added [ 57.837909][ T26] audit: type=1400 audit(57.810:8): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4575 comm="syz.1.123" [ 57.865709][ T4578] overlayfs: failed to resolve './file1': -2 [ 58.337858][ T4596] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 58.482889][ T4596] loop3: detected capacity change from 0 to 1024 [ 58.609589][ T4602] udc-core: couldn't find an available UDC or it's busy [ 58.611000][ T4602] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.582620][ T26] audit: type=1400 audit(59.330:9): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4633 comm="syz.2.142" [ 60.293204][ T4666] udc-core: couldn't find an available UDC or it's busy [ 60.294376][ T4666] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.783478][ T26] audit: type=1400 audit(60.760:10): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4687 comm="syz.1.163" [ 61.605874][ T4716] udc-core: couldn't find an available UDC or it's busy [ 61.612613][ T4716] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.216739][ T4743] FAULT_INJECTION: forcing a failure. [ 62.216739][ T4743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.219149][ T4743] CPU: 0 PID: 4743 Comm: syz.3.183 Not tainted 5.15.189-syzkaller #0 [ 62.220482][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 62.222042][ T4743] Call trace: [ 62.222509][ T4743] dump_backtrace+0x0/0x43c [ 62.223193][ T4743] show_stack+0x2c/0x3c [ 62.223902][ T4743] __dump_stack+0x30/0x40 [ 62.224664][ T4743] dump_stack_lvl+0xf8/0x160 [ 62.225433][ T4743] dump_stack+0x1c/0x5c [ 62.226161][ T4743] should_fail+0x3c0/0x51c [ 62.226899][ T4743] should_fail_usercopy+0x20/0x30 [ 62.227723][ T4743] __copy_msghdr_from_user+0xb8/0x4f8 [ 62.228620][ T4743] ___sys_sendmsg+0x140/0x240 [ 62.229444][ T4743] __sys_sendmmsg+0x218/0x5f0 [ 62.230215][ T4743] __arm64_sys_sendmmsg+0xa0/0xbc [ 62.231112][ T4743] invoke_syscall+0x98/0x2b8 [ 62.231898][ T4743] el0_svc_common+0x138/0x258 [ 62.232708][ T4743] do_el0_svc+0x58/0x14c [ 62.233415][ T4743] el0_svc+0x78/0x1e0 [ 62.234072][ T4743] el0t_64_sync_handler+0xcc/0xe4 [ 62.234888][ T4743] el0t_64_sync+0x1a0/0x1a4 [ 63.118912][ T4765] udc-core: couldn't find an available UDC or it's busy [ 63.120533][ T4765] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.631964][ T4776] loop4: detected capacity change from 0 to 256 [ 66.015632][ T4776] FAT-fs (loop4): Directory bread(block 64) failed [ 66.016783][ T4776] FAT-fs (loop4): Directory bread(block 65) failed [ 66.017801][ T4776] FAT-fs (loop4): Directory bread(block 66) failed [ 66.018766][ T4776] FAT-fs (loop4): Directory bread(block 67) failed [ 66.019808][ T4776] FAT-fs (loop4): Directory bread(block 68) failed [ 66.020725][ T4776] FAT-fs (loop4): Directory bread(block 69) failed [ 66.021797][ T4776] FAT-fs (loop4): Directory bread(block 70) failed [ 66.022899][ T4776] FAT-fs (loop4): Directory bread(block 71) failed [ 66.023990][ T4776] FAT-fs (loop4): Directory bread(block 72) failed [ 66.025193][ T4776] FAT-fs (loop4): Directory bread(block 73) failed [ 67.596283][ T4811] udc-core: couldn't find an available UDC or it's busy [ 67.649800][ T4811] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.289772][ T26] audit: type=1400 audit(68.270:11): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4817 comm="syz.0.209" [ 69.728795][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.730119][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.735465][ T1970] cfg80211: failed to load regulatory.db [ 69.783421][ T4875] udc-core: couldn't find an available UDC or it's busy [ 69.784742][ T4875] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.947225][ T4882] syz.3.232 sent an empty control message without MSG_MORE. [ 70.083848][ T4883] FAULT_INJECTION: forcing a failure. [ 70.083848][ T4883] name failslab, interval 1, probability 0, space 0, times 1 [ 70.085813][ T4883] CPU: 1 PID: 4883 Comm: syz.1.231 Not tainted 5.15.189-syzkaller #0 [ 70.087128][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 70.088655][ T4883] Call trace: [ 70.089140][ T4883] dump_backtrace+0x0/0x43c [ 70.089861][ T4883] show_stack+0x2c/0x3c [ 70.090486][ T4883] __dump_stack+0x30/0x40 [ 70.091178][ T4883] dump_stack_lvl+0xf8/0x160 [ 70.091940][ T4883] dump_stack+0x1c/0x5c [ 70.092599][ T4883] should_fail+0x3c0/0x51c [ 70.093337][ T4883] __should_failslab+0xbc/0x10c [ 70.094122][ T4883] should_failslab+0x10/0x28 [ 70.094846][ T4883] slab_pre_alloc_hook+0x64/0xec [ 70.095601][ T4883] kmem_cache_alloc_node_trace+0x9c/0x438 [ 70.096581][ T4883] blkg_alloc+0xc0/0x5bc [ 70.097243][ T4883] blkg_create+0x338/0x1028 [ 70.097919][ T4883] bio_associate_blkg_from_css+0x6b8/0x858 [ 70.098781][ T4883] bio_associate_blkg+0x24c/0x374 [ 70.099523][ T4883] blkdev_issue_flush+0xe0/0x144 [ 70.100322][ T4883] ext4_sync_file+0x794/0xb80 [ 70.101075][ T4883] vfs_fsync_range+0x168/0x188 [ 70.101785][ T4883] __arm64_sys_msync+0x3b8/0x568 [ 70.102547][ T4883] invoke_syscall+0x98/0x2b8 [ 70.103266][ T4883] el0_svc_common+0x138/0x258 [ 70.104017][ T4883] do_el0_svc+0x58/0x14c [ 70.104680][ T4883] el0_svc+0x78/0x1e0 [ 70.105276][ T4883] el0t_64_sync_handler+0xcc/0xe4 [ 70.106080][ T4883] el0t_64_sync+0x1a0/0x1a4 [ 70.106823][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.332324][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.649296][ T4191] Bluetooth: hci4: command 0x0406 tx timeout [ 70.861445][ T26] audit: type=1400 audit(70.840:12): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4888 comm="syz.4.234" [ 70.877727][ T4891] loop0: detected capacity change from 0 to 16 [ 70.940501][ T4891] erofs: (device loop0): mounted with root inode @ nid 36. [ 70.948383][ T4887] erofs: (device loop0): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 8 of nid 36 [ 70.965343][ T4887] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 70.967964][ T4887] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 70.970856][ T4887] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 71.739968][ T4923] FAULT_INJECTION: forcing a failure. [ 71.739968][ T4923] name failslab, interval 1, probability 0, space 0, times 0 [ 71.742319][ T4923] CPU: 1 PID: 4923 Comm: syz.3.246 Not tainted 5.15.189-syzkaller #0 [ 71.743465][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 71.744988][ T4923] Call trace: [ 71.745485][ T4923] dump_backtrace+0x0/0x43c [ 71.746198][ T4923] show_stack+0x2c/0x3c [ 71.746837][ T4923] __dump_stack+0x30/0x40 [ 71.747494][ T4923] dump_stack_lvl+0xf8/0x160 [ 71.748229][ T4923] dump_stack+0x1c/0x5c [ 71.748902][ T4923] should_fail+0x3c0/0x51c [ 71.749673][ T4923] __should_failslab+0xbc/0x10c [ 71.750445][ T4923] should_failslab+0x10/0x28 [ 71.751144][ T4923] slab_pre_alloc_hook+0x64/0xec [ 71.751869][ T4923] kmem_cache_alloc_trace+0x98/0x3fc [ 71.752637][ T4923] drm_atomic_state_alloc+0xb4/0x108 [ 71.753441][ T4923] drm_client_modeset_commit_atomic+0xcc/0x6b8 [ 71.754388][ T4923] drm_client_modeset_commit_locked+0xd0/0x4a0 [ 71.755295][ T4923] drm_client_modeset_commit+0x50/0x7c [ 71.756109][ T4923] drm_fbdev_client_restore+0xbc/0x154 [ 71.756897][ T4923] drm_client_dev_restore+0x120/0x234 [ 71.757755][ T4923] drm_release+0x4b0/0x618 [ 71.758475][ T4923] __fput+0x1c0/0x7f8 [ 71.759058][ T4923] ____fput+0x20/0x30 [ 71.759660][ T4923] task_work_run+0x12c/0x1e0 [ 71.760386][ T4923] do_notify_resume+0x24b4/0x3128 [ 71.761127][ T4923] el0_svc+0xf0/0x1e0 [ 71.761697][ T4923] el0t_64_sync_handler+0xcc/0xe4 [ 71.762406][ T4923] el0t_64_sync+0x1a0/0x1a4 [ 72.106741][ T4052] Bluetooth: hci0: command 0x0406 tx timeout [ 72.108153][ T4052] Bluetooth: hci1: command 0x0406 tx timeout [ 72.600772][ T25] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 72.959420][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.961419][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 72.962885][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.967151][ T25] usb 1-1: config 0 descriptor?? [ 73.021519][ T26] audit: type=1400 audit(73.000:13): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4965 comm="syz.2.260" [ 73.699638][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 73.700731][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 73.704523][ T25] usb 1-1: USB disconnect, device number 2 [ 73.846334][ T4990] FAULT_INJECTION: forcing a failure. [ 73.846334][ T4990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.865162][ T4990] CPU: 1 PID: 4990 Comm: syz.3.268 Not tainted 5.15.189-syzkaller #0 [ 73.866418][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 73.868105][ T4990] Call trace: [ 73.868625][ T4990] dump_backtrace+0x0/0x43c [ 73.869394][ T4990] show_stack+0x2c/0x3c [ 73.870063][ T4990] __dump_stack+0x30/0x40 [ 73.870768][ T4990] dump_stack_lvl+0xf8/0x160 [ 73.871572][ T4990] dump_stack+0x1c/0x5c [ 73.872275][ T4990] should_fail+0x3c0/0x51c [ 73.873017][ T4990] should_fail_usercopy+0x20/0x30 [ 73.873859][ T4990] __copy_msghdr_from_user+0xb8/0x4f8 [ 73.874700][ T4990] ___sys_sendmsg+0x140/0x240 [ 73.875412][ T4990] __arm64_sys_sendmsg+0x1a8/0x254 [ 73.876264][ T4990] invoke_syscall+0x98/0x2b8 [ 73.877024][ T4990] el0_svc_common+0x138/0x258 [ 73.877819][ T4990] do_el0_svc+0x58/0x14c [ 73.878559][ T4990] el0_svc+0x78/0x1e0 [ 73.879207][ T4990] el0t_64_sync_handler+0xcc/0xe4 [ 73.880020][ T4990] el0t_64_sync+0x1a0/0x1a4 [ 73.985116][ T4997] loop4: detected capacity change from 0 to 512 [ 74.218544][ T4997] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.119372][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 75.120895][ T5010] device bridge_slave_1 left promiscuous mode [ 75.122296][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.965472][ T4997] EXT4-fs (loop4): 1 orphan inode deleted [ 76.973244][ T4997] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.021909][ T5010] device bridge_slave_0 left promiscuous mode [ 77.022998][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.222726][ T5028] loop4: detected capacity change from 0 to 512 [ 77.317141][ T5028] EXT4-fs (loop4): Ignoring removed nobh option [ 77.333135][ T5028] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.280: iget: bad i_size value: 38620345925642 [ 77.336052][ T5028] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.280: couldn't read orphan inode 15 (err -117) [ 77.338355][ T5028] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 77.777016][ T5042] loop4: detected capacity change from 0 to 512 [ 77.781855][ T5042] EXT4-fs (loop4): Ignoring removed nobh option [ 77.792640][ T5042] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.284: iget: bad i_size value: 38620345925642 [ 77.795562][ T5042] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.284: couldn't read orphan inode 15 (err -117) [ 77.802271][ T5042] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 77.828237][ T5042] FAULT_INJECTION: forcing a failure. [ 77.828237][ T5042] name failslab, interval 1, probability 0, space 0, times 0 [ 77.830533][ T5042] CPU: 1 PID: 5042 Comm: syz.4.284 Not tainted 5.15.189-syzkaller #0 [ 77.831846][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 77.833415][ T5042] Call trace: [ 77.833901][ T5042] dump_backtrace+0x0/0x43c [ 77.834583][ T5042] show_stack+0x2c/0x3c [ 77.835188][ T5042] __dump_stack+0x30/0x40 [ 77.835832][ T5042] dump_stack_lvl+0xf8/0x160 [ 77.836592][ T5042] dump_stack+0x1c/0x5c [ 77.837295][ T5042] should_fail+0x3c0/0x51c [ 77.837964][ T5042] __should_failslab+0xbc/0x10c [ 77.838754][ T5042] should_failslab+0x10/0x28 [ 77.839421][ T5042] slab_pre_alloc_hook+0x64/0xec [ 77.840179][ T5042] __kmalloc+0xbc/0x44c [ 77.840811][ T5042] tomoyo_realpath_from_path+0xcc/0x510 [ 77.841670][ T5042] tomoyo_path_number_perm+0x1b0/0x518 [ 77.842502][ T5042] tomoyo_file_ioctl+0x2c/0x3c [ 77.843206][ T5042] security_file_ioctl+0x80/0xbc [ 77.843933][ T5042] __arm64_sys_ioctl+0xa8/0x1c8 [ 77.844646][ T5042] invoke_syscall+0x98/0x2b8 [ 77.845343][ T5042] el0_svc_common+0x138/0x258 [ 77.846009][ T5042] do_el0_svc+0x58/0x14c [ 77.846643][ T5042] el0_svc+0x78/0x1e0 [ 77.847306][ T5042] el0t_64_sync_handler+0xcc/0xe4 [ 77.848100][ T5042] el0t_64_sync+0x1a0/0x1a4 [ 77.849635][ T5042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.278163][ T5053] udc-core: couldn't find an available UDC or it's busy [ 78.279464][ T5053] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.291577][ T5055] loop0: detected capacity change from 0 to 512 [ 78.343842][ T5055] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 78.351503][ T5055] EXT2-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 78.353035][ T5055] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 78.376362][ T5055] device ipvlan2 entered promiscuous mode [ 78.378310][ T5055] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 78.382124][ T5055] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 78.564386][ T5068] loop0: detected capacity change from 0 to 512 [ 78.594183][ T5068] EXT4-fs (loop0): Ignoring removed nobh option [ 78.598670][ T5068] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 78.601312][ T5068] EXT4-fs (loop0): Ignoring removed orlov option [ 78.605817][ T5068] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.607112][ T5068] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.294: iget: bad i_size value: 38620345925642 [ 78.610539][ T5068] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.294: couldn't read orphan inode 15 (err -117) [ 78.612776][ T5068] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback. [ 78.619715][ T5068] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.294'. [ 78.646867][ T5073] loop1: detected capacity change from 0 to 1024 [ 79.213299][ T5087] FAULT_INJECTION: forcing a failure. [ 79.213299][ T5087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.215659][ T5087] CPU: 0 PID: 5087 Comm: syz.2.302 Not tainted 5.15.189-syzkaller #0 [ 79.216999][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 79.218710][ T5087] Call trace: [ 79.219283][ T5087] dump_backtrace+0x0/0x43c [ 79.220067][ T5087] show_stack+0x2c/0x3c [ 79.220787][ T5087] __dump_stack+0x30/0x40 [ 79.221522][ T5087] dump_stack_lvl+0xf8/0x160 [ 79.222300][ T5087] dump_stack+0x1c/0x5c [ 79.222966][ T5087] should_fail+0x3c0/0x51c [ 79.223735][ T5087] should_fail_usercopy+0x20/0x30 [ 79.224661][ T5087] __copy_msghdr_from_user+0xb8/0x4f8 [ 79.225541][ T5087] ___sys_sendmsg+0x140/0x240 [ 79.226340][ T5087] __arm64_sys_sendmsg+0x1a8/0x254 [ 79.227191][ T5087] invoke_syscall+0x98/0x2b8 [ 79.227992][ T5087] el0_svc_common+0x138/0x258 [ 79.228848][ T5087] do_el0_svc+0x58/0x14c [ 79.229576][ T5087] el0_svc+0x78/0x1e0 [ 79.230253][ T5087] el0t_64_sync_handler+0xcc/0xe4 [ 79.231142][ T5087] el0t_64_sync+0x1a0/0x1a4 [ 79.333519][ T5097] loop2: detected capacity change from 0 to 2048 [ 79.355162][ T5097] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 79.359121][ T5097] UDF-fs: Scanning with blocksize 512 failed [ 79.414896][ T26] audit: type=1400 audit(79.390:14): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5082 comm="syz.3.299" [ 79.424925][ T5097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.464845][ T5096] overlayfs: bad mount option "redirect_dir=nofollow::" [ 79.486955][ T5097] overlayfs: bad mount option "redirect_dir=nofollow::" [ 79.582782][ T5101] FAULT_INJECTION: forcing a failure. [ 79.582782][ T5101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.586096][ T5101] CPU: 1 PID: 5101 Comm: syz.1.308 Not tainted 5.15.189-syzkaller #0 [ 79.587503][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 79.589231][ T5101] Call trace: [ 79.589747][ T5101] dump_backtrace+0x0/0x43c [ 79.590500][ T5101] show_stack+0x2c/0x3c [ 79.591186][ T5101] __dump_stack+0x30/0x40 [ 79.591892][ T5101] dump_stack_lvl+0xf8/0x160 [ 79.592589][ T5101] dump_stack+0x1c/0x5c [ 79.593220][ T5101] should_fail+0x3c0/0x51c [ 79.593951][ T5101] should_fail_usercopy+0x20/0x30 [ 79.594731][ T5101] __copy_msghdr_from_user+0xb8/0x4f8 [ 79.595504][ T5101] ___sys_sendmsg+0x140/0x240 [ 79.596243][ T5101] __sys_sendmmsg+0x218/0x5f0 [ 79.596971][ T5101] __arm64_sys_sendmmsg+0xa0/0xbc [ 79.597727][ T5101] invoke_syscall+0x98/0x2b8 [ 79.598410][ T5101] el0_svc_common+0x138/0x258 [ 79.599152][ T5101] do_el0_svc+0x58/0x14c [ 79.599911][ T5101] el0_svc+0x78/0x1e0 [ 79.600557][ T5101] el0t_64_sync_handler+0xcc/0xe4 [ 79.601315][ T5101] el0t_64_sync+0x1a0/0x1a4 [ 79.984882][ T5133] FAULT_INJECTION: forcing a failure. [ 79.984882][ T5133] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.987102][ T5133] CPU: 1 PID: 5133 Comm: syz.2.320 Not tainted 5.15.189-syzkaller #0 [ 79.988373][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 79.990006][ T5133] Call trace: [ 79.990460][ T5133] dump_backtrace+0x0/0x43c [ 79.991203][ T5133] show_stack+0x2c/0x3c [ 79.991897][ T5133] __dump_stack+0x30/0x40 [ 79.992548][ T5133] dump_stack_lvl+0xf8/0x160 [ 79.993294][ T5133] dump_stack+0x1c/0x5c [ 79.994027][ T5133] should_fail+0x3c0/0x51c [ 79.994729][ T5133] should_fail_alloc_page+0x74/0xa8 [ 79.995537][ T5133] prepare_alloc_pages+0x160/0x460 [ 79.996371][ T5133] __alloc_pages+0x108/0x470 [ 79.997040][ T5133] alloc_pages_vma+0x284/0x7a8 [ 79.997774][ T5133] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 79.998734][ T5133] handle_mm_fault+0x1904/0x2950 [ 79.999537][ T5133] do_page_fault+0x694/0xad4 [ 80.000193][ T5133] do_translation_fault+0xe0/0x130 [ 80.000958][ T5133] do_mem_abort+0x6c/0x1ac [ 80.001670][ T5133] el0_da+0x90/0x1fc [ 80.002331][ T5133] el0t_64_sync_handler+0xd8/0xe4 [ 80.003163][ T5133] el0t_64_sync+0x1a0/0x1a4 [ 80.005548][ T5133] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 80.636658][ T5155] loop4: detected capacity change from 0 to 512 [ 80.654009][ T5151] loop0: detected capacity change from 0 to 32768 [ 80.658285][ T5155] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.327: bad orphan inode 15 [ 80.658866][ T5159] FAULT_INJECTION: forcing a failure. [ 80.658866][ T5159] name failslab, interval 1, probability 0, space 0, times 0 [ 80.660459][ T5155] ext4_test_bit(bit=14, block=18) = 1 [ 80.662512][ T5159] CPU: 1 PID: 5159 Comm: syz.3.328 Not tainted 5.15.189-syzkaller #0 [ 80.663172][ T5155] is_bad_inode(inode)=0 [ 80.664247][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 80.664260][ T5159] Call trace: [ 80.664264][ T5159] dump_backtrace+0x0/0x43c [ 80.666003][ T5155] NEXT_ORPHAN(inode)=1023 [ 80.666598][ T5159] show_stack+0x2c/0x3c [ 80.666613][ T5159] __dump_stack+0x30/0x40 [ 80.666627][ T5159] dump_stack_lvl+0xf8/0x160 [ 80.670127][ T5155] max_ino=32 [ 80.670722][ T5159] dump_stack+0x1c/0x5c [ 80.670739][ T5159] should_fail+0x3c0/0x51c [ 80.670752][ T5159] __should_failslab+0xbc/0x10c [ 80.671394][ T5155] i_nlink=0 [ 80.671862][ T5159] should_failslab+0x10/0x28 [ 80.674456][ T5159] slab_pre_alloc_hook+0x64/0xec [ 80.675172][ T5159] kmem_cache_alloc_trace+0x98/0x3fc [ 80.675509][ T5155] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2941: inode #15: comm syz.4.327: corrupted xattr block 19 [ 80.675920][ T5159] drm_atomic_state_alloc+0xb4/0x108 [ 80.675942][ T5159] drm_client_modeset_commit_atomic+0xcc/0x6b8 [ 80.679479][ T5159] drm_client_modeset_commit_locked+0xd0/0x4a0 [ 80.680420][ T5159] drm_client_modeset_commit+0x50/0x7c [ 80.681193][ T5159] drm_fbdev_client_restore+0xbc/0x154 [ 80.681986][ T5159] drm_client_dev_restore+0x120/0x234 [ 80.682071][ T5155] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 80.682822][ T5159] drm_release+0x4b0/0x618 [ 80.682838][ T5159] __fput+0x1c0/0x7f8 [ 80.685501][ T5159] ____fput+0x20/0x30 [ 80.685842][ T5155] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.686090][ T5159] task_work_run+0x12c/0x1e0 [ 80.688546][ T5159] do_notify_resume+0x24b4/0x3128 [ 80.689307][ T5159] el0_svc+0xf0/0x1e0 [ 80.689999][ T5159] el0t_64_sync_handler+0xcc/0xe4 [ 80.690741][ T5159] el0t_64_sync+0x1a0/0x1a4 [ 80.691461][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.692817][ T5155] kernel profiling enabled (shift: 3) [ 80.837605][ T5167] loop1: detected capacity change from 0 to 4096 [ 81.217590][ T5187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.339'. [ 81.394114][ T5189] loop0: detected capacity change from 0 to 8192 [ 81.747363][ T5189] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.749134][ T5189] REISERFS (device loop0): using ordered data mode [ 81.753630][ T5189] reiserfs: using flush