Warning: Permanently added '[localhost]:64734' (ECDSA) to the list of known hosts. 2020/10/10 15:12:31 fuzzer started 2020/10/10 15:12:32 dialing manager at 10.0.2.10:44107 2020/10/10 15:12:32 syscalls: 3440 2020/10/10 15:12:32 code coverage: enabled 2020/10/10 15:12:32 comparison tracing: enabled 2020/10/10 15:12:32 extra coverage: enabled 2020/10/10 15:12:32 setuid sandbox: enabled 2020/10/10 15:12:32 namespace sandbox: enabled 2020/10/10 15:12:32 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/10 15:12:32 fault injection: enabled 2020/10/10 15:12:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/10 15:12:32 net packet injection: enabled 2020/10/10 15:12:32 net device setup: enabled 2020/10/10 15:12:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/10 15:12:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/10 15:12:32 USB emulation: enabled 2020/10/10 15:12:32 hci packet injection: enabled 2020/10/10 15:12:32 wifi device emulation: enabled 15:13:38 executing program 0: 15:13:39 executing program 1: 15:13:39 executing program 2: 15:13:39 executing program 3: syzkaller login: [ 196.475322][ T8518] IPVS: ftp: loaded support on port[0] = 21 [ 196.475338][ T8520] IPVS: ftp: loaded support on port[0] = 21 [ 196.631354][ T8522] IPVS: ftp: loaded support on port[0] = 21 [ 196.852134][ T8520] chnl_net:caif_netlink_parms(): no params data found [ 196.874847][ T8523] IPVS: ftp: loaded support on port[0] = 21 [ 196.943820][ T8518] chnl_net:caif_netlink_parms(): no params data found [ 197.024475][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 197.189858][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.261694][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.286351][ T8520] device bridge_slave_0 entered promiscuous mode [ 197.362331][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.370942][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.383129][ T8520] device bridge_slave_1 entered promiscuous mode [ 197.413192][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.421977][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.432690][ T8518] device bridge_slave_0 entered promiscuous mode [ 197.441377][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.450153][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.459279][ T8522] device bridge_slave_0 entered promiscuous mode [ 197.473002][ T8523] chnl_net:caif_netlink_parms(): no params data found [ 197.491892][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.500763][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.510206][ T8518] device bridge_slave_1 entered promiscuous mode [ 197.526163][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.539987][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.551269][ T8522] device bridge_slave_1 entered promiscuous mode [ 197.568873][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.603516][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.616440][ T8518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.635122][ T8518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.676511][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.692063][ T8520] team0: Port device team_slave_0 added [ 197.703538][ T8520] team0: Port device team_slave_1 added [ 197.720876][ T8518] team0: Port device team_slave_0 added [ 197.736876][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.758911][ T8518] team0: Port device team_slave_1 added [ 197.802309][ T8522] team0: Port device team_slave_0 added [ 197.824150][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.832758][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.866312][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.891437][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.900052][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.934466][ T8518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.949989][ T8522] team0: Port device team_slave_1 added [ 197.980157][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.988425][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.019686][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.035847][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.043790][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.087779][ T8518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.130499][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.139770][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.155153][ T8523] device bridge_slave_0 entered promiscuous mode [ 198.184068][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.199385][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.212820][ T8523] device bridge_slave_1 entered promiscuous mode [ 198.266440][ T2793] Bluetooth: hci0: command 0x0409 tx timeout [ 198.282712][ T8520] device hsr_slave_0 entered promiscuous mode [ 198.296772][ T8520] device hsr_slave_1 entered promiscuous mode [ 198.310109][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.322645][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.345775][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 198.368679][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.399341][ T8518] device hsr_slave_0 entered promiscuous mode [ 198.410566][ T8518] device hsr_slave_1 entered promiscuous mode [ 198.427255][ T8518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.455223][ T8518] Cannot create hsr debugfs directory [ 198.469935][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.482324][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.491118][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.521788][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.538080][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.585795][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 198.609141][ T8523] team0: Port device team_slave_0 added [ 198.622672][ T8523] team0: Port device team_slave_1 added [ 198.649066][ T8522] device hsr_slave_0 entered promiscuous mode [ 198.657122][ T8522] device hsr_slave_1 entered promiscuous mode [ 198.664619][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.676223][ T8522] Cannot create hsr debugfs directory [ 198.713559][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.721758][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.753440][ T8523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.781401][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.789881][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.820177][ T8523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.835668][ T2557] Bluetooth: hci3: command 0x0409 tx timeout [ 198.938227][ T8523] device hsr_slave_0 entered promiscuous mode [ 198.946598][ T8523] device hsr_slave_1 entered promiscuous mode [ 198.954414][ T8523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.963001][ T8523] Cannot create hsr debugfs directory [ 199.116562][ T8518] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.153567][ T8518] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.167584][ T8518] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.206829][ T8518] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.217830][ T8520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.230457][ T8520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.250061][ T8520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.266866][ T8520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.312826][ T8522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.326413][ T8522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.337024][ T8522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.357504][ T8522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.399278][ T8523] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.418834][ T8523] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.432554][ T8523] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.455932][ T8523] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.620458][ T8518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.632559][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.657553][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.673620][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.685909][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.697500][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.712223][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.751931][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.778539][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.797671][ T8518] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.813495][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.833354][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.844945][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.857820][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.868732][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.877834][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.894055][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.902276][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.913925][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.945426][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.960440][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.975051][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.984776][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.996109][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.032224][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.047278][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.064104][ T2793] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.079722][ T2793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.097832][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.123125][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.139847][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.159286][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.176606][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.193839][ T2793] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.206926][ T2793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.220741][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.236495][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.257578][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.276473][ T8523] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.306061][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.321026][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.337755][ T2804] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.345832][ T34] Bluetooth: hci0: command 0x041b tx timeout [ 200.352691][ T2804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.378423][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.395201][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.410224][ T2804] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.424572][ T2804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.438301][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.445619][ T34] Bluetooth: hci1: command 0x041b tx timeout [ 200.453281][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.476428][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.486765][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.498642][ T2804] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.506989][ T2804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.517418][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.529925][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.545000][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.570499][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.606736][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.619682][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.634349][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.647130][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.659568][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.670607][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.676259][ T2557] Bluetooth: hci2: command 0x041b tx timeout [ 200.682187][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.703845][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.713677][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.725765][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.735226][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.746244][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.756864][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.766087][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.775993][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.785370][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.796359][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.805396][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.820924][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.830610][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.840170][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.851237][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.876088][ T8523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.895797][ T8523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.911674][ T34] Bluetooth: hci3: command 0x041b tx timeout [ 200.927276][ T8520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.942218][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.956769][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.971240][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.987405][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.001021][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.014945][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.029274][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.044313][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.057774][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.072998][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.089687][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.104471][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.118374][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.131570][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.153061][ T8518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.178113][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.188120][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.198583][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.208069][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.221983][ T8522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.261852][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.272016][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.283401][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.292217][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.306867][ T8523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.329497][ T8518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.352169][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.372268][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.386154][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.401189][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.413928][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.426649][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.471838][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.484258][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.510618][ T8522] device veth0_vlan entered promiscuous mode [ 201.519011][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.531826][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.542692][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.554164][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.577175][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.593425][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.608680][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.623445][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.662565][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.672325][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.685143][ T8522] device veth1_vlan entered promiscuous mode [ 201.707669][ T8518] device veth0_vlan entered promiscuous mode [ 201.717064][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.726422][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.735631][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.752714][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.770379][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.780350][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.790279][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.807617][ T8523] device veth0_vlan entered promiscuous mode [ 201.823324][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.833106][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.842146][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.861533][ T8518] device veth1_vlan entered promiscuous mode [ 201.874871][ T8523] device veth1_vlan entered promiscuous mode [ 201.898288][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.911837][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.926017][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.939938][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.954516][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.971285][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.987916][ T8520] device veth0_vlan entered promiscuous mode [ 202.007032][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.019797][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.039943][ T8522] device veth0_macvtap entered promiscuous mode [ 202.050080][ T8520] device veth1_vlan entered promiscuous mode [ 202.061690][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.072035][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.081814][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.091942][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.112135][ T8522] device veth1_macvtap entered promiscuous mode [ 202.134758][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.148195][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.160774][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.173685][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.193236][ T8518] device veth0_macvtap entered promiscuous mode [ 202.207672][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.222652][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.236493][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.267478][ T8518] device veth1_macvtap entered promiscuous mode [ 202.280632][ T8523] device veth0_macvtap entered promiscuous mode [ 202.309187][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.320404][ T8523] device veth1_macvtap entered promiscuous mode [ 202.334159][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.344069][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.353783][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.363813][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.384068][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.398853][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.433151][ T8518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.436829][ T2557] Bluetooth: hci0: command 0x040f tx timeout [ 202.471248][ T8518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.501969][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.505885][ T34] Bluetooth: hci1: command 0x040f tx timeout [ 202.517541][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.539962][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.553883][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.563946][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.576236][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.588832][ T8520] device veth0_macvtap entered promiscuous mode [ 202.608648][ T8520] device veth1_macvtap entered promiscuous mode [ 202.630695][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.659633][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.695028][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.733745][ T8518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.747951][ T8518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.755980][ T2557] Bluetooth: hci2: command 0x040f tx timeout [ 202.760113][ T8518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.779782][ T8518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.796113][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.812268][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.828531][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.846566][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.869412][ T8522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.881818][ T8522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.895650][ T8522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.908684][ T8522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.929817][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.943637][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.957856][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.972222][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.987018][ T2557] Bluetooth: hci3: command 0x040f tx timeout [ 