Warning: Permanently added '[localhost]:11950' (ECDSA) to the list of known hosts. 2020/12/11 08:28:39 fuzzer started 2020/12/11 08:28:40 dialing manager at 10.0.2.10:39457 2020/12/11 08:28:40 syscalls: 3453 2020/12/11 08:28:40 code coverage: enabled 2020/12/11 08:28:40 comparison tracing: enabled 2020/12/11 08:28:40 extra coverage: enabled 2020/12/11 08:28:40 setuid sandbox: enabled 2020/12/11 08:28:40 namespace sandbox: enabled 2020/12/11 08:28:40 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/11 08:28:40 fault injection: enabled 2020/12/11 08:28:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/11 08:28:40 net packet injection: enabled 2020/12/11 08:28:40 net device setup: enabled 2020/12/11 08:28:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/11 08:28:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/11 08:28:40 USB emulation: enabled 2020/12/11 08:28:40 hci packet injection: enabled 2020/12/11 08:28:40 wifi device emulation: enabled 08:30:05 executing program 0: fanotify_mark(0xffffffffffffffff, 0x1, 0x40000018, 0xffffffffffffffff, 0x0) 08:30:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x5}, 0x14}}, 0x0) 08:30:05 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xffffffffff7ff, 0x11, r0, 0x0) 08:30:06 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) syzkaller login: [ 189.471321][ T9052] IPVS: ftp: loaded support on port[0] = 21 [ 189.556111][ T9052] chnl_net:caif_netlink_parms(): no params data found [ 189.594589][ T9054] IPVS: ftp: loaded support on port[0] = 21 [ 189.612827][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.622237][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.632193][ T9052] device bridge_slave_0 entered promiscuous mode [ 189.643907][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.652611][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.664972][ T9052] device bridge_slave_1 entered promiscuous mode [ 189.700132][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.715122][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.741415][ T9052] team0: Port device team_slave_0 added [ 189.751265][ T9052] team0: Port device team_slave_1 added [ 189.774852][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.786859][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.841419][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.862153][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.871674][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.903512][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.924747][ T9056] IPVS: ftp: loaded support on port[0] = 21 [ 189.956619][ T9052] device hsr_slave_0 entered promiscuous mode [ 189.965435][ T9052] device hsr_slave_1 entered promiscuous mode [ 189.989494][ T9054] chnl_net:caif_netlink_parms(): no params data found [ 190.006992][ T9058] IPVS: ftp: loaded support on port[0] = 21 [ 190.083924][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.100366][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.117125][ T9054] device bridge_slave_0 entered promiscuous mode [ 190.132420][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.147501][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.164928][ T9054] device bridge_slave_1 entered promiscuous mode [ 190.216787][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.232070][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.278320][ T9054] team0: Port device team_slave_0 added [ 190.304606][ T9054] team0: Port device team_slave_1 added [ 190.369175][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.378319][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.411964][ T9054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.430514][ T9058] chnl_net:caif_netlink_parms(): no params data found [ 190.441181][ T9056] chnl_net:caif_netlink_parms(): no params data found [ 190.452660][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.464016][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.507761][ T9054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.579101][ T9052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.603215][ T9054] device hsr_slave_0 entered promiscuous mode [ 190.611908][ T9054] device hsr_slave_1 entered promiscuous mode [ 190.620045][ T9054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.629859][ T9054] Cannot create hsr debugfs directory [ 190.637664][ T9052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.666481][ T9052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.677021][ T9052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.691494][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.700016][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.709783][ T9058] device bridge_slave_0 entered promiscuous mode [ 190.722718][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.731172][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.740053][ T9058] device bridge_slave_1 entered promiscuous mode [ 190.782540][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.800063][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.815378][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.826609][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.840103][ T9056] device bridge_slave_0 entered promiscuous mode [ 190.875841][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.895955][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.912032][ T9056] device bridge_slave_1 entered promiscuous mode [ 190.943026][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.962973][ T9058] team0: Port device team_slave_0 added [ 190.971914][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.993436][ T9058] team0: Port device team_slave_1 added [ 191.021411][ T9056] team0: Port device team_slave_0 added [ 191.032624][ T9056] team0: Port device team_slave_1 added [ 191.057481][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.065668][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.108853][ T9058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.125613][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.150207][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.198987][ T9056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.214015][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.225472][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.262523][ T9058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.295370][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.304561][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.336429][ T9056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.353164][ T9058] device hsr_slave_0 entered promiscuous mode [ 191.364523][ T9058] device hsr_slave_1 entered promiscuous mode [ 191.373589][ T9058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.382961][ T9058] Cannot create hsr debugfs directory [ 191.431609][ T9056] device hsr_slave_0 entered promiscuous mode [ 191.439697][ T9056] device hsr_slave_1 entered promiscuous mode [ 191.450706][ T9056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.464765][ T9056] Cannot create hsr debugfs directory [ 191.485308][ T9070] Bluetooth: hci0: command 0x0409 tx timeout [ 191.500138][ T9054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.527409][ T9054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.552373][ T9054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.573391][ T9054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.645938][ T3340] Bluetooth: hci1: command 0x0409 tx timeout [ 191.700451][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.710665][ T9058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.730618][ T9058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.746872][ T9058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.758423][ T9058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.775540][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.785428][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.812225][ T9056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.823789][ T9056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.837109][ T9056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.854970][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.866315][ T9056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.888047][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.901503][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.914844][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.928419][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.953110][ T3077] Bluetooth: hci2: command 0x0409 tx timeout [ 