last executing test programs: 13m43.314654385s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x40408d1) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x81}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x8, 0x1, 0x4, 0x5, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x6d9}, &(0x7f0000000100)=0x8) 13m41.959276467s ago: executing program 2 (id=16): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000640)='./file1\x00', 0x3010012, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16], 0x1, 0x5f4, &(0x7f0000000d00)="$eJzs3T1vHMcdB+DfLimKVACJtiXbCRKEkIoEFiLxeLbMIkCUIAhYGIGBNG5cENLJInSiDZIOaCMIpLy2+QZ2CqpOlSJIIcCp8xUIpHARID07Bbu3R57FF5F64R3t5wGGM3OzOzvz5+7wdg/EBfjGWngvpx6myMLld9ar+uZGu7u50b7bLyc5naRMxntZiuWk+CK5nl7Kt6sXm+6K/Y7z/mdvz3/ZenC/VxtvUr19edB+h3OvSZlJMtbkz6u/G8/cX7E9wypgl/qBg2F7tMu9o+z+jNctMAqK3t/NXaaTM0kmm/cBaVaH8nhH97Qm92050ioHAAAAJ9S5rWxlPWeHPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4SZrv/y+aVPbLMyn63/8/0byWpnyiPRz2AAAAAAAAAADgOfj+VraynrP9+qOi/sz/Yl05X//8Vj7OajpZyZWsZzFrWctKWkmmBzqaWF9cW1tpHWLPuT33nDue+QIAAAAAAADA19TvsrDz+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyCIhnrZXU63y9PpxxPMplkotruXvLPfvkkezjsAQAAAMAxOLeVraznbL/+qKjv+V+t7/sn83GWs5alrKWbTm7WzwJ6d/3l5ka7u7nRvlul3f3+9H9HGkbdY3rPHvY+8my9xYXtPRbyi/wqlzOTd7OSpfw6i1lLJzP5eV1aTJHp5unFdH+ce4/3+ldq7z5prK/XI5nKrSzVY7uSG/kw3dxMWc+h3ubgI96volP8pHHIGN1s8mpGf2ny0TBdR+TUdkRmUxRF8xt96eBIHPE8efxIrZTbz6DOv4CYn2nyajZ/GumYzw2cfa8eHInk4n++9/fb3eU7t2+tXh6dKT3JPiN9PBLtgUi89vWMxD4mmmj0VtGjrZYX633PZim/zIe5mU7eynzeylzezJuZzXyuDcT1wiGutfJo19qlHzaFqSR/bvLRUMX1pYG4Dq5003Xb4Cs7UXr5+a9I499pCtUxft/ko+HxSLQGIvHKwZH466Pq52p3+c7K7cWPDnm8HzR5ddn+caTW5up8ebn6ZdW1r54dVdsre7a16rbz223lrrYL221PulInmvdwu3uaq9te27OtXbe9PtC217scAEbemTfOTEz9d+rfU59P/WHq9tQ7kz87PX/6uxM59a/xf4z9rXxQ/rh4I5/ntzv3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNNb/eTTO4vdbmdF4WkKY6MxjOEXzjXn07P2UyYZgekodIe8MAEv3NW1ux9dXf3k0x8tlYsfdD7oLLfbrWtz89fm565dvbXU7cxevbU03pkd9jCBF2Dnj/6wRwIAAAAAAAAAAAAc1nH8O8Gw5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcbAvv5dTDFGnNXpmt6psb7W6V+uWdLceTlEmK3yTFF8n19FKmB7or9jvO+5+9Pf9l68H9nb7G+9uXB+13OPealJkkY03+vPq78cz9FdszrAJ2qR84GLb/BwAA//9ncwfo") syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000020c0)='./file1\x00', 0x208402, &(0x7f00000021c0)=ANY=[], 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x40000000040a01, 0x0) unshare(0x400) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r2, 0x111, 0x3, 0x0, 0x4d) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x60000, 0x837, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0x8, 0x200, 0x8, 0x2000000028, 0x80000005, 0x2}) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)) 13m37.649447828s ago: executing program 2 (id=22): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f7274f37e1bef3d6c6f7765722c746e616d653d77696e6e742c6e66732c6e6f6e756d6c6148f73d312c73686f72746e616d653d6c6f7765722c7379735f696d6d757461626c652c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c726f6580722c726f6469722c00"/144], 0x0, 0x2e4, &(0x7f0000000e00)="$eJzs3E1rE1sYwPEnSZsmLW2yKBfu4nIfdKOboY2fIEgLYkCpjfgCwtRONGRMSiZGImK6cyt+DHHpSkH9At24c69uiiC46UKNZDJT8zLpm22Tmv8Pypyec56ZMzkn4Ulgzua1p/cKOcfImRUJx1TCIuuyJZJsljwh7xh2y1Fpty5np759+O/K9RsX05nMwpLqYnr5XEpVZ/5/8+DRi1PvKlNXX868npCN5K3Nr6mPG/9s/Lv5c9k/e0nE1JVSqWKu2Jau5p2CoXrZtkzH0nzRscoVbWvP2aW1tZqaxdXpybWy5ThqFmtasGpaKWmlXFPzjpkvqmEYOj0poyayz/7NV2hpyUwf0XBw/OJBleVy2owENmafH8egAADAcOnI/380Wvl/V6LQnf/fbGs7aP5/N+9o3tFiqSO/783/w7KP/F9kRPP/wLRvN5+a+V9A/j/Rp3+/egy5Zv4/6b1/O5H/AwAAAAAAAAAAAAAAAAAAAABwEmw1GolGo5Hwj/7fhIjERMT/f9DjxNFg/kdb24N7MRH7STVbzbaOrfZ0TvJiiyVz4yLf3fXgaZUXL2QW5tSVlLd23YuvV7MR94ExN96XDI6fb8Vre3xdxt39Kbavn5KEzPrx49IenwqIr2ajcuZ0w39mzRJDEvL+tpTEltXmug61Fncz/vG86vlLma74uNsPAAAAAIC/gaHber6/u+2G+tuGdLW3Kn//PiCJXX4f6Pp+PSahscHdNwAAAAAAo8SpPSyYtm2Vh6bgj+zwzxw/zDMf80sX752vWMG06171juFjIuLVvOp/iWcyJAtguxBu3thOfaL9pzLyB7McFuuLiHQ0zR7SdEcH+o77fN9bLnvoHPRp0buDMAAAAICTw0/6Q4MeCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI2yvm4f5/Q+y91jb5SKDuUsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgOPwKAAD//+2iCA8=") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) 13m33.691720929s ago: executing program 2 (id=28): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000001bc0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500007400640000fc01900000000001000000aa05019078e00100e0460000050000000000110000ffffffff000000008303008903f1443c00030a01010400000001e000000100000001ac141400000000007f000001000000000a01010000000001e00000010000000400000000ffffff0a0000", @ANYBLOB="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"], 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000180)=0x5, 0x23) write(r0, &(0x7f0000000580)="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", 0x146) read(r0, &(0x7f00000003c0)=""/14, 0xe) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000480)='./file1\x00', 0x103892, &(0x7f0000000300)={[{@data_writeback}, {@jqfmt_vfsold}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@acl}, {@nodelalloc}], [{@obj_role={'obj_role', 0x3d, 'data=writeback'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ns/cgroup\x00'}}]}, 0x81, 0x7cc, &(0x7f00000013c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0xfffffffffffffffa, r0}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) connect$inet(r2, 0x0, 0xffffffffffffffbc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x801) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000000c0)={0x0, 0xfffffe79, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x80c0}, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r7, &(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRES64=r6, @ANYRESHEX=r7, @ANYRES16=r1, @ANYRES8=r3, @ANYRESDEC=r5], 0x0) 13m27.894589132s ago: executing program 2 (id=38): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '$:],-}\x12-\x0e)^\''}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007"], 0x5c}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x8, 0x4) r3 = socket(0xc, 0x6, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20102) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x200810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f5e17328820"], 0x7) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001100)={{r0}, 0x0, 0xc, @inherit={0x48, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]}, @subvolid=0x7}) 13m26.958476579s ago: executing program 32 (id=38): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '$:],-}\x12-\x0e)^\''}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007"], 0x5c}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x8, 0x4) r3 = socket(0xc, 0x6, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20102) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x200810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f5e17328820"], 0x7) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001100)={{r0}, 0x0, 0xc, @inherit={0x48, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]}, @subvolid=0x7}) 12m32.089910319s ago: executing program 4 (id=150): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) futex(&(0x7f0000000400), 0x6, 0x2, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7ff}}, {@inlinecrypt}, {@mblk_io_submit}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xfffffffffffffffb}}, {@nodiscard}, {@nodiscard}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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") setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x6, &(0x7f00000001c0)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000003c0)='anon_inodefs\x00', 0x1) fsmount(r4, 0x0, 0x80) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000000140)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x24000810) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x41, 0xfffffffd}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r7, 0x2007ffc) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) 12m27.282669431s ago: executing program 4 (id=164): sendmmsg$alg(0xffffffffffffffff, &(0x7f000000ab40)=[{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000000500)="5fde8d8a7cdc9d00b25c7e1dc397d8b9936ca1b51be0d0090833901fe6ed936a9029b88f30238aacdc2ee4c23b650db2e005380873f6e4076b09816b65d83b84ed8354200e28689eb9f527f81b366758fbed9069865dada837fb5e7013d2f205095f7669d7a533b7f4fbd782a10e2d9584ffec93da9edf901a1f7b693bb926c2f9d9da89eeb3770bd1e7d45a07dcc497f3e27f2bf30157dd7d6596aa3375c55244e640a494403dc3d3343cb75b34d3f0b87f7dc87ba0c035f63bde4d6fb9e94d2e28a5ab5b45a4eca816ab62de439f3e0d4e742c0911dabae66985cebed00d623b21b82f841862cc8de3428478f8350b1ce4110ee95c11409ac78e54520442bf8d4211fa04648e8c8d1b691685a11e58b0b09d5d8f3007921cf8227ba32861a2d8e3279ed31fafd5549702c6e0de697ded0b3110be31673d6cd13c9d4802c615798eb5e51050ead6a09ce5ac35a25533fd518b882a8bf3b3582041240574623734a62be7097790ae2897d5684ac81a35c67534d83bf6bbc616a4919282da26c01096", 0x182}], 0x1, 0x0, 0x0, 0x2000c840}], 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@overlay={0x3ab, 0x8, 0x4, 0x1, 0x7fffffff, {0x0, 0x2710}, {0x2, 0x2, 0xab, 0xe, 0x0, 0x9, "fe0167b9"}, 0x7fffffff, 0x3, {}, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000c8090011000006001500020000001400168010000880"], 0x38}}, 0x4000000) 12m27.016702325s ago: executing program 4 (id=165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x9, 0x10001, 0x120000, 0x4044, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000340)={{0x0, 0x2710}}, 0x100) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000080)) 12m26.613507425s ago: executing program 4 (id=166): mkdirat(0xffffffffffffff9c, 0x0, 0xc8) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0x44, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) chdir(0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000102b7e43cec00001800010100000000fedbdf351d01", @ANYRES32=0x0, @ANYBLOB="a672e30331d9b5b51ec39ba3c3f1405bfda41c2cc063a2d77f2aa695cdec16ec6c827e4ee27b0e2f378a730e2ff2feed929e4038927a22505f3810fb2950f99c646d3ed752cf9317246e4d6e05cb3a7211fda581dab9772a521cbac6e6e45840d02c9c8b5bc332ac69cd2dfc91cbde8db565cf5d76656209cde979a364cce2dbe477d591b94c6d8a302a6d427d1f5cd77f5e2973d5c731ee7154db5e9c3ab4ea816e9d58b832fb286cddc14163891a817c1e0264"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000340)=0x10001, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r6, 0x1, 0x1e, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60354ec000443c0000000000000000000000ffff00000000fe8000000000000000001000000000aa0420880b0000000300000800000086dd080088be00000000100000000100000000000000080022eb000000002000001002000000fffffffc000000000800655800000000"], 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000580)='smaps\x00') sched_setscheduler(r7, 0x0, &(0x7f0000000100)=0xfffffff5) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000100008b00000200000a300004802c0001800c00010062697477697365001c00028008000340000000f0080002400000001608000140000000150900010073797a30000000000900020073797a320000000014000000110001000000000000000000f500000a6a7fe8162c1799d67ae49f9aa3e2b7fb37474a67bdb532b24abca70add93ef2322fb60530461d0773a1bbf8aab60c451aeae087dcf251212a5c8c55a6073f15aa2841fe6bfccc50353f217a30c3f9cf4a8"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0x2}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0) 12m25.601916625s ago: executing program 4 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003b000103"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0xc004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000580)="db1b8d0e09e532f63a24b83e3d14f8d5fb2a8cd68ac612", 0x17}, {&(0x7f0000000640)="83aa5b1fa94b4f1f5e033bc1a4e0fb11c66603c3ef", 0x15}, {&(0x7f0000000740)="902f616f5a57260b1e9cf0a06ed5d442b64bb528a2a4e364e7b177443e1ece4eedd3102db3a4a085787da71dc0a9955b4741ebc032e5dedecc65c28ca933e6c653b517b117ebe3a320218a3d9cab1f3c42b092cd63fc813677ecc78a125d", 0x5e}, {0x0}], 0x4, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000680)={0x100, 0x200, 0x10001, 0x9}, &(0x7f0000000700)=0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) sendto(r4, &(0x7f0000000200)='[', 0x1, 0x4040080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x15) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 12m20.96715204s ago: executing program 4 (id=175): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="a25cbd562d80558ceac1070bb2061dd760dae7ff1161ac763d196edb2b41edaa2d28c4741d3c8c038a13be3c9488ef605655ce975d8080a7bbe326296a23589d7d7fdd339688c16626e1511106816236a7df16701bffbea2", 0x58}, {&(0x7f0000000140)="fe1ce14e14b7ec76328a22fcaa1ac52a6951608a7efecfee3a143ddec77ac954557c4c039ebde62b6992ad7c9921633974ebe2f4758e3ea96a1f0342678907fb04489a24099f199f26e61d96c0a8a81f5839690b09fd8b3a3ece07164855d90fc81275b695d170af15a4d873e94ab6ee388cbacb44c1ba09e8563dc049d84214eadb1b53cdad9a3706c09c5bcd7a7e25eafa0028ee0eb8d7600a9047c04b0101c02cfab818cf9ac8c27a8f536a3306618330fe6c61aa31c61127", 0xba}], 0x2, &(0x7f0000000280)=[{0x58, 0x111, 0x5bb1708, "b0559488ce24e18455243df931576629620916af947c010df05ace6d7445407485e8d160e5d21d928336952fe74ca021ad6b2864b9d4bda473db39be3b6b9c8d619d83cee7"}], 0x58}}, {{&(0x7f0000000300)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=[{0x58, 0x101, 0x80000000, "595c6f32e1a2a34482fe69808e27fab04fa557a86e33164504703e95bbca0eb083b6bbb0b904531da1da01302a121f264d7a62b570a3e7312ea03aac45c52697ddb56889a5"}, {0x30, 0x7, 0xfff, "b8bec69fa80ad60877cf9597205c5623d86da7831c5e61363e0fcc6708ed"}, {0xa0, 0x0, 0x6, "e7273a42f01c06be966e3e40634bd4c3ba841b1f87c55e315ffb9128e231792f37bbf1140c512b7e336dc3e1fe3d0defe72b17c05f17af2a02c6645d9c46432d80cc02ca6acc82e4f5d6d7c4d7fca4f5e454adef79ab6cad13a5eb2592528615ccf6ae982d2f706bdadb7bd3b521bd4dcd49049eb6f2aa13d35dcdd197e2f77fb95b56a8a250fe72b5c30d94"}], 0x128}}], 0x2, 0x48000) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005b80)=""/19, 0x13}, 0x8}], 0x1, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0xc000, &(0x7f0000000200)={0xa, 0x4e44, 0x6, @mcast1, 0x20000}, 0x1c) 12m20.093480189s ago: executing program 33 (id=175): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="a25cbd562d80558ceac1070bb2061dd760dae7ff1161ac763d196edb2b41edaa2d28c4741d3c8c038a13be3c9488ef605655ce975d8080a7bbe326296a23589d7d7fdd339688c16626e1511106816236a7df16701bffbea2", 0x58}, {&(0x7f0000000140)="fe1ce14e14b7ec76328a22fcaa1ac52a6951608a7efecfee3a143ddec77ac954557c4c039ebde62b6992ad7c9921633974ebe2f4758e3ea96a1f0342678907fb04489a24099f199f26e61d96c0a8a81f5839690b09fd8b3a3ece07164855d90fc81275b695d170af15a4d873e94ab6ee388cbacb44c1ba09e8563dc049d84214eadb1b53cdad9a3706c09c5bcd7a7e25eafa0028ee0eb8d7600a9047c04b0101c02cfab818cf9ac8c27a8f536a3306618330fe6c61aa31c61127", 0xba}], 0x2, &(0x7f0000000280)=[{0x58, 0x111, 0x5bb1708, "b0559488ce24e18455243df931576629620916af947c010df05ace6d7445407485e8d160e5d21d928336952fe74ca021ad6b2864b9d4bda473db39be3b6b9c8d619d83cee7"}], 0x58}}, {{&(0x7f0000000300)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=[{0x58, 0x101, 0x80000000, "595c6f32e1a2a34482fe69808e27fab04fa557a86e33164504703e95bbca0eb083b6bbb0b904531da1da01302a121f264d7a62b570a3e7312ea03aac45c52697ddb56889a5"}, {0x30, 0x7, 0xfff, "b8bec69fa80ad60877cf9597205c5623d86da7831c5e61363e0fcc6708ed"}, {0xa0, 0x0, 0x6, "e7273a42f01c06be966e3e40634bd4c3ba841b1f87c55e315ffb9128e231792f37bbf1140c512b7e336dc3e1fe3d0defe72b17c05f17af2a02c6645d9c46432d80cc02ca6acc82e4f5d6d7c4d7fca4f5e454adef79ab6cad13a5eb2592528615ccf6ae982d2f706bdadb7bd3b521bd4dcd49049eb6f2aa13d35dcdd197e2f77fb95b56a8a250fe72b5c30d94"}], 0x128}}], 0x2, 0x48000) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005b80)=""/19, 0x13}, 0x8}], 0x1, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0xc000, &(0x7f0000000200)={0xa, 0x4e44, 0x6, @mcast1, 0x20000}, 0x1c) 8m56.269169376s ago: executing program 3 (id=587): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x371, &(0x7f00000010c0)=ANY=[@ANYBLOB="1201000057ec0020c215dcff6abd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r1, 0x0, 0x0) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x3, 0x7ff78000}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) 8m53.457044018s ago: executing program 3 (id=592): syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x4002) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x800, 0x80000001, 0x47524247, 0x9, 0x0, 0x0, 0x8, 0xffffffff, 0x1}}) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000200)={0x9, {0xf, 0xffffffffffffff65, 0x0, 0x8, 0x800}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x200, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r1}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10004185}, 0x44890) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) 8m52.659567742s ago: executing program 3 (id=593): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x1002, &(0x7f0000000fc0)=""/4098, 0x41100, 0x24}, 0x94) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 8m51.217323516s ago: executing program 3 (id=594): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@acl}, {@norecovery}, {@bsdgroups}, {@noload}, {@delalloc}, {@resuid}, {@discard}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@errors_remount}]}, 0xfa, 0x477, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0xe8) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 8m49.911921576s ago: executing program 3 (id=600): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_PTRACER(0x59616d61, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000100)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@uni_xlate}, {@fat=@tz_utc}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@fat=@nocase}, {@shortname_lower}, {@shortname_mixed}, {@fat=@errors_remount}, {@shortname_lower}], [{@smackfsdef={'smackfsdef', 0x3d, 'utf8=0'}}, {@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@euid_gt}, {@obj_role}, {@hash}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000280)=""/213, 0xd5) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@errors_remount}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r3, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 8m46.372145802s ago: executing program 3 (id=606): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) fchown(r0, 0x0, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x5}, 0x10, r2}, 0x94) (async) fcntl$notify(r0, 0x402, 0x0) 8m46.100116075s ago: executing program 34 (id=606): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) fchown(r0, 0x0, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x5}, 0x10, r2}, 0x94) (async) fcntl$notify(r0, 0x402, 0x0) 1m4.012830972s ago: executing program 1 (id=1213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x800400, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64=r1], 0x0, 0x1bf, &(0x7f00000002c0)="$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") ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000340)={0xb6}) 1m0.729827231s ago: executing program 1 (id=1218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 57.617701773s ago: executing program 1 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000e280), 0x58a, 0x42, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_ethernet(0x4f, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a60019000000000000000000000000ffffffffffffff02000000000000000000000000000184000100000000002234a2d5c9a46b9fa14172170a01358931"], 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r5, &(0x7f0000002280)=[{&(0x7f0000002080)='T', 0x1}], 0x1) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x2dc}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) gettid() r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0}, 0x1}, 0x18) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x9, 0xe, 0x8000, 0x0, 0x4, 0x3, 0xc, 0x1f}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 55.553356077s ago: executing program 1 (id=1220): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) ioctl$BLKPG(r0, 0x1269, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 54.203074625s ago: executing program 1 (id=1221): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)=ANY=[], 0x0, 0x600) 53.540591285s ago: executing program 1 (id=1224): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x60, 0x8, 0x2, '#;'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000002c0)=0x3, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 37.563652069s ago: executing program 35 (id=1224): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x60, 0x8, 0x2, '#;'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000002c0)=0x3, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 25.920902717s ago: executing program 0 (id=1234): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28843, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x7f, {0x0, "3626f367460f017e4466baf80cb8e850ef83ef66bafc0ced48b84f3e0000000000000f23d00f21f835300000070f23f8b805000000b9ce9c00000f01d967646740fe8a870000002e66410f38816813364e0fc7a9c0000000c4c30949eea7410f01f8c4c2f0f219"}}], 0x97}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x2001) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/201, 0xc9) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000140)={0x110001, 0x0, {[0x3, 0x2, 0x6, 0x9a47, 0x1ff, 0x9586, 0x1, 0xe02]}}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) 20.964373989s ago: executing program 0 (id=1235): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) ioctl$BLKPG(r0, 0x1269, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20.525626496s ago: executing program 0 (id=1236): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f00000004c0)="7d3ed2ea1f2f23edbb324820e73b5f4b111a03df64a4853ed1b3000073", 0x1d}], 0x2}, 0x24000008) write$uinput_user_dev(r0, &(0x7f0000000740)={'syz0\x00', {0x7, 0x89f, 0xd, 0x4}, 0xf, [0x2, 0x40, 0x1, 0xf, 0x2560, 0x1, 0x5, 0x7, 0x9, 0x6f7, 0x4, 0x101, 0x861, 0x6, 0xa12, 0xff, 0x8, 0x1, 0x4, 0x5, 0x40, 0xfffffff2, 0x3, 0x7a37, 0x1b92, 0x5, 0x8bb9, 0x4, 0x800, 0xffffffff, 0x7, 0x8, 0x2, 0x2, 0x4, 0x3f1, 0xe, 0x3, 0x2, 0x7, 0x7, 0x7, 0x2, 0x4, 0xfae, 0x1, 0x7ff, 0xfffffffc, 0x5, 0x3, 0x7, 0x7, 0x10001, 0x0, 0x2635f771, 0x2, 0x5, 0x8000, 0x1a, 0xfffffffa, 0x810, 0xfffffff5, 0x5, 0x1], [0x8000, 0x5, 