202.989650][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.016974][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.027835][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.098309][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.117540][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.152659][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.175380][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.197979][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.214522][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.231596][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.252557][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.277534][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.300961][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.322534][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.345011][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.367256][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.390192][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.406182][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.422832][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.448179][ T8523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.468973][ T8523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.482436][ T8523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.494724][ T8523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.516955][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.531278][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.543381][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.557399][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.581648][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.597571][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.612850][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.648946][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.668888][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.695397][ T8520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.715942][ T8520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.728899][ T8520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.744322][ T8520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.880898][ T8545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.893002][ T8545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.917119][ T8549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.935241][ T8549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.959553][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.974149][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.997374][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.011459][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.018263][ T8549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.041295][ T8549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.046408][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.066404][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.089962][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.126119][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.150868][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.190948][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.213259][ T8518] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 204.215391][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.265286][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.308220][ T8545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.350088][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.373028][ T8545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.374868][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.422077][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:13:48 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) [ 204.462576][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.506215][ T2557] Bluetooth: hci0: command 0x0419 tx timeout 15:13:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000200)=0x84) [ 204.586860][ T2557] Bluetooth: hci1: command 0x0419 tx timeout 15:13:48 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:48 executing program 3: open(&(0x7f0000000540)='./file0\x00', 0x40, 0x0) mount$9p_rdma(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1008820, 0x0) 15:13:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5ef8b621"}, 0x0, 0x0, @fd}) 15:13:49 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:49 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 15:13:49 executing program 1: syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) [ 204.828918][ T2557] Bluetooth: hci2: command 0x0419 tx timeout 15:13:49 executing program 3: ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$jffs2(&(0x7f0000000480)='jffs2\x00', &(0x7f00000004c0)='./file0\x00', 0x7, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000980)={[], [{@permit_directio='permit_directio'}, {@smackfsroot={'smackfsroot', 0x3d, '.'}}]}) 15:13:49 executing program 1: open(&(0x7f0000000540)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}], [{@seclabel='seclabel'}]}}) 15:13:49 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000980)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) [ 205.168596][ T34] Bluetooth: hci3: command 0x0419 tx timeout [ 205.361017][ T8588] jffs2: Unknown parameter 'permit_directio' 15:13:49 executing program 0: keyctl$link(0x8, 0x0, 0x0) 15:13:49 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xb43a, 0x412d83) 15:13:49 executing program 1: syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) [ 205.499644][ T8591] jffs2: Unknown parameter 'permit_directio' 15:13:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b98ddc3c61ccc99a30a7d3b4731ab23a2233cfd3f66ac163", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="f8bb7ca08fc66724c7a1866e1831cc4dd3f931fba583e9ab4c38f12feacb06938b", 0x21}], 0x1}}], 0x1, 0x0) 15:13:49 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0x6b6b6b00, 0x0) 15:13:49 executing program 3: link(&(0x7f0000000080)='./file0/file0\x00', 0x0) 15:13:49 executing program 0: keyctl$link(0x8, 0x0, 0x0) 15:13:49 executing program 0: keyctl$link(0x8, 0x0, 0x0) 15:13:49 executing program 3: syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x0) 15:13:49 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 15:13:50 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:50 executing program 1: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x0, 0x0, 0x401}, 0x0, 0x0, &(0x7f0000000400)={0x0, r0+60000000}, &(0x7f0000000480)={0x0}) 15:13:50 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 15:13:50 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x100000530) 15:13:50 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:50 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 15:13:50 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) request_key(&(0x7f0000000480)='cifs.idmap\x00', 0x0, 0x0, 0xfffffffffffffffe) 15:13:50 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:50 executing program 3: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) 15:13:51 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 