191.965914][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.980969][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.995549][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.008153][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.017410][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.033619][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.054456][ T9084] Bluetooth: hci3: command 0x0409 tx timeout [ 192.077987][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.093465][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.107669][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.120590][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.138240][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.161028][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.173721][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.190602][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.200683][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.210255][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.219975][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.236768][ T9054] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.248151][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.259373][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.275759][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.301458][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.312109][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.325079][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.336543][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.348242][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.378939][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.390780][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.403053][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.413111][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.428572][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.438425][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.449557][ T9058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.462583][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.481281][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.497938][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.508455][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.518977][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.537130][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.546265][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.556503][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.566809][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.576964][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.588077][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.606234][ T9054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.620928][ T9054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.638186][ T9058] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.648265][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.659361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.669559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.680224][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.693823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.723954][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.739263][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.750808][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.770039][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.791691][ T9054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.807674][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.825607][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.844979][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.860018][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.873134][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.887040][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.896993][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.908142][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.935560][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.968439][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.005215][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.034983][ T9056] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.050783][ T9052] device veth0_vlan entered promiscuous mode [ 193.071498][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.081791][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.092377][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.107003][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.121405][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.132097][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.143944][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.152661][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.162250][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.174069][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.184561][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.192763][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.202306][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.229203][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.240026][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.261212][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.276338][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.304548][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.318163][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.329046][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.340688][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.351680][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.374029][ T9052] device veth1_vlan entered promiscuous mode [ 193.388063][ T9058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.406061][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.416492][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.437701][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.448630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.461645][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.471551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.484925][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.495842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.527801][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.553032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.563434][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.573577][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.584801][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.594809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.610171][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.625613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.636684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.646859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.657689][ T9056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.668724][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 193.680754][ T9054] device veth0_vlan entered promiscuous mode [ 193.697534][ T9052] device veth0_macvtap entered promiscuous mode [ 193.709617][ T9052] device veth1_macvtap entered promiscuous mode [ 193.718324][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.724565][ T9084] Bluetooth: hci1: command 0x041b tx timeout [ 193.728093][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.746491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.759835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.769763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.780398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.800781][ T9054] device veth1_vlan entered promiscuous mode [ 193.827289][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.837918][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.847677][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.857662][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.872169][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.881002][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.894571][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.910518][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.924701][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.933256][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.945151][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.973189][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.996801][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.013881][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.038132][ T9052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.050523][ T9052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.054672][ T9084] Bluetooth: hci2: command 0x041b tx