barriers [ 81.764415][ T5199] netlink: 36 bytes leftover after parsing attributes in process `syz.2.344'. [ 81.764443][ T5189] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.768837][ T5189] REISERFS (device loop0): checking transaction log (loop0) [ 81.792397][ T5205] FAULT_INJECTION: forcing a failure. [ 81.792397][ T5205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.794404][ T5205] CPU: 0 PID: 5205 Comm: syz.2.345 Not tainted 5.15.189-syzkaller #0 [ 81.795584][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 81.797071][ T5205] Call trace: [ 81.797586][ T5205] dump_backtrace+0x0/0x43c [ 81.798276][ T5205] show_stack+0x2c/0x3c [ 81.798979][ T5205] __dump_stack+0x30/0x40 [ 81.799740][ T5205] dump_stack_lvl+0xf8/0x160 [ 81.800495][ T5205] dump_stack+0x1c/0x5c [ 81.801238][ T5205] should_fail+0x3c0/0x51c [ 81.801937][ T5205] should_fail_usercopy+0x20/0x30 [ 81.802687][ T5205] __copy_msghdr_from_user+0xb8/0x4f8 [ 81.803523][ T5205] ___sys_sendmsg+0x140/0x240 [ 81.804276][ T5205] __arm64_sys_sendmsg+0x1a8/0x254 [ 81.805034][ T5205] invoke_syscall+0x98/0x2b8 [ 81.805744][ T5205] el0_svc_common+0x138/0x258 [ 81.806445][ T5205] do_el0_svc+0x58/0x14c [ 81.807147][ T5205] el0_svc+0x78/0x1e0 [ 81.807710][ T5205] el0t_64_sync_handler+0xcc/0xe4 [ 81.808466][ T5205] el0t_64_sync+0x1a0/0x1a4 [ 81.862359][ T5189] REISERFS (device loop0): Using tea hash to sort names [ 81.864448][ T5189] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 82.325735][ T5222] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.477656][ T5220] loop4: detected capacity change from 0 to 32768 [ 82.506822][ T5224] loop2: detected capacity change from 0 to 32768 [ 82.524381][ T5220] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 82.537282][ T5224] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 82.554691][ T5224] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 82.576940][ T5226] loop0: detected capacity change from 0 to 32768 [ 82.653474][ T5226] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 82.681421][ T5226] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.942527][ T5238] FAULT_INJECTION: forcing a failure. [ 82.942527][ T5238] name failslab, interval 1, probability 0, space 0, times 0 [ 82.944682][ T5238] CPU: 1 PID: 5238 Comm: syz.0.348 Not tainted 5.15.189-syzkaller #0 [ 82.945888][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 82.947392][ T5238] Call trace: [ 82.947844][ T5238] dump_backtrace+0x0/0x43c [ 82.948528][ T5238] show_stack+0x2c/0x3c [ 82.949171][ T5238] __dump_stack+0x30/0x40 [ 82.949875][ T5238] dump_stack_lvl+0xf8/0x160 [ 82.950623][ T5238] dump_stack+0x1c/0x5c [ 82.951289][ T5238] should_fail+0x3c0/0x51c [ 82.951917][ T5238] __should_failslab+0xbc/0x10c [ 82.952695][ T5238] should_failslab+0x10/0x28 [ 82.953433][ T5238] slab_pre_alloc_hook+0x64/0xec [ 82.954197][ T5238] kmem_cache_alloc_trace+0x98/0x3fc [ 82.955037][ T5238] ocfs2_new_path_from_et+0xcc/0x20c [ 82.955803][ T5238] ocfs2_remove_inode_range+0x764/0x20ec [ 82.956660][ T5238] __ocfs2_change_file_space+0x714/0xc24 [ 82.957502][ T5238] ocfs2_fallocate+0x1f0/0x224 [ 82.958187][ T5238] vfs_fallocate+0x4a4/0x5f4 [ 82.958894][ T5238] __arm64_sys_fallocate+0xc0/0x110 [ 82.959628][ T5238] invoke_syscall+0x98/0x2b8 [ 82.960278][ T5238] el0_svc_common+0x138/0x258 [ 82.960984][ T5238] do_el0_svc+0x58/0x14c [ 82.961645][ T5238] el0_svc+0x78/0x1e0 [ 82.962270][ T5238] el0t_64_sync_handler+0xcc/0xe4 [ 82.963068][ T5238] el0t_64_sync+0x1a0/0x1a4 [ 82.964197][ T5238] (syz.0.348,5238,1):ocfs2_remove_inode_range:1851 ERROR: status = -12 [ 82.965730][ T5238] (syz.0.348,5238,1):__ocfs2_change_file_space:2048 ERROR: status = -12 [ 83.200795][ T5224] capability: warning: `syz.2.353' uses deprecated v2 capabilities in a way that may be insecure [ 83.381258][ T26] audit: type=1400 audit(83.300:15): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5233 comm="syz.3.354" [ 83.396013][ T4049] ocfs2: Unmounting device (7,0) on (node local) [ 83.405774][ T4060] ocfs2: Unmounting device (7,4) on (node local) [ 83.411008][ T4054] ocfs2: Unmounting device (7,2) on (node local) [ 83.686324][ T5252] FAULT_INJECTION: forcing a failure. [ 83.686324][ T5252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.688542][ T5252] CPU: 1 PID: 5252 Comm: syz.1.359 Not tainted 5.15.189-syzkaller #0 [ 83.689767][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 83.691301][ T5252] Call trace: [ 83.691787][ T5252] dump_backtrace+0x0/0x43c [ 83.692499][ T5252] show_stack+0x2c/0x3c [ 83.693129][ T5252] __dump_stack+0x30/0x40 [ 83.693833][ T5252] dump_stack_lvl+0xf8/0x160 [ 83.694512][ T5252] dump_stack+0x1c/0x5c [ 83.695234][ T5252] should_fail+0x3c0/0x51c [ 83.695945][ T5252] should_fail_usercopy+0x20/0x30 [ 83.696775][ T5252] tcp_setsockopt+0x500/0x1bf4 [ 83.697476][ T5252] sock_common_setsockopt+0xb0/0xcc [ 83.698293][ T5252] __sys_setsockopt+0x260/0x36c [ 83.699105][ T5252] __arm64_sys_setsockopt+0xb8/0xd4 [ 83.699944][ T5252] invoke_syscall+0x98/0x2b8 [ 83.700680][ T5252] el0_svc_common+0x138/0x258 [ 83.701443][ T5252] do_el0_svc+0x58/0x14c [ 83.702095][ T5252] el0_svc+0x78/0x1e0 [ 83.702676][ T5252] el0t_64_sync_handler+0xcc/0xe4 [ 83.703451][ T5252] el0t_64_sync+0x1a0/0x1a4 [ 84.526263][ T5269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.364'. [ 84.647194][ T5278] FAULT_INJECTION: forcing a failure. [ 84.647194][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 84.649151][ T5278] CPU: 0 PID: 5278 Comm: syz.0.368 Not tainted 5.15.189-syzkaller #0 [ 84.650577][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 84.652190][ T5278] Call trace: [ 84.652717][ T5278] dump_backtrace+0x0/0x43c [ 84.653448][ T5278] show_stack+0x2c/0x3c [ 84.654175][ T5278] __dump_stack+0x30/0x40 [ 84.654864][ T5278] dump_stack_lvl+0xf8/0x160 [ 84.655563][ T5278] dump_stack+0x1c/0x5c [ 84.656225][ T5278] should_fail+0x3c0/0x51c [ 84.656897][ T5278] __should_failslab+0xbc/0x10c [ 84.657653][ T5278] should_failslab+0x10/0x28 [ 84.658362][ T5278] slab_pre_alloc_hook+0x64/0xec [ 84.658427][ T5262] loop2: detected capacity change from 0 to 32768 [ 84.659081][ T5278] __kmalloc+0xbc/0x44c [ 84.660705][ T5278] tomoyo_realpath_from_path+0xcc/0x510 [ 84.661551][ T5278] tomoyo_path_number_perm+0x1b0/0x518 [ 84.662411][ T5278] tomoyo_file_ioctl+0x2c/0x3c [ 84.663177][ T5278] security_file_ioctl+0x80/0xbc [ 84.663999][ T5278] __arm64_sys_ioctl+0xa8/0x1c8 [ 84.664788][ T5278] invoke_syscall+0x98/0x2b8 [ 84.665474][ T5278] el0_svc_common+0x138/0x258 [ 84.666161][ T5278] do_el0_svc+0x58/0x14c [ 84.666830][ T5278] el0_svc+0x78/0x1e0 [ 84.667476][ T5278] el0t_64_sync_handler+0xcc/0xe4 [ 84.668312][ T5278] el0t_64_sync+0x1a0/0x1a4 [ 84.688727][ T5262] JBD2: Ignoring recovery information on journal [ 84.720137][ T5278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.732462][ T5262] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 84.773040][ T4054] ocfs2: Unmounting device (7,2) on (node local) [ 84.781083][ T5270] loop1: detected capacity change from 0 to 32768 [ 85.220291][ T5299] loop0: detected capacity change from 0 to 8192 [ 85.239764][ T5299] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.323033][ T5303] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 85.368356][ T26] audit: type=1400 audit(85.340:16): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5290 comm="syz.2.371" [ 85.389185][ T5310] FAULT_INJECTION: forcing a failure. [ 85.389185][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 85.442462][ T5310] CPU: 1 PID: 5310 Comm: syz.3.379 Not tainted 5.15.189-syzkaller #0 [ 85.443780][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 85.445444][ T5310] Call trace: [ 85.445975][ T5310] dump_backtrace+0x0/0x43c [ 85.446694][ T5310] show_stack+0x2c/0x3c [ 85.447297][ T5310] __dump_stack+0x30/0x40 [ 85.447980][ T5310] dump_stack_lvl+0xf8/0x160 [ 85.448694][ T5310] dump_stack+0x1c/0x5c [ 85.449424][ T5310] should_fail+0x3c0/0x51c [ 85.450179][ T5310] __should_failslab+0xbc/0x10c [ 85.450937][ T5310] should_failslab+0x10/0x28 [ 85.451698][ T5310] slab_pre_alloc_hook+0x64/0xec [ 85.452539][ T5310] kmem_cache_alloc_trace+0x98/0x3fc [ 85.453333][ T5310] drm_atomic_state_alloc+0xb4/0x108 [ 85.454155][ T5310] drm_client_modeset_commit_atomic+0xcc/0x6b8 [ 85.455165][ T5310] drm_client_modeset_commit_locked+0xd0/0x4a0 [ 85.456113][ T5310] drm_client_modeset_commit+0x50/0x7c [ 85.456950][ T5310] drm_fbdev_client_restore+0xbc/0x154 [ 85.457756][ T5310] drm_client_dev_restore+0x120/0x234 [ 85.458540][ T5310] drm_release+0x4b0/0x618 [ 85.459168][ T5310] __fput+0x1c0/0x7f8 [ 85.459747][ T5310] ____fput+0x20/0x30 [ 85.460336][ T5310] task_work_run+0x12c/0x1e0 [ 85.461043][ T5310] do_notify_resume+0x24b4/0x3128 [ 85.461820][ T5310] el0_svc+0xf0/0x1e0 [ 85.462486][ T5310] el0t_64_sync_handler+0xcc/0xe4 [ 85.463243][ T5310] el0t_64_sync+0x1a0/0x1a4 [ 85.923319][ T5317] loop0: detected capacity change from 0 to 764 [ 85.988453][ T5317] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.045226][ T5322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 86.332930][ T5332] FAULT_INJECTION: forcing a failure. [ 86.332930][ T5332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.335094][ T5332] CPU: 1 PID: 5332 Comm: syz.3.387 Not tainted 5.15.189-syzkaller #0 [ 86.336379][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 86.337899][ T5332] Call trace: [ 86.338374][ T5332] dump_backtrace+0x0/0x43c [ 86.339049][ T5332] show_stack+0x2c/0x3c [ 86.339722][ T5332] __dump_stack+0x30/0x40 [ 86.340343][ T5332] dump_stack_lvl+0xf8/0x160 [ 86.341034][ T5332] dump_stack+0x1c/0x5c [ 86.341681][ T5332] should_fail+0x3c0/0x51c [ 86.342329][ T5332] should_fail_usercopy+0x20/0x30 [ 86.343092][ T5332] __copy_msghdr_from_user+0xb8/0x4f8 [ 86.343967][ T5332] ___sys_sendmsg+0x140/0x240 [ 86.344709][ T5332] __arm64_sys_sendmsg+0x1a8/0x254 [ 86.345552][ T5332] invoke_syscall+0x98/0x2b8 [ 86.346288][ T5332] el0_svc_common+0x138/0x258 [ 86.347043][ T5332] do_el0_svc+0x58/0x14c [ 86.347770][ T5332] el0_svc+0x78/0x1e0 [ 86.348367][ T5332] el0t_64_sync_handler+0xcc/0xe4 [ 86.349163][ T5332] el0t_64_sync+0x1a0/0x1a4 [ 86.381276][ T5334] loop2: detected capacity