15:13:51 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) 15:13:51 executing program 3: syz_mount_image$hpfs(&(0x7f0000003700)='hpfs\x00', &(0x7f0000003740)='./file0\x00', 0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005bc0)) 15:13:51 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, 0x0) 15:13:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x100000530) [ 206.887990][ T8682] hpfs: Bad magic ... probably not HPFS 15:13:51 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, 0x0) 15:13:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x100000530) [ 206.981812][ T8682] hpfs: Bad magic ... probably not HPFS 15:13:51 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, 0x0) 15:13:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x100000530) 15:13:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x100000530) 15:13:51 executing program 0: socket(0x28, 0x0, 0xc83) 15:13:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x100000530) 15:13:51 executing program 0: syz_mount_image$hpfs(&(0x7f0000003700)='hpfs\x00', &(0x7f0000003740)='./file0\x00', 0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005bc0)) lchown(&(0x7f00000073c0)='./file0\x00', 0x0, 0xee01) [ 207.404583][ T8730] hpfs: Bad magic ... probably not HPFS [ 207.521913][ T8730] hpfs: Bad magic ... probably not HPFS 15:13:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 15:13:52 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000007340)={0x77359400}, 0x0) 15:13:52 executing program 0: syz_mount_image$hpfs(&(0x7f0000003700)='hpfs\x00', &(0x7f0000003740)='./file0\x00', 0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005bc0)) lchown(&(0x7f00000073c0)='./file0\x00', 0x0, 0xee01) [ 207.825066][ T8740] hpfs: Bad magic ... probably not HPFS 15:13:52 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) 15:13:52 executing program 0: syz_mount_image$jffs2(&(0x7f0000000480)='jffs2\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000980)) 15:13:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x100000530) 15:13:52 executing program 2: ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$net_dm(0x0) syz_mount_image$jffs2(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000500)="981227ea3c5b", 0x6, 0x9}, {&(0x7f00000005c0)="59ef74807e55720f32e983c1cb1146b07dfd9e87c59bd8245c9afc98c26eb09d4d50d830b02b7ac85234d3662d81c2", 0x2f, 0xfffffffffffffffa}, {&(0x7f0000000680)="e9", 0x1}, {&(0x7f0000000780)='V', 0x1}, {0xffffffffffffffff}], 0x0, &(0x7f0000000980)) [ 207.991194][ T8752] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 208.078629][ T8752] MTD: Attempt to mount non-MTD device "/dev/loop0" 15:13:52 executing program 3: syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[], [{@appraise='appraise'}]}) 15:13:52 executing program 0: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 15:13:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), 0x4) 15:13:52 executing program 1: fanotify_init(0x24, 0x0) 15:13:52 executing program 3: syz_mount_image$udf(&(0x7f00000001c0)='udf\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)) 15:13:52 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000200)) 15:13:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000b80)={0x27, {{0x2, 0x0, @loopback}}}, 0x88) 15:13:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x1f, @fixed}, 0xe) [ 208.739598][ T8784] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found 15:13:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000b80)={0x27, {{0x2, 0x0, @loopback}}}, 0x88) [ 208.774871][ T8784] UDF-fs: Scanning with blocksize 512 failed [ 208.829785][ T8784] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found 15:13:53 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x111c00, 0x0) [ 208.870590][ T8784] UDF-fs: Scanning with blocksize 1024 failed 15:13:53 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$hpfs(&(0x7f0000003700)='hpfs\x00', &(0x7f0000003740)='./file0\x00', 0x0, 0x1, &(0x7f0000005b00)=[{&(0x7f0000003780)}], 0x0, &(0x7f0000005bc0)={[], [{@subj_user={'subj_user'}}]}) lchown(&(0x7f00000073c0)='./file0\x00', 0x0, 0xee01) [ 208.913612][ T8784] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found 15:13:53 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 208.939222][ T8801] hpfs: bad mount options. [ 208.964269][ T8784] UDF-fs: Scanning with blocksize 2048 failed [ 209.032382][ T8784] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 209.058674][ T8784] UDF-fs: Scanning with blocksize 4096 failed [ 209.160993][ T8784] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 209.175819][ T8784] UDF-fs: Scanning with blocksize 512 failed [ 209.190704][ T8784] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 209.202215][ T8784] UDF-fs: Scanning with blocksize 1024 failed [ 209.220089][ T8784] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 209.230265][ T8784] UDF-fs: Scanning with blocksize 2048 failed [ 209.240774][ T8784] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 209.250675][ T8784] UDF-fs: Scanning with blocksize 4096 failed 15:13:53 executing program 1: accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:13:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000e00)) 15:13:53 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aabd65ab"}, 0x0, 0x0, @planes=0x0}) 15:13:53 executing program 0: syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[], [{@pcr={'pcr'}}]}) 15:13:53 executing program 1: open(0x0, 0x0, 0x0) syz_mount_image$hpfs(&(0x7f0000003700)='hpfs\x00', &(0x7f0000003740)='./file0\x00', 0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005bc0)) 15:13:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect(r0, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15:13:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x4, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x4, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x4, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x4, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) [ 209.460268][ T8831] hpfs: Bad magic ... probably not HPFS 15:13:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x4, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:53 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)) 15:13:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x4, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 0: syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)) 15:13:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x4, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 1: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x2000041, &(0x7f0000000440)={[{@quota='quota'}, {@nodiscard='nodiscard'}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@nointegrity='nointegrity'}], [{@pcr={'pcr'}}]}) [ 210.224923][ T8862] jfs: Unrecognized mount option "pcr=00000000000000000000" or missing value 15:13:54 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 0: clock_gettime(0x3, &(0x7f0000000400)) 15:13:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x4, 0x0) 15:13:54 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) [ 210.291950][ T8862] jfs: Unrecognized mount