timeout [ 194.064557][ T9052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.087726][ T9052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.108147][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.123775][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.134344][ T9084] Bluetooth: hci3: command 0x041b tx timeout [ 194.150312][ T9054] device veth0_macvtap entered promiscuous mode [ 194.165781][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.175811][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.187487][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.197994][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.215858][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.246233][ T9054] device veth1_macvtap entered promiscuous mode [ 194.280227][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.292125][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.305413][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.316954][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.326721][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.337573][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.348560][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.358802][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.369186][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.383642][ T9058] device veth0_vlan entered promiscuous mode [ 194.405169][ T9056] device veth0_vlan entered promiscuous mode [ 194.417880][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.431419][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.445126][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.465714][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.482129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.498925][ T9056] device veth1_vlan entered promiscuous mode [ 194.526780][ T9058] device veth1_vlan entered promiscuous mode [ 194.553269][ T9086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.566451][ T9086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.567421][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.592299][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.609400][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.626300][ T9054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.638705][ T9054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.649418][ T9054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.664002][ T9054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.680924][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.697045][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.706691][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.717041][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.726731][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.736211][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.746402][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.771712][ T9056] device veth0_macvtap entered promiscuous mode [ 194.798489][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.807979][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.828010][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.847051][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.865481][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.879813][ T9056] device veth1_macvtap entered promiscuous mode [ 194.891449][ T9058] device veth0_macvtap entered promiscuous mode [ 194.911094][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.916497][ T9058] device veth1_macvtap entered promiscuous mode [ 194.924506][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.950420][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.972561][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.988131][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.021389][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.038715][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.053174][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.067465][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.086647][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.105364][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.122390][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.145998][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.165952][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.182502][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.198107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.208876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.220434][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.231754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.246012][ T9052] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 195.246766][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.274398][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 08:30:12 executing program 0: bpf$MAP_CREATE(0xf, &(0x7f0000000080), 0x40) [ 195.291268][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.306656][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.325105][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_1 08:30:12 executing program 0: r0 = getpgid(0x0) ioprio_get$pid(0x3, r0) [ 195.337795][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.364498][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 08:30:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x14) [ 195.383134][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.400468][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.423684][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.466047][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.491072][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.519684][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.547360][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.566077][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.587697][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.603578][ T9056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.614795][ T9056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.626482][ T9056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.639208][ T9056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.665810][ T9068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.667164][ T9058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.677390][ T9068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.688836][ T9058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.725089][ T9084] Bluetooth: hci0: command 0x040f tx timeout [ 195.747444][ T9058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.766874][ T9058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 08:30:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10001) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340)) sendfile(r3, r2, 0x0, 0x1bff) [ 195.801365][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.807780][ T28] Bluetooth: hci1: command 0x040f tx timeout 08:30:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10001) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340)) sendfile(r3, r2, 0x0, 0x1bff) [ 195.894586][ T9068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.919530][ T9068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.946755][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.962126][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.975381][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.983767][ T9068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.000493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.000935][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.000960][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:30:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10001) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340)) sendfile(r3, r2, 0x0, 0x1bff) [ 196.002912][ T9068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.011592][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.060002][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.078661][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.089833][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.101032][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.126997][ T9084] Bluetooth: hci2: command 0x040f tx timeout [ 196.204866][ T9084] Bluetooth: hci3: command 0x040f tx timeout qemu-system-x86_64: warning: guest updated active QH 08:30:13 executing program 2: bpf$MAP_CREATE(0x14, &(0x7f0000000080), 0x40) 08:30:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x5}}, 0x10) 08:30:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10001) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340)) sendfile(r3, r2, 0x0, 0x1bff) 