0x7f, 0xfffffff8, 0x0, 0x97, 0x8, 0xc, 0xffffffff, 0xfffffff9, 0xfffffffc, 0x4, 0xfffffffe, 0x1, 0x0, 0x800, 0x3, 0x5, 0x10000, 0x8, 0x5, 0x92a, 0xf, 0x6, 0x3, 0xdee, 0x39, 0x8, 0x9, 0x1, 0xfe, 0x8, 0x2, 0xffff, 0x7, 0x1, 0x60, 0x800, 0x6ab, 0x800, 0x2, 0xfffffff7, 0x8, 0x93, 0xd6, 0x8, 0x4, 0x100, 0x7, 0x8, 0x0, 0x4, 0x3, 0x101, 0xfa7, 0x0, 0x3, 0x1000, 0x5, 0x3, 0x21, 0x2, 0x0, 0x5], [0x8, 0xf, 0x2, 0x0, 0x5, 0x5, 0x2, 0x0, 0x8f86, 0x2, 0xe6, 0x0, 0x1, 0x8, 0xb, 0x0, 0x6, 0x7, 0x10000, 0x8, 0x7fff, 0xe, 0x5, 0x101, 0x8, 0x0, 0x4, 0x6, 0x9, 0x5, 0x5, 0xffff, 0x2, 0x7, 0x7, 0xfffffffd, 0x1, 0x8, 0x4, 0x5, 0x7, 0xffffd331, 0x40, 0x4, 0x73fe0e81, 0x3, 0x8, 0x0, 0x9, 0xd0, 0x80000001, 0x8, 0x4cf, 0xc60, 0x40, 0x6, 0x8, 0x9, 0x4, 0x5, 0x200, 0x9, 0xffffffb0], [0x101, 0x5, 0x8, 0x5a3a6bef, 0xb5, 0x4, 0xf, 0x0, 0xffff0001, 0x8, 0x8, 0x7, 0x9, 0xffffffff, 0x3ff, 0xfffff214, 0xe6e0, 0x80, 0x83, 0x6, 0x9, 0x3, 0x79953168, 0x5, 0x5, 0x2, 0x2, 0x0, 0x8, 0x9, 0x9, 0x3, 0x38b, 0xa7, 0x1, 0x5, 0x1, 0x4, 0x401, 0xffff, 0x4, 0x4d7, 0x440, 0x99e1, 0x6, 0x7, 0xfffffffa, 0x25, 0xd, 0x2, 0x97, 0xffffffff, 0x7ff, 0x6, 0x4, 0x57e, 0x7, 0x2, 0x6, 0x6, 0x6, 0xa32, 0x401, 0x6]}, 0x45c) 18.139663019s ago: executing program 0 (id=1237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x11, 0x1a3, &(0x7f0000000440)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0, 0x0, 0x100) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100005800c0006"], 0x34}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1}, 0x10150) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x10880, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x611f, &(0x7f00000154c0)="$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") r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1512, &(0x7f0000000740)="$eJzs3AuYjtXaOPD7Xms9jGnS2ySHYa11P7xpsEyS5JAihyRJkiSnhKRJkoTEEJKEJOfDJDkMITlMY9I4nw85J022NEmSU05h/S/tvr+9v/p2375239//23P/rmtds+553nu99zP3zLzrea7rfb/vNrx20zo1GhMR/Evwr19SACAGAAYBwHUAEABAhfgK8ZeP55OY8q89CftzPZJ2tStgVxP3P3fj/udu3P/cjfufu3H/czfuf+7G/c/duP+M5WZbZxW5nkfuHXz/Pzfj1/9/IzllJ369vuyN3f+JFO5/7sb9z924/7kb9z934/7nbtz/f3/V/8Ex7n/uxv1nLDe72vefeVzdcbV//xhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Q5n/RUKAP5jfrXrYowxxhhjjDHG2J/H573aFTDGGGOMMcYYY+x/HoIACQoCyAN5IQbyQSxcA3FwLeSH6yAC10M83AAF4EYoCIWgMBSBBCgKxUCDAQsEIRSHEhCFm6Ak3AyJUApKQxlwUBaS4BYoB7dCebgNKsDtUBHugEpQGapAVbgTqsFdcDdUhxpwD9SEWlAb6sC9UBfug3pwP9SHB6ABPAgN4SFoBA9DY3gEmsCj0BQeg2bwODSHFtASWkHrP8gH/L38l6EXvAK9oQ+kQF/oB69CfxgAA+E1GASvw2B4A4bAmzAUhsFweAtGwNswEt6BUTAaxsBYGAfjYQJMhEkwGVLhXZgC78FUeB+mwXSYATMhDWbBbPgA5sBcmAcfwnz4CBbAQlgEiyEdPoYMWAKZ8AkshU8hC5bBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVPoNtsB12wE7YBbthD3wOe+EL2AdfQjZ89U/mn/lP+d0REFCgQIUK82AejMEYjMVYjMM4zI/5MYIRjMd4LIAFsCAWxMJYGBMwAYthMTRokJCwOBbHKEaxJJbEREzE0lgaHTpMwiQsh7dieSyPFbACVsSKWAkrY2WsilWxGlbDuxEqBVADa2JNrI218V68F+/DelgP62N9bIANsCE2xEbYCBtjY2yCTbApNsVm2AybY3NsiS2xNbbGNtgG22JbbI/tsQN2wI7YEZMxGTthJ+yMnbELdsGu2BW7YTfsjj2wB76ML+Mr+Ar2wZqiL/bDftgf+++7/MfwGr6Og/ENfAPfxKE4DIfjW/gWvo0j8TSOwtE4BsdgNTEeJ+BEJDEZUzEVp+AUnIpTcRpOx+k4E9NwFs7G2TgH5+Jc/BDn40f4ES7EhbgY0zEdM3AJZmImLsUzmIXLcDmuwJW4ClfiGlyLa3A9bsD1uAk34Rbcgp/hZ7gdt+NO3Im7cTd+jp/jF/gFDsVszMb9uB8P4AE8iAcxB3PwEB7Cw3gYj+ARPIpH8RgexxN4HE/hKTyNZ/AsnsXzeB4v4IsJ3zbZXWrdUBBCiC9/vQ0oYkSMiBWxIk7Eifwiv4iIiIgX8aKAKCAKioKisCgsEkSCKCaKCSOMIBGK4qK4iIqoKClKikSRKEqL0sIJJ5JEkignyonyoryoIG4XFcUdopKoLNq5qqKqqCbau7tFdVFD1BA1RS1RW9QRdURdUVfUE/VEfVFfNBANREPxkGgk+uJAfERc7kxTMQybieHYXLQQLUUr8TY+IdqIkdhWtBPtxVNiNI7CjqKNSxbPik5iAnYWz4uJ+ILoKiZjN/GS6C56iJ7iZdFLtHW9RR8xDfuKfmIm9hcDxEDxmpiDtcTljtUWb4qhYpgYLt4Si/FtMVK8I0aJ0WKMGCvGifFigpgoJonJIlW8K6aI98RU8b6YJqaLGWKmSBOzxGzxgZgj5op54kMxX3wkFoiFYpFYLNLFxyJDLBGZ4hOxVHwqssQysVysECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFZ2Kb2C52iJ1il9gt9ojPxV7xhdgnvhTZ4iuxX/xFHBBfi4PiG5EjvhWHxHfisPheHBE/iKPiR3FMHBcnxElxSvwkTosz4qw4J86Ln8UFcVFcEl6ARCmklEoGMo/MK2NkPhkrr5Fx8lqZX14nI/J6GS9vkAXkjbKgLCQLyyIyQRaVxaSWRlpJMpTFZQkZlTfJkvJmmShLydKyjHSyrEySt8hy8lZZXt4mK8jbZUV5h6wkK8sqsqq8U1aTd8m7ZXVZQ94ja8pasrasI++VdeV9sp68X9aXD8gG8kHZUD4kG8mHZWP5iGwiH5VN5WOymXxcNpctZEvZSraWT8g28knZVraT7eVTsoN8WnaUz8hk+azsJJ+TneXzsot8QXaVL8pu8iXZXfaQPeVFeUl62Vv2kSmyr+wnX5X95QA5UL4mB8nX5WD5hhwi35RD5TA5XL4lR8i35Uj5jhwlR8sxcqwcJ8fLCXKinCQny1T5rpwi35NT5ftympwuZ8iZMk3OkgN/XWnefyP/vd/JH/LLs2+RW+VncpvcLnfInXKX3C33yD1yr9wr98l9Mltmy/1yvzwgD8iD8qDMkTnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxJnpZn5Bl5Tp6X5+WFX38GoFAJJZVSgcqj8qoYlU/FqmtUnLpW5VfXqYi6XsWrG1QBdaMqqAqpwqqISlBFVTGllVFWkQpVcVVCRdVNqqS6WSWqUqq0KqOcKquS1C3/cv4f1ddatVZtVBvVVrVV7VV71UF1UB1VR5WsklUn1Ul1Vp1VF9VFdVVdVTfVTXVX3VVP1VP1Ur1Ub9VbpagU1U+9qvqrAWqgek0NUq+rwWqwGqKGqKFqqBquhqsRaoQaqUaqUWqUGqPGqHFqnJqgJqhJapJKValqipqipqqpapqapmaoGSpNpanZaraao+aoeWqemq/mqwVqgVqkFql0la4yVIbKVJlqqVqqstQytUytUCvUKrVKrVFr1Dq1Tm1QG9QmtUllqa1qq9qmtqkdaofapXapPWqP2qv2qn1qn8pW2Wq/2q8OqAPqoDqoclSOOqQOqcPqsDqijqij6qg6po6pE+qEOqVOqdPqtDqrzqrz6ry6oC6oS+rS5W1fIAIRqEAFeYI8QUwQE8QGsUFcEBfkD/IHkSASxAfxQYHgxqBgUCgoHBQJEoKiQbFAByawAQVhUDwoEUSDm4KSwc1BYlAqKB2UCVxQNkgKbgnKBbcG5YPbggrB7UHF4I6gUlA5qBJUDe4MqgV3BXcH1YMawT1BzaBWUDuoE9wb1A3uC+oF9wf1gweCBsGDQcPgoaBR8HDQOHgkaBI8GjQNHguaBY8HzYMWQcugVdD6T13f+9OFnnS9dR+dovvqfvpV3V8P0AP1a3qQfl0P1m/oIfpNPVQP08P1W3qEfluP1O/oUXq0HqPH6nF6vJ6gJ+pJerJO1e/qKfo9PVW/r6fp6XqGnqnT9Cw9W3+g5+i5ep7+UM/XH+kFeqFepBfrdP2xztBLdKb+RC/Vn+osvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vv2Z3qa36x16p96ld+s9+nO9V3+h9+kvdbb+Su/Xf9EH9Nf6oP5G5+hv9SH9nT6sv9dH9A/6qP5RH9PH9Ql9Up/SP+nT+ow+q8/p8/pnfUFf1Je0v7y5v/zybpRRJo/JY2JMjIk1sSbOxJn8Jr+JmIiJN/GmgClgCpqCprApbBJMgilmipnLyJApboqbqImakqakSTSJprQpbZxxJskkmXKmnClvypsKpoKpaCqaSqaSqWKqmDvNneYuc5epbqqbe8w9ppapZeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCamqWlqmplmprlpblqalqa1aW3amDamrWlr2pv2poPpYDqajibZJJtOppPpbDqbLqaL6Wq6mm6mm+luupuepqfpZXqZ3qa3STEppp/pZ/qb/magGWgGmUFmsBlshpghZmy5DdUvb5ZGmBFmpBlpRpnRZowZa8aZ8WaCmWgmmckm1aSaKWaKmWqmmmlmmplhZpg0k2Zmm9lmjplj5pl5Zr6ZbxaYBWaRWWTSTbrJMBkm02SapWapyTJZZrlZblaalWa1WW3WmrVmvVlvNpqNZrPZbLaarWab2WZ2mB1ml9ll9pg9Zq/Za/aZfSbbZMf8enFnDpqDJsfkmEPmkDlsDpsj5og5ao6aY+aYOWFOmFPmlDltTpuz5qw5b342F8xFc8l4E2MFxNprbJy91ua319kYm8/+bVzYFrEJtqgtZrUtaAv9XWystYm2lC1ty1hny9oke8tv4kq2sq1iq9o7bTV7l737N3Fde5+tZ++39e0Dto699+/iBvZB29A+ZhvZx21j28I2sa1sU/uYbWYft81tC9vStrId7NO2o33GJttnbSf73G/iDLvErrXr7Hq7we61X9iz9pw9bL+35+3PtrftYwfZ1+1g+4YdYt+0Q+2w38Rj7Fg7zo63E+xEO8lO/k08w860aXaWnW0/sHPs3N/E6fZjO99m2gV2oV1kF/8SX64p035il9pPbZZdZpfbFXalXWVX2zX/t9YVdpPdbLfYPfZzu81utzvsTrvL7v4lvnwe++yXNtt+ZQ/Z7+wB+7U9aI/YHPvtL/Hl8wP4wR61P9pj9rg9YU/aU/Yne9qe+eX8L5/7SXvRXrLeAiEJkqQooDyUl2IoH8XSNRRH11J+uo4idD3F0w1UgG6kglSIClMRSqCiVIw0GbJEFFJxKkFRuolK0s2USKWoNJUhR2UpiW6hcnQrlafbqALdThXpDqpElakKVaU7qRrdRXdTdapB91BNqkW1qQ7dS3XpPqpH91N9eoAa0IPUkB6iRvQwNaZHqAk9Sk3pMWpGj1NzakEtqRW1pieoDT1JbakdtaenqAM9TR3pGUqmZ6kTPUed6XnqQi9QV3qRutFL1J16UE96mXrRK9Sb+lAK9aV+9Cr1pwE0kF6jQfQ6DaY3aAi9SUNpGA2nt2gEvU0j6R0aRaNpDI2lcTSeJtBEmkSTKZXepSn0Hk2l92kaTacZNJPSaBbNpg9oDs2lefQhzaePaAEtpEW0mNLpY8qgJZRJn9BS+pSyaBktpxW0klbRalpDa2kdracNtJE20WbaQlvpM9pG22kH7aRdtJv20Oe0l76gffQlZdNXtJ/+QgfoazpI31AOfUuH6Ds6TN/TEfqBjtKPdIyO0wk6SafoJzpNZ+gsnaPz9DNdoIt0iTxBiKEIZajCIMwT5g1jwnxhbHhNGBdeG+YPrwsj4fVhfHhDWCC8MSwYFgoLh0XChLBoWCzUoQltSGEYFg9LhNHwprBkeHOYGJYKS4dlQheWDZPCW8Jy4a1h+fC2sEJ4e1gxvCOsFFYOH3uganhnWC28K7w7rB7WCO8Ja4a1wtphnfDesG54X1gvvD+sHz4Qlg8fDBuGD4WNwofDxuEjYZPw0bBp+FjYLHw8bB62CFuGrcLW4RNhm/DJsG3YLmwfPhV2CJ8OO4bPhMnhs2Gn8Lk/PJ4S9g37ha+Gr4be3y8XRRdH06MfRzOiS6KZ0U+iS6OfRrOiy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo1ui3tfJCw6dcNIpF7g8Lq+LcflcrLvGxblrXX53nYu46128u8EVcDe6gq6QK+yKuARX1BVz2hlnHbnQFXclXNTd5Eq6m12iK+VKuzLOubIuybVyrV1r18Y96dq6dq69e8o95Z52T7tn3DPuWdfJPec6u+ddF/eC6+pedC+6l1x318P1dC+7Xu4V19v1cSkuxfVz/Vx/198NdAPdIDfIDXaD3RA3xA11Q91wN9yNcCPcSDfSjXKj3Bg3xo1z49wEN8FNcpNcqkt1U9wUN9VNddPcNDfDzXBpLs3NdrPdHDfHzXPz3PzE+W6BW+AWuUUu3aW7DJfhMl2mW+qWuiyX5Za75W6lW+lWu9VurVvr1rv1bqPb6Da7zW6r2+q2uW1uh9vhdrldbo/b4/a6vW6f2+eyXbbb7/a7A+6AO+i+cTnuW3fIfecOu+/dEfeDO+p+dMfccXfCnXSn3E/utDvjzrpz7rz72V1wF90l511q5N3IlMh7kamR9yPTItMjMyIzI2mRWZHZkQ8icyJzI/MiH0bmRz6KLIgsjCyKLI6kRz6OZESWRDIjn0SWRj6NZEWWRZZHVkRWRlZFvC+6LfTFfQkf9Tf5kv5mn+hL+dK+jHe+rE/yt/hy/lZf3t/mK/jbfUV/h6/kK/sq/nHf3LfwLX0r39o/4dv4J31b386390/5Dv5p39E/45P9s76Tf8539s/7Lv4F39W/6Lv5l3x338P39C/7Xv4V39v38Sm+r+/nX/X9/QA/0L/mB/nX/WD/hh/i3/RD/TA/3L/lR/i3/Uj/jh/lR/sxfqwf58f7CX6in+Qn+1T/rp/i3/NT/ft+mp/uZ/iZPs3P8rP9B36On+vn+Q/9fP+RX+AX+kV+sU/3H/sMv8Rn+k/8Uv+pz/LL/HK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/1n/ltfrvf4Xf6XX633+M/93v9F36f/9Jn+6/8fv8Xf8B/7Q/6b3yO/9Yf8t/5w/57f8T/4I/6H/0xf9yf8Cf9Kf+TP+3P+LP+nD/vf/YX/EV/6b/7nrU8/2M30hljjDHG/ldI/YPjfX/ne+LXcVk/ALh2e5Gcvz0uAWBjwb/OB4iEDhEAeLZPt0f+Y9SsmZKS8utjsyQEJRYCQORK/i9btF/jZdAenoZkaAflfre+AaLHefqD9aO3A8T+TU7MXz/m4D+tf+t/sf4TT43JqBiejf8H6y8ESCxxJScfXImvrF/+v1i/UJs/qD/f16kAbf8mJw6uxFfWT4In4TlI/rtHMsYYY4wxxhhjfzVAVOlCl6+I4R9fnyeoKzl54Ur8R9fnjDHGGGOMMcYYu/pe6NHzmSeSk9t1+bMmeQHgT13wf/skBv6/KIMnPPmnJlf7PxNjjDHGGGPsz3Zl03+1K2GMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKv/xcfJ3a1z5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi72v5PAAAA//+CHzd4") fchdir(r5) open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000180)={0x2e, 0xfffffffa, {0x0}, {0xffffffffffffffff}, 0x80000001, 0x4f3}) sched_setscheduler(r6, 0x6, &(0x7f00000003c0)=0x4) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlink(&(0x7f0000000280)='./file1\x00') 17.137955973s ago: executing program 0 (id=1238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x466}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0xfffffffffffffe4a, &(0x7f0000000280)=0xca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) 15.286904045s ago: executing program 0 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f00000001c0)="19", 0x0}, 0x20) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x7d, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x58, 0x50, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x48}}, 0x0) 0s ago: executing program 36 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f00000001c0)="19", 0x0}, 0x20) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x7d, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x58, 0x50, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): _slave_0) entered blocking state [ 829.176736][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.177106][T10412] bridge_slave_0: entered allmulticast mode [ 829.180889][T10412] bridge_slave_0: entered promiscuous mode [ 829.234041][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.919076][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.928554][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.930186][T10412] bridge_slave_1: entered allmulticast mode [ 829.951881][T10412] bridge_slave_1: entered promiscuous mode [ 830.921735][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 830.975683][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 831.131850][T10375] team0: Port device team_slave_0 added [ 831.182351][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.202322][T10375] team0: Port device team_slave_1 added [ 831.222109][ T5781] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 831.352141][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.375267][ T5781] usb 2-1: Using ep0 maxpacket: 16 [ 831.377352][ T5781] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 831.377388][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 831.379857][ T5781] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 831.379888][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.379911][ T5781] usb 2-1: Product: syz [ 831.379926][ T5781] usb 2-1: Manufacturer: syz [ 831.379941][ T5781] usb 2-1: SerialNumber: syz [ 831.398747][ T5781] usb 2-1: config 0 descriptor?? [ 831.486894][ T5781] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 831.486921][ T5781] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 831.774267][T10113] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 831.808735][T10113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 832.046177][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.046196][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.046227][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.102770][T10113] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 832.120559][T10608] serio: Serial port ptm0 [ 832.299943][T10113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 832.301702][T10608] program syz.1.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 832.354834][ T5781] em28xx 2-1:0.0: chip ID is em2874 [ 832.447646][T10623] netlink: 84 bytes leftover after parsing attributes in process `syz.0.924'. [ 832.469516][T10412] team0: Port device team_slave_0 added [ 832.492627][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.492646][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.492678][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.546899][T10113] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 832.720126][ T5643] usb 2-1: USB disconnect, device number 32 [ 832.736558][ T5643] em28xx 2-1:0.0: Disconnecting em28xx [ 832.953854][ T5643] em28xx 2-1:0.0: Freeing device [ 833.210200][T10113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.668182][T10412] team0: Port device team_slave_1 added [ 834.025476][T10113] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 834.075892][T10113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 835.170102][T10633] loop1: detected capacity change from 0 to 131072 [ 835.204044][T10633] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 835.204157][T10633] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 835.229189][T10633] F2FS-fs (loop1): invalid crc value [ 835.697623][T10633] F2FS-fs (loop1): checksum invalid, nid = 3, ino_of_node = 3, b74bd9ca vs. 30330db5 [ 835.697896][T10633] F2FS-fs (loop1): Failed to read root inode [ 836.005378][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.005398][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.005430][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.197726][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.197746][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.197778][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.494447][T10375] hsr_slave_0: entered promiscuous mode [ 836.503923][T10375] hsr_slave_1: entered promiscuous mode [ 836.507046][T10375] debugfs: 'hsr0' already exists in 'hsr' [ 836.507076][T10375] Cannot create hsr debugfs directory [ 836.903239][T10412] hsr_slave_0: entered promiscuous mode [ 836.911721][T10412] hsr_slave_1: entered promiscuous mode [ 836.913795][T10412] debugfs: 'hsr0' already exists in 'hsr' [ 836.913829][T10412] Cannot create hsr debugfs directory [ 837.477327][ T5643] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 837.641451][T10654] loop1: detected capacity change from 0 to 512 [ 837.643304][T10654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 837.709659][T10654] EXT4-fs (loop1): 1 truncate cleaned up [ 837.712711][T10654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.783022][ T5643] usb 2-1: unable to get BOS descriptor or descriptor too short [ 837.819823][ T5643] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 837.819869][ T5643] usb 2-1: can't read configurations, error -71 [ 838.370948][ T5661] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.599670][T10681] loop1: detected capacity change from 0 to 64 [ 840.488308][T10681] syz.1.940: attempt to access beyond end of device [ 840.488308][T10681] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 840.488502][T10681] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 841.731224][T10693] loop1: detected capacity change from 0 to 32768 [ 841.839829][T10693] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 841.839855][T10693] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 842.183362][T10693] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 842.216056][ T5781] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 842.216079][ T5781] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 842.658523][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 843.034408][ T5781] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 818ms [ 843.115683][ T5781] gfs2: fsid=syz:syz.0: jid=0: Done [ 843.137376][T10693] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 844.553947][T10693] gfs2: fsid=syz:syz.0: found 1 quota changes [ 844.923664][T10113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.991401][ T5661] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 844.991497][ T5661] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 844.991526][ T5661] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5661 [syz-executor] gfs2_quota_sync+0x370/0x470 [ 844.991569][ T5661] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 844.991599][ T5661] CPU: 1 UID: 0 PID: 5661 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 844.991623][ T5661] Tainted: [L]=SOFTLOCKUP [ 844.991629][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 844.991640][ T5661] Call Trace: [ 844.991649][ T5661] [ 844.991659][ T5661] dump_stack_lvl+0xe8/0x150 [ 844.991687][ T5661] gfs2_withdraw+0xc3/0x1b0 [ 844.991712][ T5661] inode_go_instantiate+0xe69/0x12a0 [ 844.991742][ T5661] ? __pfx_inode_go_instantiate+0x10/0x10 [ 844.991760][ T5661] ? rt_spin_unlock+0x160/0x200 [ 844.991792][ T5661] gfs2_instantiate+0x168/0x220 [ 844.991815][ T5661] gfs2_glock_wait+0x1d7/0x2a0 [ 844.991839][ T5661] do_sync+0x49a/0xcb0 [ 844.991866][ T5661] ? gfs2_quota_sync+0x370/0x470 [ 844.991900][ T5661] ? __pfx_do_sync+0x10/0x10 [ 844.991925][ T5661] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 844.991961][ T5661] ? gfs2_quota_sync+0x370/0x470 [ 844.991991][ T5661] ? __rcu_read_unlock+0x83/0xe0 [ 844.992015][ T5661] ? rt_spin_unlock+0x160/0x200 [ 844.992042][ T5661] gfs2_quota_sync+0x370/0x470 [ 844.992080][ T5661] gfs2_sync_fs+0x4c/0xb0 [ 844.992108][ T5661] sync_filesystem+0xed/0x250 [ 844.992135][ T5661] generic_shutdown_super+0x77/0x2d0 [ 844.992161][ T5661] kill_block_super+0x44/0x90 [ 844.992187][ T5661] deactivate_locked_super+0xbc/0x130 [ 844.992222][ T5661] cleanup_mnt+0x437/0x4d0 [ 844.992248][ T5661] ? _raw_spin_unlock_irq+0x23/0x50 [ 844.992272][ T5661] task_work_run+0x1d9/0x270 [ 844.992300][ T5661] ? __pfx_task_work_run+0x10/0x10 [ 844.992335][ T5661] exit_to_user_mode_loop+0xf3/0x4d0 [ 844.992358][ T5661] ? rcu_is_watching+0x15/0xb0 [ 844.992386][ T5661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.992406][ T5661] do_syscall_64+0x33e/0x560 [ 844.992426][ T5661] ? trace_irq_disable+0x3b/0x140 [ 844.992449][ T5661] ? clear_bhb_loop+0x40/0x90 [ 844.992475][ T5661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.992493][ T5661] RIP: 0033:0x7f9883a7e097 [ 844.992511][ T5661] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 844.992527][ T5661] RSP: 002b:00007ffe3590f858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 844.992545][ T5661] RAX: 0000000000000000 RBX: 00007f9883b121ca RCX: 00007f9883a7e097 [ 844.992557][ T5661] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3590f910 [ 844.992567][ T5661] RBP: 00007ffe3590f910 R08: 00007ffe35910910 R09: 00000000ffffffff [ 844.992579][ T5661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe359109a0 [ 844.992589][ T5661] R13: 00007f9883b121ca R14: 00000000000cd48b R15: 00007ffe359109e0 [ 844.992616][ T5661] [ 844.992624][ T5661] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 845.548846][T10113] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.756925][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.757103][ T8569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.560627][ T5671] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 847.614662][ T5671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 847.680705][ T5671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 847.719489][ T5671] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 847.737856][ T5671] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 848.338122][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14 [ 849.797068][ T8576] bridge_slave_1: left allmulticast mode [ 849.797110][ T8576] bridge_slave_1: left promiscuous mode [ 849.797406][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.968332][ T8576] bridge_slave_0: left allmulticast mode [ 849.968369][ T8576] bridge_slave_0: left promiscuous mode [ 849.968690][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.061770][T10752] loop1: detected capacity change from 0 to 32768 [ 850.127234][ T5673] Bluetooth: hci4: command tx timeout [ 850.153425][T10752] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 850.335365][ T8576] bridge_slave_1: left allmulticast mode [ 850.335404][ T8576] bridge_slave_1: left promiscuous mode [ 850.335704][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.364044][T10752] XFS (loop1): Ending clean mount [ 850.547033][ T8576] bridge_slave_0: left allmulticast mode [ 850.547070][ T8576] bridge_slave_0: left promiscuous mode [ 850.547345][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.680230][ T5661] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 851.585980][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.806150][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.887996][ T8576] bond0 (unregistering): Released all slaves [ 852.717392][ T5673] Bluetooth: hci4: command tx timeout [ 853.409215][T10789] loop1: detected capacity change from 0 to 32768 [ 853.672052][T10789] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 854.477660][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.526988][T10789] XFS (loop1): Ending clean mount [ 854.606070][T10789] XFS (loop1): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 854.606181][T10789] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 854.606217][T10789] XFS (loop1): Unmount and run xfs_repair [ 854.606227][T10789] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 854.606240][T10789] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 854.606253][T10789] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 854.606264][T10789] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 