option "pcr=00000000000000000000" or missing value 15:13:54 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 15:13:54 executing program 3: lseek(0xffffffffffffffff, 0x4, 0x0) 15:13:54 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x4}, &(0x7f0000000380)={0x9}, &(0x7f0000000400)={r0}, 0x0) 15:13:54 executing program 3: lseek(0xffffffffffffffff, 0x4, 0x0) 15:13:54 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e20, @private}, 0x10) 15:13:54 executing program 3: lseek(0xffffffffffffffff, 0x4, 0x0) 15:13:54 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000200)) 15:13:54 executing program 3: r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x4, 0x0) 15:13:54 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f00000023c0)='TIPCv2\x00') 15:13:54 executing program 3: r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x4, 0x0) 15:13:54 executing program 0: pselect6(0x40, &(0x7f0000007280), &(0x7f00000072c0), 0x0, 0x0, 0x0) 15:13:54 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 1: syz_mount_image$jffs2(&(0x7f0000000480)='jffs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)) 15:13:54 executing program 3: r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x4, 0x0) 15:13:54 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a00)={0x0, 0xa97}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 15:13:54 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x4, 0x0) 15:13:54 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:55 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xb79, 0x0) 15:13:55 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 15:13:55 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x4, 0x0) 15:13:55 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x4, 0x0) 15:13:55 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x4}, 0x0, 0x0, 0x0) 15:14:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x0) 15:14:00 executing program 0: open(&(0x7f0000000540)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 15:14:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x0, 0x0) 15:14:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x0, 0x0) 15:14:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x0) 15:14:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a00)={0x0, 0xa97}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 15:14:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r0, 0x0, 0x0) 15:14:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a00)={0x0, 0xa97}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 15:14:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x0) 15:14:00 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000005c0)={0xb, @raw_data="0e95322bdc3a37fff0573d2b7f34e25b8d67dfebb496f0b69357a1dd3b94cb76afc133f3e6d9d47d7a400ff57fbe5f621bb01b933d2e972c64e82eb0f514d3b8ccf8027187c8a2e197465a302ecc460170bd099c28d657b0ec7e89f3eef5ec072816262265a89e6ed42353e92ba40447d6324c3f84b59ef24cf9bc6c79da377655c487f460cdef6d3ebe6be3f7a9c6835f8f1c9531c224d1c55c96f8d2b4a3c572b6a10a15ca90ab87f05d4d6ebae87e132230b71a4d56c2efbe6ef783aafe97895f6c04b7a5bcc4"}) 15:14:00 executing program 2: syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000000080)='$', 0x1}, {&(0x7f00000000c0)="1c", 0x1}, {&(0x7f0000000240)="bb", 0x1, 0x80000001}, {&(0x7f0000000280)="a9", 0x1, 0x90000}], 0x0, 0x0) 15:14:00 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) 15:14:00 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 15:14:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a00)={0x0, 0xa97}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 15:14:01 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 15:14:02 executing program 2: syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[{&(0x7f0000000080)='$', 0x1}, {&(0x7f0000000240)="bb", 0x1, 0x80000001}, {&(0x7f0000000280)="a9", 0x1, 0x90000}], 0x0, 0x0) 15:14:02 executing program 0: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)='io.bfq.weight\x00', 0x2, 0x0) 15:14:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xa2, &(0x7f0000002300)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a7410b363de4fb357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 15:14:02 executing program 0: request_key(&(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 15:14:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xa2, &(0x7f0000002300)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a7410b363de4fb357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 15:14:02 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xe2}, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) 15:14:07 executing program 1: openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$net_dm(0x0) syz_mount_image$jffs2(0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000000500)="98", 0x1, 0x9}, {&(0x7f00000005c0)="59ef74807e55720f32e983c1cb1146b07dfd9e87c5", 0x15, 0xfffffffffffffffa}, {&(0x7f0000000680)="e9", 0x1}, {&(0x7f0000000780)='V', 0x1}], 0x2, &(0x7f0000000980)={[{@compr_zlib='compr=zlib'}, {@compr_none='compr=none'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/video#\x00'}}]}) 15:14:07 executing program 0: open(&(0x7f0000000540)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) 15:14:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 15:14:07 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240), 0xa) 15:14:07 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)) 15:14:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect(r0, 0x0, 0x0) 15:14:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x1f, @fixed, 0x0, 0x1}, 0xe) 15:14:07 executing program 0: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x0, 0xe41e, [], 0x0}) 15:14:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80) 15:14:07 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240), 0xa) 15:14:07 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x0, 0x0, {0x3, @sdr}}) 15:14:07 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, 0x0) syz_genetlink_get_family_id$net_dm(0x0) 15:14:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 15:14:07 executing program 3: syz_genetlink_get_family_id$ethtool(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000440)) 15:14:07 executing program 0: syz_mount_image$hpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f0000000540)=[{&(0x7f0000000080)='$', 0x1, 0x1}, {&(0x7f00000000c0), 0x0, 0x52c}, {&(0x7f0000000140), 0x0, 0x15}, {0x0, 0x0, 0x20}, {&(0x7f0000000200), 0x0, 0x80000000}, {&(0x7f0000000240), 0x0, 0x80000001}, {&(0x7f0000000280), 0x0, 0x90000}, {&(0x7f0000000380)="501ed5d9189faae97511e69672eb90241a6de632d402d5038efd2634bb573b8c466f0fc79a69b9257955073235d8857abe99266117305065d06da0384e4df4a96fda9914f0f26071c13f7907291047241b326a42b5b95169b238ca4aa841c3", 0x5f}], 0x1000, &(0x7f00000007c0)={[{'\xaa-#+[#{^\xf6%,@h{\x06'}, {'@}#\'\x03#)(@^\'%{\\&'}, {'{[\xa1\'g!'