08:30:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 08:30:13 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) 08:30:13 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 08:30:13 executing program 2: sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@logbufs={'logbufs', 0x3d, 0x5}}]}) 08:30:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000008c0)="b98d14894b996f2b", 0x8) 08:30:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) [ 196.455424][ T9145] XFS (loop2): Invalid superblock magic number 08:30:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}, 0x11d) 08:30:13 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) 08:30:13 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 08:30:13 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 08:30:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}, 0x11d) 08:30:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}, 0x11d) 08:30:13 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 08:30:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}, 0x11d) 08:30:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0x0, 0x0, 0x1}, 0x40) 08:30:14 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001340)=ANY=[]) syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x0, &(0x7f0000001480)={[], [{@uid_eq={'uid'}}]}) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 08:30:14 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 08:30:14 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 08:30:14 executing program 0: move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000/0x4000)=nil], 0x0, &(0x7f00000000c0), 0x0) 08:30:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f00000000c0)) [ 197.468311][ C2] blk_update_request: I/O error, dev loop1, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 08:30:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 197.490163][ T9208] NILFS (loop1): unable to read secondary superblock (blocksize = 1024) [ 197.512212][ T9208] NILFS (loop1): couldn't find nilfs on the device 08:30:14 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c72, &(0x7f0000000100)={[{@delalloc='delalloc'}]}) 08:30:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 197.682341][ T9226] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue [ 197.741185][ T9228] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue [ 197.750014][ C3] blk_update_request: I/O error, dev loop1, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.805773][ T9208] NILFS (loop1): unable to read secondary superblock (blocksize = 1024) [ 197.806810][ T9084] Bluetooth: hci0: command 0x0419 tx timeout [ 197.824350][ T9208] NILFS (loop1): couldn't find nilfs on the device 08:30:15 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 08:30:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 08:30:15 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', 0x0, 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000180)=ANY=[]) 08:30:15 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c72, &(0x7f0000000100)={[{@delalloc='delalloc'}]}) [ 197.895162][ T9084] Bluetooth: hci1: command 0x0419 tx timeout 08:30:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 197.960453][ T9240] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue 08:30:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) open(0x0, 0x0, 0x0) 08:30:15 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) 08:30:15 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c72, &(0x7f0000000100)={[{@delalloc='delalloc'}]}) 08:30:15 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, &(0x7f0000000180)=ANY=[]) 08:30:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x14) dup3(r0, r1, 0x0) 08:30:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) [ 198.121464][ T9257] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue 08:30:15 executing program 0: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 08:30:15 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 08:30:15 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c72, &(0x7f0000000100)={[{@delalloc='delalloc'}]}) [ 198.215364][ T9084] Bluetooth: hci2: command 0x0419 tx timeout 08:30:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x7}, 0x40) 08:30:15 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 198.298862][ T9084] Bluetooth: hci3: command 0x0419 tx timeout [ 198.328583][ T9278] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue 08:30:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000840)={'ip6tnl0\x00', 0x0}) 08:30:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x1, 0x0, 0x5, 0x8, 0x79, 0xef05bae, &(0x7f0000000200)="b936cb5363524990e3f806dbcc82f4b96ce5905d937d601c9d6fb45a804e1caaccbc7a3317737c2e4c0548f975c5606827e25e96287fef943902a01ed326166d5395c6130e04d5cefb2fee81fe27299cadc9503c519edafbee1c5395b175418bc20f741e8b8454f393592a5586d4a54c212aedf68a84a5a3fd"}) socket(0x21, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) 08:30:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 08:30:15 executing program 3: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) 08:30:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 08:30:16 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) 08:30:16 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000080)) 08:30:16 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d07, &(0x7f00000000c0)) 08:30:16 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xd004, &(0x7f00000000c0)=ANY=[]) 08:30:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)) 08:30:16 executing program 0: socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[]) 08:30:16 executing program 3: keyctl$join(0x1, &(0x7f0000000880)={'syz', 0x0}) [ 199.027294][ T9324] BTRFS: device fsid f90cac8b-044b-4fa8-8bee-4b8d3da88dc2 devid 0 transid 7 /dev/loop0 scanned by syz-executor.0 (9324) 08:30:16 executing program 3: keyctl$join(0x1, &(0x7f0000000880)={'syz', 0x0}) 08:30:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 08:30:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)) 08:30:16 executing program 0: socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[]) 08:30:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000008c0)="b98d14894b996f2b00000000000004d1", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 08:30:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)) 08:30:16 executing program 3: mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c) 08:30:16 executing program 0: socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[]) 08:30:17 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000000080), 0x40) 08:30:17 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 08:30:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)) 08:30:17 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) 08:30:17 executing program 0: socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[]) 08:30:17 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000000c0)={[{@dax='dax'}]}) [ 200.254551][ T9403] EXT4-fs (sda1): can't change dax mount option while remounting 08:30:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x2, r0, 0xfffffffffffffffd, 0x0) [ 200.281583][ T9405] EXT4-fs (sda1): can't change dax mount option while remounting 08:30:17 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000000c0)={[{@dax='dax'}]}) [ 200.386778][ T9413] EXT4-fs (sda1): can't change dax mount option while remounting 08:30:17 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000000c0)={[{@dax='dax'}]}) [ 200.491623][ T9416] EXT4-fs (sda1): can't change dax mount option while remounting 08:30:18 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000000c0)={[{@dax='dax'}]}) 08:30:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) [ 200.734999][ T9419] EXT4-fs (sda1): can't change dax mount option while remounting 08:30:18 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000000280)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000000040)) 08:30:18 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000180)=ANY=[]) 08:30:18 executing program 1: shmget(0x0, 0x2000, 0xabbc2484ee391a4f, &(0x7f0000b3a000/0x2000)=nil) 08:30:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x2, r0, 0xfffffffffffffffd, 0x0) 08:30:18 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:30:18 