854.606275][T10789] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 854.606286][T10789] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 854.606298][T10789] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 854.606309][T10789] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 854.606321][T10789] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 854.606549][T10789] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 4 error 74 [ 854.607237][T10789] loop1: lost filesystem error report for type 5 error -117 [ 854.608181][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.609949][T10789] XFS (loop1): Failed to initialize disk quotas, err -117. [ 854.738109][ T8576] bond0 (unregistering): Released all slaves [ 854.843048][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15 [ 855.013219][ T5673] Bluetooth: hci4: command tx timeout [ 855.164913][T10789] XFS (loop1): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 855.172970][T10789] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 855.173028][T10789] XFS (loop1): Unmount and run xfs_repair [ 855.173042][T10789] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 855.173063][T10789] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 855.173080][T10789] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 855.173096][T10789] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 855.173113][T10789] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 855.173130][T10789] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 855.173146][T10789] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 855.173162][T10789] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 855.173178][T10789] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 855.173198][T10789] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 4 error 74 [ 855.493370][ T5661] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 855.494141][ T5661] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 856.802625][ T8576] hsr_slave_0: left promiscuous mode [ 856.882048][ T8576] hsr_slave_1: left promiscuous mode [ 856.883206][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.926156][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.086759][ T5673] Bluetooth: hci4: command tx timeout [ 857.272695][ T8576] hsr_slave_0: left promiscuous mode [ 857.305146][ T8576] hsr_slave_1: left promiscuous mode [ 857.306215][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.357742][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.005561][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 858.078863][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 858.422522][T10837] loop1: detected capacity change from 0 to 4096 [ 858.572251][T10837] ntfs3(loop1): ino=19, mi_enum_attr [ 858.572288][T10837] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 858.676570][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 858.795814][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 859.061195][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16 [ 859.874026][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874069][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874099][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874128][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874158][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874187][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874216][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874245][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874274][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 859.874303][ T5781] hid-generic 0006:0008:FFFFFF35.0003: unknown main item tag 0x0 [ 860.366072][ T5781] hid-generic 0006:0008:FFFFFF35.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 862.657576][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 862.657620][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'. [ 863.183937][T10859] loop1: detected capacity change from 0 to 32768 [ 863.199822][T10859] btrfs: Deprecated parameter 'usebackuproot' [ 863.199848][T10859] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 863.252087][T10859] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.964 (10859) [ 863.998312][T10859] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 863.998369][T10859] BTRFS info (device loop1): using crc32c checksum algorithm [ 865.179406][ T8575] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 865.179599][T10859] BTRFS error (device loop1): failed to load root extent [ 865.179644][T10859] BTRFS warning (device loop1): try to load backup roots slot 1 [ 865.180011][ T8575] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 865.180152][T10859] BTRFS warning (device loop1): couldn't read tree root [ 865.180173][T10859] BTRFS warning (device loop1): try to load backup roots slot 2 [ 865.243249][ T5939] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 865.244139][T10859] BTRFS warning (device loop1): couldn't read tree root [ 865.244165][T10859] BTRFS warning (device loop1): try to load backup roots slot 3 [ 865.595399][T10859] BTRFS info (device loop1): rebuilding free space tree [ 866.704560][T10859] BTRFS info (device loop1): checking UUID tree [ 866.748837][T10859] BTRFS info (device loop1): enabling ssd optimizations [ 866.748865][T10859] BTRFS info (device loop1): turning on async discard [ 866.748884][T10859] BTRFS info (device loop1): enabling free space tree [ 866.748903][T10859] BTRFS info (device loop1): force clearing of disk cache [ 866.748921][T10859] BTRFS info (device loop1): enabling auto defrag [ 866.748940][T10859] BTRFS info (device loop1): trying to use backup root at mount time [ 866.748960][T10859] BTRFS info (device loop1): use lzo compression, level 1 [ 867.238767][T10741] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.239112][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.277919][T10741] bridge_slave_0: entered allmulticast mode [ 867.376490][T10741] bridge_slave_0: entered promiscuous mode [ 867.530540][T10741] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.530884][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.531249][T10741] bridge_slave_1: entered allmulticast mode [ 867.576099][T10741] bridge_slave_1: entered promiscuous mode [ 868.294003][T10741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.594338][T10741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.312180][T10741] team0: Port device team_slave_0 added [ 869.438161][T10741] team0: Port device team_slave_1 added [ 869.882360][T10741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.882381][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.882415][T10741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.163330][ T5661] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 870.318664][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.318777][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.269038][ T5671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 873.422485][ T5671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 873.438386][ T5671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 873.509602][ T5671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 873.524887][ T5671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 875.807092][ T5673] Bluetooth: hci5: command tx timeout [ 876.031018][ T5671] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 876.424611][ T5671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 876.462017][ T5671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 876.474849][ T5671] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 876.490207][ T5671] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 876.891885][T10741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.891906][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.891938][T10741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.595516][T10741] hsr_slave_0: entered promiscuous mode [ 877.614684][T10741] hsr_slave_1: entered promiscuous mode [ 877.643217][T10741] debugfs: 'hsr0' already exists in 'hsr' [ 877.643250][T10741] Cannot create hsr debugfs directory [ 877.885360][ T5673] Bluetooth: hci5: command tx timeout [ 878.869719][ T5671] Bluetooth: hci6: command tx timeout [ 880.002832][ T5671] Bluetooth: hci5: command tx timeout [ 880.205250][ T5670] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 880.296924][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 880.475282][ T5670] usb 2-1: Using ep0 maxpacket: 8 [ 880.478752][ T5670] usb 2-1: config 1 interface 0 altsetting 105 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.478791][ T5670] usb 2-1: config 1 interface 0 has no altsetting 0 [ 880.482488][ T5670] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 880.482520][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.482543][ T5670] usb 2-1: Product: Ð [ 880.482559][ T5670] usb 2-1: Manufacturer: 䡌淗â›èƒšë¹¯ì½ŽîŒ·á¦šîœ­íƒ”놎㬕烹攥₶錰茠æ£ä…¤ï“欷꼺쑡雃ꛄ輈î²â¬¹æ®‘빲ᗺ蠿ëŠî¨”㸻䜆ₚ펰⒯掠ಠ⶿泀褹Ⴆèšî´æ§†â¥¾ê²â¦”æ»ã‘°à±ªé±¡â»ã‚‘꒢䱼꘹膯枆ᴭ竛ὴ䓟⌉쫕䠞鶗뵀钄짭埔î–蚶׃螱棊筭获务ҥ᜸5 [ 880.482593][ T5670] usb 2-1: SerialNumber: syz [ 880.925431][ T5671] Bluetooth: hci6: command tx timeout [ 881.109495][ T5670] usbhid 2-1:1.0: can't add hid device: -71 [ 881.109659][ T5670] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 881.227793][ T5670] usb 2-1: USB disconnect, device number 35 [ 882.045235][ T5671] Bluetooth: hci5: command tx timeout [ 882.076825][T10966] sock: sock_timestamping_bind_phc: sock not bind to device [ 883.006782][ T5671] Bluetooth: hci6: command tx timeout [ 883.832594][T10976] loop1: detected capacity change from 0 to 32768 [ 884.327190][T10976] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 884.541588][T10976] XFS (loop1): Ending clean mount [ 885.100578][ T5671] Bluetooth: hci6: command tx timeout [ 885.420112][ T5661] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 888.179380][ T39] audit: type=1804 audit(1779623952.777:364): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.997" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2503 res=1 errno=0 [ 888.248716][ T5670] hid_parser_main: 7 callbacks suppressed [ 888.248743][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.248777][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.248808][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.248837][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.248881][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.248911][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.248940][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.248969][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.248999][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.249028][ T5670] hid-generic 0006:0008:FFFFFF35.0004: unknown main item tag 0x0 [ 888.406116][ T5670] hid-generic 0006:0008:FFFFFF35.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 888.589588][T11012] fido_id[11012]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 889.299165][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 890.664636][T11029] fuse: fd is not a fuse device [ 891.458211][T11024] loop1: detected capacity change from 0 to 32768 [ 891.699761][T11024] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 891.994691][T11024] XFS (loop1): Ending clean mount [ 892.424377][ T5661] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 895.702777][T11075] loop1: detected capacity change from 0 to 1024 [ 895.751091][T11075] hfsplus: Unknown parameter '/dev/vga_arbiter' [ 895.802307][T11075] 9pnet_fd: Insufficient options for proto=fd [ 900.075701][T11091] loop1: detected capacity change from 0 to 32768 [ 902.065987][T11091] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop1": -EINTR [ 908.198228][ T5673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 908.299411][ T5673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 908.334352][ T5673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 908.346170][ T5673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 908.347249][ T5673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 910.528586][ T5671] Bluetooth: hci2: command tx timeout [ 912.008791][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.009134][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.009516][T10925] bridge_slave_0: entered allmulticast mode [ 912.056148][T10925] bridge_slave_0: entered promiscuous mode [ 912.081086][ T9468] hid_parser_main: 7 callbacks suppressed [ 912.081114][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081150][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081179][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081208][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081238][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081267][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081297][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081326][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081355][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.081385][ T9468] hid-generic 0006:0008:FFFFFF35.0005: unknown main item tag 0x0 [ 912.201194][ T9468] hid-generic 0006:0008:FFFFFF35.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 912.403970][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.404328][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.404687][T10925] bridge_slave_1: entered allmulticast mode [ 912.460827][T10925] bridge_slave_1: entered promiscuous mode [ 912.605436][ T5671] Bluetooth: hci2: command tx timeout [ 912.992223][T11208] fido_id[11208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 913.077358][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.077711][T10918] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.079244][T10918] bridge_slave_0: entered allmulticast mode [ 913.117393][T10918] bridge_slave_0: entered promiscuous mode [ 913.182270][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.182646][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.183055][T10918] bridge_slave_1: entered allmulticast mode [ 913.210145][T11210] loop1: detected capacity change from 0 to 128 [ 913.253027][T10918] bridge_slave_1: entered promiscuous mode [ 913.354263][T11210] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 913.389992][T11210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.128725][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.288833][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.338257][T11220] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1025'. [ 914.461940][ T8576] bridge_slave_1: left allmulticast mode [ 914.461980][ T8576] bridge_slave_1: left promiscuous mode [ 914.462501][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.685229][ T5671] Bluetooth: hci2: command tx timeout [ 914.740366][ T8576] bridge_slave_0: left allmulticast mode [ 914.740407][ T8576] bridge_slave_0: left promiscuous mode [ 914.740724][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.767823][ T5671] Bluetooth: hci2: command tx timeout [ 917.247515][T11240] loop1: detected capacity change from 0 to 32768 [ 917.327656][T11240] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1027 (11240) [ 917.484524][T11240] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 917.484565][T11240] BTRFS info (device loop1): using sha256 checksum algorithm [ 917.981382][T11240] BTRFS info (device loop1): enabling ssd optimizations [ 917.981414][T11240] BTRFS info (device loop1): turning on async discard [ 917.981433][T11240] BTRFS info (device loop1): enabling free space tree [ 918.177876][ T5661] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 919.061260][T11262] loop1: detected capacity change from 0 to 64 [ 919.093941][T11262] hfs: Bad value for 'part' [ 919.140071][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.354055][T11266] sg_write: data in/out 1633771837/8 bytes for SCSI command 0x61-- guessing data in; [ 920.354055][T11266] program syz.1.1029 not setting count and/or reply_len properly [ 921.921046][ T5789] hid_parser_main: 7 callbacks suppressed [ 921.921071][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921104][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921133][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921161][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921188][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921217][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921245][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921272][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921300][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 921.921328][ T5789] hid-generic 0006:0008:FFFFFF35.0006: unknown main item tag 0x0 [ 922.125723][ T5789] hid-generic 0006:0008:FFFFFF35.0006: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 922.315880][T11273] fido_id[11273]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 922.441139][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.527779][T11279] loop1: detected capacity change from 0 to 1024 [ 923.661567][T11279] hfsplus: failed to load extents file [ 923.799096][T11279] loop1: detected capacity change from 0 to 256 [ 923.854382][T11279] FAT-fs (loop1): Directory bread(block 64) failed [ 923.854420][T11279] FAT-fs (loop1): Directory bread(block 65) failed [ 923.854534][T11279] FAT-fs (loop1): Directory bread(block 66) failed [ 923.854559][T11279] FAT-fs (loop1): Directory bread(block 67) failed [ 923.854679][T11279] FAT-fs (loop1): Directory bread(block 68) failed [ 923.854705][T11279] FAT-fs (loop1): Directory bread(block 69) failed [ 923.854810][T11279] FAT-fs (loop1): Directory bread(block 70) failed [ 923.854835][T11279] FAT-fs (loop1): Directory bread(block 71) failed [ 923.945421][T11279] FAT-fs (loop1): Directory bread(block 72) failed [ 923.945466][T11279] FAT-fs (loop1): Directory bread(block 73) failed [ 924.024698][T11279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1033'. [ 924.150089][ T8576] bond0 (unregistering): Released all slaves [ 924.261550][T10918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.625853][ T5789] hid-generic 0006:0008:FFFFFF35.0007: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 926.103852][T11299] fido_id[11299]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 926.143207][T11301] loop1: detected capacity change from 0 to 764 [ 926.157789][T11301] iso9660: Unknown parameter 'ÇF;òÉ:–žÎ‹©F' [ 926.342930][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 926.533791][T10918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.906298][T10925] team0: Port device team_slave_0 added [ 927.051718][T10925] team0: Port device team_slave_1 added [ 927.128257][T10918] team0: Port device team_slave_0 added [ 927.432194][T10918] team0: Port device team_slave_1 added [ 927.938419][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.938438][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.938471][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.656980][T11310] loop1: detected capacity change from 0 to 512 [ 928.675922][T11310] EXT4-fs (loop1): filesystem is read-only [ 928.676314][T11310] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 928.679181][T11310] EXT4-fs (loop1): filesystem is read-only [ 928.679200][T11310] EXT4-fs (loop1): orphan cleanup on readonly fs [ 928.823962][T11310] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1043: bg 0: block 64: padding at end of block bitmap is not set [ 928.824004][T11310] loop1: lost filesystem error report for type 5 error -117 [ 928.857987][ C0] EXT4-fs (loop1): initial error at time 1779623993: ext4_validate_block_bitmap:441 [ 928.858030][ C0] EXT4-fs (loop1): last error at time 1779623993: ext4_validate_block_bitmap:441 [ 928.923655][T11310] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 928.923687][T11310] loop1: lost filesystem error report for type 5 error -117 [ 928.924562][T11310] EXT4-fs (loop1): 1 orphan inode deleted [ 928.959675][T11310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 929.073604][T11317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1043'. [ 929.353809][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.353830][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.353863][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.300710][T10918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.300730][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.300765][T10918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.451960][T10918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.451981][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.452015][T10918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.663845][ T5661] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.113163][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.113277][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.473104][ T8576] hsr_slave_0: left promiscuous mode [ 932.698491][ T5670] hid_parser_main: 24 callbacks suppressed [ 932.698561][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698595][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698628][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698658][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698687][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698715][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698744][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698773][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698802][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.698831][ T5670] hid-generic 0006:0008:FFFFFF35.0008: unknown main item tag 0x0 [ 932.805732][ T5670] hid-generic 0006:0008:FFFFFF35.0008: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 932.969168][T11339] fido_id[11339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 933.019484][ T8576] hsr_slave_1: left promiscuous mode [ 933.020682][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.087519][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.402977][ T5673] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 934.461454][ T5673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 