}, {}, {'-'}, {}], [{@uid_gt={'uid>'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@euid_eq={'euid'}}, {@euid_lt={'euid<'}}, {@obj_role={'obj_role', 0x3d, '}'}}, {@euid_gt={'euid>'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@appraise='appraise'}, {@subj_type={'subj_type'}}]}) 15:14:07 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e"], 0x33) 15:14:08 executing program 3: r0 = gettid() ptrace$getregset(0x4204, r0, 0x0, 0x0) 15:14:08 executing program 2: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "61595b16"}, 0x0, 0x0, @userptr}) 15:14:08 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vim2m\x00', 0x2, 0x0) 15:14:08 executing program 1: clock_getres(0x0, &(0x7f0000001380)) 15:14:08 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x3, 0x2) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x101, 0xe0002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) 15:14:08 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000080)={0x0, 0x0, 0x0}) 15:14:08 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'veth1_to_hsr\x00'}, 0x3a, 0xfffffffffffffffb) 15:14:08 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x0, 0x4}) 15:14:08 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0}) 15:14:08 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 15:14:08 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000080)={0x0, 0x0, 0x0}) 15:14:08 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000440)) 15:14:08 executing program 0: open(&(0x7f0000000540)='./file0\x00', 0x40, 0x0) mount$9p_rdma(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:14:08 executing program 2: socket$inet(0x2, 0x1, 0x7) 15:14:08 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x33) 15:14:08 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x6cec0, 0x0) 15:14:09 executing program 0: syz_open_dev$vivid(0x0, 0x0, 0x2) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) 15:14:09 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000440)) 15:14:09 executing program 2: getresuid(&(0x7f0000000300), &(0x7f0000000340), 0x0) 15:14:09 executing program 1: syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x1}], 0x0, &(0x7f00000007c0)) 15:14:09 executing program 2: syz_mount_image$hpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000001000)='./file0\x00', 0x0, 0x0) 15:14:09 executing program 0: add_key(&(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000280)="798d5305dc09923e6ac11d3e", 0xc, 0xfffffffffffffffb) 15:14:09 executing program 2: syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}) 15:14:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x0) 15:14:09 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0xfcb73c4]}, 0x8}) 15:14:09 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) 15:14:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) 15:14:09 executing program 1: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "61595b16"}, 0x0, 0x0, @userptr, 0x4}) 15:14:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x40) 15:14:09 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x0, 0x0) 15:14:09 executing program 1: openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$jffs2(0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000500)="98", 0x1, 0x9}, {&(0x7f00000005c0)="59ef74807e5572", 0x7, 0xfffffffffffffffa}, {&(0x7f0000000680)="e9", 0x1, 0x3}, {&(0x7f0000000780)='V', 0x1}, {0xffffffffffffffff}], 0x0, 0x0) [ 292.145616][ T9020] syz-executor.3: page allocation failure: order:0, mode:0x40a20(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 292.145616][ T9020] CPU: 0 PID: 9020 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 292.145616][ T9020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 292.145616][ T9020] Call Trace: [ 292.145616][ T9020] dump_stack+0x198/0x1fd [ 292.145616][ T9020] warn_alloc.cold+0x87/0x17a [ 292.145616][ T9020] ? zone_watermark_ok_safe+0x2a0/0x2a0 [ 292.145616][ T9020] ? find_held_lock+0x2d/0x110 [ 292.145616][ T9020] ? wakeup_kswapd+0x15a/0x6a0 [ 292.145616][ T9020] ? __zone_watermark_ok+0x440/0x440 [ 292.145616][ T9020] ? wake_all_kswapds+0x143/0x2c0 [ 292.145616][ T9020] __alloc_pages_slowpath.constprop.0+0x22bd/0x28c0 [ 292.145616][ T9020] ? warn_alloc+0x120/0x120 [ 292.145616][ T9020] ? __zone_watermark_ok+0x440/0x440 [ 292.145616][ T9020] ? __zone_watermark_ok+0x440/0x440 [ 292.145616][ T9020] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 292.145616][ T9020] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 292.145616][ T9020] __alloc_pages_nodemask+0x62c/0x790 [ 292.145616][ T9020] ? lock_is_held_type+0xbb/0xf0 [ 292.145616][ T9020] ? __alloc_pages_slowpath.constprop.0+0x28c0/0x28c0 [ 292.145616][ T9020] ? lock_downgrade+0x830/0x830 [ 292.145616][ T9020] ? lock_downgrade+0x830/0x830 [ 292.145616][ T9020] cache_grow_begin+0x71/0x4a0 [ 292.145616][ T9020] fallback_alloc+0x1fb/0x2e0 [ 292.145616][ T9020] kmem_cache_alloc+0x2e3/0x3f0 [ 292.145616][ T9020] __sigqueue_alloc+0x236/0x550 [ 292.145616][ T9020] __send_signal+0x62d/0xf90 [ 292.145616][ T9020] force_sig_info_to_task+0x2a0/0x3a0 [ 292.145616][ T9020] force_sig_fault+0xb0/0xf0 [ 292.145616][ T9020] ? force_sig_fault_to_task+0xe0/0xe0 [ 292.145616][ T9020] ? arch_local_irq_disable+0x50/0x50 [ 292.145616][ T9020] ? _down_write_nest_lock+0x150/0x150 [ 292.145616][ T9020] __bad_area_nosemaphore+0x32a/0x4f0 [ 292.145616][ T9020] do_user_addr_fault+0x852/0xbf0 [ 292.145616][ T9020] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 292.145616][ T9020] exc_page_fault+0xa8/0x190 [ 292.145616][ T9020] ? asm_exc_page_fault+0x8/0x30 [ 292.145616][ T9020] asm_exc_page_fault+0x1e/0x30 [ 292.145616][ T9020] RIP: 0023:0x804d5ec [ 292.145616][ T9020] Code: ff 50 e8 d7 5d 01 00 83 c4 10 85 c0 0f 84 75 01 00 00 8b 5c 24 0c e8 93 03 01 00 65 f0 83 2d e4 ff ff ff 01 8b 54 24 10 8b 00 <83> 7a 50 ff 89 42 54 75 0b 85 c0 75 07 c7 42 54 16 00 00 00 6b 44 [ 292.145616][ T9020] RSP: 002b:00000000f54fd100 EFLAGS: 00010296 [ 292.145616][ T9020] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f54fd0f0 [ 292.145616][ T9020] RDX: 0000000000000000 RSI: 00000000080dcf38 RDI: 000000000815e000 [ 292.145616][ T9020] RBP: 000000000818af6c R08: 0000000000000000 R09: 0000000000000000 [ 292.145616][ T9020] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 292.145616][ T9020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.145616][ T9020] Mem-Info: [ 292.145616][ T9020] active_anon:3334 inactive_anon:103585 isolated_anon:0 [ 292.145616][ T9020] active_file:393 inactive_file:243 isolated_file:30 [ 292.145616][ T9020] unevictable:0 dirty:68 writeback:50 [ 292.145616][ T9020] slab_reclaimable:13872 slab_unreclaimable:150165 [ 292.145616][ T9020] mapped:35326 shmem:321 pagetables:821 bounce:0 [ 292.145616][ T9020] free:6722 free_pcp:1180 free_cma:0 [ 292.145616][ T9020] Node 0 active_anon:13284kB inactive_anon:210940kB active_file:280kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292kB dirty:0kB writeback:0kB shmem:1252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 86016kB writeback_tmp:0kB kernel_stack:8288kB all_unreclaimable? yes [ 292.145616][ T9020] Node 1 active_anon:52kB inactive_anon:203400kB active_file:1292kB inactive_file:968kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:141012kB dirty:272kB writeback:200kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:1472kB all_unreclaimable? no [ 292.145616][ T9020] Node 0 DMA free:2236kB min:720kB low:900kB