change from 0 to 2048 [ 86.406823][ T5334] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.415583][ T5334] NILFS (loop2): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 86.423523][ T5334] kAFS: No cell specified [ 86.445602][ T5338] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 86.462613][ T5338] CIFS mount error: No usable UNC path provided in device string! [ 86.462613][ T5338] [ 86.464298][ T5338] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.468955][ T5338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.390'. [ 86.622586][ T5343] loop0: detected capacity change from 0 to 512 [ 86.691131][ T5334] loop2: detected capacity change from 0 to 32768 [ 86.920821][ T5360] FAULT_INJECTION: forcing a failure. [ 86.920821][ T5360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.922873][ T5360] CPU: 1 PID: 5360 Comm: syz.0.395 Not tainted 5.15.189-syzkaller #0 [ 86.924005][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 86.925476][ T5360] Call trace: [ 86.925931][ T5360] dump_backtrace+0x0/0x43c [ 86.926624][ T5360] show_stack+0x2c/0x3c [ 86.927281][ T5360] __dump_stack+0x30/0x40 [ 86.927942][ T5360] dump_stack_lvl+0xf8/0x160 [ 86.928665][ T5360] dump_stack+0x1c/0x5c [ 86.929300][ T5360] should_fail+0x3c0/0x51c [ 86.929986][ T5360] should_fail_usercopy+0x20/0x30 [ 86.930751][ T5360] __copy_msghdr_from_user+0xb8/0x4f8 [ 86.931552][ T5360] ___sys_sendmsg+0x140/0x240 [ 86.932279][ T5360] __arm64_sys_sendmsg+0x1a8/0x254 [ 86.933016][ T5360] invoke_syscall+0x98/0x2b8 [ 86.933722][ T5360] el0_svc_common+0x138/0x258 [ 86.934454][ T5360] do_el0_svc+0x58/0x14c [ 86.935045][ T5360] el0_svc+0x78/0x1e0 [ 86.935648][ T5360] el0t_64_sync_handler+0xcc/0xe4 [ 86.936476][ T5360] el0t_64_sync+0x1a0/0x1a4 [ 86.952692][ T5334] XFS (loop2): Mounting V5 Filesystem [ 87.335031][ T5334] XFS (loop2): Ending clean mount [ 87.337567][ T5334] XFS (loop2): Quotacheck needed: Please wait. [ 87.356458][ T5334] XFS (loop2): Quotacheck: Done. [ 87.363020][ T5334] XFS (loop2): User initiated shutdown received. [ 87.370757][ T5334] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x80/0x15c (fs/xfs/xfs_fsops.c:487). Shutting down filesystem. [ 87.372818][ T5334] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 87.387856][ T4054] XFS (loop2): Unmounting Filesystem [ 87.406843][ T5370] loop0: detected capacity change from 0 to 256 [ 87.423363][ T5370] exfat: Deprecated parameter 'utf8' [ 87.433623][ T5370] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 87.564144][ T5373] netlink: 'syz.0.400': attribute type 3 has an invalid length. [ 87.565768][ T5373] netlink: 220 bytes leftover after parsing attributes in process `syz.0.400'. [ 87.575002][ T5372] netlink: 'syz.0.400': attribute type 3 has an invalid length. [ 87.579568][ T5372] netlink: 220 bytes leftover after parsing attributes in process `syz.0.400'. [ 87.698790][ T5379] FAULT_INJECTION: forcing a failure. [ 87.698790][ T5379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.708847][ T5379] CPU: 1 PID: 5379 Comm: syz.4.403 Not tainted 5.15.189-syzkaller #0 [ 87.710142][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 87.711678][ T5379] Call trace: [ 87.712204][ T5379] dump_backtrace+0x0/0x43c [ 87.712980][ T5379] show_stack+0x2c/0x3c [ 87.713623][ T5379] __dump_stack+0x30/0x40 [ 87.714240][ T5379] dump_stack_lvl+0xf8/0x160 [ 87.714954][ T5379] dump_stack+0x1c/0x5c [ 87.715647][ T5379] should_fail+0x3c0/0x51c [ 87.716347][ T5379] should_fail_usercopy+0x20/0x30 [ 87.717125][ T5379] ip_getsockopt+0x130/0x158c [ 87.717896][ T5379] tcp_getsockopt+0x208/0x2e78 [ 87.718718][ T5379] sock_common_getsockopt+0xa8/0xc4 [ 87.719539][ T5379] __sys_getsockopt+0x1b8/0x250 [ 87.720330][ T5379] __arm64_sys_getsockopt+0xb8/0xd4 [ 87.721207][ T5379] invoke_syscall+0x98/0x2b8 [ 87.721889][ T5379] el0_svc_common+0x138/0x258 [ 87.722656][ T5379] do_el0_svc+0x58/0x14c [ 87.723317][ T5379] el0_svc+0x78/0x1e0 [ 87.723919][ T5379] el0t_64_sync_handler+0xcc/0xe4 [ 87.724735][ T5379] el0t_64_sync+0x1a0/0x1a4 [ 87.874070][ T5391] loop4: detected capacity change from 0 to 512 [ 87.932975][ T5391] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.970289][ T5396] udc-core: couldn't find an available UDC or it's busy [ 87.971433][ T5396] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.986226][ T5394] netlink: 88 bytes leftover after parsing attributes in process `syz.1.406'. [ 88.094306][ T26] audit: type=1400 audit(88.070:17): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5383 comm="syz.2.399" [ 88.149336][ T4091] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 88.487610][ T5408] udc-core: couldn't find an available UDC or it's busy [ 88.488945][ T5408] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.491152][ T5408] FAULT_INJECTION: forcing a failure. [ 88.491152][ T5408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.493943][ T5408] CPU: 0 PID: 5408 Comm: syz.3.411 Not tainted 5.15.189-syzkaller #0 [ 88.495191][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 88.496719][ T5408] Call trace: [ 88.497185][ T5408] dump_backtrace+0x0/0x43c [ 88.497827][ T5408] show_stack+0x2c/0x3c [ 88.498443][ T5408] __dump_stack+0x30/0x40 [ 88.499127][ T5408] dump_stack_lvl+0xf8/0x160 [ 88.499845][ T5408] dump_stack+0x1c/0x5c [ 88.500453][ T5408] should_fail+0x3c0/0x51c [ 88.501153][ T5408] should_fail_usercopy+0x20/0x30 [ 88.502027][ T5408] do_sys_poll+0x1f4/0xff0 [ 88.502658][ T5408] __arm64_sys_ppoll+0x218/0x2a8 [ 88.503436][ T5408] invoke_syscall+0x98/0x2b8 [ 88.504103][ T5408] el0_svc_common+0x138/0x258 [ 88.504860][ T5408] do_el0_svc+0x58/0x14c [ 88.505546][ T5408] el0_svc+0x78/0x1e0 [ 88.506164][ T5408] el0t_64_sync_handler+0xcc/0xe4 [ 88.506946][ T5408] el0t_64_sync+0x1a0/0x1a4 [ 88.539470][ T4091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.541235][ T4091] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 88.542588][ T4091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.547061][ T4091] usb 1-1: config 0 descriptor?? [ 88.627118][ T5410] udc-core: couldn't find an available UDC or it's busy [ 88.628327][ T5410] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.751512][ T5410] loop2: detected capacity change from 0 to 32768 [ 88.776633][ T5410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.412 (5410) [ 88.815357][ T5410] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 88.816898][ T5410] BTRFS info (device loop2): setting nodatacow, compression disabled [ 88.818233][ T5410] BTRFS info (device loop2): turning on flush-on-commit [ 88.822533][ T5410] BTRFS info (device loop2): enabling auto defrag [ 88.823705][ T5410] BTRFS info (device loop2): trying to use backup root at mount time [ 88.825236][ T5410] BTRFS info (device loop2): turning on async discard [ 88.826340][ T5410] BTRFS info (device loop2): using free space tree [ 88.827354][ T5410] BTRFS info (device loop2): has skinny extents [ 88.848742][ T9] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 88.850788][ T5410] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 88.852406][ T148] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 88.854368][ T5410] BTRFS warning (device loop2): couldn't read tree root [ 88.855831][ T5410] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 88.857428][ T5410] BTRFS warning (device loop2): couldn't read tree root [ 89.176209][ T5410] BTRFS info (device loop2): enabling ssd optimizations [ 89.177697][ T5410] BTRFS info (device loop2): clearing free space tree [ 89.178993][ T5410] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.181265][ T5410] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.193070][ T5410] BTRFS info (device loop2): creating free space tree [ 89.194857][ T5410] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.196401][ T5410] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.209426][ T4091] usbhid 1-1:0.0: can't add hid device: -71 [ 89.210847][ T4091] usbhid: probe of 1-1:0.0 failed with error -71 [ 89.219017][ T4091] usb 1-1: USB disconnect, device number 3 [ 89.745425][ T5455] FAULT_INJECTION: forcing a failure. [ 89.745425][ T5455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.757786][ T5455] CPU: 1 PID: 5455 Comm: syz.0.421 Not tainted 5.15.189-syzkaller #0 [ 89.759103][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 89.760709][ T5455] Call trace: [ 89.761322][ T5455] dump_backtrace+0x0/0x43c [ 89.762036][ T5455] show_stack+0x2c/0x3c [ 89.762698][ T5455] __dump_stack+0x30/0x40 [ 89.763370][ T5455] dump_stack_lvl+0xf8/0x160 [ 89.764090][ T5455] dump_stack+0x1c/0x5c [ 89.764756][ T5455] should_fail+0x3c0/0x51c [ 89.765467][ T5455] should_fail_usercopy+0x20/0x30 [ 89.766315][ T5455] move_addr_to_kernel+0xac/0x294 [ 89.767126][ T5455] __sys_connect+0xc4/0x28c [ 89.767822][ T5455] __arm64_sys_connect+0x7c/0x94 [ 89.768551][ T5455] invoke_syscall+0x98/0x2b8 [ 89.769216][ T5455] el0_svc_common+0x138/0x258 [ 89.769920][ T5455] do_el0_svc+0x58/0x14c [ 89.770590][ T5455] el0_svc+0x78/0x1e0 [ 89.771143][ T5455] el0t_64_sync_handler+0xcc/0xe4 [ 89.771983][ T5455] el0t_64_sync+0x1a0/0x1a4 [ 90.166080][ T26] audit: type=1400 audit(90.140:18): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5457 comm="syz.0.422" [ 90.241170][ T4191] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 90.400815][ T5470] udc-core: couldn't find an available UDC or it's busy [ 90.402199][ T5470] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.969770][ T4052] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 91.151071][ T5484] FAULT_INJECTION: forcing a failure. [ 91.151071][ T5484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.153479][ T5484] CPU: 1 PID: 5484 Comm: syz.3.432 Not tainted 5.15.189-syzkaller #0 [ 91.154723][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 91.156285][ T5484] Call trace: [ 91.156793][ T5484] dump_backtrace+0x0/0x43c [ 91.157520][ T5484] show_stack+0x2c/0x3c [ 91.158140][ T5484] __dump_stack+0x30/0x40 [ 91.158795][ T5484] dump_stack_lvl+0xf8/0x160 [ 91.159522][ T5484] dump_stack+0x1c/0x5c [ 91.160122][ T5484] should_fail+0x3c0/0x51c [ 91.160772][ T5484] should_fail_usercopy+0x20/0x30 [ 91.161545][ T5484] simple_read_from_buffer+0xd0/0x264 [ 91.162374][ T5484] proc_fail_nth_read+0x19c/0x244 [ 91.163207][ T5484] vfs_read+0x278/0xa10 [ 91.163879][ T5484] ksys_read+0x120/0x210 [ 91.164604][ T5484] __arm64_sys_read+0x7c/0x90 [ 91.165415][ T5484] invoke_syscall+0x98/0x2b8 [ 91.166222][ T5484] el0_svc_common+0x138/0x258 [ 91.167006][ T5484] do_el0_svc+0x58/0x14c [ 91.167681][ T5484] el0_svc+0x78/0x1e0 [ 91.168285][ T5484] el0t_64_sync_handler+0xcc/0xe4 [ 91.169037][ T5484] el0t_64_sync+0x1a0/0x1a4 [ 91.195372][ T5488] loop3: detected capacity change from 0 to 256 [ 91.215410][ T5488] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 91.344543][ T5496] loop0: detected capacity change from 0 to 512 [ 91.444683][ T5497] FAULT_INJECTION: forcing a failure. [ 91.444683][ T5497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.447078][ T5497] CPU: 1 PID: 5497 Comm: syz.1.436 Not tainted 5.15.189-syzkaller #0 [ 91.448388][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 91.449987][ T5497] Call trace: [ 91.450518][ T5497] dump_backtrace+0x0/0x43c [ 91.451230][ T5497] show_stack+0x2c/0x3c [ 91.451918][ T5497] __dump_stack+0x30/0x40 [ 91.452551][ T5497] dump_stack_lvl+0xf8/0x160 [ 91.453229][ T5497] dump_stack+0x1c/0x5c [ 91.453882][ T5497] should_fail+0x3c0/0x51c [ 91.454582][ T5497] should_fail_usercopy+0x20/0x30 [ 91.455409][ T5497] simple_read_from_buffer+0xd0/0x264 [ 91.456236][ T5497] proc_fail_nth_read+0x19c/0x244 [ 91.456984][ T5497] vfs_read+0x278/0xa10 [ 91.457652][ T5497] ksys_read+0x120/0x210 [ 91.458331][ T5497] __arm64_sys_read+0x7c/0x90 [ 91.459056][ T5497] invoke_syscall+0x98/0x2b8 [ 91.459827][ T5497] el0_svc_common+0x138/0x258 [ 91.460532][ T5497] do_el0_svc+0x58/0x14c [ 91.461189][ T5497] el0_svc+0x78/0x1e0 [ 91.461827][ T5497] el0t_64_sync_handler+0xcc/0xe4 [ 91.462655][ T5497] el0t_64_sync+0x1a0/0x1a4 [ 91.500656][ T5496] loop0: detected capacity change from 0 to 512 [ 91.884352][ T5503] loop4: detected capacity change from 0 to 8192 [ 91.924550][ T5503] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 91.926049][ T5503] REISERFS (device loop4): using ordered data mode [ 91.927051][ T5503] reiserfs: using flush barriers [ 91.928721][ T5503] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.936059][ T5503] REISERFS (device loop4): checking transaction log (loop4) [ 91.945015][ T5503] REISERFS (device loop4): Using r5 hash to sort names [ 91.946507][ T5503] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 92.124579][ T5523] udc-core: couldn't find an available UDC or it's busy [ 92.125803][ T5523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.207951][ T5527] netlink: 'syz.3.446': attribute type 10 has an invalid length. [ 92.243322][ T5527] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.256823][ T5527] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.530866][ T26] audit: type=1400 audit(92.510:19): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5530 comm="syz.3.447" [ 93.328316][ T5539] FAULT_INJECTION: forcing a failure. [ 93.328316][ T5539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.358736][ T5539] CPU: 1 PID: 5539 Comm: syz.3.449 Not tainted 5.15.189-syzkaller #0 [ 93.360010][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 93.361652][ T5539] Call trace: [ 93.362154][ T5539] dump_backtrace+0x0/0x43c [ 93.362841][ T5539] show_stack+0x2c/0x3c [ 93.363521][ T5539] __dump_stack+0x30/0x40 [ 93.364217][ T5539] dump_stack_lvl+0xf8/0x160 [ 93.364931][ T5539] dump_stack+0x1c/0x5c [ 93.365561][ T5539] should_fail+0x3c0/0x51c [ 93.366210][ T5539] should_fail_usercopy+0x20/0x30 [ 93.366941][ T5539] __copy_msghdr_from_user+0xb8/0x4f8 [ 93.367774][ T5539] ___sys_sendmsg+0x140/0x240 [ 93.368520][ T5539] __arm64_sys_sendmsg+0x1a8/0x254 [ 93.369328][ T5539] invoke_syscall+0x98/0x2b8 [ 93.370030][ T5539] el0_svc_common+0x138/0x258 [ 93.370750][ T5539] do_el0_svc+0x58/0x14c [ 93.371330][ T5539] el0_svc+0x78/0x1e0 [ 93.371900][ T5539] el0t_64_sync_handler+0xcc/0xe4 [ 93.372682][ T5539] el0t_64_sync+0x1a0/0x1a4 [ 93.506217][ T5546] loop0: detected capacity change from 0 to 8192 [ 93.534397][ T5550] FAULT_INJECTION: forcing a failure. [ 93.534397][ T5550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.536681][ T5550] CPU: 0 PID: 5550 Comm: syz.3.455 Not tainted 5.15.189-syzkaller #0 [ 93.537892][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 93.539472][ T5550] Call trace: [ 93.540031][ T5550] dump_backtrace+0x0/0x43c [ 93.540722][ T5550] show_stack+0x2c/0x3c [ 93.541425][ T5550] __dump_stack+0x30/0x40 [ 93.542083][ T5550] dump_stack_lvl+0xf8/0x160 [ 93.542813][ T5550] dump_stack+0x1c/0x5c [ 93.543524][ T5550] should_fail+0x3c0/0x51c [ 93.544247][ T5550] should_fail_usercopy+0x20/0x30 [ 93.545031][ T5550] simple_read_from_buffer+0xd0/0x264 [ 93.545915][ T5550] proc_fail_nth_read+0x19c/0x244 [ 93.546777][ T5550] vfs_read+0x278/0xa10 [ 93.547443][ T5550] ksys_read+0x120/0x210 [ 93.548154][ T5550] __arm64_sys_read+0x7c/0x90 [ 93.548936][ T5550] invoke_syscall+0x98/0x2b8 [ 93.549678][ T5550] el0_svc_common+0x138/0x258 [ 93.550436][ T5550] do_el0_svc+0x58/0x14c [ 93.551139][ T5550] el0_svc+0x78/0x1e0 [ 93.551803][ T5550] el0t_64_sync_handler+0xcc/0xe4 [ 93.552582][ T5550] el0t_64_sync+0x1a0/0x1a4 [ 93.561756][ T4362] loop0: p2 p3 p4[EZD] [ 93.562625][ T4362] loop0: partition table partially beyond EOD, truncated [ 93.565450][ T4362] loop0: p3 start 458783 is beyond EOD, truncated [ 93.567649][ T4362] loop0: p4 size 65536 extends beyond EOD, truncated [ 93.582069][ T5546] loop0: p2 p3 p4[EZD] [ 93.582863][ T5546] loop0: partition table partially beyond EOD, truncated [ 93.590632][ T5546] loop0: p3 start 458783 is beyond EOD, truncated [ 93.595945][ T5546] loop0: p4 size 65536 extends beyond EOD, truncated [ 93.646791][ T5567] udc-core: couldn't find an available UDC or it's busy [ 93.648087][ T5567] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.849713][ T26] audit: type=1400 audit(93.820:20): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5564 comm="syz.0.460" [ 94.133962][ T5556] loop3: detected capacity change from 0 to 40427 [ 94.156567][ T5556] F2FS-fs (loop3): invalid crc value [ 94.195353][ T5556] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.279939][ T5556] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 94.287571][ T5556] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.321528][ T4038] udevd[4038]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 94.330678][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 94.372053][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 94.414722][ T4038] udevd[4038]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 94.609421][ T5589] FAULT_INJECTION: forcing a failure. [ 94.609421][ T5589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.611621][ T5589] CPU: 0 PID: 5589 Comm: syz.2.466 Not tainted 5.15.189-syzkaller #0 [ 94.612739][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 94.614225][ T5589] Call trace: [ 94.614686][ T5589] dump_backtrace+0x0/0x43c [ 94.615347][ T5589] show_stack+0x2c/0x3c [ 94.615943][ T5589] __dump_stack+0x30/0x40 [ 94.616599][ T5589] dump_stack_lvl+0xf8/0x160 [ 94.617317][ T5589] dump_stack+0x1c/0x5c [ 94.617897][ T5589] should_fail+0x3c0/0x51c [ 94.618541][ T5589] should_fail_usercopy+0x20/0x30 [ 94.619251][ T5589] __copy_msghdr_from_user+0xb8/0x4f8 [ 94.620073][ T5589] ___sys_sendmsg+0x140/0x240 [ 94.620762][ T5589] __arm64_sys_sendmsg+0x1a8/0x254 [ 94.621641][ T5589] invoke_syscall+0x98/0x2b8 [ 94.622368][ T5589] el0_svc_common+0x138/0x258 [ 94.623129][ T5589] do_el0_svc+0x58/0x14c [ 94.623799][ T5589] el0_svc+0x78/0x1e0 [ 94.624400][ T5589] el0t_64_sync_handler+0xcc/0xe4 [ 94.625161][ T5589] el0t_64_sync+0x1a0/0x1a4 [ 94.632008][ T4044] attempt to access beyond end of device [ 94.632008][ T4044] loop3: rw=2049, want=45104, limit=40427 [ 94.756002][ T5591] loop2: detected capacity change from 0 to 1024 [ 94.825501][ T5587] loop0: detected capacity change from 0 to 32768 [ 94.840583][ T5591] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 94.851933][ T5591] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 94.853731][ T5591] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.855993][ T5591] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.468: Inode bitmap for bg 0 marked uninitialized [ 94.858296][ T5591] EXT4-fs (loop2): Remounting filesystem read-only [ 94.861227][ T5591] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,errors=remount-ro,usrjquota=,lazytime,. Quota mode: writeback. [ 94.875803][ T5591] EXT4-fs (loop2): shut down requested (1) [ 94.877922][ T5600] tipc: Started in network mode [ 94.879075][ T5600] tipc: Node identity ac14140f, cluster identity 4711 [ 94.880938][ T5600] tipc: New replicast peer: 255.255.255.255 [ 94.883109][ T5600] tipc: Enabled bearer , priority 10 [ 94.884379][ T5591] netlink: 'syz.2.468': attribute type 5 has an invalid length. [ 94.899852][ T5587] XFS (loop0): Mounting V5 Filesystem [ 94.922518][ T5605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.972627][ T5587] XFS (loop0): Ending clean mount [ 94.997867][ T5610] FAULT_INJECTION: forcing a failure. [ 94.997867][ T5610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.014236][ T5610] CPU: 0 PID: 5610 Comm: syz.3.472 Not tainted 5.15.189-syzkaller #0 [ 95.015443][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 95.016898][ T5610] Call trace: [ 95.017367][ T5610] dump_backtrace+0x0/0x43c [ 95.018118][ T5610] show_stack+0x2c/0x3c [ 95.018798][ T5610] __dump_stack+0x30/0x40 [ 95.019529][ T5610] dump_stack_lvl+0xf8/0x160 [ 95.020329][ T5610] dump_stack+0x1c/0x5c [ 95.021093][ T5610] should_fail+0x3c0/0x51c [ 95.021843][ T5610] should_fail_usercopy+0x20/0x30 [ 95.022720][ T5610] __copy_msghdr_from_user+0xb8/0x4f8 [ 95.023675][ T5610] ___sys_sendmsg+0x140/0x240 [ 95.024391][ T5610] __arm64_sys_sendmsg+0x1a8/0x254 [ 95.025234][ T5610] invoke_syscall+0x98/0x2b8 [ 95.025931][ T5610] el0_svc_common+0x138/0x258 [ 95.026626][ T5610] do_el0_svc+0x58/0x14c [ 95.027327][ T5610] el0_svc+0x78/0x1e0 [ 95.027978][ T5610] el0t_64_sync_handler+0xcc/0xe4 [ 95.028763][ T5610] el0t_64_sync+0x1a0/0x1a4 [ 95.667837][ T5625] udc-core: couldn't find an available UDC or it's busy [ 95.669022][ T5625] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.681884][ T4049] XFS (loop0): Unmounting Filesystem [ 95.780655][ T26] audit: type=1400 audit(95.740:21): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5620 comm="syz.4.475" [ 95.849476][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 95.997941][ T4052] tipc: Node number set to 2886997007 [ 96.044292][ T5628] loop2: detected capacity change from 0 to 8192 [ 96.056507][ T5628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'. [ 96.183035][ T5639] FAULT_INJECTION: forcing a failure. [ 96.183035][ T5639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.188211][ T5639] CPU: 0 PID: 5639 Comm: syz.2.482 Not tainted 5.15.189-syzkaller #0 [ 96.189470][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 96.191058][ T5639] Call trace: [ 96.191549][ T5639] dump_backtrace+0x0/0x43c [ 96.192336][ T5639] show_stack+0x2c/0x3c [ 96.193060][ T5639] __dump_stack+0x30/0x40 [ 96.193812][ T5639] dump_stack_lvl+0xf8/0x160 [ 96.194573][ T5639] dump_stack+0x1c/0x5c [ 96.195304][ T5639] should_fail+0x3c0/0x51c [ 96.196071][ T5639] should_fail_usercopy+0x20/0x30 [ 96.196873][ T5639] tcp_setsockopt+0x500/0x1bf4 [ 96.197633][ T5639] sock_common_setsockopt+0xb0/0xcc [ 96.198450][ T5639] __sys_setsockopt+0x260/0x36c [ 96.199203][ T5639] __arm64_sys_setsockopt+0xb8/0xd4 [ 96.199996][ T5639] invoke_syscall+0x98/0x2b8 [ 96.200741][ T5639] el0_svc_common+0x138/0x258 [ 96.201462][ T5639] do_el0_svc+0x58/0x14c [ 96.202146][ T5639] el0_svc+0x78/0x1e0 [ 96.202741][ T5639] el0t_64_sync_handler+0xcc/0xe4 [ 96.203497][ T5639] el0t_64_sync+0x1a0/0x1a4 [ 96.381501][ T5652] loop1: detected capacity change from 0 to 512 [ 96.467905][ T5659] FAULT_INJECTION: forcing a failure. [ 96.467905][ T5659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.474176][ T5659] CPU: 0 PID: 5659 Comm: syz.3.490 Not tainted 5.15.189-syzkaller #0 [ 96.475466][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 96.477130][ T5659] Call trace: [ 96.477697][ T5659] dump_backtrace+0x0/0x43c [ 96.478498][ T5659] show_stack+0x2c/0x3c [ 96.479153][ T5659] __dump_stack+0x30/0x40 [ 96.479893][ T5659] dump_stack_lvl+0xf8/0x160 [ 96.480624][ T5659] dump_stack+0x1c/0x5c [ 96.481312][ T5659] should_fail+0x3c0/0x51c [ 96.482024][ T5659] should_fail_usercopy+0x20/0x30 [ 96.482826][ T5659] __copy_msghdr_from_user+0xb8/0x4f8 [ 96.483668][ T5659] ___sys_sendmsg+0x140/0x240 [ 96.484438][ T5659] __arm64_sys_sendmsg+0x1a8/0x254 [ 96.485323][ T5659] invoke_syscall+0x98/0x2b8 [ 96.486144][ T5659] el0_svc_common+0x138/0x258 [ 96.486935][ T5659] do_el0_svc+0x58/0x14c [ 96.487656][ T5659] el0_svc+0x78/0x1e0 [ 96.488360][ T5659] el0t_64_sync_handler+0xcc/0xe4 [ 96.489180][ T5659] el0t_64_sync+0x1a0/0x1a4 [ 96.520539][ T5652] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.487: casefold flag without casefold feature [ 96.522715][ T5652] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.487: couldn't read orphan inode 15 (err -117) [ 96.525268][ T5652] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 97.052765][ T5675] loop4: detected capacity change from 0 to 256 [ 97.092997][ T5675] FAT-fs (loop4): Directory bread(block 64) failed [ 97.102840][ T5675] FAT-fs (loop4): Directory bread(block 65) failed [ 97.109466][ T5675] FAT-fs (loop4): Directory bread(block 66) failed [ 97.113843][ T5675] FAT-fs (loop4): Directory bread(block 67) failed [ 97.122489][ T5675] FAT-fs (loop4): Directory bread(block 68) failed [ 97.125811][ T5675] FAT-fs (loop4): Directory bread(block 69) failed [ 97.134425][ T5675] FAT-fs (loop4): Directory bread(block 70) failed [ 97.153444][ T5675] FAT-fs (loop4): Directory bread(block 71) failed [ 97.159395][ T5675] FAT-fs (loop4): Directory bread(block 72) failed [ 97.166516][ T5675] FAT-fs (loop4): Directory bread(block 73) failed [ 97.313379][ T5679] xt_hashlimit: max too large, truncated to 1048576 [ 97.989081][ T26] audit: type=1400 audit(97.710:22): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5687 comm="syz.4.499" [ 98.013527][ T5694] FAULT_INJECTION: forcing a failure. [ 98.013527][ T5694] name failslab, interval 1, probability 0, space 0, times 0 [ 98.015593][ T5694] CPU: 1 PID: 5694 Comm: syz.2.501 Not tainted 5.15.189-syzkaller #0 [ 98.016898][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 98.018418][ T5694] Call trace: [ 98.018877][ T5694] dump_backtrace+0x0/0x43c [ 98.019560][ T5694] show_stack+0x2c/0x3c [ 98.020153][ T5694] __dump_stack+0x30/0x40 [ 98.020766][ T5694] dump_stack_lvl+0xf8/0x160 [ 98.021470][ T5694] dump_stack+0x1c/0x5c [ 98.022132][ T5694] should_fail+0x3c0/0x51c [ 98.022796][ T5694] __should_failslab+0xbc/0x10c [ 98.023586][ T5694] should_failslab+0x10/0x28 [ 98.024304][ T5694] slab_pre_alloc_hook+0x64/0xec [ 98.025048][ T5694] kmem_cache_alloc_trace+0x98/0x3fc [ 98.025852][ T5694] drm_atomic_state_alloc+0xb4/0x108 [ 98.026649][ T5694] drm_client_modeset_commit_atomic+0xcc/0x6b8 [ 98.027607][ T5694] drm_client_modeset_commit_locked+0xd0/0x4a0 [ 98.028542][ T5694] drm_client_modeset_commit+0x50/0x7c [ 98.029352][ T5694] drm_fbdev_client_restore+0xbc/0x154 [ 98.030228][ T5694] drm_client_dev_restore+0x120/0x234 [ 98.031085][ T5694] drm_release+0x4b0/0x618 [ 98.031779][ T5694] __fput+0x1c0/0x7f8 [ 98.032443][ T5694] ____fput+0x20/0x30 [ 98.033080][ T5694] task_work_run+0x12c/0x1e0 [ 98.033799][ T5694] do_notify_resume+0x24b4/0x3128 [ 98.034628][ T5694] el0_svc+0xf0/0x1e0 [ 98.035245][ T5694] el0t_64_sync_handler+0xcc/0xe4 [ 98.036042][ T5694] el0t_64_sync+0x1a0/0x1a4 [ 98.036784][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.081072][ T5652] udc-core: couldn't find an available UDC or it's busy [ 98.082216][ T5652] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.130745][ T5696] IPv6: addrconf: prefix option has invalid lifetime [ 98.131870][ T5696] IPv6: addrconf: prefix option has invalid lifetime [ 98.149326][ T4153] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 98.235878][ T234] block nbd2: Attempted send on invalid socket [ 98.237341][ T234] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 98.239444][ T5699] EXT4-fs (nbd2): unable to read superblock [ 98.860199][ T4153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.862662][ T4153] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 98.865884][ T4153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.993489][ T4153] usb 1-1: config 0 descriptor?? [ 99.645554][ T5712] loop2: detected capacity change from 0 to 4096 [ 99.720680][ T5717] FAULT_INJECTION: forcing a failure. [ 99.720680][ T5717] name failslab, interval 1, probability 0, space 0, times 0 [ 99.722815][ T5717] CPU: 1 PID: 5717 Comm: syz.1.507 Not tainted 5.15.189-syzkaller #0 [ 99.723973][ T5717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 99.725307][ T5717] Call trace: [ 99.725767][ T5717] dump_backtrace+0x0/0x43c [ 99.726443][ T5717] show_stack+0x2c/0x3c [ 99.727123][ T5717] __dump_stack+0x30/0x40 [ 99.727773][ T5717] dump_stack_lvl+0xf8/0x160 [ 99.728565][ T5717] dump_stack+0x1c/0x5c [ 99.729246][ T5717] should_fail+0x3c0/0x51c [ 99.729881][ T5717] __should_failslab+0xbc/0x10c [ 99.730617][ T5717] should_failslab+0x10/0x28 [ 99.731325][ T5717] slab_pre_alloc_hook+0x64/0xec [ 99.732036][ T5717] kmem_cache_alloc+0x94/0x3e4 [ 99.732764][ T5717] xas_create+0xe24/0x12f8 [ 99.733402][ T5717] xas_create_range+0x1a0/0x6d0 [ 99.734137][ T5717] add_to_swap_cache+0x840/0x108c [ 99.734912][ T5717] add_to_swap+0x170/0x24c [ 99.735610][ T5717] shrink_page_list+0x33c8/0x5e44 [ 99.736362][ T5717] reclaim_pages+0x660/0x888 [ 99.737065][ T5717] madvise_cold_or_pageout_pte_range+0x123c/0x1648 [ 99.738022][ T5717] walk_pgd_range+0x818/0xf98 [ 99.738700][ T5717] __walk_page_range+0x124/0x51c [ 99.739377][ T5717] walk_page_range+0x318/0x4ac [ 99.740070][ T5717] do_madvise+0x15bc/0x26ec [ 99.740805][ T5717] __arm64_sys_madvise+0xa4/0xc0 [ 99.741545][ T5717] invoke_syscall+0x98/0x2b8 [ 99.742192][ T5717] el0_svc_common+0x138/0x258 [ 99.742850][ T5717] do_el0_svc+0x58/0x14c [ 99.743477][ T5717] el0_svc+0x78/0x1e0 [ 99.744037][ T5717] el0t_64_sync_handler+0xcc/0xe4 [ 99.744834][ T5717] el0t_64_sync+0x1a0/0x1a4 [ 99.799585][ T4153] usbhid 1-1:0.0: can't add hid device: -71 [ 99.805854][ T4153] usbhid: probe of 1-1:0.0 failed with error -71 [ 100.148165][ T4153] usb 1-1: USB disconnect, device number 4 [ 100.402141][ T5712] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 100.468354][ T5712] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 100.491350][ T5712] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 100.493473][ T5712] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.506671][ T5712] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 100.508110][ T5712] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.529507][ T5712] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.532984][ T5712] ntfs: volume version 3.1. [ 100.533845][ T5712] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 100.546276][ T5712] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 102.012358][ T5746] loop2: detected capacity change from 0 to 256 [ 102.386924][ T5746] FAT-fs (loop2): Directory bread(block 64) failed [ 102.387959][ T5746] FAT-fs (loop2): Directory bread(block 65) failed [ 102.388996][ T5746] FAT-fs (loop2): Directory bread(block 66) failed [ 102.390367][ T5746] FAT-fs (loop2): Directory bread(block 67) failed [ 102.391412][ T5746] FAT-fs (loop2): Directory bread(block 68) failed [ 102.392403][ T5746] FAT-fs (loop2): Directory bread(block 69) failed [ 102.393455][ T5746] FAT-fs (loop2): Directory bread(block 70) failed [ 102.394476][ T5746] FAT-fs (loop2): Directory bread(block 71) failed [ 102.395623][ T5746] FAT-fs (loop2): Directory bread(block 72) failed [ 102.396722][ T5746] FAT-fs (loop2): Directory bread(block 73) failed [ 102.428274][ T5751] FAULT_INJECTION: forcing a failure. [ 102.428274][ T5751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.432745][ T5751] CPU: 1 PID: 5751 Comm: syz.0.518 Not tainted 5.15.189-syzkaller #0 [ 102.434013][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 102.435608][ T5751] Call trace: [ 102.436142][ T5751] dump_backtrace+0x0/0x43c [ 102.436881][ T5751] show_stack+0x2c/0x3c [ 102.437562][ T5751] __dump_stack+0x30/0x40 [ 102.438278][ T5751] dump_stack_lvl+0xf8/0x160 [ 102.439003][ T5751] dump_stack+0x1c/0x5c [ 102.439700][ T5751] should_fail+0x3c0/0x51c [ 102.440372][ T5751] should_fail_usercopy+0x20/0x30 [ 102.441131][ T5751] ucma_write+0x138/0x3b0 [ 102.441799][ T5751] vfs_write+0x280/0xa2c [ 102.442469][ T5751] ksys_write+0x120/0x210 [ 102.443123][ T5751] __arm64_sys_write+0x7c/0x90 [ 102.443864][ T5751] invoke_syscall+0x98/0x2b8 [ 102.444578][ T5751] el0_svc_common+0x138/0x258 [ 102.445375][ T5751] do_el0_svc+0x58/0x14c [ 102.446065][ T5751] el0_svc+0x78/0x1e0 [ 102.446679][ T5751] el0t_64_sync_handler+0xcc/0xe4 [ 102.447407][ T5751] el0t_64_sync+0x1a0/0x1a4 [ 102.614642][ T5749] loop4: detected capacity change from 0 to 32768 [ 102.736684][ T5749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.519 (5749) [ 102.761835][ T5749] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 102.763328][ T5749] BTRFS info (device loop4): using free space tree [ 102.764371][ T5749] BTRFS info (device loop4): has skinny extents [ 102.813609][ T5767] udc-core: couldn't find an available UDC or it's busy [ 102.814803][ T5767] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 102.819156][ T5768] FAULT_INJECTION: forcing a failure. [ 102.819156][ T5768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.822824][ T5768] CPU: 1 PID: 5768 Comm: syz.2.525 Not tainted 5.15.189-syzkaller #0 [ 102.824127][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 102.825771][ T5768] Call trace: [ 102.826306][ T5768] dump_backtrace+0x0/0x43c [ 102.827034][ T5768] show_stack+0x2c/0x3c [ 102.827683][ T5768] __dump_stack+0x30/0x40 [ 102.828424][ T5768] dump_stack_lvl+0xf8/0x160 [ 102.829144][ T5768] dump_stack+0x1c/0x5c [ 102.829780][ T5768] should_fail+0x3c0/0x51c [ 102.830463][ T5768] should_fail_usercopy+0x20/0x30 [ 102.831342][ T5768] simple_read_from_buffer+0xd0/0x264 [ 102.832201][ T5768] proc_fail_nth_read+0x19c/0x244 [ 102.832965][ T5768] vfs_read+0x278/0xa10 [ 102.833584][ T5768] ksys_read+0x120/0x210 [ 102.834323][ T5768] __arm64_sys_read+0x7c/0x90 [ 102.835072][ T5768] invoke_syscall+0x98/0x2b8 [ 102.835888][ T5768] el0_svc_common+0x138/0x258 [ 102.836631][ T5768] do_el0_svc+0x58/0x14c [ 102.837338][ T5768] el0_svc+0x78/0x1e0 [ 102.837994][ T5768] el0t_64_sync_handler+0xcc/0xe4 [ 102.838846][ T5768] el0t_64_sync+0x1a0/0x1a4 [ 102.857700][ T5749] BTRFS info (device loop4): enabling ssd optimizations [ 102.898588][ T4163] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 102.966562][ T5790] loop3: detected capacity change from 0 to 512 [ 103.059172][ T5790] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 103.074380][ T5790] EXT4-fs (loop3): shut down requested (1) [ 103.634221][ T5802] loop4: detected capacity change from 0 to 32768 [ 103.661946][ T5802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.529 (5802) [ 103.923733][ T5824] FAULT_INJECTION: forcing a failure. [ 103.923733][ T5824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.925851][ T5824] CPU: 0 PID: 5824 Comm: syz.1.537 Not tainted 5.15.189-syzkaller #0 [ 103.927040][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 103.928593][ T5824] Call trace: [ 103.929103][ T5824] dump_backtrace+0x0/0x43c [ 103.929822][ T5824] show_stack+0x2c/0x3c [ 103.930455][ T5824] __dump_stack+0x30/0x40 [ 103.931118][ T5824] dump_stack_lvl+0xf8/0x160 [ 103.931875][ T5824] dump_stack+0x1c/0x5c [ 103.932528][ T5824] should_fail+0x3c0/0x51c [ 103.933242][ T5824] should_fail_usercopy+0x20/0x30 [ 103.934022][ T5824] __copy_msghdr_from_user+0xb8/0x4f8 [ 103.934816][ T5824] ___sys_sendmsg+0x140/0x240 [ 103.935525][ T5824] __arm64_sys_sendmsg+0x1a8/0x254 [ 103.936378][ T5824] invoke_syscall+0x98/0x2b8 [ 103.937161][ T5824] el0_svc_common+0x138/0x258 [ 103.937924][ T5824] do_el0_svc+0x58/0x14c [ 103.938573][ T5824] el0_svc+0x78/0x1e0 [ 103.939225][ T5824] el0t_64_sync_handler+0xcc/0xe4 [ 103.940019][ T5824] el0t_64_sync+0x1a0/0x1a4 [ 103.943035][ T5802] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 103.944412][ T5802] BTRFS info (device loop4): using free space tree [ 103.950827][ T5802] BTRFS info (device loop4): has skinny extents [ 104.004049][ T5829] loop1: detected capacity change from 0 to 512 [ 104.053285][ T5829] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 104.077645][ T5848] FAULT_INJECTION: forcing a failure. [ 104.077645][ T5848] name failslab, interval 1, probability 0, space 0, times 0 [ 104.084982][ T5848] CPU: 0 PID: 5848 Comm: syz.2.542 Not tainted 5.15.189-syzkaller #0 [ 104.086279][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 104.087922][ T5848] Call trace: [ 104.088405][ T5848] dump_backtrace+0x0/0x43c [ 104.089074][ T5848] show_stack+0x2c/0x3c [ 104.089718][ T5848] __dump_stack+0x30/0x40 [ 104.090408][ T5848] dump_stack_lvl+0xf8/0x160 [ 104.091124][ T5848] dump_stack+0x1c/0x5c [ 104.091809][ T5848] should_fail+0x3c0/0x51c [ 104.092493][ T5848] __should_failslab+0xbc/0x10c [ 104.093301][ T5848] should_failslab+0x10/0x28 [ 104.094111][ T5848] slab_pre_alloc_hook+0x64/0xec [ 104.094928][ T5848] kmem_cache_alloc_node+0x98/0x41c [ 104.095749][ T5848] __alloc_skb+0x134/0x67c [ 104.096433][ T5848] sk_stream_alloc_skb+0x17c/0x878 [ 104.097270][ T5848] tcp_sendmsg_locked+0x974/0x2ce8 [ 104.098127][ T5848] tcp_sendmsg+0x40/0x64 [ 104.098783][ T5848] inet_sendmsg+0x154/0x284 [ 104.099528][ T5848] __sys_sendto+0x2e8/0x3d8 [ 104.100235][ T5848] __arm64_sys_sendto+0xd8/0xf8 [ 104.101059][ T5848] invoke_syscall+0x98/0x2b8 [ 104.101813][ T5848] el0_svc_common+0x138/0x258 [ 104.102585][ T5848] do_el0_svc+0x58/0x14c [ 104.103292][ T5848] el0_svc+0x78/0x1e0 [ 104.103927][ T5848] el0t_64_sync_handler+0xcc/0xe4 [ 104.104692][ T5848] el0t_64_sync+0x1a0/0x1a4 [ 104.111268][ T5853] udc-core: couldn't find an available UDC or it's busy [ 104.112502][ T5853] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 104.167011][ T5802] BTRFS info (device loop4): enabling ssd optimizations [ 104.498509][ T5871] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 104.500052][ T5871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.501605][ T5871] IPv6: NLM_F_CREATE should be set when creating new route [ 104.699824][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 104.699872][ T26] audit: type=1400 audit(104.670:24): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5872 comm="syz.4.547" [ 105.006485][ T5880] loop2: detected capacity change from 0 to 64 [ 105.025408][ T5883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.063959][ T5880] attempt to access beyond end of device [ 105.063959][ T5880] loop2: rw=2049, want=268435470, limit=64 [ 105.083165][ T5880] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 105.088214][ T5880] [U] /FILE0 [ 105.088987][ T5880] [U] [ 105.089478][ T5880] [U] [ 105.089878][ T5880] [U] [ 105.110050][ T5880] [U] [ 105.110542][ T5880] [U] [ 105.110976][ T5880] [U] [ 105.111471][ T5880] [U] [ 105.112064][ T5880] [U] [ 105.112478][ T5880] [U] [ 105.112986][ T5880] [U] [ 105.142397][ T5890] loop0: detected capacity change from 0 to 512 [ 105.480344][ T5898] FAULT_INJECTION: forcing a failure. [ 105.480344][ T5898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.488897][ T5898] CPU: 0 PID: 5898 Comm: syz.4.555 Not tainted 5.15.189-syzkaller #0 [ 105.490259][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 105.492002][ T5898] Call trace: [ 105.492529][ T5898] dump_backtrace+0x0/0x43c [ 105.493308][ T5898] show_stack+0x2c/0x3c [ 105.494020][ T5898] __dump_stack+0x30/0x40 [ 105.494739][ T5898] dump_stack_lvl+0xf8/0x160 [ 105.495546][ T5898] dump_stack+0x1c/0x5c [ 105.496221][ T5898] should_fail+0x3c0/0x51c [ 105.496945][ T5898] should_fail_usercopy+0x20/0x30 [ 105.497796][ T5898] __copy_msghdr_from_user+0xb8/0x4f8 [ 105.498674][ T5898] ___sys_sendmsg+0x140/0x240 [ 105.499436][ T5898] __arm64_sys_sendmsg+0x1a8/0x254 [ 105.500310][ T5898] invoke_syscall+0x98/0x2b8 [ 105.501080][ T5898] el0_svc_common+0x138/0x258 [ 105.501832][ T5898] do_el0_svc+0x58/0x14c [ 105.502511][ T5898] el0_svc+0x78/0x1e0 [ 105.503152][ T5898] el0t_64_sync_handler+0xcc/0xe4 [ 105.503951][ T5898] el0t_64_sync+0x1a0/0x1a4 [ 105.578208][ T5890] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 105.620729][ T5890] tmpfs: Bad value for 'mpol' [ 105.644263][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 105.741593][ T5911] loop1: detected capacity change from 0 to 1024 [ 105.776579][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 105.778208][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 105.813770][ T5918] FAULT_INJECTION: forcing a failure. [ 105.813770][ T5918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.815960][ T5918] CPU: 0 PID: 5918 Comm: syz.4.561 Not tainted 5.15.189-syzkaller #0 [ 105.817206][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 105.818862][ T5918] Call trace: [ 105.819402][ T5918] dump_backtrace+0x0/0x43c [ 105.820094][ T5918] show_stack+0x2c/0x3c [ 105.820810][ T5918] __dump_stack+0x30/0x40 [ 105.821539][ T5918] dump_stack_lvl+0xf8/0x160 [ 105.822223][ T5918] dump_stack+0x1c/0x5c [ 105.822861][ T5918] should_fail+0x3c0/0x51c [ 105.823524][ T5918] should_fail_usercopy+0x20/0x30 [ 105.824229][ T5918] simple_read_from_buffer+0xd0/0x264 [ 105.825040][ T5918] proc_fail_nth_read+0x19c/0x244 [ 105.825825][ T5918] vfs_read+0x278/0xa10 [ 105.826455][ T5918] ksys_read+0x120/0x210 [ 105.827120][ T5918] __arm64_sys_read+0x7c/0x90 [ 105.827839][ T5918] invoke_syscall+0x98/0x2b8 [ 105.828582][ T5918] el0_svc_common+0x138/0x258 [ 105.829293][ T5918] do_el0_svc+0x58/0x14c [ 105.829938][ T5918] el0_svc+0x78/0x1e0 [ 105.830529][ T5918] el0t_64_sync_handler+0xcc/0xe4 [ 105.831341][ T5879] [U] [ 105.831380][ T5918] el0t_64_sync+0x1a0/0x1a4 [ 106.010668][ T5795] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 106.389544][ T26] audit: type=1400 audit(106.170:25): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5926 comm="syz.3.566" [ 106.462194][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 106.609920][ T5942] loop4: detected capacity change from 0 to 32768 [ 106.629440][ T5795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.631339][ T5795] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 106.632724][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.635963][ T5795] usb 1-1: config 0 descriptor?? [ 106.643984][ T5942] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 106.668410][ T5942] [ 106.668831][ T5942] ====================================================== [ 106.669998][ T5942] WARNING: possible circular locking dependency detected [ 106.671108][ T5942] 5.15.189-syzkaller #0 Not tainted [ 106.671937][ T5942] ------------------------------------------------------ [ 106.673072][ T5942] syz.4.571/5942 is trying to acquire lock: [ 106.673995][ T5942] ffff0000f7ca89c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3a68 [ 106.676218][ T5942] [ 106.676218][ T5942] but task is already holding lock: [ 106.677391][ T5942] ffff0000ea6ebff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x328/0xea8 [ 106.678837][ T5942] [ 106.678837][ T5942] which lock already depends on the new lock. [ 106.678837][ T5942] [ 106.680516][ T5942] [ 106.680516][ T5942] the existing dependency chain (in reverse order) is: [ 106.681985][ T5942] [ 106.681985][ T5942] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 106.683186][ T5942] down_read+0xc0/0x390 [ 106.683924][ T5942] ocfs2_init_acl+0x260/0x604 [ 106.684692][ T5942] ocfs2_mknod+0x114c/0x1e88 [ 106.685503][ T5942] ocfs2_create+0x180/0x468 [ 106.686280][ T5942] path_openat+0x1144/0x26e4 [ 106.687043][ T5942] do_filp_open+0x164/0x330 [ 106.687881][ T5942] do_sys_openat2+0x128/0x3d8 [ 106.688621][ T5942] __arm64_sys_openat+0x120/0x154 [ 106.689513][ T5942] invoke_syscall+0x98/0x2b8 [ 106.690300][ T5942] el0_svc_common+0x138/0x258 [ 106.691141][ T5942] do_el0_svc+0x58/0x14c [ 106.691950][ T5942] el0_svc+0x78/0x1e0 [ 106.692714][ T5942] el0t_64_sync_handler+0xcc/0xe4 [ 106.693575][ T5942] el0t_64_sync+0x1a0/0x1a4 [ 106.694266][ T5942] [ 106.694266][ T5942] -> #4 (jbd2_handle){++++}-{0:0}: [ 106.695420][ T5942] start_this_handle+0xef4/0x11a4 [ 106.696293][ T5942] jbd2__journal_start+0x28c/0x744 [ 106.697227][ T5942] jbd2_journal_start+0x3c/0x4c [ 106.698125][ T5942] ocfs2_start_trans+0x43c/0x794 [ 106.699001][ T5942] ocfs2_shutdown_local_alloc+0x1ac/0x7e4 [ 106.700032][ T5942] ocfs2_dismount_volume+0x1d4/0x8b4 [ 106.700988][ T5942] ocfs2_put_super+0xec/0x308 [ 106.701863][ T5942] generic_shutdown_super+0x130/0x2f0 [ 106.702731][ T5942] kill_block_super+0x70/0xdc [ 106.703586][ T5942] deactivate_locked_super+0xb8/0x13c [ 106.704545][ T5942] deactivate_super+0xf8/0x118 [ 106.705419][ T5942] cleanup_mnt+0x3a4/0x458 [ 106.706255][ T5942] __cleanup_mnt+0x20/0x30 [ 106.707029][ T5942] task_work_run+0x12c/0x1e0 [ 106.707785][ T5942] do_notify_resume+0x24b4/0x3128 [ 106.708765][ T5942] el0_svc+0xf0/0x1e0 [ 106.709526][ T5942] el0t_64_sync_handler+0xcc/0xe4 [ 106.710443][ T5942] el0t_64_sync+0x1a0/0x1a4 [ 106.711298][ T5942] [ 106.711298][ T5942] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 106.712662][ T5942] down_read+0xc0/0x390 [ 106.713494][ T5942] ocfs2_start_trans+0x430/0x794 [ 106.714375][ T5942] ocfs2_shutdown_local_alloc+0x1ac/0x7e4 [ 106.715354][ T5942] ocfs2_dismount_volume+0x1d4/0x8b4 [ 106.716243][ T5942] ocfs2_put_super+0xec/0x308 [ 106.717076][ T5942] generic_shutdown_super+0x130/0x2f0 [ 106.718019][ T5942] kill_block_super+0x70/0xdc [ 106.718794][ T5942] deactivate_locked_super+0xb8/0x13c [ 106.719814][ T5942] deactivate_super+0xf8/0x118 [ 106.720697][ T5942] cleanup_mnt+0x3a4/0x458 [ 106.721442][ T5942] __cleanup_mnt+0x20/0x30 [ 106.722186][ T5942] task_work_run+0x12c/0x1e0 [ 106.722991][ T5942] do_notify_resume+0x24b4/0x3128 [ 106.723855][ T5942] el0_svc+0xf0/0x1e0 [ 106.724597][ T5942] el0t_64_sync_handler+0xcc/0xe4 [ 106.725513][ T5942] el0t_64_sync+0x1a0/0x1a4 [ 106.726336][ T5942] [ 106.726336][ T5942] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 106.727636][ T5942] ocfs2_start_trans+0x2c4/0x794 [ 106.728505][ T5942] ocfs2_mknod+0xc60/0x1e88 [ 106.729327][ T5942] ocfs2_create+0x180/0x468 [ 106.730050][ T5942] path_openat+0x1144/0x26e4 [ 106.730852][ T5942] do_filp_open+0x164/0x330 [ 106.731578][ T5942] do_sys_openat2+0x128/0x3d8 [ 106.732341][ T5942] __arm64_sys_openat+0x120/0x154 [ 106.733158][ T5942] invoke_syscall+0x98/0x2b8 [ 106.734013][ T5942] el0_svc_common+0x138/0x258 [ 106.734964][ T5942] do_el0_svc+0x58/0x14c [ 106.735780][ T5942] el0_svc+0x78/0x1e0 [ 106.736520][ T5942] el0t_64_sync_handler+0xcc/0xe4 [ 106.737409][ T5942] el0t_64_sync+0x1a0/0x1a4 [ 106.738209][ T5942] [ 106.738209][ T5942] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 106.739912][ T5942] down_write+0xbc/0x12c [ 106.740709][ T5942] ocfs2_reserve_local_alloc_bits+0xf8/0x260c [ 106.741784][ T5942] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 106.742894][ T5942] ocfs2_reserve_clusters+0x3c/0x50 [ 106.743779][ T5942] ocfs2_mknod+0xc10/0x1e88 [ 106.744592][ T5942] ocfs2_create+0x180/0x468 [ 106.745472][ T5942] path_openat+0x1144/0x26e4 [ 106.746332][ T5942] do_filp_open+0x164/0x330 [ 106.747166][ T5942] do_sys_openat2+0x128/0x3d8 [ 106.748014][ T5942] __arm64_sys_openat+0x120/0x154 [ 106.748973][ T5942] invoke_syscall+0x98/0x2b8 [ 106.749819][ T5942] el0_svc_common+0x138/0x258 [ 106.750680][ T5942] do_el0_svc+0x58/0x14c [ 106.751432][ T5942] el0_svc+0x78/0x1e0 [ 106.752175][ T5942] el0t_64_sync_handler+0xcc/0xe4 [ 106.753080][ T5942] el0t_64_sync+0x1a0/0x1a4 [ 106.753892][ T5942] [ 106.753892][ T5942] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 106.755508][ T5942] __lock_acquire+0x2928/0x651c [ 106.756380][ T5942] lock_acquire+0x1f4/0x620 [ 106.757211][ T5942] down_write+0xbc/0x12c [ 106.757949][ T5942] ocfs2_reserve_suballoc_bits+0x12c/0x3a68 [ 106.758922][ T5942] ocfs2_reserve_new_metadata_blocks+0x34c/0x7d8 [ 106.759999][ T5942] ocfs2_init_xattr_set_ctxt+0x2f8/0x750 [ 106.761040][ T5942] ocfs2_xattr_set+0x928/0xea8 [ 106.761922][ T5942] ocfs2_xattr_trusted_set+0x4c/0x64 [ 106.762888][ T5942] __vfs_setxattr+0x388/0x3a4 [ 106.763765][ T5942] __vfs_setxattr_noperm+0x120/0x564 [ 106.764662][ T5942] __vfs_setxattr_locked+0x1ec/0x218 [ 106.765683][ T5942] vfs_setxattr+0x158/0x2ac [ 106.766504][ T5942] setxattr+0x248/0x2ac [ 106.767248][ T5942] path_setxattr+0x12c/0x25c [ 106.768055][ T5942] __arm64_sys_lsetxattr+0xbc/0xd8 [ 106.768995][ T5942] invoke_syscall+0x98/0x2b8 [ 106.769839][ T5942] el0_svc_common+0x138/0x258 [ 106.770704][ T5942] do_el0_svc+0x58/0x14c [ 106.771509][ T5942] el0_svc+0x78/0x1e0 [ 106.772203][ T5942] el0t_64_sync_handler+0xcc/0xe4 [ 106.773097][ T5942] el0t_64_sync+0x1a0/0x1a4 [ 106.773883][ T5942] [ 106.773883][ T5942] other info that might help us debug this: [ 106.773883][ T5942] [ 106.775576][ T5942] Chain exists of: [ 106.775576][ T5942] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 106.775576][ T5942] [ 106.778024][ T5942] Possible unsafe locking scenario: [ 106.778024][ T5942] [ 106.779217][ T5942] CPU0 CPU1 [ 106.780139][ T5942] ---- ---- [ 106.780979][ T5942] lock(&oi->ip_xattr_sem); [ 106.781727][ T5942] lock(jbd2_handle); [ 106.782822][ T5942] lock(&oi->ip_xattr_sem); [ 106.784008][ T5942] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 106.785142][ T5942] [ 106.785142][ T5942] *** DEADLOCK *** [ 106.785142][ T5942] [ 106.786353][ T5942] 3 locks held by syz.4.571/5942: [ 106.787093][ T5942] #0: ffff0000dc26a460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 106.788583][ T5942] #1: ffff0000ea6ec2c8 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: vfs_setxattr+0x138/0x2ac [ 106.790393][ T5942] #2: ffff0000ea6ebff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x328/0xea8 [ 106.792042][ T5942] [ 106.792042][ T5942] stack backtrace: [ 106.793014][ T5942] CPU: 0 PID: 5942 Comm: syz.4.571 Not tainted 5.15.189-syzkaller #0 [ 106.794363][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 106.796113][ T5942] Call trace: [ 106.796662][ T5942] dump_backtrace+0x0/0x43c [ 106.797439][ T5942] show_stack+0x2c/0x3c [ 106.798096][ T5942] __dump_stack+0x30/0x40 [ 106.798769][ T5942] dump_stack_lvl+0xf8/0x160 [ 106.799501][ T5942] dump_stack+0x1c/0x5c [ 106.800213][ T5942] print_circular_bug+0x148/0x1b0 [ 106.801030][ T5942] check_noncircular+0x240/0x2d4 [ 106.801810][ T5942] __lock_acquire+0x2928/0x651c [ 106.802546][ T5942] lock_acquire+0x1f4/0x620 [ 106.803294][ T5942] down_write+0xbc/0x12c [ 106.803979][ T5942] ocfs2_reserve_suballoc_bits+0x12c/0x3a68 [ 106.804956][ T5942] ocfs2_reserve_new_metadata_blocks+0x34c/0x7d8 [ 106.806051][ T5942] ocfs2_init_xattr_set_ctxt+0x2f8/0x750 [ 106.806941][ T5942] ocfs2_xattr_set+0x928/0xea8 [ 106.807756][ T5942] ocfs2_xattr_trusted_set+0x4c/0x64 [ 106.808641][ T5942] __vfs_setxattr+0x388/0x3a4 [ 106.809450][ T5942] __vfs_setxattr_noperm+0x120/0x564 [ 106.810320][ T5942] __vfs_setxattr_locked+0x1ec/0x218 [ 106.811225][ T5942] vfs_setxattr+0x158/0x2ac [ 106.812037][ T5942] setxattr+0x248/0x2ac [ 106.812673][ T5942] path_setxattr+0x12c/0x25c [ 106.813441][ T5942] __arm64_sys_lsetxattr+0xbc/0xd8 [ 106.814254][ T5942] invoke_syscall+0x98/0x2b8 [ 106.815012][ T5942] el0_svc_common+0x138/0x258 [ 106.815801][ T5942] do_el0_svc+0x58/0x14c [ 106.816521][ T5942] el0_svc+0x78/0x1e0 [ 106.817204][ T5942] el0t_64_sync_handler+0xcc/0xe4 [ 106.818070][ T5942] el0t_64_sync+0x1a0/0x1a4 [ 106.859927][ T5942] OCFS2: ERROR (device loop4): int ocfs2_xattr_get_clusters(struct inode *, u32, u32 *, u32 *, struct ocfs2_extent_list *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) in xattr [ 106.862938][ T5942] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 106.864470][ T5942] OCFS2: File system is now read-only. [ 106.865353][ T5942] (syz.4.571,5942,1):__ocfs2_xattr_set_value_outside:1377 ERROR: status = -30 [ 106.866728][ T5942] (syz.4.571,5942,1):ocfs2_xa_set:2264 ERROR: status = -30 [ 106.880943][ T4060] ocfs2: Unmounting device (7,4) on (node local) [ 107.009416][ T5795] usbhid 1-1:0.0: can't add hid device: -71 [ 107.011062][ T5795] usbhid: probe of 1-1:0.0 failed with error -71 [ 107.012786][ T5795] usb 1-1: USB disconnect, device number 5