934.527013][ T5673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 934.532246][ T5673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 934.533187][ T5673] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 936.765809][ T5673] Bluetooth: hci3: command tx timeout [ 936.803496][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 936.803530][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 937.104374][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 937.169213][ T5671] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 937.233372][ T5671] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 937.270522][ T5671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 937.308872][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 937.455857][ T5671] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 937.456928][ T5671] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 938.854551][ T5673] Bluetooth: hci3: command tx timeout [ 939.540543][T11372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1055'. [ 940.093028][T11377] FAULT_INJECTION: forcing a failure. [ 940.093028][T11377] name failslab, interval 1, probability 0, space 0, times 0 [ 940.093085][T11377] CPU: 0 UID: 0 PID: 11377 Comm: syz.1.1055 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 940.093117][T11377] Tainted: [L]=SOFTLOCKUP [ 940.093126][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 940.093140][T11377] Call Trace: [ 940.093149][T11377] [ 940.093159][T11377] dump_stack_lvl+0xe8/0x150 [ 940.093194][T11377] should_fail_ex+0x46b/0x600 [ 940.093230][T11377] should_failslab+0xa8/0x100 [ 940.093262][T11377] __kmalloc_noprof+0xdf/0x7b0 [ 940.093290][T11377] ? ovl_lookup+0x76e/0x1c80 [ 940.093323][T11377] ovl_lookup+0x76e/0x1c80 [ 940.093357][T11377] ? do_raw_spin_lock+0x12b/0x2f0 [ 940.093411][T11377] ? __pfx_ovl_lookup+0x10/0x10 [ 940.093435][T11377] ? rcu_is_watching+0x15/0xb0 [ 940.093480][T11377] ? __pfx_ovl_lookup+0x10/0x10 [ 940.093518][T11377] lookup_one_qstr_excl+0x12d/0x360 [ 940.093551][T11377] filename_create+0x20e/0x370 [ 940.093588][T11377] ? __pfx_filename_create+0x10/0x10 [ 940.093620][T11377] ? __might_resched+0xef/0x480 [ 940.093642][T11377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.093672][T11377] filename_mkdirat+0xd2/0x520 [ 940.093711][T11377] ? __pfx_filename_mkdirat+0x10/0x10 [ 940.093747][T11377] ? do_getname+0x151/0x250 [ 940.093782][T11377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.093808][T11377] __se_sys_mkdirat+0x35/0x150 [ 940.093839][T11377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.093864][T11377] do_syscall_64+0x15f/0x560 [ 940.093891][T11377] ? clear_bhb_loop+0x40/0x90 [ 940.093920][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.093943][T11377] RIP: 0033:0x7f9883a7ce59 [ 940.093965][T11377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.093985][T11377] RSP: 002b:00007f9881c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 940.094010][T11377] RAX: ffffffffffffffda RBX: 00007f9883cf6180 RCX: 00007f9883a7ce59 [ 940.094027][T11377] RDX: 00000000000001ac RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 940.094043][T11377] RBP: 00007f9881c8c090 R08: 0000000000000000 R09: 0000000000000000 [ 940.094057][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.094077][T11377] R13: 00007f9883cf6218 R14: 00007f9883cf6180 R15: 00007ffe359105e8 [ 940.094114][T11377] [ 940.130172][ T5673] Bluetooth: hci7: command tx timeout [ 941.001194][ T5673] Bluetooth: hci3: command tx timeout [ 941.080601][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'. [ 942.205110][ T5673] Bluetooth: hci7: command tx timeout [ 943.029362][ T5673] Bluetooth: hci3: command tx timeout [ 944.348097][ T5673] Bluetooth: hci7: command tx timeout [ 944.953004][T11399] loop1: detected capacity change from 0 to 32768 [ 946.275567][T11427] pim6reg: entered allmulticast mode [ 946.372541][ T5673] Bluetooth: hci7: command tx timeout [ 947.469777][T11431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1066'. [ 949.535660][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 950.109451][T11438] loop1: detected capacity change from 0 to 32768 [ 950.216632][T11438] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 950.330642][T11438] XFS (loop1): Ending clean mount [ 950.580765][T11454] XFS (loop1): User initiated shutdown received. [ 950.583618][T11454] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462). Shutting down filesystem. [ 950.583683][T11454] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 950.795706][ T5661] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 952.300960][T11464] loop1: detected capacity change from 0 to 128 [ 952.316043][T11464] hpfs: Unknown parameter '00000000000000000000003' [ 952.459150][T11457] could not allocate digest TFM handle hmac(sha1-ce) [ 954.600658][T11474] loop1: detected capacity change from 0 to 128 [ 954.619015][T11474] msdos: Unknown parameter '~GÛ`ª4æþh.̃„$™Qú¦k]A`dP¥¡7ãmnu2]7\32·™Búß°–éP¯Ÿµ°x¢ïúÔ¶OÛý °¼#ᕇàÞ«Œ³Móòýjçé@±¥gøÉèÍ„ÆÕIB]g¹í|%ìÀ$̸ž-GWA¶' [ 955.273958][T11475] loop1: detected capacity change from 0 to 40427 [ 955.292644][T11475] F2FS-fs (loop1): invalid crc value [ 955.683999][T11475] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 955.740268][T11475] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 955.740386][T11475] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 955.740421][T11475] F2FS-fs (loop1): Start checkpoint disabled! [ 955.949404][T11475] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 955.950147][T11475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 956.711233][T11440] team0: entered promiscuous mode [ 956.711261][T11440] team_slave_0: entered promiscuous mode [ 956.711532][T11440] team_slave_1: entered promiscuous mode [ 956.711749][T11440] batadv1: entered promiscuous mode [ 957.616042][T11474] netlink: 'syz.1.1071': attribute type 4 has an invalid length. [ 959.893239][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1074'. [ 961.489086][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.489553][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.489938][T11163] bridge_slave_0: entered allmulticast mode [ 961.522839][T11163] bridge_slave_0: entered promiscuous mode [ 962.874560][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.886940][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.887350][T11163] bridge_slave_1: entered allmulticast mode [ 962.926970][T11163] bridge_slave_1: entered promiscuous mode [ 962.958622][T11497] loop1: detected capacity change from 0 to 32768 [ 965.813463][T11163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.889062][T11163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.806730][T11163] team0: Port device team_slave_0 added [ 966.882723][T11163] team0: Port device team_slave_1 added [ 968.259000][T11163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.259023][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.259056][T11163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.562312][T11163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.562333][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.562368][T11163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.820801][ T5671] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.885178][ T5671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.888742][ T5671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.893297][ T5671] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.928564][ T5671] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 971.998949][T11556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1084'. [ 972.144847][T11565] fuse: fd is not a fuse device [ 973.255953][ T5673] Bluetooth: hci4: command tx timeout [ 973.582737][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.583224][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.583557][T11361] bridge_slave_0: entered allmulticast mode [ 973.610699][T11361] bridge_slave_0: entered promiscuous mode [ 973.763770][T11351] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.764628][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.784045][T11351] bridge_slave_0: entered allmulticast mode [ 973.795607][T11351] bridge_slave_0: entered promiscuous mode [ 973.813008][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.813390][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.813776][T11361] bridge_slave_1: entered allmulticast mode [ 973.846454][T11361] bridge_slave_1: entered promiscuous mode [ 973.851417][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.852333][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.852705][T11351] bridge_slave_1: entered allmulticast mode [ 973.889058][T11351] bridge_slave_1: entered promiscuous mode [ 974.163299][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 974.363572][T11361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.516469][T11351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.643444][T11585] loop1: detected capacity change from 0 to 64 [ 974.782587][ T8576] bridge_slave_1: left allmulticast mode [ 974.782627][ T8576] bridge_slave_1: left promiscuous mode [ 974.782933][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.960818][ T8576] bridge_slave_0: left allmulticast mode [ 974.960859][ T8576] bridge_slave_0: left promiscuous mode [ 974.990506][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.235633][ T8576] bridge_slave_1: left allmulticast mode [ 975.235820][ T8576] bridge_slave_1: left promiscuous mode [ 975.236181][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.325071][ T5673] Bluetooth: hci4: command tx timeout [ 975.362356][ T8576] bridge_slave_0: left allmulticast mode [ 975.362393][ T8576] bridge_slave_0: left promiscuous mode [ 975.362738][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.772578][ T8576] bridge_slave_1: left allmulticast mode [ 975.772618][ T8576] bridge_slave_1: left promiscuous mode [ 975.772910][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.958744][ T8576] bridge_slave_0: left allmulticast mode [ 975.958792][ T8576] bridge_slave_0: left promiscuous mode [ 975.960276][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.335403][ T8576] bridge_slave_1: left allmulticast mode [ 976.335443][ T8576] bridge_slave_1: left promiscuous mode [ 976.367929][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.491304][ T8576] bridge_slave_0: left allmulticast mode [ 976.491344][ T8576] bridge_slave_0: left promiscuous mode [ 976.491650][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.427088][ T5673] Bluetooth: hci4: command tx timeout [ 978.487056][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1095'. [ 978.646969][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.772468][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.828513][ T8576] bond0 (unregistering): Released all slaves [ 979.186822][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.326484][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.415676][ T8576] bond0 (unregistering): Released all slaves [ 979.487442][ T5673] Bluetooth: hci4: command tx timeout [ 979.810037][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.901631][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.979788][ T8576] bond0 (unregistering): Released all slaves [ 980.307672][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.406358][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.477921][ T8576] bond0 (unregistering): Released all slaves [ 980.732786][T11361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.763402][T11351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.781654][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1093'. [ 981.597380][T11361] team0: Port device team_slave_0 added [ 981.632878][T11351] team0: Port device team_slave_0 added [ 981.739926][T11361] team0: Port device team_slave_1 added [ 981.847510][T11351] team0: Port device team_slave_1 added [ 983.661578][T11361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.661597][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.661632][T11361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.895187][ T9468] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 984.055083][ T9468] usb 2-1: Using ep0 maxpacket: 16 [ 984.069374][ T9468] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 984.069407][ T9468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.069430][ T9468] usb 2-1: Product: syz [ 984.069446][ T9468] usb 2-1: Manufacturer: syz [ 984.069463][ T9468] usb 2-1: SerialNumber: syz [ 984.081259][ T9468] usb 2-1: config 0 descriptor?? [ 984.155304][ T9468] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 984.309187][ T9468] usb 2-1: Detected FT2232H [ 984.418398][T11351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.418418][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.418513][T11351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.501916][T11361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.501937][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.502030][T11361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.687994][T11625] netlink: 'syz.1.1100': attribute type 3 has an invalid length. [ 984.987582][T11351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.987602][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.987638][T11351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.304102][ T9468] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 986.304826][ T9468] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 986.366350][ T9468] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 986.666389][ T9468] usb 2-1: USB disconnect, device number 36 [ 986.737543][ T9468] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 986.738454][ T9468] ftdi_sio 2-1:0.0: device disconnected [ 987.685362][T11351] hsr_slave_0: entered promiscuous mode [ 987.724771][T11351] hsr_slave_1: entered promiscuous mode [ 987.739623][T11351] debugfs: 'hsr0' already exists in 'hsr' [ 987.739657][T11351] Cannot create hsr debugfs directory [ 987.774065][T11361] hsr_slave_0: entered promiscuous mode [ 987.793460][T11361] hsr_slave_1: entered promiscuous mode [ 987.802854][T11361] debugfs: 'hsr0' already exists in 'hsr' [ 987.802903][T11361] Cannot create hsr debugfs directory [ 988.317477][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.425518][T11642] nfs4: Unknown parameter 'smackfs:%t' [ 989.152764][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.271778][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.358374][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.555655][ T8576] hsr_slave_0: left promiscuous mode [ 990.575532][ T8576] hsr_slave_1: left promiscuous mode [ 990.576757][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.616624][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.755324][ T8576] hsr_slave_0: left promiscuous mode [ 990.795630][ T8576] hsr_slave_1: left promiscuous mode [ 990.796961][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.820579][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.036928][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 991.088710][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 991.513743][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 991.576246][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 992.447029][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 992.495977][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 993.094653][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.094766][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.300866][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 993.356432][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 993.889836][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 996.366732][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1105'. [ 997.262049][ T5671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 997.567329][ T5671] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 997.690354][ T5671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 997.701442][ T5671] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 997.703892][ T5671] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 998.683502][T11697] loop1: detected capacity change from 0 to 512 [ 998.734593][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14 [ 998.830287][T11697] EXT4-fs: Ignoring removed nobh option [ 998.830351][T11697] EXT4-fs: Ignoring removed orlov option [ 999.900701][ T5673] Bluetooth: hci2: command tx timeout [ 1001.258342][T11697] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.1109: invalid block [ 1001.258383][T11697] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1001.268543][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1001.268595][ C0] EXT4-fs (loop1): initial error at time 1779624065: __ext4_iget:5481: inode 11: block 1 [ 1001.268635][ C0] EXT4-fs (loop1): last error at time 1779624065: __ext4_iget:5481: inode 11: block 1 [ 1001.371936][ T5671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1001.499137][ T5671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1001.501102][ T5671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1001.502544][ T5671] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1001.557613][ T5671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1001.777696][T11697] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1109: couldn't read orphan inode 11 (err -117) [ 1001.777736][T11697] loop1: lost filesystem error report for type 5 error -117 [ 1001.965749][ T5673] Bluetooth: hci2: command tx timeout [ 1002.014427][T11697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.224524][ T5661] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.077148][ T5673] Bluetooth: hci3: command tx timeout [ 1004.084656][ T5673] Bluetooth: hci2: command tx timeout [ 1005.773737][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.774082][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.791417][T11549] bridge_slave_0: entered allmulticast mode [ 1005.841764][T11549] bridge_slave_0: entered promiscuous mode [ 1005.947048][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.947405][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.947780][T11549] bridge_slave_1: entered allmulticast mode [ 1005.998467][T11549] bridge_slave_1: entered promiscuous mode [ 1006.025562][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 1006.025666][T11731] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1006.130474][ T5671] Bluetooth: hci2: command tx timeout [ 1006.130513][ T5671] Bluetooth: hci3: command tx timeout [ 1007.838396][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1115'. [ 1007.978199][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.065935][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.272615][ T5673] Bluetooth: hci3: command tx timeout [ 1010.266663][T11762] loop1: detected capacity change from 0 to 1764 [ 1010.439332][ T5673] Bluetooth: hci3: command tx timeout [ 1010.460951][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1010.898501][T11549] team0: Port device team_slave_0 added [ 1011.413570][T11549] team0: Port device team_slave_1 added [ 1013.192189][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.192210][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.192244][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.615441][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.615462][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.615495][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.203901][T11549] hsr_slave_0: entered promiscuous mode [ 1017.218470][T11549] hsr_slave_1: entered promiscuous mode [ 1017.325671][T11549] debugfs: 'hsr0' already exists in 'hsr' [ 1017.325702][T11549] Cannot create hsr debugfs directory [ 1018.674212][T11779] Illegal XDP return value 338771574 on prog (id 111) dev N/A, expect packet loss! [ 1020.399558][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1022.675541][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1126'. [ 1022.742521][T11814] overlayfs: failed to clone upperpath [ 1033.784767][ T5671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1033.871478][ T5671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1033.895618][ T5671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1033.953675][ T5671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1033.954814][ T5671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1036.195332][ T5671] Bluetooth: hci5: command tx timeout [ 1038.285145][ T5671] Bluetooth: hci5: command tx timeout [ 1041.405569][ T5671] Bluetooth: hci5: command tx timeout [ 1041.571209][T11867] loop1: detected capacity change from 0 to 164 [ 1041.721118][T11867] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=164 [ 1042.914704][T11864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1135'. [ 1043.485473][ T5671] Bluetooth: hci5: command tx timeout [ 1045.479379][T11894] loop1: detected capacity change from 0 to 32768 [ 1046.069203][T11894] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1046.194549][T11894] FAULT_INJECTION: forcing a failure. [ 1046.194549][T11894] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.194595][T11894] CPU: 0 UID: 0 PID: 11894 Comm: syz.1.1138 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1046.194627][T11894] Tainted: [L]=SOFTLOCKUP [ 1046.194636][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.194652][T11894] Call Trace: [ 1046.194661][T11894] [ 1046.194671][T11894] dump_stack_lvl+0xe8/0x150 [ 1046.194710][T11894] should_fail_ex+0x46b/0x600 [ 1046.194748][T11894] should_failslab+0xa8/0x100 [ 1046.194780][T11894] __kmalloc_cache_noprof+0x84/0x690 [ 1046.194811][T11894] ? ocfs2_reserve_clusters_with_limit+0xdd/0xc20 [ 1046.194837][T11894] ? __lock_acquire+0x6b5/0x2d10 [ 1046.194872][T11894] ocfs2_reserve_clusters_with_limit+0xdd/0xc20 [ 1046.194900][T11894] ? __lock_acquire+0x6b5/0x2d10 [ 1046.194934][T11894] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10 [ 1046.194957][T11894] ? ocfs2_read_inode_block+0x155/0x1d0 [ 1046.194985][T11894] ? rcu_is_watching+0x15/0xb0 [ 1046.195026][T11894] ? ocfs2_num_free_extents+0x358/0x650 [ 1046.195069][T11894] ? __pfx_ocfs2_num_free_extents+0x10/0x10 [ 1046.195122][T11894] ocfs2_lock_allocators+0x2d8/0x600 [ 1046.195147][T11894] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1046.195177][T11894] ? __pfx_ocfs2_lock_allocators+0x10/0x10 [ 1046.195204][T11894] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1046.195238][T11894] ? rcu_is_watching+0x15/0xb0 [ 1046.195272][T11894] ? kfree+0x4d/0x6c0 [ 1046.195304][T11894] ocfs2_write_begin_nolock+0x1b2a/0x41a0 [ 1046.195341][T11894] ? lockdep_hardirqs_on+0x7a/0x110 [ 1046.195421][T11894] ? __pfx_ocfs2_write_begin_nolock+0x10/0x10 [ 1046.195461][T11894] ? lockdep_hardirqs_on+0x7a/0x110 [ 1046.195487][T11894] ? __bfs+0x153/0x290 [ 1046.195512][T11894] ? __pfx_hlock_conflict+0x10/0x10 [ 1046.195552][T11894] ? check_path+0x21/0x40 [ 1046.195583][T11894] ? check_noncircular+0xda/0x150 [ 1046.195627][T11894] ? __lock_acquire+0x6b5/0x2d10 [ 1046.195662][T11894] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 1046.195713][T11894] ? do_raw_spin_lock+0x12b/0x2f0 [ 1046.195752][T11894] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1046.195775][T11894] ? lockdep_hardirqs_on+0x7a/0x110 [ 1046.195802][T11894] ? rwbase_write_lock+0x568/0x730 [ 1046.195840][T11894] ocfs2_write_begin+0x1c5/0x320 [ 1046.195887][T11894] ? __pfx_ocfs2_write_begin+0x10/0x10 [ 1046.195927][T11894] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1046.195956][T11894] ? lockdep_hardirqs_on+0x7a/0x110 [ 1046.195991][T11894] generic_perform_write+0x2af/0x8b0 [ 1046.196048][T11894] ? __pfx_generic_perform_write+0x10/0x10 [ 1046.196084][T11894] ? file_update_time_flags+0x21f/0x4b0 [ 1046.196119][T11894] ? __generic_file_write_iter+0xfc/0x240 [ 1046.196154][T11894] ? ocfs2_file_write_iter+0x163d/0x1e70 [ 1046.196193][T11894] ocfs2_file_write_iter+0x1666/0x1e70 [ 1046.196245][T11894] ? __lock_acquire+0x6b5/0x2d10 [ 1046.196277][T11894] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 1046.196312][T11894] ? __pfx_aa_file_perm+0x10/0x10 [ 1046.196359][T11894] ? vfs_write+0x22d/0xba0 [ 1046.196390][T11894] ? vfs_write+0x22d/0xba0 [ 1046.196440][T11894] vfs_write+0x629/0xba0 [ 1046.196479][T11894] ? __pfx_vfs_write+0x10/0x10 [ 1046.196522][T11894] ? __fget_files+0x2a/0x420 [ 1046.196558][T11894] __x64_sys_pwrite64+0x19c/0x230 [ 1046.196595][T11894] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1046.196637][T11894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.196665][T11894] do_syscall_64+0x15f/0x560 [ 1046.196689][T11894] ? trace_irq_disable+0x3b/0x140 [ 1046.196717][T11894] ? clear_bhb_loop+0x40/0x90 [ 1046.196747][T11894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.196772][T11894] RIP: 0033:0x7f9883a7ce59 [ 1046.196797][T11894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.196816][T11894] RSP: 002b:00007f9881cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1046.196841][T11894] RAX: ffffffffffffffda RBX: 00007f9883cf5fa0 RCX: 00007f9883a7ce59 [ 1046.196859][T11894] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 000000000000000a [ 1046.196874][T11894] RBP: 00007f9881cce090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.196890][T11894] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001 [ 1046.196903][T11894] R13: 00007f9883cf6038 R14: 00007f9883cf5fa0 R15: 00007ffe359105e8 [ 1046.196941][T11894] [ 1046.201011][T11894] (syz.1.1138,11894,0):ocfs2_reserve_clusters_with_limit:1252 ERROR: status = -12 [ 1046.201057][T11894] (syz.1.1138,11894,0):ocfs2_reserve_clusters_with_limit:1315 ERROR: status = -12 [ 1046.201083][T11894] (syz.1.1138,11894,0):ocfs2_lock_allocators:3101 ERROR: status = -12 [ 1046.201106][T11894] (syz.1.1138,11894,0):ocfs2_write_begin_nolock:1724 ERROR: status = -12 [ 1046.201216][T11894] (syz.1.1138,11894,0):ocfs2_write_begin:1888 ERROR: status = -12 [ 1048.049558][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.049915][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.050282][T11679] bridge_slave_0: entered allmulticast mode [ 1048.240569][T11679] bridge_slave_0: entered promiscuous mode [ 1049.162235][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.162579][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.162982][T11679] bridge_slave_1: entered allmulticast mode [ 1049.241655][T11679] bridge_slave_1: entered promiscuous mode [ 1052.223162][ T5661] ocfs2: Unmounting device (7,1) on (node local) [ 1052.570039][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.153721][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.154080][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.154456][T11705] bridge_slave_0: entered allmulticast mode [ 1053.159036][T11705] bridge_slave_0: entered promiscuous mode [ 1053.575737][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.576449][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.576795][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.577136][T11705] bridge_slave_1: entered allmulticast mode [ 1053.656594][T11705] bridge_slave_1: entered promiscuous mode [ 1054.529112][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.529228][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.861900][T11679] team0: Port device team_slave_0 added [ 1057.056370][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.330085][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.823254][T11927] loop1: detected capacity change from 0 to 128 [ 1059.226359][ T39] audit: type=1326 audit(1779624123.897:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.227641][ T39] audit: type=1326 audit(1779624123.907:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.231137][ T39] audit: type=1326 audit(1779624123.907:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.232315][ T39] audit: type=1326 audit(1779624123.907:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.233617][ T39] audit: type=1326 audit(1779624123.907:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.239065][ T39] audit: type=1326 audit(1779624123.907:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.240317][ T39] audit: type=1326 audit(1779624123.917:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.243434][ T39] audit: type=1326 audit(1779624123.917:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.244646][ T39] audit: type=1326 audit(1779624123.917:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1059.246050][ T39] audit: type=1326 audit(1779624123.927:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.1.1142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9883a7ce59 code=0x7ffc0000 [ 1060.128902][T11705] team0: Port device team_slave_0 added [ 1061.644843][ T5673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1061.836281][ T5673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1061.884265][ T5673] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1061.901863][ T5673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1061.934704][ T5673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1062.169574][ T5677] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1062.276875][ T5671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1062.279550][ T5671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1062.317401][ T5677] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1062.320115][ T5677] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1064.385935][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1144'. [ 1064.703930][ T5673] Bluetooth: hci6: command tx timeout [ 1064.925332][ T5673] Bluetooth: hci4: command tx timeout [ 1065.061511][T11964] loop1: detected capacity change from 0 to 4096 [ 1065.089362][T11964] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1066.009780][T11964] ntfs3(loop1): Failed to load $Extend (-22). [ 1066.009841][T11964] ntfs3(loop1): Failed to initialize $Extend. [ 1066.770546][ T5673] Bluetooth: hci6: command tx timeout [ 1067.017715][ T5673] Bluetooth: hci4: command tx timeout [ 1068.925196][ T5673] Bluetooth: hci6: command tx timeout [ 1069.089024][ T5673] Bluetooth: hci4: command tx timeout [ 1069.813581][T11972] ip6gre3: entered promiscuous mode [ 1069.813610][T11972] ip6gre3: entered allmulticast mode [ 1069.986343][T11860] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1070.004801][T11860] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1070.084548][ T5781] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1070.118538][ T5781] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1070.506492][ T5781] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1071.108491][ T5673] Bluetooth: hci6: command tx timeout [ 1071.166102][ T5673] Bluetooth: hci4: command tx timeout [ 1072.322551][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 1073.368562][T12007] loop1: detected capacity change from 0 to 64 [ 1075.475975][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1075.825146][ T8576] bridge_slave_1: left allmulticast mode [ 1075.825187][ T8576] bridge_slave_1: left promiscuous mode [ 1075.825590][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.438952][T12016] loop1: detected capacity change from 0 to 32768 [ 1076.460939][T12016] jfs_mount: Mount Failure: File System Dirty. [ 1076.460957][T12016] Mount JFS Failure: -22 [ 1076.460970][T12016] jfs_mount failed w/return code = -22 [ 1076.802848][T12020] FAULT_INJECTION: forcing a failure. [ 1076.802848][T12020] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.802892][T12020] CPU: 0 UID: 0 PID: 12020 Comm: syz.1.1161 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1076.802925][T12020] Tainted: [L]=SOFTLOCKUP [ 1076.802934][T12020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1076.802949][T12020] Call Trace: [ 1076.802958][T12020] [ 1076.802967][T12020] dump_stack_lvl+0xe8/0x150 [ 1076.803005][T12020] should_fail_ex+0x46b/0x600 [ 1076.803041][T12020] should_failslab+0xa8/0x100 [ 1076.803074][T12020] kmem_cache_alloc_noprof+0x87/0x680 [ 1076.803103][T12020] ? do_getname_kernel+0x54/0x230 [ 1076.803131][T12020] do_getname_kernel+0x54/0x230 [ 1076.803152][T12020] ? kern_path+0x1b/0x150 [ 1076.803179][T12020] kern_path+0x25/0x150 [ 1076.803205][T12020] lookup_bdev+0xc8/0x290 [ 1076.803236][T12020] ? __pfx_lookup_bdev+0x10/0x10 [ 1076.803270][T12020] ? do_getname+0x151/0x250 [ 1076.803308][T12020] __se_sys_quotactl+0x269/0x9e0 [ 1076.803353][T12020] ? __pfx___se_sys_quotactl+0x10/0x10 [ 1076.803395][T12020] ? __pfx_ksys_write+0x10/0x10 [ 1076.803435][T12020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.803462][T12020] do_syscall_64+0x15f/0x560 [ 1076.803487][T12020] ? trace_irq_disable+0x3b/0x140 [ 1076.803514][T12020] ? clear_bhb_loop+0x40/0x90 [ 1076.803547][T12020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.803570][T12020] RIP: 0033:0x7f9883a7ce59 [ 1076.803592][T12020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.803613][T12020] RSP: 002b:00007f9881cce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1076.803637][T12020] RAX: ffffffffffffffda RBX: 00007f9883cf5fa0 RCX: 00007f9883a7ce59 [ 1076.803655][T12020] RDX: ffffffffffffffff RSI: 00002000000001c0 RDI: ffffffff80000900 [ 1076.803673][T12020] RBP: 00007f9881cce090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.803688][T12020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.803702][T12020] R13: 00007f9883cf6038 R14: 00007f9883cf5fa0 R15: 00007ffe359105e8 [ 1076.803737][T12020] [ 1077.066114][ T8576] bridge_slave_0: left allmulticast mode [ 1077.066155][ T8576] bridge_slave_0: left promiscuous mode [ 1077.066483][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.053393][ T8576] bridge_slave_1: left allmulticast mode [ 1079.053433][ T8576] bridge_slave_1: left promiscuous mode [ 1079.053718][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.260040][ T8576] bridge_slave_0: left allmulticast mode [ 1079.260081][ T8576] bridge_slave_0: left promiscuous mode [ 1079.260376][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.368401][T12028] loop1: detected capacity change from 0 to 32768 [ 1081.422414][T12028] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1081.561797][T12028] XFS (loop1): Ending clean mount [ 1082.075891][ T8576] bridge_slave_1: left allmulticast mode [ 1082.075933][ T8576] bridge_slave_1: left promiscuous mode [ 1082.077974][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.365130][ T5661] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1082.511303][ T8576] bridge_slave_0: left allmulticast mode [ 1082.511344][ T8576] bridge_slave_0: left promiscuous mode [ 1082.511648][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.712781][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 1083.167794][ T8576] bridge_slave_1: left allmulticast mode [ 1083.167838][ T8576] bridge_slave_1: left promiscuous mode [ 1083.168140][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.326239][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1083.382009][ T8576] bridge_slave_0: left allmulticast mode [ 1083.382052][ T8576] bridge_slave_0: left promiscuous mode [ 1083.382362][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.247376][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.916054][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.350462][ T8576] bond0 (unregistering): Released all slaves [ 1088.303210][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.785281][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.884334][ T8576] bond0 (unregistering): Released all slaves [ 1089.520167][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.549013][T12090] loop1: detected capacity change from 0 to 128 [ 1089.682960][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.870761][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.873584][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.873626][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.873657][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.873686][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.873715][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.873744][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.873773][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.873802][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997201][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997488][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997521][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997550][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997579][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997608][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997638][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997667][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1089.997698][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.000466][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.000507][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.000536][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.000566][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.000594][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.000623][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.000653][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.000682][T12092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1090.001118][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 1090.001133][ T39] audit: type=1800 audit(1779624154.677:400): pid=12092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1184" name="file2" dev="loop1" ino=1048636 res=0 errno=0 [ 1090.512155][ T8576] bond0 (unregistering): Released all slaves [ 1090.918008][T12094] sg_write: data in/out 679936/136 bytes for SCSI command 0x0-- guessing data in; [ 1090.918008][T12094] program syz.1.1185 not setting count and/or reply_len properly [ 1091.397805][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.531244][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.608414][ T8576] bond0 (unregistering): Released all slaves [ 1091.984713][T12081] wg1: entered promiscuous mode [ 1091.984743][T12081] wg1: entered allmulticast mode [ 1093.039359][T11944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1093.121553][T11944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1093.172068][T11944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1093.202366][T11944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1093.203237][T11944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1093.895382][T12104] loop1: detected capacity change from 0 to 256 [ 1093.929396][T12104] vfat: Unknown parameter 'nnonuitail' [ 1095.325179][ T5673] Bluetooth: hci2: command tx timeout [ 1095.578156][T12112] ip_vti0: entered promiscuous mode [ 1095.591347][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 1096.529564][ T8576] hsr_slave_0: left promiscuous mode [ 1096.586906][ T8576] hsr_slave_1: left promiscuous mode [ 1096.588335][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.643597][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.832443][T12131] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1192'. [ 1096.842840][ T8576] hsr_slave_0: left promiscuous mode [ 1096.875318][ T8576] hsr_slave_1: left promiscuous mode [ 1096.876712][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.982015][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.996226][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.110035][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.424269][ T5673] Bluetooth: hci2: command tx timeout [ 1097.760287][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'. [ 1097.872312][T12135] netlink: 'syz.0.1193': attribute type 2 has an invalid length. [ 1097.872340][T12135] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 1097.872354][T12135] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 1097.926451][ T39] audit: type=1326 audit(1779624162.587:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.926513][ T39] audit: type=1326 audit(1779624162.587:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.926562][ T39] audit: type=1326 audit(1779624162.587:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.926613][ T39] audit: type=1326 audit(1779624162.587:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.926664][ T39] audit: type=1326 audit(1779624162.597:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.926721][ T39] audit: type=1326 audit(1779624162.597:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.926771][ T39] audit: type=1326 audit(1779624162.597:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.926822][ T39] audit: type=1326 audit(1779624162.597:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.926870][ T39] audit: type=1326 audit(1779624162.597:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1097.927682][ T8576] hsr_slave_0: left promiscuous mode [ 1097.977401][ T39] audit: type=1326 audit(1779624162.617:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.0.1193" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846645ce59 code=0x7ffc0000 [ 1098.325091][ T8576] hsr_slave_1: left promiscuous mode [ 1098.326313][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.439522][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.686258][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1099.485050][ T5673] Bluetooth: hci2: command tx timeout [ 1100.008581][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1100.188992][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1100.239556][T12140] loop1: detected capacity change from 0 to 32768 [ 1100.293045][T12140] FAULT_INJECTION: forcing a failure. [ 1100.293045][T12140] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.293085][T12140] CPU: 0 UID: 0 PID: 12140 Comm: syz.1.1194 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1100.293117][T12140] Tainted: [L]=SOFTLOCKUP [ 1100.293126][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.293140][T12140] Call Trace: [ 1100.293149][T12140] [ 1100.293159][T12140] dump_stack_lvl+0xe8/0x150 [ 1100.293195][T12140] should_fail_ex+0x46b/0x600 [ 1100.293240][T12140] should_failslab+0xa8/0x100 [ 1100.293273][T12140] __kmalloc_cache_noprof+0x84/0x690 [ 1100.293302][T12140] ? getname_long+0x50/0x130 [ 1100.293332][T12140] getname_long+0x50/0x130 [ 1100.293357][T12140] do_getname+0x181/0x250 [ 1100.293393][T12140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.293418][T12140] __se_sys_mkdirat+0x24/0x150 [ 1100.293450][T12140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.293475][T12140] do_syscall_64+0x15f/0x560 [ 1100.293499][T12140] ? trace_irq_disable+0x3b/0x140 [ 1100.293531][T12140] ? clear_bhb_loop+0x40/0x90 [ 1100.293559][T12140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.293582][T12140] RIP: 0033:0x7f9883a7bcc7 [ 1100.293604][T12140] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.293624][T12140] RSP: 002b:00007f9881ccde58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1100.293649][T12140] RAX: ffffffffffffffda RBX: 00007f9881ccdee0 RCX: 00007f9883a7bcc7 [ 1100.293667][T12140] RDX: 00000000000001ff RSI: 0000200000000340 RDI: 00000000ffffff9c [ 1100.293683][T12140] RBP: 0000200000000000 R08: 0000200000000040 R09: 0000000000000000 [ 1100.293698][T12140] R10: 0000200000000000 R11: 0000000000000246 R12: 0000200000000340 [ 1100.293713][T12140] R13: 00007f9881ccdea0 R14: 0000000000000000 R15: 0000000000000000 [ 1100.293748][T12140] [ 1101.487414][T12146] loop1: detected capacity change from 0 to 64 [ 1101.580248][ T5673] Bluetooth: hci2: command tx timeout [ 1101.750753][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1101.935763][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1102.338585][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1102.487811][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1102.490434][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.490471][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.490516][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1102.490543][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.565281][ T9] usb 2-1: config 0 descriptor?? [ 1102.976279][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1103.064842][ T9] hid_parser_main: 7 callbacks suppressed [ 1103.073077][ T9] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1103.073125][ T9] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1103.073154][ T9] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1103.073183][ T9] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1103.073211][ T9] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1103.073239][ T9] savu 0003:1E7D:2D5A.0009: unbalanced collection at end of report description [ 1103.074159][ T9] savu 0003:1E7D:2D5A.0009: parse failed [ 1103.074241][ T9] savu 0003:1E7D:2D5A.0009: probe with driver savu failed with error -22 [ 1103.227820][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1105.796314][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1105.856332][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1106.391628][ T5789] usb 2-1: USB disconnect, device number 37 [ 1109.808609][T12161] loop1: detected capacity change from 0 to 32768 [ 1110.403427][T12161] read_mapping_page failed! [ 1110.495053][T12161] jfs_mount: Failed to read AGGREGATE_I [ 1110.495070][T12161] Mount JFS Failure: -5 [ 1110.495082][T12161] jfs_mount failed w/return code = -5 [ 1111.174391][ T5281] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1111.462632][T11938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.463065][T11938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.463414][T11938] bridge_slave_0: entered allmulticast mode [ 1111.512853][T11938] bridge_slave_0: entered promiscuous mode [ 1111.684436][T11938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.684781][T11938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.686236][T11938] bridge_slave_1: entered allmulticast mode [ 1111.723663][T11938] bridge_slave_1: entered promiscuous mode [ 1112.412570][T11938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.879038][T11938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.432814][T12196] loop1: detected capacity change from 0 to 4096 [ 1113.739888][T11938] team0: Port device team_slave_0 added [ 1113.828399][T11938] team0: Port device team_slave_1 added [ 1114.886417][T11938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.886439][T11938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.886473][T11938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.952387][T11938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.952407][T11938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.952441][T11938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.232309][T11941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.232686][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.233081][T11941] bridge_slave_0: entered allmulticast mode [ 1115.285767][T11941] bridge_slave_0: entered promiscuous mode [ 1116.085592][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.085706][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.224552][T11941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.236175][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.236581][T11941] bridge_slave_1: entered allmulticast mode [ 1116.261831][T11941] bridge_slave_1: entered promiscuous mode [ 1116.330179][T12196] ntfs3(loop1): ino=9, attr_set_size_ex [ 1116.903114][T11938] hsr_slave_0: entered promiscuous mode [ 1116.918202][T11938] hsr_slave_1: entered promiscuous mode [ 1116.925058][T11938] debugfs: 'hsr0' already exists in 'hsr' [ 1116.925094][T11938] Cannot create hsr debugfs directory [ 1117.443254][T11941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.370763][T11941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.518986][ T5281] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1118.761514][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.761878][T12097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.762228][T12097] bridge_slave_0: entered allmulticast mode [ 1118.774553][T12097] bridge_slave_0: entered promiscuous mode [ 1118.927490][T12097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.927842][T12097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.928192][T12097] bridge_slave_1: entered allmulticast mode [ 1118.984247][T12097] bridge_slave_1: entered promiscuous mode [ 1119.097045][T11941] team0: Port device team_slave_0 added [ 1119.477541][T11941] team0: Port device team_slave_1 added [ 1120.430806][T12097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.481145][T11941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.481167][T11941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.481201][T11941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.575010][T12097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.577726][T11941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.577743][T11941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.577775][T11941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.062744][T11944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1121.217760][T11944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1121.219778][T11944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1121.221978][T11944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1121.262804][T11944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1122.465295][T12252] loop1: detected capacity change from 0 to 1024 [ 1123.409571][T11944] Bluetooth: hci3: command tx timeout [ 1124.204429][ T5673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1124.353846][ T5673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1124.463130][ T5673] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1124.542567][ T5673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1124.549557][ T5673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1124.990560][T12097] team0: Port device team_slave_0 added [ 1125.064426][T12097] team0: Port device team_slave_1 added [ 1125.501706][T11944] Bluetooth: hci3: command tx timeout [ 1126.372257][T12287] loop1: detected capacity change from 0 to 8 [ 1126.374256][T12287] squashfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1126.936062][T11944] Bluetooth: hci4: command tx timeout [ 1127.594548][T11944] Bluetooth: hci3: command tx timeout [ 1128.631418][T12097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.631439][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.631474][T12097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.765316][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1129.065558][T11944] Bluetooth: hci4: command tx timeout [ 1129.434755][T12097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.434776][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.434809][T12097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.645171][T11944] Bluetooth: hci3: command tx timeout [ 1131.085385][T11944] Bluetooth: hci4: command tx timeout [ 1131.628795][T12097] hsr_slave_0: entered promiscuous mode [ 1131.672259][T12097] hsr_slave_1: entered promiscuous mode [ 1131.684561][T12097] debugfs: 'hsr0' already exists in 'hsr' [ 1131.684593][T12097] Cannot create hsr debugfs directory [ 1132.556903][ T8576] bridge_slave_1: left allmulticast mode [ 1132.556944][ T8576] bridge_slave_1: left promiscuous mode [ 1132.557325][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.910448][ T8576] bridge_slave_0: left allmulticast mode [ 1132.910490][ T8576] bridge_slave_0: left promiscuous mode [ 1132.910811][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.166301][T11944] Bluetooth: hci4: command tx timeout [ 1133.560498][ T8576] bridge_slave_1: left allmulticast mode [ 1133.560540][ T8576] bridge_slave_1: left promiscuous mode [ 1133.561747][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.754541][ T8576] bridge_slave_0: left allmulticast mode [ 1134.754580][ T8576] bridge_slave_0: left promiscuous mode [ 1134.763597][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.336275][ T8576] bridge_slave_1: left allmulticast mode [ 1135.336316][ T8576] bridge_slave_1: left promiscuous mode [ 1135.336632][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.877726][ T8576] bridge_slave_0: left allmulticast mode [ 1135.877767][ T8576] bridge_slave_0: left promiscuous mode [ 1135.878056][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.152164][T12334] loop1: detected capacity change from 0 to 2048 [ 1136.295747][T12337] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1137.217882][ T8576] bridge_slave_1: left allmulticast mode [ 1137.217923][ T8576] bridge_slave_1: left promiscuous mode [ 1137.218242][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.427303][ T8576] bridge_slave_0: left allmulticast mode [ 1137.427341][ T8576] bridge_slave_0: left promiscuous mode [ 1137.427625][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.967547][ T8576] bridge_slave_1: left allmulticast mode [ 1137.967590][ T8576] bridge_slave_1: left promiscuous mode [ 1137.967893][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.347020][ T8576] bridge_slave_0: left allmulticast mode [ 1138.347060][ T8576] bridge_slave_0: left promiscuous mode [ 1138.347369][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.890771][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.282127][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.493177][ T8576] bond0 (unregistering): Released all slaves [ 1142.565055][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1142.566270][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1142.770455][ T9] usb 2-1: device descriptor read/64, error -32 [ 1143.006038][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1143.006310][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1143.135083][ T9] usb 2-1: device descriptor read/64, error -32 [ 1143.281809][ T9] usb usb2-port1: attempt power cycle [ 1143.655276][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1143.685299][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1143.685434][ T9] usb 2-1: device descriptor read/8, error -32 [ 1143.821031][ T9] raw-gadget.0 gadget.1: failed to queue suspend event [ 1143.821611][ T9] raw-gadget.0 gadget.1: failed to queue reset event [ 1143.885512][ T9] raw-gadget.0 gadget.1: failed to queue resume event [ 1143.955175][ T9] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1143.975447][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1144.071352][ T9] usb 2-1: device descriptor read/8, error -32 [ 1144.179016][ T9] raw-gadget.0 gadget.1: failed to queue suspend event [ 1144.179313][ T9] usb usb2-port1: unable to enumerate USB device [ 1145.400042][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.977692][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.037945][ T8576] bond0 (unregistering): Released all slaves [ 1147.421140][ T8576] bond0 (unregistering): Released all slaves [ 1147.856190][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.090154][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.174321][ T8576] bond0 (unregistering): Released all slaves [ 1148.936434][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.270879][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.398931][ T8576] bond0 (unregistering): Released all slaves [ 1149.787374][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.368981][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.599184][ T8576] bond0 (unregistering): Released all slaves [ 1150.667875][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'. [ 1152.036952][T12340] raw-gadget.0 gadget.1: failed to queue disconnect event [ 1153.852467][T10414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1153.996496][T10414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1154.020313][T10414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1154.021803][T10414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1154.031380][T10414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1156.212185][ T5673] Bluetooth: hci5: command tx timeout [ 1157.500185][T10414] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1157.596125][T10414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1157.598320][T10414] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1157.640698][T10414] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1157.642093][T10414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1158.247266][T11998] syz_tun (unregistering): left allmulticast mode [ 1158.322893][T10414] Bluetooth: hci5: command tx timeout [ 1158.463919][ T5281] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1158.524049][T12393] batadv2: entered promiscuous mode [ 1158.524079][T12393] batadv2: entered allmulticast mode [ 1158.538843][T12393] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1159.554438][T12403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1232'. [ 1159.757425][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.965177][T10414] Bluetooth: hci0: command tx timeout [ 1159.986808][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.115086][ T8576] hsr_slave_0: left promiscuous mode [ 1160.218915][ T8576] hsr_slave_1: left promiscuous mode [ 1160.222029][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.256385][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.365134][T10414] Bluetooth: hci5: command tx timeout [ 1160.606312][ T8576] hsr_slave_0: left promiscuous mode [ 1160.701068][ T8576] hsr_slave_1: left promiscuous mode [ 1160.702409][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.726502][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.222688][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1161.306109][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1161.940888][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1162.016356][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1162.046635][T10414] Bluetooth: hci0: command tx timeout [ 1162.418403][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1162.445110][T10414] Bluetooth: hci5: command tx timeout [ 1162.797099][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1163.636975][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1163.697225][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1164.124987][T10414] Bluetooth: hci0: command tx timeout [ 1164.966671][T12242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.967022][T12242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.967367][T12242] bridge_slave_0: entered allmulticast mode [ 1164.971466][T12242] bridge_slave_0: entered promiscuous mode [ 1165.241996][T12242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.242337][T12242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.242704][T12242] bridge_slave_1: entered allmulticast mode [ 1165.275201][T12242] bridge_slave_1: entered promiscuous mode [ 1165.983200][T12260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.992973][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.010006][T12260] bridge_slave_0: entered allmulticast mode [ 1166.036962][T12260] bridge_slave_0: entered promiscuous mode [ 1166.103768][T12242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.170397][T12260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.170776][T12260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.194733][T12260] bridge_slave_1: entered allmulticast mode [ 1166.208514][T10414] Bluetooth: hci0: command tx timeout [ 1166.233954][T12260] bridge_slave_1: entered promiscuous mode [ 1166.290996][T12242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.592066][ T5281] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1167.600441][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.703580][T12242] team0: Port device team_slave_0 added [ 1167.764763][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.772437][T12242] team0: Port device team_slave_1 added [ 1168.199812][T12260] team0: Port device team_slave_0 added [ 1168.214696][T12242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.214715][T12242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.214748][T12242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.294050][T12260] team0: Port device team_slave_1 added [ 1168.305724][T12242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.305744][T12242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.305780][T12242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.738336][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.738357][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.738389][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.042472][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.042500][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.042534][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.402549][T12242] hsr_slave_0: entered promiscuous mode [ 1169.422262][T12242] hsr_slave_1: entered promiscuous mode [ 1169.437066][T12242] debugfs: 'hsr0' already exists in 'hsr' [ 1169.437098][T12242] Cannot create hsr debugfs directory [ 1170.482944][T12260] hsr_slave_0: entered promiscuous mode [ 1170.501419][T12260] hsr_slave_1: entered promiscuous mode [ 1170.517025][T12260] debugfs: 'hsr0' already exists in 'hsr' [ 1170.517055][T12260] Cannot create hsr debugfs directory [ 1175.240986][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.241333][T12367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.241686][T12367] bridge_slave_0: entered allmulticast mode [ 1175.245988][T12367] bridge_slave_0: entered promiscuous mode [ 1175.341382][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.341725][T12367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.342569][T12367] bridge_slave_1: entered allmulticast mode [ 1175.394099][T12367] bridge_slave_1: entered promiscuous mode [ 1176.004550][T12367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.449590][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.449718][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.727999][ T5673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1180.820831][ T5673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1180.822968][ T5673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1180.854412][ T5673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1180.865454][ T5673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1183.166030][T10414] Bluetooth: hci2: command tx timeout [ 1184.054204][ T5673] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1184.136731][ T5673] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1184.140362][ T5673] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1184.141788][ T5673] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1184.175008][ T5673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1185.245150][T10414] Bluetooth: hci2: command tx timeout [ 1186.285370][T10414] Bluetooth: hci6: command tx timeout [ 1187.325149][T10414] Bluetooth: hci2: command tx timeout [ 1187.645621][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1188.365096][T10414] Bluetooth: hci6: command tx timeout [ 1189.406585][T10414] Bluetooth: hci2: command tx timeout [ 1190.445489][ T5673] Bluetooth: hci6: command tx timeout [ 1190.486615][ T5673] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1190.574386][ T5673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1190.615859][ T5673] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1190.676302][ T5673] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1190.677206][ T5673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1192.525260][ T5673] Bluetooth: hci6: command tx timeout [ 1192.766056][T10414] Bluetooth: hci7: command tx timeout [ 1194.845214][ T5673] Bluetooth: hci7: command tx timeout [ 1196.925150][ T5673] Bluetooth: hci7: command tx timeout [ 1199.005193][ T5673] Bluetooth: hci7: command tx timeout [ 1214.122966][T10414] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1214.224099][T10414] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1214.233310][T10414] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1214.312971][T10414] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1214.330695][T10414] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1216.018505][ T5673] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1216.093276][ T5673] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1216.108951][ T5673] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1216.168716][ T5673] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1216.193078][ T5673] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1216.525089][T10414] Bluetooth: hci8: command tx timeout [ 1218.285438][T10414] Bluetooth: hci9: command tx timeout [ 1218.605193][T10414] Bluetooth: hci8: command tx timeout [ 1220.365403][T10414] Bluetooth: hci9: command tx timeout [ 1220.685112][T10414] Bluetooth: hci8: command tx timeout [ 1222.445343][T10414] Bluetooth: hci9: command tx timeout [ 1222.765038][T10414] Bluetooth: hci8: command tx timeout [ 1224.525323][T10414] Bluetooth: hci9: command tx timeout [ 1238.872368][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.872485][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.010161][ T5673] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1243.087280][ T5673] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1243.094394][ T5673] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1243.121958][ T5673] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1243.122898][ T5673] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1245.405299][ T5673] Bluetooth: hci10: command tx timeout [ 1245.971850][T11944] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1246.042158][T11944] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1246.046547][ T5677] Bluetooth: hci3: command 0x0406 tx timeout [ 1246.124268][T11944] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1246.273930][T10414] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1246.284369][T10414] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1247.485396][ T5673] Bluetooth: hci10: command tx timeout [ 1248.446029][ T5673] Bluetooth: hci11: command tx timeout [ 1249.565311][ T5673] Bluetooth: hci10: command tx timeout [ 1250.525252][ T5673] Bluetooth: hci11: command tx timeout [ 1250.933570][T11944] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1251.014129][T11944] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1251.050967][T11944] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1251.089736][T11944] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1251.090805][T11944] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1251.250386][T11944] Bluetooth: hci4: command 0x0406 tx timeout [ 1251.645679][T11944] Bluetooth: hci10: command tx timeout [ 1252.605315][T10414] Bluetooth: hci11: command tx timeout [ 1253.885078][T10414] Bluetooth: hci12: command tx timeout [ 1254.685250][T10414] Bluetooth: hci11: command tx timeout [ 1255.975331][T10414] Bluetooth: hci12: command tx timeout [ 1258.045241][T10414] Bluetooth: hci12: command tx timeout [ 1260.125168][T10414] Bluetooth: hci12: command tx timeout [ 1275.075252][T11944] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1275.155468][T11944] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1275.157560][T11944] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1275.162112][T11944] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1275.163475][T11944] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1276.847350][T10414] Bluetooth: hci5: command 0x0406 tx timeout [ 1277.565145][ T5673] Bluetooth: hci13: command tx timeout [ 1277.896795][T10414] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1277.964467][T10414] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1277.974185][T10414] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1277.999344][T10414] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1278.000161][T10414] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1279.645075][ T5673] Bluetooth: hci13: command tx timeout [ 1280.205127][ T5673] Bluetooth: hci14: command tx timeout [ 1281.725743][ T5673] Bluetooth: hci13: command tx timeout [ 1281.902761][ T5673] Bluetooth: hci0: command 0x0406 tx timeout [ 1282.285166][T10414] Bluetooth: hci14: command tx timeout [ 1283.805104][T10414] Bluetooth: hci13: command tx timeout [ 1284.365212][T10414] Bluetooth: hci14: command tx timeout [ 1286.445020][T10414] Bluetooth: hci14: command tx timeout [ 1300.289600][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.289713][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.003610][ T5673] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1305.099938][ T5673] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1305.124285][ T5673] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1305.175504][ T5673] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1305.177576][ T5673] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1305.405424][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1307.406544][ T5673] Bluetooth: hci15: command tx timeout [ 1307.492688][ T5673] Bluetooth: hci2: command 0x0406 tx timeout [ 1307.565174][ T5673] Bluetooth: hci6: command 0x0406 tx timeout [ 1308.287705][ T5677] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1308.360994][ T5677] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1308.362968][ T5677] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1308.489340][ T5677] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1308.490395][ T5677] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1309.485151][ T5677] Bluetooth: hci15: command tx timeout [ 1310.525537][ T5677] Bluetooth: hci16: command tx timeout [ 1310.963933][T11944] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1311.035451][T11944] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1311.037415][T11944] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1311.120254][T11944] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1311.121279][T11944] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1311.565086][ T5677] Bluetooth: hci15: command tx timeout [ 1312.604937][ T5677] Bluetooth: hci16: command tx timeout [ 1313.325232][ T5677] Bluetooth: hci17: command tx timeout [ 1313.645091][ T5677] Bluetooth: hci15: command tx timeout [ 1314.685065][ T5677] Bluetooth: hci16: command tx timeout [ 1315.405171][ T5677] Bluetooth: hci17: command tx timeout [ 1316.766587][ T5677] Bluetooth: hci16: command tx timeout [ 1317.565649][ T5677] Bluetooth: hci17: command tx timeout [ 1317.725082][ T5677] Bluetooth: hci7: command 0x0406 tx timeout [ 1319.645102][T11944] Bluetooth: hci17: command tx timeout [ 1324.605615][ T40] INFO: task dhcpcd:5281 blocked for more than 143 seconds. [ 1324.605649][ T40] Tainted: G L syzkaller #0 [ 1324.605663][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.605675][ T40] task:dhcpcd state:D stack:21496 pid:5281 tgid:5281 ppid:5280 task_flags:0x400140 flags:0x00080000 [ 1324.605742][ T40] Call Trace: [ 1324.605751][ T40] [ 1324.605766][ T40] __schedule+0x16f9/0x5500 [ 1324.605819][ T40] ? __pfx_sched_balance_rq+0x10/0x10 [ 1324.605873][ T40] ? __pfx___schedule+0x10/0x10 [ 1324.605926][ T40] rt_mutex_schedule+0x76/0xf0 [ 1324.605961][ T40] rt_mutex_slowlock_block+0x508/0x680 [ 1324.606012][ T40] rt_mutex_slowlock+0x2dc/0x780 [ 1324.606046][ T40] ? rt_mutex_slowlock+0x1fd/0x780 [ 1324.606077][ T40] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1324.606122][ T40] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1324.606159][ T40] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1324.606197][ T40] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1324.606227][ T40] mutex_lock_nested+0x168/0x1d0 [ 1324.606263][ T40] inet_rtm_newaddr+0x404/0x1ad0 [ 1324.606303][ T40] ? __kernel_text_address+0xd/0x30 [ 1324.606348][ T40] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1324.606397][ T40] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1324.606428][ T40] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1324.606462][ T40] ? kasan_save_track+0x3e/0x80 [ 1324.606489][ T40] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1324.606521][ T40] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1324.606557][ T40] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1324.606595][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1324.606640][ T40] netlink_rcv_skb+0x232/0x4b0 [ 1324.606669][ T40] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1324.606707][ T40] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1324.606747][ T40] ? netlink_deliver_tap+0x2e/0x1b0 [ 1324.606773][ T40] ? netlink_deliver_tap+0x2e/0x1b0 [ 1324.606806][ T40] netlink_unicast+0x780/0x920 [ 1324.606854][ T40] netlink_sendmsg+0x813/0xb40 [ 1324.606920][ T40] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1324.606950][ T40] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1324.606985][ T40] ? aa_sock_msg_perm+0x122/0x200 [ 1324.607013][ T40] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1324.607040][ T40] sock_sendmsg_nosec+0x112/0x150 [ 1324.607076][ T40] ____sys_sendmsg+0x55c/0x870 [ 1324.607109][ T40] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1324.607145][ T40] ? import_iovec+0x73/0xa0 [ 1324.607173][ T40] ___sys_sendmsg+0x2a5/0x360 [ 1324.607206][ T40] ? __pfx____sys_sendmsg+0x10/0x10 [ 1324.607238][ T40] ? count_memcg_event_mm+0x21/0x260 [ 1324.607307][ T40] ? __pfx_handle_mm_fault+0x10/0x10 [ 1324.607342][ T40] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1324.607372][ T40] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1324.607411][ T40] ? do_user_addr_fault+0xc6f/0x1340 [ 1324.607451][ T40] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.607478][ T40] do_syscall_64+0x15f/0x560 [ 1324.607504][ T40] ? trace_irq_disable+0x3b/0x140 [ 1324.607532][ T40] ? clear_bhb_loop+0x40/0x90 [ 1324.607561][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.607586][ T40] RIP: 0033:0x7fe5ac423407 [ 1324.607607][ T40] RSP: 002b:00007ffd343de730 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1324.607631][ T40] RAX: ffffffffffffffda RBX: 00007fe5ac399780 RCX: 00007fe5ac423407 [ 1324.607650][ T40] RDX: 0000000000000000 RSI: 00007ffd343f2910 RDI: 0000000000000004 [ 1324.607665][ T40] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1324.607679][ T40] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd34402b40 [ 1324.607695][ T40] R13: 00007fe5ac399708 R14: 0000000000000044 R15: 00007ffd343f2910 [ 1324.607731][ T40] [ 1324.607779][ T40] INFO: task kworker/u8:31:8576 blocked for more than 143 seconds. [ 1324.607799][ T40] Tainted: G L syzkaller #0 [ 1324.607812][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.607823][ T40] task:kworker/u8:31 state:D stack:19992 pid:8576 tgid:8576 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1324.607885][ T40] Workqueue: netns cleanup_net [ 1324.607922][ T40] Call Trace: [ 1324.607930][ T40] [ 1324.607944][ T40] __schedule+0x16f9/0x5500 [ 1324.607991][ T40] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1324.608038][ T40] ? __pfx___schedule+0x10/0x10 [ 1324.608091][ T40] rt_mutex_schedule+0x76/0xf0 [ 1324.608126][ T40] rt_mutex_slowlock_block+0x508/0x680 [ 1324.608178][ T40] rt_mutex_slowlock+0x2dc/0x780 [ 1324.608213][ T40] ? rt_mutex_slowlock+0x1fd/0x780 [ 1324.608246][ T40] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1324.608305][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1324.608335][ T40] ? wg_destruct+0x25/0x310 [ 1324.608359][ T40] mutex_lock_nested+0x168/0x1d0 [ 1324.608389][ T40] ? wg_destruct+0x25/0x310 [ 1324.608415][ T40] ? __pfx_wg_destruct+0x10/0x10 [ 1324.608440][ T40] wg_destruct+0x25/0x310 [ 1324.608466][ T40] ? __pfx_wg_destruct+0x10/0x10 [ 1324.608491][ T40] netdev_run_todo+0xf57/0x1130 [ 1324.608530][ T40] ? __pfx_netdev_run_todo+0x10/0x10 [ 1324.608559][ T40] ? unregister_netdevice_queue+0x19b/0x360 [ 1324.608591][ T40] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1324.608621][ T40] ? batadv_meshif_destroy_netlink+0x3a3/0x4a0 [ 1324.608659][ T40] default_device_exit_batch+0x967/0x9e0 [ 1324.608702][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1324.608727][ T40] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1324.608778][ T40] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1324.608814][ T40] ops_undo_list+0x52b/0x940 [ 1324.608854][ T40] ? rt_spin_unlock+0x1f0/0x200 [ 1324.608887][ T40] ? __pfx_ops_undo_list+0x10/0x10 [ 1324.608920][ T40] ? rt_spin_unlock+0x14f/0x200 [ 1324.608954][ T40] ? idr_destroy+0x21b/0x2a0 [ 1324.608990][ T40] ? rt_spin_unlock+0x160/0x200 [ 1324.609025][ T40] cleanup_net+0x56e/0x800 [ 1324.609064][ T40] ? __pfx_cleanup_net+0x10/0x10 [ 1324.609112][ T40] ? process_one_work+0x8be/0x1630 [ 1324.609149][ T40] process_one_work+0x98b/0x1630 [ 1324.609208][ T40] ? __pfx_process_one_work+0x10/0x10 [ 1324.609241][ T40] ? do_raw_spin_lock+0x12b/0x2f0 [ 1324.609286][ T40] worker_thread+0xb49/0x1140 [ 1324.609344][ T40] kthread+0x388/0x470 [ 1324.609374][ T40] ? __pfx_worker_thread+0x10/0x10 [ 1324.609396][ T40] ? __pfx_kthread+0x10/0x10 [ 1324.609426][ T40] ret_from_fork+0x514/0xb70 [ 1324.609461][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 1324.609492][ T40] ? __switch_to+0xc79/0x1410 [ 1324.609522][ T40] ? __pfx_kthread+0x10/0x10 [ 1324.609552][ T40] ret_from_fork_asm+0x1a/0x30 [ 1324.609604][ T40] [ 1324.609625][ T40] INFO: task kworker/u8:0:11804 blocked for more than 143 seconds. [ 1324.609645][ T40] Tainted: G L syzkaller #0 [ 1324.609658][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.609669][ T40] task:kworker/u8:0 state:D stack:24200 pid:11804 tgid:11804 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1324.609736][ T40] Workqueue: events_unbound linkwatch_event [ 1324.609764][ T40] Call Trace: [ 1324.609772][ T40] [ 1324.609785][ T40] __schedule+0x16f9/0x5500 [ 1324.609855][ T40] ? __pfx___schedule+0x10/0x10 [ 1324.609907][ T40] rt_mutex_schedule+0x76/0xf0 [ 1324.609942][ T40] rt_mutex_slowlock_block+0x508/0x680 [ 1324.609993][ T40] rt_mutex_slowlock+0x2dc/0x780 [ 1324.610028][ T40] ? rt_mutex_slowlock+0x1fd/0x780 [ 1324.610061][ T40] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1324.610115][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1324.610144][ T40] ? linkwatch_event+0xe/0x60 [ 1324.610170][ T40] mutex_lock_nested+0x168/0x1d0 [ 1324.610201][ T40] ? linkwatch_event+0xe/0x60 [ 1324.610230][ T40] ? process_one_work+0x8be/0x1630 [ 1324.610266][ T40] linkwatch_event+0xe/0x60 [ 1324.610292][ T40] process_one_work+0x98b/0x1630 [ 1324.610358][ T40] ? __pfx_process_one_work+0x10/0x10 [ 1324.610393][ T40] ? do_raw_spin_lock+0x12b/0x2f0 [ 1324.610437][ T40] worker_thread+0xb8e/0x1140 [ 1324.610471][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1324.610511][ T40] kthread+0x388/0x470 [ 1324.610539][ T40] ? __pfx_worker_thread+0x10/0x10 [ 1324.610561][ T40] ? __pfx_kthread+0x10/0x10 [ 1324.610590][ T40] ret_from_fork+0x514/0xb70 [ 1324.610622][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 1324.610654][ T40] ? __switch_to+0xc79/0x1410 [ 1324.610683][ T40] ? __pfx_kthread+0x10/0x10 [ 1324.610713][ T40] ret_from_fork_asm+0x1a/0x30 [ 1324.610765][ T40] [ 1324.610785][ T40] INFO: task syz-executor:12242 blocked for more than 143 seconds. [ 1324.610805][ T40] Tainted: G L syzkaller #0 [ 1324.610818][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.610828][ T40] task:syz-executor state:D stack:21544 pid:12242 tgid:12242 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1324.610889][ T40] Call Trace: [ 1324.610897][ T40] [ 1324.610910][ T40] __schedule+0x16f9/0x5500 [ 1324.610958][ T40] ? __kernel_text_address+0xd/0x30 [ 1324.610991][ T40] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1324.611018][ T40] ? arch_stack_walk+0xfb/0x150 [ 1324.611069][ T40] ? __pfx___schedule+0x10/0x10 [ 1324.611122][ T40] rt_mutex_schedule+0x76/0xf0 [ 1324.611156][ T40] rt_mutex_slowlock_block+0x508/0x680 [ 1324.611207][ T40] rt_mutex_slowlock+0x2dc/0x780 [ 1324.611241][ T40] ? rt_mutex_slowlock+0x1fd/0x780 [ 1324.611274][ T40] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1324.611330][ T40] ? nsim_destroy+0x16b/0x7f0 [ 1324.611362][ T40] ? nsim_destroy+0x16b/0x7f0 [ 1324.611384][ T40] mutex_lock_nested+0x168/0x1d0 [ 1324.611413][ T40] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1324.611443][ T40] nsim_destroy+0x16b/0x7f0 [ 1324.611476][ T40] __nsim_dev_port_del+0x14f/0x200 [ 1324.611512][ T40] nsim_dev_reload_destroy+0x288/0x490 [ 1324.611542][ T40] ? nsim_drv_remove+0x50/0x160 [ 1324.611576][ T40] nsim_drv_remove+0x58/0x160 [ 1324.611604][ T40] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1324.611631][ T40] device_release_driver_internal+0x46f/0x870 [ 1324.611665][ T40] bus_remove_device+0x45a/0x570 [ 1324.611702][ T40] ? __pfx_bus_remove_device+0x10/0x10 [ 1324.611739][ T40] ? up_read+0x23/0x40 [ 1324.611760][ T40] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1324.611798][ T40] device_del+0x52b/0x900 [ 1324.611844][ T40] ? __pfx_device_del+0x10/0x10 [ 1324.611881][ T40] ? lockdep_hardirqs_on+0x7a/0x110 [ 1324.611905][ T40] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1324.611934][ T40] device_unregister+0x21/0xf0 [ 1324.611973][ T40] del_device_store+0x2b0/0x370 [ 1324.612004][ T40] ? __pfx_del_device_store+0x10/0x10 [ 1324.612029][ T40] ? sysfs_file_kobj+0x1e4/0x230 [ 1324.612055][ T40] ? sysfs_kf_write+0x166/0x260 [ 1324.612084][ T40] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1324.612107][ T40] kernfs_fop_write_iter+0x3b0/0x540 [ 1324.612152][ T40] vfs_write+0x629/0xba0 [ 1324.612192][ T40] ? __pfx_vfs_write+0x10/0x10 [ 1324.612226][ T40] ? do_sys_openat2+0x14e/0x200 [ 1324.612249][ T40] ? kmem_cache_free+0x187/0x6c0 [ 1324.612302][ T40] ksys_write+0x156/0x270 [ 1324.612336][ T40] ? __pfx_ksys_write+0x10/0x10 [ 1324.612377][ T40] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.612403][ T40] do_syscall_64+0x15f/0x560 [ 1324.612430][ T40] ? clear_bhb_loop+0x40/0x90 [ 1324.612460][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.612485][ T40] RIP: 0033:0x7f402fd8d68e [ 1324.612505][ T40] RSP: 002b:00007ffc78ecda68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1324.612529][ T40] RAX: ffffffffffffffda RBX: 000055558f724500 RCX: 00007f402fd8d68e [ 1324.612546][ T40] RDX: 0000000000000001 RSI: 00007ffc78ecdaf0 RDI: 0000000000000005 [ 1324.612561][ T40] RBP: 00007f402fe635f2 R08: 0000000000000000 R09: 0000000000000000 [ 1324.612576][ T40] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.612591][ T40] R13: 00007ffc78ecdaf0 R14: 00007f4030b74620 R15: 0000000000000003 [ 1324.612626][ T40] [ 1324.612637][ T40] INFO: task syz-executor:12260 blocked for more than 143 seconds. [ 1324.612657][ T40] Tainted: G L syzkaller #0 [ 1324.612670][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.612680][ T40] task:syz-executor state:D stack:20976 pid:12260 tgid:12260 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1324.612740][ T40] Call Trace: [ 1324.612748][ T40] [ 1324.612761][ T40] __schedule+0x16f9/0x5500 [ 1324.612825][ T40] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1324.612853][ T40] ? __pfx___schedule+0x10/0x10 [ 1324.612887][ T40] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1324.612934][ T40] rt_mutex_schedule+0x76/0xf0 [ 1324.612969][ T40] rt_mutex_slowlock_block+0x508/0x680 [ 1324.613013][ T40] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1324.613047][ T40] rt_mutex_slowlock+0x2dc/0x780 [ 1324.613081][ T40] ? rt_mutex_slowlock+0x1fd/0x780 [ 1324.613114][ T40] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1324.613159][ T40] ? del_device_store+0xd7/0x370 [ 1324.613190][ T40] ? del_device_store+0xd7/0x370 [ 1324.613222][ T40] ? del_device_store+0xd7/0x370 [ 1324.613245][ T40] mutex_lock_nested+0x168/0x1d0 [ 1324.613280][ T40] del_device_store+0xd7/0x370 [ 1324.613312][ T40] ? sysfs_file_kobj+0x1a/0x230 [ 1324.613339][ T40] ? __pfx_del_device_store+0x10/0x10 [ 1324.613365][ T40] ? sysfs_file_kobj+0x1e4/0x230 [ 1324.613391][ T40] ? sysfs_kf_write+0x166/0x260 [ 1324.613420][ T40] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1324.613444][ T40] kernfs_fop_write_iter+0x3b0/0x540 [ 1324.613487][ T40] vfs_write+0x629/0xba0 [ 1324.613526][ T40] ? __pfx_vfs_write+0x10/0x10 [ 1324.613560][ T40] ? do_sys_openat2+0x14e/0x200 [ 1324.613582][ T40] ? kmem_cache_free+0x187/0x6c0 [ 1324.613629][ T40] ksys_write+0x156/0x270 [ 1324.613661][ T40] ? __pfx_ksys_write+0x10/0x10 [ 1324.613701][ T40] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.613728][ T40] do_syscall_64+0x15f/0x560 [ 1324.613751][ T40] ? trace_irq_disable+0x3b/0x140 [ 1324.613777][ T40] ? clear_bhb_loop+0x40/0x90 [ 1324.613806][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.613829][ T40] RIP: 0033:0x7fb320a7d68e [ 1324.613849][ T40] RSP: 002b:00007ffd2bb604f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1324.613872][ T40] RAX: ffffffffffffffda RBX: 000055555c372500 RCX: 00007fb320a7d68e [ 1324.613890][ T40] RDX: 0000000000000001 RSI: 00007ffd2bb60580 RDI: 0000000000000005 [ 1324.613906][ T40] RBP: 00007fb320b535f2 R08: 0000000000000000 R09: 0000000000000000 [ 1324.613922][ T40] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.613935][ T40] R13: 00007ffd2bb60580 R14: 00007fb321864620 R15: 0000000000000003 [ 1324.613972][ T40] [ 1324.613982][ T40] INFO: task syz-executor:12367 blocked for more than 143 seconds. [ 1324.614003][ T40] Tainted: G L syzkaller #0 [ 1324.614016][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.614027][ T40] task:syz-executor state:D stack:21528 pid:12367 tgid:12367 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1324.614102][ T40] Call Trace: [ 1324.614110][ T40] [ 1324.614124][ T40] __schedule+0x16f9/0x5500 [ 1324.614159][ T40] ? is_bpf_text_address+0x26/0x2b0 [ 1324.614206][ T40] ? kernel_text_address+0xa5/0xe0 [ 1324.614256][ T40] ? __pfx___schedule+0x10/0x10 [ 1324.614316][ T40] rt_mutex_schedule+0x76/0xf0 [ 1324.614351][ T40] rt_mutex_slowlock_block+0x508/0x680 [ 1324.614402][ T40] rt_mutex_slowlock+0x2dc/0x780 [ 1324.614437][ T40] ? rt_mutex_slowlock+0x1fd/0x780 [ 1324.614470][ T40] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1324.614524][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1324.614554][ T40] ? rtnl_newlink+0x883/0x1bb0 [ 1324.614588][ T40] mutex_lock_nested+0x168/0x1d0 [ 1324.614618][ T40] ? rtnl_newlink+0x883/0x1bb0 [ 1324.614658][ T40] rtnl_newlink+0x883/0x1bb0 [ 1324.614707][ T40] ? __pfx_rtnl_newlink+0x10/0x10 [ 1324.614743][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.164241][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.164287][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.164330][ T40] ? unwind_next_frame+0xa6/0x2550 [ 1325.164373][ T40] ? unwind_next_frame+0xa6/0x2550 [ 1325.164411][ T40] ? is_bpf_text_address+0x26/0x2b0 [ 1325.164460][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.164498][ T40] ? kernel_text_address+0xa5/0xe0 [ 1325.164530][ T40] ? __kernel_text_address+0xd/0x30 [ 1325.164560][ T40] ? unwind_get_return_address+0x4d/0x90 [ 1325.164595][ T40] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1325.164621][ T40] ? arch_stack_walk+0xfb/0x150 [ 1325.164664][ T40] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1325.164719][ T40] ? __pfx_rtnl_newlink+0x10/0x10 [ 1325.199072][ T40] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1325.199120][ T40] ? kasan_save_track+0x3e/0x80 [ 1325.199147][ T40] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1325.199179][ T40] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1325.199215][ T40] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1325.199252][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.199298][ T40] netlink_rcv_skb+0x232/0x4b0 [ 1325.199327][ T40] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1325.199365][ T40] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1325.199407][ T40] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.199433][ T40] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.199465][ T40] netlink_unicast+0x780/0x920 [ 1325.199515][ T40] netlink_sendmsg+0x813/0xb40 [ 1325.199553][ T40] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.199583][ T40] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1325.199618][ T40] ? aa_sock_msg_perm+0x122/0x200 [ 1325.199646][ T40] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.199672][ T40] sock_sendmsg_nosec+0x112/0x150 [ 1325.199707][ T40] __sys_sendto+0x402/0x590 [ 1325.199737][ T40] ? __pfx___sys_sendto+0x10/0x10 [ 1325.199803][ T40] ? fput_close_sync+0x11f/0x240 [ 1325.199829][ T40] ? __pfx_fput_close_sync+0x10/0x10 [ 1325.199865][ T40] __x64_sys_sendto+0xde/0x100 [ 1325.199889][ T40] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.224998][ T40] do_syscall_64+0x15f/0x560 [ 1325.225040][ T40] ? clear_bhb_loop+0x40/0x90 [ 1325.225072][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.225099][ T40] RIP: 0033:0x7fbef605d68e [ 1325.225119][ T40] RSP: 002b:00007ffece127498 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1325.225147][ T40] RAX: ffffffffffffffda RBX: 000055556dd3f500 RCX: 00007fbef605d68e [ 1325.225166][ T40] RDX: 0000000000000028 RSI: 00007fbef6e44670 RDI: 0000000000000003 [ 1325.225182][ T40] RBP: 0000000000000001 R08: 00007ffece127514 R09: 000000000000000c [ 1325.225198][ T40] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1325.225218][ T40] R13: 0000000000000000 R14: 00007fbef6e44670 R15: 0000000000000000 [ 1325.225253][ T40] [ 1325.303917][ T40] INFO: task syz-executor:12388 blocked for more than 144 seconds. [ 1325.303952][ T40] Tainted: G L syzkaller #0 [ 1325.303967][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1325.303979][ T40] task:syz-executor state:D stack:21336 pid:12388 tgid:12388 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1325.304046][ T40] Call Trace: [ 1325.304055][ T40] [ 1325.304071][ T40] __schedule+0x16f9/0x5500 [ 1325.304113][ T40] ? is_bpf_text_address+0x26/0x2b0 [ 1325.304159][ T40] ? kernel_text_address+0xa5/0xe0 [ 1325.304210][ T40] ? __pfx___schedule+0x10/0x10 [ 1325.304262][ T40] rt_mutex_schedule+0x76/0xf0 [ 1325.304296][ T40] rt_mutex_slowlock_block+0x508/0x680 [ 1325.304347][ T40] rt_mutex_slowlock+0x2dc/0x780 [ 1325.304381][ T40] ? rt_mutex_slowlock+0x1fd/0x780 [ 1325.304414][ T40] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1325.304468][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1325.304498][ T40] ? rtnl_newlink+0x883/0x1bb0 [ 1325.304532][ T40] mutex_lock_nested+0x168/0x1d0 [ 1325.304563][ T40] ? rtnl_newlink+0x883/0x1bb0 [ 1325.304602][ T40] rtnl_newlink+0x883/0x1bb0 [ 1325.304651][ T40] ? __pfx_rtnl_newlink+0x10/0x10 [ 1325.304687][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.304725][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.362976][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.363028][ T40] ? unwind_next_frame+0xa6/0x2550 [ 1325.363070][ T40] ? unwind_next_frame+0xa6/0x2550 [ 1325.363110][ T40] ? is_bpf_text_address+0x26/0x2b0 [ 1325.363159][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.363197][ T40] ? kernel_text_address+0xa5/0xe0 [ 1325.363228][ T40] ? __kernel_text_address+0xd/0x30 [ 1325.363259][ T40] ? unwind_get_return_address+0x4d/0x90 [ 1325.363293][ T40] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1325.363321][ T40] ? arch_stack_walk+0xfb/0x150 [ 1325.363365][ T40] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1325.363418][ T40] ? __pfx_rtnl_newlink+0x10/0x10 [ 1325.363453][ T40] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1325.443009][ T40] ? kasan_save_track+0x3e/0x80 [ 1325.443047][ T40] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1325.443080][ T40] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1325.443116][ T40] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1325.443150][ T40] ? __lock_acquire+0x6b5/0x2d10 [ 1325.443193][ T40] netlink_rcv_skb+0x232/0x4b0 [ 1325.443220][ T40] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1325.443256][ T40] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1325.443295][ T40] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.443319][ T40] ? netlink_deliver_tap+0x2e/0x1b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1325.443351][ T40] netlink_unicast+0x780/0x920 [ 1325.443398][ T40] netlink_sendmsg+0x813/0xb40 [ 1325.443432][ T40] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.443461][ T40] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1325.443494][ T40] ? aa_sock_msg_perm+0x122/0x200 [ 1325.443520][ T40] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.443543][ T40] sock_sendmsg_nosec+0x112/0x150 [ 1325.443578][ T40] __sys_sendto+0x402/0x590 [ 1325.443607][ T40] ? __pfx___sys_sendto+0x10/0x10 [ 1325.443640][ T40] ? file_init_path+0x3b/0x5b0 [ 1325.443696][ T40] ? rcu_is_watching+0x15/0xb0 [ 1325.443737][ T40] __x64_sys_sendto+0xde/0x100 [ 1325.443760][ T40] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.443785][ T40] do_syscall_64+0x15f/0x560 [ 1325.443808][ T40] ? trace_irq_disable+0x3b/0x140 [ 1325.443835][ T40] ? clear_bhb_loop+0x40/0x90 [ 1325.443864][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.443888][ T40] RIP: 0033:0x7f9260a2d68e [ 1325.443916][ T40] RSP: 002b:00007fffd464b888 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1325.443941][ T40] RAX: ffffffffffffffda RBX: 000055558edc4500 RCX: 00007f9260a2d68e [ 1325.443959][ T40] RDX: 000000000000004c RSI: 00007f9261814670 RDI: 0000000000000003 [ 1325.443974][ T40] RBP: 0000000000000001 R08: 00007fffd464b904 R09: 000000000000000c [ 1325.443989][ T40] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1325.444004][ T40] R13: 0000000000000000 R14: 00007f9261814670 R15: 0000000000000000 [ 1325.444040][ T40] [ 1325.444092][ T40] [ 1325.444092][ T40] Showing all locks held in the system: [ 1325.444103][ T40] 4 locks held by pr/legacy/17: [ 1325.444115][ T40] #0: ffffffff8dfbce40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 1325.444177][ T40] #1: ffffffff8dea4738 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 1325.444235][ T40] #2: ffffffff99ba1f78 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90 [ 1325.444289][ T40] #3: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1325.444351][ T40] 4 locks held by ktimers/1/30: [ 1325.444364][ T40] #0: ffffffff8de61600 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1325.704943][ T40] #1: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1325.705025][ T40] #2: ffff8880b87284b8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260 [ 1325.705085][ T40] #3: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1325.705150][ T40] 1 lock held by khungtaskd/40: [ 1325.705163][ T40] #0: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1325.705264][ T40] 1 lock held by klogd/4974: [ 1325.705278][ T40] #0: ffffffff8e111030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1325.705337][ T40] 1 lock held by dhcpcd/5281: [ 1325.705350][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1325.705415][ T40] 2 locks held by getty/5374: [ 1325.705428][ T40] #0: ffff8880323ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1325.705497][ T40] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1325.705560][ T40] 3 locks held by sshd-session/5646: [ 1325.705573][ T40] #0: ffff88801b3d61d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 1325.705628][ T40] #1: ffffffff8e111030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1325.705682][ T40] #2: ffff88813fe1cd58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 1325.705743][ T40] 2 locks held by syz-executor/5647: [ 1325.705755][ T40] #0: ffff88803adc8430 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 1325.705813][ T40] #1: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 1325.705878][ T40] 6 locks held by kworker/u8:1/5655: [ 1325.705899][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1325.705967][ T40] #1: ffffc9000490fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1325.706038][ T40] #2: ffff88802028a310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1325.706109][ T40] #3: ffff8880618c3d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1325.706176][ T40] #4: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1325.706236][ T40] #5: ffff88813fe1cd58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620 [ 1325.706303][ T40] 6 locks held by kworker/u8:3/5687: [ 1325.706333][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1325.855205][ T40] #1: ffffc90004defc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1325.855281][ T40] #2: ffff88806051c310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1325.855367][ T40] #3: ffff888038105920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1325.855435][ T40] #4: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1325.855499][ T40] #5: ffff88813fe1cd58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620 [ 1325.855572][ T40] 6 locks held by kworker/u8:10/5872: [ 1325.855586][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1325.855655][ T40] #1: ffffc90005cf7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1325.855725][ T40] #2: ffff88803c69c310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1325.855797][ T40] #3: ffff888034e38520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1325.855863][ T40] #4: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1325.855925][ T40] #5: ffff88813fe1cd58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620 [ 1325.855994][ T40] 4 locks held by kworker/u8:13/7531: [ 1325.856008][ T40] #0: ffff888032734138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1325.856075][ T40] #1: ffffc90003e4fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1325.856143][ T40] #2: ffffffff8de61600 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1325.856219][ T40] #3: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1325.856290][ T40] 6 locks held by kworker/u8:24/8569: [ 1325.856304][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1325.856372][ T40] #1: ffffc900043dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1325.856442][ T40] #2: ffff88806481c310 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1325.856515][ T40] #3: ffff88805ee38d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1325.938112][ T40] #4: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1326.004945][ T40] #5: ffff88813fe1cd58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620 [ 1326.005017][ T40] 6 locks held by kworker/u8:29/8574: [ 1326.005032][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1326.005100][ T40] #1: ffffc900048a7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1326.005170][ T40] #2: ffff88803c750310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1326.005245][ T40] #3: ffff888060738120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1326.005313][ T40] #4: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1326.005382][ T40] #5: ffff88813fe1cd58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620 [ 1326.005468][ T40] 4 locks held by kworker/u8:31/8576: [ 1326.005481][ T40] #0: ffff88801b68e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1326.005552][ T40] #1: ffffc90005b87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1326.005619][ T40] #2: ffffffff8f370540 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1326.005685][ T40] #3: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 1326.005746][ T40] 3 locks held by kworker/u8:0/11804: [ 1326.005760][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1326.005825][ T40] #1: ffffc90003b8fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1326.005896][ T40] #2: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1326.005956][ T40] 3 locks held by kworker/u8:2/11860: [ 1326.005969][ T40] #0: ffff888032359938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1326.006037][ T40] #1: ffffc9000420fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1326.006107][ T40] #2: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1326.006162][ T40] 6 locks held by kworker/u8:4/11861: [ 1326.006176][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1326.006242][ T40] #1: ffffc90003fafc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1326.006311][ T40] #2: ffff88803c680310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1326.147896][ T40] #3: ffff888035f7c520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1326.147969][ T40] #4: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1326.148031][ T40] #5: ffff88813fe1cd58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620 [ 1326.148103][ T40] 7 locks held by syz-executor/12242: [ 1326.148117][ T40] #0: ffff88803613c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1326.148183][ T40] #1: ffff88805f440478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1326.148251][ T40] #2: ffff88802957f1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1326.148321][ T40] #3: ffffffff8ebf4418 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1326.148379][ T40] #4: ffff88802bb4f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1326.148438][ T40] #5: ffff88803c80e310 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1326.148506][ T40] #6: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 1326.148561][ T40] 4 locks held by syz-executor/12260: [ 1326.148574][ T40] #0: ffff88803613c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1326.148640][ T40] #1: ffff888035ff3c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1326.148705][ T40] #2: ffff88802957f1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1326.148777][ T40] #3: ffffffff8ebf4418 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1326.148835][ T40] 1 lock held by syz-executor/12367: [ 1326.148855][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1326.148926][ T40] 2 locks held by syz-executor/12388: [ 1326.148940][ T40] #0: ffffffff8f8c0938 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1326.149000][ T40] #1: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1326.149069][ T40] 3 locks held by kworker/1:3/12467: [ 1326.149083][ T40] #0: ffff88813fe4a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1326.149152][ T40] #1: ffffc900038cfc40 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1326.149220][ T40] #2: ffffffff8eabf718 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x480 [ 1326.289397][ T40] 5 locks held by syz.0.1239/12483: [ 1326.289414][ T40] #0: ffffffff8f8da580 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1326.289488][ T40] #1: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1326.289554][ T40] #2: ffff888062fd8628 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 1326.289618][ T40] #3: ffffffff8e111030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1326.289674][ T40] #4: ffff88813fe1cd58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 1326.289736][ T40] 3 locks held by kworker/1:5/12484: [ 1326.289750][ T40] #0: ffff88813fe4a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1326.289818][ T40] #1: ffffc9000126fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1326.289885][ T40] #2: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x265/0x12e0 [ 1326.289943][ T40] 1 lock held by syz-executor/12488: [ 1326.289956][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290021][ T40] 1 lock held by syz-executor/12496: [ 1326.290034][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290034][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290104][ T40] 1 lock held by syz-executor/12501: [ 1326.290118][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290180][ T40] 1 lock held by syz-executor/12508: [ 1326.290193][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290256][ T40] 1 lock held by syz-executor/12515: [ 1326.290269][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290331][ T40] 1 lock held by syz-executor/12520: [ 1326.290344][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290407][ T40] 1 lock held by syz-executor/12527: [ 1326.290421][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290483][ T40] 1 lock held by syz-executor/12532: [ 1326.290496][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290558][ T40] 1 lock held by syz-executor/12538: [ 1326.290572][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290634][ T40] 1 lock held by syz-executor/12546: [ 1326.290648][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.290711][ T40] 1 lock held by syz-executor/12552: [ 1326.290725][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.714343][ T40] 1 lock held by syz-executor/12559: [ 1326.714359][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1326.714426][ T40] 1 lock held by syz-executor/12564: [ 1326.714440][ T40] #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1328.015014][ T40] [ 1328.015026][ T40] ============================================= [ 1328.015026][ T40] [ 1328.015053][ T40] NMI backtrace for cpu 0 [ 1328.015075][ T40] CPU: 0 UID: 0 PID: 40 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1328.015107][ T40] Tainted: [L]=SOFTLOCKUP [ 1328.015116][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1328.015129][ T40] Call Trace: [ 1328.015139][ T40] [ 1328.015149][ T40] dump_stack_lvl+0xe8/0x150 [ 1328.015186][ T40] nmi_cpu_backtrace+0x274/0x2d0 [ 1328.015221][ T40] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1328.015254][ T40] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1328.015290][ T40] sys_info+0x135/0x170 [ 1328.015318][ T40] watchdog+0xfd3/0x1030 [ 1328.015353][ T40] ? watchdog+0x1c9/0x1030 [ 1328.015386][ T40] kthread+0x388/0x470 [ 1328.015415][ T40] ? __pfx_watchdog+0x10/0x10 [ 1328.015439][ T40] ? __pfx_kthread+0x10/0x10 [ 1328.015468][ T40] ret_from_fork+0x514/0xb70 [ 1328.015501][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 1328.015532][ T40] ? __switch_to+0xc79/0x1410 [ 1328.015560][ T40] ? __pfx_kthread+0x10/0x10 [ 1328.015589][ T40] ret_from_fork_asm+0x1a/0x30 [ 1328.015639][ T40] [ 1328.015647][ T40] Sending NMI from CPU 0 to CPUs 1: [ 1328.015680][ C1] NMI backtrace for cpu 1 [ 1328.015699][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1328.015743][ C1] Tainted: [L]=SOFTLOCKUP [ 1328.015749][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1328.015760][ C1] RIP: 0010:__lock_acquire+0xd4e/0x2d10 [ 1328.015788][ C1] Code: ae f0 0b 00 00 41 8b 86 f8 0b 00 00 ff c0 41 89 86 f8 0b 00 00 83 f8 30 0f 83 71 18 00 00 3b 05 10 18 da 11 0f 87 c4 18 00 00 01 00 00 00 e9 d4 06 00 00 41 83 fe 03 ba 02 00 00 00 41 0f 43 [ 1328.015805][ C1] RSP: 0000:ffffc90000a4f9e0 EFLAGS: 00000097 [ 1328.015822][ C1] RAX: 0000000000000003 RBX: 0000000000053828 RCX: 1bb76b11841d2cd7 [ 1328.015835][ C1] RDX: 0000000011e77200 RSI: 000000000ef97859 RDI: ffff88801de81f00 [ 1328.015848][ C1] RBP: 1bb76b11841d2cd7 R08: ffffffff8b2f46df R09: ffff8880b8728478 [ 1328.015862][ C1] R10: dffffc0000000000 R11: fffffbfff1f17d7f R12: ffff88801de82b50 [ 1328.015876][ C1] R13: ffff88801de82b50 R14: ffff88801de81f00 R15: 0000000000000002 [ 1328.015890][ C1] FS: 0000000000000000(0000) GS:ffff888125fec000(0000) knlGS:0000000000000000 [ 1328.015905][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1328.015918][ C1] CR2: 00007fe0a7b4eb50 CR3: 0000000032aec000 CR4: 00000000003526f0 [ 1328.015934][ C1] Call Trace: [ 1328.015941][ C1] [ 1328.015950][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1328.015974][ C1] ? ktime_get+0x1f5/0x220 [ 1328.015995][ C1] ? lapic_next_event+0x11/0x20 [ 1328.016020][ C1] ? clockevents_program_event+0x491/0x630 [ 1328.016051][ C1] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1328.016076][ C1] lock_acquire+0x106/0x350 [ 1328.016097][ C1] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1328.016123][ C1] ? irqentry_exit+0x218/0x760 [ 1328.016142][ C1] ? rcu_is_watching+0x15/0xb0 [ 1328.016170][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1328.016187][ C1] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1328.016210][ C1] rt_mutex_slowunlock+0xbf/0x8b0 [ 1328.016234][ C1] ? reacquire_held_locks+0x104/0x190 [ 1328.016261][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1328.016286][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1328.016311][ C1] ? rt_spin_unlock+0x14f/0x200 [ 1328.016336][ C1] ? rt_spin_unlock+0x160/0x200 [ 1328.016361][ C1] handle_softirqs+0x1de/0x6d0 [ 1328.016382][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1328.016400][ C1] run_ktimerd+0x69/0x100 [ 1328.016419][ C1] smpboot_thread_fn+0x541/0xa50 [ 1328.016442][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1328.016465][ C1] kthread+0x388/0x470 [ 1328.016485][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1328.016503][ C1] ? __pfx_kthread+0x10/0x10 [ 1328.016525][ C1] ret_from_fork+0x514/0xb70 [ 1328.016548][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1328.016571][ C1] ? __switch_to+0xc79/0x1410 [ 1328.016590][ C1] ? __pfx_kthread+0x10/0x10 [ 1328.016612][ C1] ret_from_fork_asm+0x1a/0x30 [ 1328.016645][ C1] [ 1328.154627][ T40] Kernel panic - not syncing: hung_task: blocked tasks [ 1328.154660][ T40] CPU: 0 UID: 0 PID: 40 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1328.154719][ T40] Tainted: [L]=SOFTLOCKUP [ 1328.154728][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1328.154742][ T40] Call Trace: [ 1328.154753][ T40] [ 1328.154767][ T40] vpanic+0x56c/0xa60 [ 1328.154804][ T40] ? __pfx___schedule+0x10/0x10 [ 1328.154838][ T40] ? __pfx_vpanic+0x10/0x10 [ 1328.154879][ T40] panic+0xc5/0xd0 [ 1328.154910][ T40] ? __pfx_panic+0x10/0x10 [ 1328.154944][ T40] ? preempt_schedule_thunk+0x16/0x40 [ 1328.154976][ T40] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1328.155012][ T40] watchdog+0x102c/0x1030 [ 1328.155048][ T40] ? watchdog+0x1c9/0x1030 [ 1328.155080][ T40] kthread+0x388/0x470 [ 1328.155107][ T40] ? __pfx_watchdog+0x10/0x10 [ 1328.155130][ T40] ? __pfx_kthread+0x10/0x10 [ 1328.155160][ T40] ret_from_fork+0x514/0xb70 [ 1328.155192][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 1328.155223][ T40] ? __switch_to+0xc79/0x1410 [ 1328.155250][ T40] ? __pfx_kthread+0x10/0x10 [ 1328.155280][ T40] ret_from_fork_asm+0x1a/0x30 [ 1328.155329][ T40] [ 1328.155946][ T40] Kernel Offset: disabled