high:1080kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:13056kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.145616][ T9020] lowmem_reserve[]: 0 496 496 496 496 [ 292.145616][ T9020] Node 0 DMA32 free:8428kB min:74952kB low:80716kB high:86480kB reserved_highatomic:6144KB active_anon:13284kB inactive_anon:197884kB active_file:280kB inactive_file:4kB unevictable:0kB writepending:0kB present:1032192kB managed:513812kB mlocked:0kB pagetables:1444kB bounce:0kB free_pcp:1276kB local_pcp:120kB free_cma:0kB [ 292.145616][ T9020] lowmem_reserve[]: 0 0 0 0 0 [ 292.145616][ T9020] Node 1 DMA32 free:16224kB min:60176kB low:71124kB high:82072kB reserved_highatomic:0KB active_anon:52kB inactive_anon:203400kB active_file:1292kB inactive_file:968kB unevictable:0kB writepending:472kB present:1048436kB managed:965484kB mlocked:0kB pagetables:1836kB bounce:0kB free_pcp:3444kB local_pcp:752kB free_cma:0kB [ 292.145616][ T9020] lowmem_reserve[]: 0 0 0 0 0 [ 292.145616][ T9020] Node 0 DMA: 1*4kB (U) 5*8kB (UH) 1*16kB (H) 2*32kB (H) 1*64kB (H) 0*128kB 0*256kB 0*512kB 2*1024kB (UH) 0*2048kB 0*4096kB = 2236kB [ 292.145616][ T9020] Node 0 DMA32: 749*4kB (MEH) 401*8kB (MEH) 78*16kB (MEH) 9*32kB (H) 10*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8380kB [ 292.145616][ T9020] Node 1 DMA32: 129*4kB (UME) 90*8kB (ME) 41*16kB (ME) 33*32kB (UME) 15*64kB (UME) 14*128kB (UME) 16*256kB (ME) 6*512kB (UME) 3*1024kB (M) 0*2048kB 0*4096kB = 15940kB [ 292.145616][ T9020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.145616][ T9020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.145616][ T9020] 960 total pagecache pages [ 292.145616][ T9020] 0 pages in swap cache [ 292.145616][ T9020] Swap cache stats: add 0, delete 0, find 0/0 [ 292.145616][ T9020] Free swap = 0kB [ 292.145616][ T9020] Total swap = 0kB [ 292.145616][ T9020] 524155 pages RAM [ 292.145616][ T9020] 0 pages HighMem/MovableOnly [ 292.145616][ T9020] 150354 pages reserved [ 292.145616][ T9020] 0 pages cma reserved [ 293.523703][ C0] ------------[ cut here ]------------ [ 293.563347][ C0] HSR: Could not send supervision frame [ 293.615917][ C0] WARNING: CPU: 0 PID: 9020 at net/hsr/hsr_device.c:299 send_hsr_supervision_frame+0x889/0xb40 [ 293.679222][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 293.686945][ C0] CPU: 0 PID: 9020 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 293.686945][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 293.686945][ C0] Call Trace: [ 293.686945][ C0] [ 293.686945][ C0] dump_stack+0x198/0x1fd [ 293.686945][ C0] panic+0x382/0x7fb [ 293.686945][ C0] ? __warn_printk+0xf3/0xf3 [ 293.686945][ C0] ? send_hsr_supervision_frame+0x889/0xb40 [ 293.686945][ C0] ? ocfs2_xattr_bucket_value_truncate.constprop.0+0x856/0x9c0 [ 293.686945][ C0] ? __warn.cold+0x5/0x4b [ 293.686945][ C0] ? __warn+0xd6/0x1f2 [ 293.686945][ C0] ? send_hsr_supervision_frame+0x889/0xb40 [ 293.686945][ C0] __warn.cold+0x20/0x4b [ 293.686945][ C0] ? wake_up_klogd.part.0+0x8e/0xd0 [ 293.686945][ C0] ? send_hsr_supervision_frame+0x889/0xb40 [ 293.686945][ C0] report_bug+0x1bd/0x210 [ 293.686945][ C0] handle_bug+0x38/0x90 [ 293.686945][ C0] exc_invalid_op+0x14/0x40 [ 293.686945][ C0] asm_exc_invalid_op+0x12/0x20 [ 293.686945][ C0] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 [ 293.686945][ C0] Code: 03 31 ff 89 de e8 c7 71 58 f9 84 db 0f 85 8b fd ff ff e8 9a 75 58 f9 48 c7 c7 00 29 67 89 c6 05 52 e6 36 03 01 e8 89 b2 28 f9 <0f> 0b e9 6c fd ff ff e8 7b 75 58 f9 41 be 42 00 00 00 ba 01 00 00 [ 293.686945][ C0] RSP: 0000:ffffc90000007c48 EFLAGS: 00010286 [ 293.686945][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 293.686945][ C0] RDX: ffff888051fcd7c0 RSI: ffffffff815f5a55 RDI: fffff52000000f7b [ 293.686945][ C0] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8d0c3abf [ 293.686945][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880557d3580 [ 293.686945][ C0] R13: 0000000000000000 R14: ffff888055042ce8 R15: ffff88802ce255c0 [ 293.686945][ C0] ? vprintk_func+0x95/0x1d4 [ 293.686945][ C0] ? send_hsr_supervision_frame+0x889/0xb40 [ 293.686945][ C0] hsr_announce+0x122/0x320 [ 293.686945][ C0] ? send_hsr_supervision_frame+0xb40/0xb40 [ 293.686945][ C0] ? lock_is_held_type+0xbb/0xf0 [ 293.686945][ C0] call_timer_fn+0x1ac/0x760 [ 293.686945][ C0] ? send_hsr_supervision_frame+0xb40/0xb40 [ 293.686945][ C0] ? msleep_interruptible+0x130/0x130 [ 293.686945][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 293.686945][ C0] ? send_hsr_supervision_frame+0xb40/0xb40 [ 293.686945][ C0] __run_timers.part.0+0x67c/0xaa0 [ 293.686945][ C0] ? call_timer_fn+0x760/0x760 [ 293.686945][ C0] ? sched_clock_cpu+0x17b/0x1f0 [ 293.686945][ C0] run_timer_softirq+0xb3/0x1d0 [ 293.686945][ C0] __do_softirq+0x1f8/0xb23 [ 293.686945][ C0] asm_call_irq_on_stack+0xf/0x20 [ 293.686945][ C0] [ 293.686945][ C0] do_softirq_own_stack+0x9b/0xd0 [ 293.686945][ C0] irq_exit_rcu+0x235/0x280 [ 293.686945][ C0] sysvec_apic_timer_interrupt+0x51/0xf0 [ 293.686945][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 293.686945][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x4d/0x90 [ 293.686945][ C0] Code: 48 c7 c0 e8 6b fc 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 3c 48 83 3d 22 21 d3 01 00 74 29 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 d4 aa 27 f9 65 8b 05 9d b3 d8 77 [ 293.686945][ C0] RSP: 0000:ffffc90008b37d18 EFLAGS: 00000286 [ 293.686945][ C0] RAX: 1ffffffff13f8d7d RBX: 0000000000000286 RCX: 1ffffffff16b2b61 [ 293.686945][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000286 [ 293.686945][ C0] RBP: ffff888028503280 R08: 0000000000000001 R09: 0000000000000001 [ 293.686945][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 293.686945][ C0] R13: ffff888051fcdf00 R14: ffff888028503280 R15: 000000000000000b [ 293.686945][ C0] force_sig_info_to_task+0x2ce/0x3a0 [ 293.686945][ C0] force_sig_fault+0xb0/0xf0 [ 293.686945][ C0] ? force_sig_fault_to_task+0xe0/0xe0 [ 293.686945][ C0] ? arch_local_irq_disable+0x50/0x50 [ 293.686945][ C0] ? _down_write_nest_lock+0x150/0x150 [ 293.686945][ C0] __bad_area_nosemaphore+0x32a/0x4f0 [ 293.686945][ C0] do_user_addr_fault+0x852/0xbf0 [ 293.686945][ C0] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 293.686945][ C0] exc_page_fault+0xa8/0x190 [ 293.686945][ C0] ? asm_exc_page_fault+0x8/0x30 [ 293.686945][ C0] asm_exc_page_fault+0x1e/0x30 [ 293.686945][ C0] RIP: 0023:0x804d5ec [ 293.686945][ C0] Code: ff 50 e8 d7 5d 01 00 83 c4 10 85 c0 0f 84 75 01 00 00 8b 5c 24 0c e8 93 03 01 00 65 f0 83 2d e4 ff ff ff 01 8b 54 24 10 8b 00 <83> 7a 50 ff 89 42 54 75 0b 85 c0 75 07 c7 42 54 16 00 00 00 6b 44 [ 293.686945][ C0] RSP: 002b:00000000f54fd100 EFLAGS: 00010296 [ 293.686945][ C0] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f54fd0f0 [ 293.686945][ C0] RDX: 0000000000000000 RSI: 00000000080dcf38 RDI: 000000000815e000 [ 293.686945][ C0] RBP: 000000000818af6c R08: 0000000000000000 R09: 0000000000000000 [ 293.686945][ C0] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 293.686945][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.686945][ C0] Kernel Offset: disabled [ 293.686945][ C0] Rebooting in 86400 seconds..