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)="b8bf0dac9d78ab088113b84586433552316fc5573ca6f7e6169c4c2c764c0f1d77c93b3d6795f31ba4abf4b5e4ebb60769b87cc0a19553e8e74608411271a826d6c35de820a59be80618e2abf3e1cd08fab27ab1f177199913a4bb9d3f111e8c7538b1ccb360b6524556a85bb6172e7137d1c23072b1121cf54cf5213731b520548a6d0fd1535c2987b7c6157bf5596aa9ee15b473412bce325649725d5b7ecc2a9bc382876fadc2a0c9db45fd4edf371bfe166705b33155aa962f9e8e587499e83ae751bd3ffa4cb14c588a4f27f9bed69a1659c2986ca546cb9818e4a8254adf9e997c07f29f85fb0ada1c1caf314256be9aefd5cee4bc453f292dea19766cd38363a04da0a825453176f646919dc6f0ad866b873bf28810ad0dab3fbcc5e0871481b9b42e8ba5e71d6f2bc8e30c65131a2950c9ee340c47c183ecce456be69903a5c817571dc0a8bc43a8947bd2ded337fff548c485a486ec1f7dc130aaaf62d9e2d8c941accc99f9a2e42cff4729f032f7253627c0cfe600d16d4b736196799bb8bd5fab44bf6d613481b1cea589d80fd7086d63dd0e8d207699d4bb947d0582906b26bd2e6da9e3cf2979c1cb81ea9be53267f95e5cc2c7b026311fb7539070a3955afb10eff30528cbdae97c45f6b85874bf8b93af7da7860bac5a563864f75c68d5bb4fe72061b3138aa9db514ec6d0486ee88956c246c7a14185e54ab8c1c5286ecb57a54e308eacea0f4502b367b34d39fbfcf9c9f4b3e950fe7b315211f61445ca2a1482cba2c32fd7aefc67a84c37d6911d3524be613500560c2cc67af334f71ee594eacf3fd21f3ac97d15e61caf8d4c42bc8745fb3c82620c8b9de1e49d6ef4cd07b83e31a5c0f683dc1e28311e7ec028c369e62518303b1dbff32b705fba2a42647adbb6b658017bca4ef65b5a53b2932b0575a346f25af47c4c35f8f7ad094ce42670cc6a7aa2c38f307f3482e24057411264800f3b984e40ba9b6899931e4ca3b26a23663e6091ef2453a115476c18063ce82660fc9009d0cf63c72ac81bb51a6644bd020106c4ff2779abcfaa0189813e6ad4116f087605ec114857b71cab2a209e8bc5ef20bc0049cf28cadb9f20023c7ecf1d055ea92d3d9bb8718d3348ae46217f03114abc52cb696bb9adb16f70df1ae3866c54218d9b0024532976161840fedb7ee4329963eb606ac902dcda2ad313fd2aeb95a69d0078866950357288edfe3c41cd1f29fc38244c6bd8617cdeb5c6ea716286d70af1a0e1e54d0a6610e0d811eefc3da130d91c7c394eef378a25fdc884fcc4e814cef3be73b270733ce8491d37c2c538c8b44c2b40bc33add2d046ed8d9a255125691257fdc38e0cf03ab448ac0f83c23e72b2c19fc053ed33a384d86eda9ff60a8add1001c18b2b8568706ad82ea21ae2e0a66b358da529433bdddd92bd9583c982b8e5d28dd86e33640e934ed33a8a60a1d244b05016786df1d0c4bde4a7734d71ec6482c5eb8f13076449a90681a39fe6960f77fd20e3c655cc2c2c5d6783204928d14074fc9890d1932e6e3047a670536b49933cb3cdd95f089f1c03c97d5224b089d8945982285b62c0e73a31985a04b4c6c0654c2f3b7da1e78d3f49507c0e2f3991350275ffa95789194910833eb33ed7b8776b408acf420d1244096967abcd5074573383225a64cfe8bfc541fefbeaa34cc0f52dfa82e3859f9ace50d6a998e99a34893a661102ecad841d02704d9a31d6beec5275d75fcd79e82c43b56ae2117cc903b8680e593b3070566a4401e63763b454b731fa0bb75d32221e6717d89e193fd98a50b3074758348025b449b73ac713e4198197e51dcfe6217b44fc096bd7ce9db92bd81437031d759697a01302acefddf2cbfc2ec4463a10517303aec0d893b23b490a12ce2d322267aa9af5f77b41fd7dd7faa6a59e77a74d92829cc301afe8dded77eacd8f3dbfcac6214c7a6477b45bbea72a80c545e35ed6f5bd2654f4adfa755dfda4f9d8fc9b1ce579e8e642a57355198ddef56e6a9d1e3fd791012e8e838088aac0f244de6c54c816965250315d5736578ebb7d666342768254f382327d1bf9be2553bfc4ca89faf503c1fbb168ef2cfb744e345b28f4102f7f7fe024fc324ee84dcab6895d1cd1e61c5f6b018edd65d6de37f5596b3938bf59ead327919f7b184379236aead2b343195a4cedac5b96a095e27e86a58ec7a0b4fe561fd55336e0912c52a860eef7bda92c2abcd05db0b08312a213802175b014c3381a635a3b6607f3e854f2321a6ee34e7dbcf57726e8a48bc3b5ecea6280c78454b030e2e58ef478d90107ee64c64c14172855cfbd3ca8b136b00c3bb385cf405006c86323f0d48747e983456c04352374d7734f428a2902615b1de544b7ba5ce2db3644e948fc0f3d14dbf18a896aceb5fb67e38928c7c3bbc130900551ee2aacd25ab9baf63ec8ec16c068f73d42b93fb26efbbce04b659c0f40d9b8338639c471b01247b614bd5eb79adb32e8e7f6ea20afcb755bfb92d320f109e9215b7392ee23e94235be9efd36576624db0c19df0122138300b8de487341946b9cdd4ee48653bd5d834e1a0081f6f329f97672eaa995acb303597a59955ecad1083a7230e224deb7ebe1f3680d588107ad14c818ef4c5e65f3c4391607bb0a0ab8872328080da97e6e41d80ce96935a19d47da696d31c8c7025edb9a544604f8d09d1bb1d1532ee4f540c527cc48ac4eb532be1e42d2c592e8370e97995c86f32ddcc8d6b0207e6211b85b24c905b7da3c33fc5a60b231eb8ee673b68aa75d8e4d8a1ab693e8dfce56b70583868851dd7fb566df079101e33abc84ac4becb5251d9136663a27cbf861da2361382c2652a019c9df37c6caa026ac8328fcd5dab3c4e916856ea13876364d40703f75b91f8074aba5f0455940d1f03c046079cee878ce8e4c5d1c1bd1a85477a213fd3b896e5ed8ff4c7680b8d2d1827628750723a8785797e7dbe39400ce0f03b6b22fb1ed68a574bec08ab49623d64cd34691406197e8f0a98fc776a96de7a401da6e4d2313d410d463a4491451bf5eb27831d5559b9efa3ec067a9592fb084fa423dc1a1fdc8d8812f04df6707e2d9a7edbe5d63796ad9819c0e2c99db20638acb77f5d77b5a85cc274766079d7c1110b36837a1c187ac8b4297c0df06bf74be780c23db61a2420c62a61c7608eeb690c13bd7acc0056da86bb4f2b8c1046e2f9059ba5b41060eda896a5621633b7f7e1d70dd0dfdfca4167caf129c35e99703ee5f631e929e11ec512a603dfa0901a1d07a0b0eaa207d00a900507f9adc53c4c8700b2a310e40ba58d8fc1d0ef187e2ecb56f10a8224ab05fbe36cd8f30391004a8f00a9f627746b2513f9093a130f4c09c500d61fa9398a803c07334200da3396b6c4d7b77e912bd13c82f87b55ae595450a2b71f85b6491c127972e514055a5a12a4cc8864790ea746b02d38846e2c51346fb142dabfd5fe6efc15a6ff03228f56b712c925a25df0201f0d3f1271f94d62f7dfaa4629375a6b6a7e0a9657a4554057f7c2af4de540a9a1ebaa013bbc271dcc1f71373963a469b5c3c2fbbff3d10f10a6ade48406dfe9c2ac7599dcbb58386972418b62f58ec7b0e7c88058436f7ac1009585c5647673df90feb733e607caded384831facc1f8118437d8f8af3adfac1758a280e018d3a0d0446273f7aee8e9d6197486886513ad6417029b3093f5689d9885a107bffe4e250b82d0febb76cd92124d1197e29878cd004e0a5aedf1cc4b807ebd9f2e8d4b0b03881877121e33bdbc7d4052d8ebc1ca729c958211eb368047144d1e44a93f919a479b55dc84aa2a3606e23737f743912d73ff9117701aea188ec6b88147c1398a74237c3695603591c3ce9ed56ab6fd777f2018de2f943510a78c637bfba07673f5cdeac1baaa11e7768b546fd64c9cf3e9b56f98412d989cf94a29a1aaea23f15d7a9bd9b746b744460e44e9a98784a2ae36842aa5a02f1aae4dd76bff3198a8d98b8ec6e996d97b6e39eed084744b883a9ec4a84570f907a5494a0e8958907f90e51c5cb5abac7e23293c3f445fc117376b899344acfa36f71d2d2dc729e12c0ee4723e64c54857d9ed7c08e9b1acbe8bb1b6f4ed6fe7833112243df678195d1a6b11fbaeec7e5360794da42686f8d03fd4af77d4c14491c812dde29acca0d2e0cb60e912f5c8b4e22a3901a17232953b57d5e4dd3e9051ba62175b30f08da42ccff95628462a93421946e4888b033a54b7ba22fb6d27a422ff9fdb5863225325d8746980d6b3bac6e0a875f56e958a794017fd668732866075229b1ff38521621616a3f7f260734cdf4898adb09112f48ff9e280ca0fdce693fe6508a6b697249783e722855a6543d5a842d67d3c3f008de0df2ee16988c9438a9882602e5cc3f6c5d27454e2204118fdb3c45d1b9c2f84b62b7d5c5990f22a092601e0d56ae3f2c3b20cc6ee8599ecabe4eeaef261745253fd0f656ace1d4e63ffe87aa063f271c981c3c0e47aa2dde42c5f8aaff255c995f197c63510d450922144f6db5b5437839861aadac9185077e1800ee3a37e215f5641a08e4e65e9da375fc68db5662a035ca27f40ed634254afc3fdf0cbbe77bdfb2273d69940e137d43f938e9b52dbc9d856b92994e475d88b9d12d5bee8a7ea6fa0111dd807e53541a58708dd25df2cac9780cd3968a7bd19eeb120f920f32d96bed21aff4a05509059d73b054660b69f52b66bd39b8569691bf61e35c73d75b38b579601f1a75193e34ce121fceb4f9b7930d8d0041da350d51f641812338f07001ce1eb7a6aba989de84e7906bb5e6d6224a09f9f4713a2ad869373a1781d79622bd19cc37158ab268757dbecf3294d83e8e0c9080c2ee8642402eb02c72a0f02ccc899b3fcec6d84effa30d762165b9d4444684a108fd681160e02c6ddcad8355bd1d1e6358e4f1b612ae297e06fb42b99f8583bd1f2b3e8fc8519672d1ef0bc9a02720f97805b17ed5b1b26d0735cd7a0c737029e855e6b2863be7ff2439e99ab4af1b7c26863483df5c68a49910d5578d60ff240e6d6c3e81c34350bb3f9eb37e277ab7ff2ee1a6c655dc91a5955ecd9656d0880f9e91b6d119fcd0093b20c7a6a9ed32b50c1cc4e49440e4ba7068a4f125cf29a1d470278d76a7204e8b622abb7394536b8c3546a40c62e38d7770960903ecac30358593f0b430900adef3771f197338dac1c49542db81b256f4ffecc9125627bb43f1862b66859cdd2483efd61aa1c8294a1588270d6d1c8a99e53e4fd09a2b1a0a0caa08c19b59d8d83a7e6d53692433681c75670e1f58a9fc79f23d17bce922a6cfe0dd2af44fbdd6f29866815a69fd1db3e8950878b20aee2b1a104b55fe3b3dfd5b7efb0d4ccc20b230cc1ab9794bfda553683c7e6038aa549747453423fa3e8722be163e7e9afd2ade3b74bf9dc7836ad519d826e386866793c1555c9f02fb6ec0b3813d577058bc9c372b64e3065297c9a08646b86d8fa6b361f5f14abb6edd4920d21fbf8bb4727a8171a3227ebc2de0b55fd49aeb17036efe52fd102509774755361c94bdf8659145fda341b535d2f843451b3bfa000a593559d1cacf6c8026799f4e590e8faa784ce82ccb40fa77c0984a353a9694b8907cd75c7cfd379c0bc9a930a50cfa9bb45d067745d4a4e99191992d5040aefb84886648da5f5e4185ada226a12f401f370b0a4fd273d40f445d9bfa27e3961581a5f6011c57835ff3164535ea53fa1bf8a4ac8a23c5148cfcff8c", 0xffb, 0x5}], 0x0, &(0x7f0000001480)={[{@order_relaxed='order=relaxed'}], [{@smackfsdef={'smackfsdef', 0x3d, 'nilfs2\x00'}}]}) [ 201.143005][ T9435] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 201.173367][ T9435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 201.188223][ T9449] NILFS (loop1): couldn't find nilfs on the device [ 201.192713][ T9435] F2FS-fs (loop3): invalid crc_offset: 0 [ 201.222710][ T9435] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 201.231235][ T9435] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 201.345555][ T9435] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 201.361576][ T9435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 201.384604][ T9449] NILFS (loop1): couldn't find nilfs on the device [ 201.398029][ T9435] F2FS-fs (loop3): invalid crc_offset: 0 [ 201.410814][ T9435] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 08:30:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x7, 0x43}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0xf, 0x0, "44b14246b0797906914106c49e5552170c73b3859523686349eaa1dafbc5c664f8c9683cdaa67558b864a3aae0cea3032e73dd2ce800b104f68d16655752ae368fd80f8cfafbe7f84898c3e529b7ac39"}, 0xd8) [ 201.420981][ T9435] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) 08:30:18 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x1, &(0x7f00000004c0)) 08:30:18 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000080), 0x40) 08:30:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:30:19 executing program 1: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2800006) [ 201.728757][ C1] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.759794][ T9474] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 201.782086][ T9474] NILFS (loop3): couldn't find nilfs on the device [ 201.869739][ C3] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.885245][ T9474] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 201.897055][ T9474] NILFS (loop3): couldn't find nilfs on the device 08:30:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x2, r0, 0xfffffffffffffffd, 0x0) 08:30:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 08:30:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:30:19 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x1, &(0x7f00000004c0)) 08:30:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 202.045356][ C0] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.061910][ T9502] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 202.073081][ T9502] NILFS (loop3): couldn't find nilfs on the device 08:30:19 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x1, &(0x7f00000004c0)) [ 202.226390][ C3] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.246928][ T9512] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 202.265195][ T9512] NILFS (loop3): couldn't find nilfs on the device 08:30:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:30:19 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x1, &(0x7f00000004c0)) [ 202.432309][ C1] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.448615][ T9522] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 202.460403][ T9522] NILFS (loop3): couldn't find nilfs on the device 08:30:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x2, r0, 0xfffffffffffffffd, 0x0) 08:30:20 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) dup2(r1, r0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) 08:30:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x1, 0x0, 0x5, 0x8, 0x79, 0xef05bae, &(0x7f0000000200)="b936cb5363524990e3f806dbcc82f4b96ce5905d937d601c9d6fb45a804e1caaccbc7a3317737c2e4c0548f975c5606827e25e96287fef943902a01ed326166d5395c6130e04d5cefb2fee81fe27299cadc9503c519edafbee1c5395b175418bc20f741e8b8454f393592a5586d4a54c212aedf68a84a5a3fd"}) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 08:30:20 executing program 3: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) poll(0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000", 0xc6, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[]) [ 202.920161][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 202.934079][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 202.954406][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 202.972327][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 202.985594][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 202.996736][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.009358][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.019903][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.030253][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.040767][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.058619][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.077197][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.093744][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 08:30:20 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 203.115615][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.129846][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.145747][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.161735][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.184370][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.193579][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.224338][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.233468][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.243214][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.260651][ T3077] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on %z5 08:30:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 08:30:20 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 08:30:20 executing program 3: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[]) 08:30:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) 08:30:21 executing program 3: bpf$MAP_CREATE(0x10, &(0x7f0000000080), 0x40) 08:30:21 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000800)=""/4084, 0x1000, &(0x7f0000000280)=""/211, 0x2}}, 0xfffffef6) 08:30:21 executing program 3: r0 = open(&(0x7f0000000240)='./file0\x00', 0x102e0, 0x0) fcntl$setsig(r0, 0xa, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) truncate(&(0x7f0000000100)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "9845bce033212a2241a1e3b252a77f163e991a", 0x2}) r2 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, 0x0}, 0x4008810) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) 08:30:21 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 204.624251][ C3] hrtimer: interrupt took 41679 ns 08:30:22 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 08:30:23 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 08:30:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b1d9537a6"}]}, 0x38}}, 0x0) 08:30:44 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockname(r0, 0x0, &(0x7f0000000040)) 08:30:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000001c0)) [ 277.886991][ T9303] syz-executor.1: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 277.894238][ T9303] CPU: 1 PID: 9303 Comm: syz-executor.1 Not tainted 5.10.0-rc7-syzkaller #0 [ 277.894238][ T9303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 277.894238][ T9303] Call Trace: [ 277.894238][ T9303] dump_stack+0x107/0x163 [ 277.894238][ T9303] warn_alloc.cold+0x87/0x17a [ 277.894238][ T9303] ? zone_watermark_ok_safe+0x2a0/0x2a0 [ 277.894238][ T9303] ? wakeup_kswapd+0x15b/0x640 [ 277.894238][ T9303] ? __zone_watermark_ok+0x440/0x440 [ 277.894238][ T9303] ? wake_all_kswapds+0x143/0x2c0 [ 277.894238][ T9303] __alloc_pages_slowpath.constprop.0+0x2026/0x2510 [ 277.894238][ T9303] ? __lock_acquire+0x16b7/0x5500 [ 277.894238][ T9303] ? warn_alloc+0x120/0x120 [ 277.894238][ T9303] ? __lock_acquire+0x16b7/0x5500 [ 277.894238][ T9303] ? __zone_watermark_ok+0x440/0x440 [ 277.894238][ T9303] __alloc_pages_nodemask+0x5f0/0x730 [ 277.894238][ T9303] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 277.894238][ T9303] ? __slab_alloc.constprop.0+0x52/0xe0 [ 277.894238][ T9303] alloc_pages_current+0x191/0x2a0 [ 277.894238][ T9303] allocate_slab+0x2d9/0x4e0 [ 277.894238][ T9303] ___slab_alloc+0x476/0x790 [ 277.894238][ T9303] ? __sigqueue_alloc+0x236/0x550 [ 277.894238][ T9303] ? find_held_lock+0x2d/0x110 [ 277.894238][ T9303] ? __sigqueue_alloc+0x236/0x550 [ 277.894238][ T9303] ? __slab_alloc.constprop.0+0x52/0xe0 [ 277.894238][ T9303] __slab_alloc.constprop.0+0x52/0xe0 [ 277.894238][ T9303] ? __sigqueue_alloc+0x236/0x550 [ 277.894238][ T9303] kmem_cache_alloc+0x36e/0x440 [ 277.894238][ T9303] __sigqueue_alloc+0x236/0x550 [ 277.894238][ T9303] __send_signal+0x62d/0xf90 [ 277.894238][ T9303] force_sig_info_to_task+0x2a0/0x3a0 [ 277.894238][ T9303] force_sig_fault+0xb0/0xf0 [ 277.894238][ T9303] ? force_sig_fault_to_task+0xe0/0xe0 [ 277.894238][ T9303] ? pgtable_bad+0x90/0x90 [ 277.894238][ T9303] ? _down_write_nest_lock+0x150/0x150 [ 277.894238][ T9303] __bad_area_nosemaphore+0x2f3/0x400 [ 277.894238][ T9303] do_user_addr_fault+0x7d7/0xb40 [ 277.894238][ T9303] exc_page_fault+0x9e/0x180 [ 277.894238][ T9303] ? asm_exc_page_fault+0x8/0x30 [ 277.894238][ T9303] asm_exc_page_fault+0x1e/0x30 [ 277.894238][ T9303] RIP: 0023:0x804d836 [ 277.894238][ T9303] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b [ 277.894238][ T9303] RSP: 002b:00000000f55e4100 EFLAGS: 00010202 [ 277.894238][ T9303] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f55e40f0 [ 277.894238][ T9303] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000 [ 277.894238][ T9303] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 277.894238][ T9303] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 277.894238][ T9303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.894238][ T9303] Mem-Info: [ 277.894238][ T9303] active_anon:3869 inactive_anon:110073 isolated_anon:0 [ 277.894238][ T9303] active_file:1311 inactive_file:977 isolated_file:32 [ 277.894238][ T9303] unevictable:0 dirty:93 writeback:23 [ 277.894238][ T9303] slab_reclaimable:12906 slab_unreclaimable:135333 [ 277.894238][ T9303] mapped:36723 shmem:602 pagetables:1125 bounce:0 [ 277.894238][ T9303] free:6667 free_pcp:1732 free_cma:0 [ 277.894238][ T9303] Node 0 active_anon:15468kB inactive_anon:214260kB active_file:140kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:96kB writeback:12kB shmem:1840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 67584kB writeback_tmp:0kB kernel_stack:8800kB all_unreclaimable? yes [ 277.894238][ T9303] Node 1 active_anon:8kB inactive_anon:226032kB active_file:5104kB inactive_file:3852kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:146800kB dirty:276kB writeback:80kB shmem:568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB kernel_stack:1344kB all_unreclaimable? no [ 277.894238][ T9303] Node 0 DMA free:2128kB min:732kB low:912kB high:1092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:13060kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.894238][ T9303] lowmem_reserve[]: 0 468 468 468 468 [ 277.894238][ T9303] Node 0 DMA32 free:8256kB min:24244kB low:29792kB high:35340kB reserved_highatomic:2048KB active_anon:15468kB inactive_anon:201200kB active_file:140kB inactive_file:56kB unevictable:0kB writepending:108kB present:1032192kB managed:486276kB mlocked:0kB pagetables:2396kB bounce:0kB free_pcp:2168kB local_pcp:556kB free_cma:0kB [ 277.894238][ T9303] lowmem_reserve[]: 0 0 0 0 0 [ 277.894238][ T9303] Node 1 DMA32 free:16284kB min:67176kB low:78336kB high:89496kB reserved_highatomic:2048KB active_anon:8kB inactive_anon:226032kB active_file:5464kB inactive_file:3980kB unevictable:0kB writepending:356kB present:1048436kB managed:965508kB mlocked:0kB pagetables:2104kB bounce:0kB free_pcp:4760kB local_pcp:1552kB free_cma:0kB [ 277.894238][ T9303] lowmem_reserve[]: 0 0 0 0 0 [ 277.894238][ T9303] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 1*256kB (U) 1*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 2128kB [ 277.894238][ T9303] Node 0 DMA32: 174*4kB (ME) 155*8kB (MEH) 50*16kB (UMEH) 46*32kB (MEH) 18*64kB (UMEH) 5*128kB (MH) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 8304kB [ 277.894238][ T9303] Node 1 DMA32: 149*4kB (UMEH) 107*8kB (MEH) 67*16kB (UMH) 54*32kB (UMEH) 34*64kB (UME) 19*128kB (UMH) 18*256kB (M) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 16540kB [ 277.894238][ T9303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 277.894238][ T9303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 277.894238][ T9303] 2932 total pagecache pages [ 277.894238][ T9303] 0 pages in swap cache [ 277.894238][ T9303] Swap cache stats: add 0, delete 0, find 0/0 [ 277.894238][ T9303] Free swap = 0kB [ 277.894238][ T9303] Total swap = 0kB [ 277.894238][ T9303] 524155 pages RAM [ 277.894238][ T9303] 0 pages HighMem/MovableOnly [ 277.894238][ T9303] 157232 pages reserved [ 277.894238][ T9303] 0 pages cma reserved [ 277.894238][ T9303] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 277.894238][ T9303] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 277.894238][ T9303] node 0: slabs: 5331, objs: 191916, free: 0 [ 277.894238][ T9303] node 1: slabs: 62597, objs: 2253492, free: 116 [ 279.050585][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.058555][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.058555][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.058555][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 279.100536][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.110442][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.110442][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.110442][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 279.147710][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.157610][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.157610][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.157610][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 279.196766][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.206540][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.206540][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.206540][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 279.252420][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.262339][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.262339][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.262339][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 279.297158][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.307073][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.307073][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.307073][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 279.342227][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.352155][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.352155][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.352155][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 279.386758][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.396648][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.396648][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.396648][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 279.433209][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 279.443117][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 279.443117][ C1] node 0: slabs: 76, objs: 1900, free: 0 [ 279.443117][ C1] node 1: slabs: 648, objs: 16057, free: 113 [ 281.084427][ C1] ------------[ cut here ]------------ [ 281.094644][ C1] HSR: Could not send supervision frame [ 281.107186][ C1] WARNING: CPU: 1 PID: 9303 at net/hsr/hsr_device.c:299 send_hsr_supervision_frame+0x889/0xb40 [ 281.128291][ C1] Modules linked in: [ 281.139303][ C1] CPU: 1 PID: 9303 Comm: syz-executor.1 Not tainted 5.10.0-rc7-syzkaller #0 [ 281.154066][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 281.176251][ C1] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 [ 281.185982][ C1] Code: 04 31 ff 89 de e8 c7 83 cd f8 84 db 0f 85 8b fd ff ff e8 aa 8b cd f8 48 c7 c7 60 e9 6b 8a c6 05 01 2d 36 04 01 e8 53 fa 09 00 <0f> 0b e9 6c fd ff ff e8 8b 8b cd f8 41 be 42 00 00 00 ba 01 00 00 [ 281.217532][ C1] RSP: 0000:ffffc900004c8c70 EFLAGS: 00010286 [ 281.230430][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 281.242521][ C1] RDX: ffff888010d24300 RSI: ffffffff8158c835 RDI: fffff52000099180 [ 281.259163][ C1] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8ecc2747 [ 281.272097][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801572b200 [ 281.284067][ C1] R13: 0000000000000000 R14: ffff88806722ece8 R15: 0000000000000000 [ 281.299157][ C1] FS: 0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:00000000f55e4b40 [ 281.314015][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 281.324284][ C1] CR2: 0000000000000054 CR3: 0000000068082000 CR4: 0000000000350ee0 [ 281.336857][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.356727][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.370358][ C1] Call Trace: [ 281.375613][ C1] [ 281.382609][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 281.394421][ C1] hsr_announce+0x122/0x320 [ 281.401090][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 281.412029][ C1] call_timer_fn+0x1a5/0x6b0 [ 281.418924][ C1] ? add_timer_on+0x4a0/0x4a0 [ 281.426086][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 281.434293][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 281.442567][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 281.458148][ C1] __run_timers.part.0+0x67c/0xa50 [ 281.466267][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 281.474027][ C1] ? sched_clock_cpu+0x17b/0x1f0 [ 281.481943][ C1] run_timer_softirq+0xb3/0x1d0 [ 281.488811][ C1] __do_softirq+0x2a0/0x9f6 [ 281.495106][ C1] asm_call_irq_on_stack+0xf/0x20 [ 281.502533][ C1] [ 281.507206][ C1] do_softirq_own_stack+0xaa/0xd0 [ 281.514569][ C1] irq_exit_rcu+0x132/0x200 [ 281.521256][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 281.532849][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 281.553758][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50 [ 281.571327][ C1] Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 fa 38 6e f8 48 89 ef e8 82 ed 6e f8 f6 c7 02 75 1a 53 9d 01 00 00 00 e8 91 59 63 f8 65 8b 05 ba 03 1a 77 85 c0 74 0a 5b [ 281.603645][ C1] RSP: 0000:ffffc900073dfd18 EFLAGS: 00000246 [ 281.612519][ C1] RAX: 000000000652143f RBX: 0000000000000246 RCX: 1ffffffff19d8ed9 [ 281.624453][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 281.636951][ C1] RBP: ffff88801aeb5c80 R08: 0000000000000001 R09: 0000000000000001 [ 281.649701][ C1] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000000 [ 281.660537][ C1] R13: ffff888010d24a70 R14: ffff88801aeb5c80 R15: 000000000000000b [ 281.673696][ C1] force_sig_info_to_task+0x2ce/0x3a0 [ 281.682254][ C1] force_sig_fault+0xb0/0xf0 [ 281.689463][ C1] ? force_sig_fault_to_task+0xe0/0xe0 [ 281.697387][ C1] ? pgtable_bad+0x90/0x90 [ 281.703821][ C1] ? _down_write_nest_lock+0x150/0x150 [ 281.711826][ C1] __bad_area_nosemaphore+0x2f3/0x400 [ 281.722918][ C1] do_user_addr_fault+0x7d7/0xb40 [ 281.736348][ C1] exc_page_fault+0x9e/0x180 [ 281.745142][ C1] ? asm_exc_page_fault+0x8/0x30 [ 281.753138][ C1] asm_exc_page_fault+0x1e/0x30 [ 281.761134][ C1] RIP: 0023:0x804d836 [ 281.766933][ C1] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b [ 281.798817][ C1] RSP: 002b:00000000f55e4100 EFLAGS: 00010202 [ 281.812642][ C1] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f55e40f0 [ 281.824495][ C1] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000 [ 281.842643][ C1] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 281.856514][ C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 281.871476][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.887893][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 281.897794][ C1] CPU: 1 PID: 9303 Comm: syz-executor.1 Not tainted 5.10.0-rc7-syzkaller #0 [ 281.897794][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 281.897794][ C1] Call Trace: [ 281.897794][ C1] [ 281.897794][ C1] dump_stack+0x107/0x163 [ 281.897794][ C1] panic+0x306/0x73d [ 281.897794][ C1] ? __warn_printk+0xf3/0xf3 [ 281.897794][ C1] ? __warn.cold+0x1a/0x44 [ 281.897794][ C1] ? __warn+0xf1/0x210 [ 281.897794][ C1] ? send_hsr_supervision_frame+0x889/0xb40 [ 281.897794][ C1] __warn.cold+0x35/0x44 [ 281.897794][ C1] ? send_hsr_supervision_frame+0x889/0xb40 [ 281.897794][ C1] report_bug+0x1bd/0x210 [ 281.897794][ C1] handle_bug+0x3c/0x60 [ 281.897794][ C1] exc_invalid_op+0x14/0x40 [ 281.897794][ C1] asm_exc_invalid_op+0x12/0x20 [ 281.897794][ C1] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 [ 281.897794][ C1] Code: 04 31 ff 89 de e8 c7 83 cd f8 84 db 0f 85 8b fd ff ff e8 aa 8b cd f8 48 c7 c7 60 e9 6b 8a c6 05 01 2d 36 04 01 e8 53 fa 09 00 <0f> 0b e9 6c fd ff ff e8 8b 8b cd f8 41 be 42 00 00 00 ba 01 00 00 [ 281.897794][ C1] RSP: 0000:ffffc900004c8c70 EFLAGS: 00010286 [ 281.897794][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 281.897794][ C1] RDX: ffff888010d24300 RSI: ffffffff8158c835 RDI: fffff52000099180 [ 281.897794][ C1] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8ecc2747 [ 281.897794][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801572b200 [ 281.897794][ C1] R13: 0000000000000000 R14: ffff88806722ece8 R15: 0000000000000000 [ 281.897794][ C1] ? vprintk_func+0x95/0x1e0 [ 281.897794][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 281.897794][ C1] hsr_announce+0x122/0x320 [ 281.897794][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 281.897794][ C1] call_timer_fn+0x1a5/0x6b0 [ 281.897794][ C1] ? add_timer_on+0x4a0/0x4a0 [ 281.897794][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 281.897794][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 281.897794][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 281.897794][ C1] __run_timers.part.0+0x67c/0xa50 [ 281.897794][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 281.897794][ C1] ? sched_clock_cpu+0x17b/0x1f0 [ 281.897794][ C1] run_timer_softirq+0xb3/0x1d0 [ 281.897794][ C1] __do_softirq+0x2a0/0x9f6 [ 281.897794][ C1] asm_call_irq_on_stack+0xf/0x20 [ 281.897794][ C1] [ 281.897794][ C1] do_softirq_own_stack+0xaa/0xd0 [ 281.897794][ C1] irq_exit_rcu+0x132/0x200 [ 281.897794][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 281.897794][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 281.897794][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50 [ 281.897794][ C1] Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 fa 38 6e f8 48 89 ef e8 82 ed 6e f8 f6 c7 02 75 1a 53 9d 01 00 00 00 e8 91 59 63 f8 65 8b 05 ba 03 1a 77 85 c0 74 0a 5b [ 281.897794][ C1] RSP: 0000:ffffc900073dfd18 EFLAGS: 00000246 [ 281.897794][ C1] RAX: 000000000652143f RBX: 0000000000000246 RCX: 1ffffffff19d8ed9 [ 281.897794][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 281.897794][ C1] RBP: ffff88801aeb5c80 R08: 0000000000000001 R09: 0000000000000001 [ 281.897794][ C1] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000000 [ 281.897794][ C1] R13: ffff888010d24a70 R14: ffff88801aeb5c80 R15: 000000000000000b [ 281.897794][ C1] force_sig_info_to_task+0x2ce/0x3a0 [ 281.897794][ C1] force_sig_fault+0xb0/0xf0 [ 281.897794][ C1] ? force_sig_fault_to_task+0xe0/0xe0 [ 281.897794][ C1] ? pgtable_bad+0x90/0x90 [ 281.897794][ C1] ? _down_write_nest_lock+0x150/0x150 [ 281.897794][ C1] __bad_area_nosemaphore+0x2f3/0x400 [ 281.897794][ C1] do_user_addr_fault+0x7d7/0xb40 [ 281.897794][ C1] exc_page_fault+0x9e/0x180 [ 281.897794][ C1] ? asm_exc_page_fault+0x8/0x30 [ 281.897794][ C1] asm_exc_page_fault+0x1e/0x30 [ 281.897794][ C1] RIP: 0023:0x804d836 [ 281.897794][ C1] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b [ 281.897794][ C1] RSP: 002b:00000000f55e4100 EFLAGS: 00010202 [ 281.897794][ C1] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f55e40f0 [ 281.897794][ C1] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000 [ 281.897794][ C1] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 281.897794][ C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 281.897794][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.897794][ C1] Kernel Offset: disabled [ 281.897794][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:31:38 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000035740 RCX=ffffffff81562ca8 RDX=1ffffffff15c78d8 RSI=0000000000010303 RDI=ffffffff8ae3c6c0 RBP=0000000000000000 RSP=ffffc90000006f88 R8 =0000000000000000 R9 =ffffffff8cecb08f R10=fffffbfff19d9611 R11=0000000000000000 R12=0000000000000001 R13=ffffffff8b3378e0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815ca492 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cc00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000054 CR3=0000000069661000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002 XMM02=000000f0000000000000000300000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff840e8911 RDI=ffffffff8fad8ae0 RBP=ffffffff8fad8aa0 RSP=ffffc900004c8648 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000031 R13=0000000000000031 R14=ffffffff8fad8aa0 R15=dffffc0000000000 RIP=ffffffff840e8968 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cd00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000054 CR3=0000000068082000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=697475636578652034343a30333a3830 XMM01=30337830202c327830202c3131783028 XMM02=30303030663778302826202c30783020 XMM03=2c307228656d616e6b636f737465670a XMM04=293030337830202c327830202c313178 XMM05=30337830202c327830202c3131783028 XMM06=7020676e697475636578652034343a30 XMM07=333a38300a0a29293034303030303030 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=00000086e0a1d306 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000086 RSI=ffff88802ce1fa00 RDI=00000000000000fa RBP=ffff88802ce1fa00 RSP=ffffc90000520b28 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000000000fa R13=0000000000000000 R14=0000000000000000 R15=ffff88802ce26900 RIP=ffffffff812daefb RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ce00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffffffff600400 CR3=000000006b45e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002 XMM02=000000a0000000000000000200000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=000000000001b629 RBX=ffff888068d1b060 RCX=ffffffff8155a917 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000246 RSP=ffffc90008ecf220 R8 =0000000000000001 R9 =ffffffff8ecc2677 R10=fffffbfff1d984ce R11=0000000000000000 R12=0000000000000003 R13=ffffed100d1a360c R14=0000000000000001 R15=ffff88802cf356c0 RIP=ffffffff812f710c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cf00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa4e49f9dd3 CR3=000000001a22b000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=32323232323232323232323232323232 XMM02=ffffffffffffffffffffff00ffffffff XMM03=000000ff0000000000ff000000000000 XMM04=40404040404040404040404040404040 XMM05=5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b XMM06=20202020202020202020202020202020 XMM07=00200000000000000000000000000000 XMM08=ffffffff0000000000ff00000000ffff XMM09=00000000000000000000000000000000 XMM10=00ff0000000000000000ff00000000ff XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000