last executing test programs: 7m17.875536851s ago: executing program 5 (id=6): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) 7m16.339684267s ago: executing program 5 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) ioctl$TIOCSTI(r0, 0x5412, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0) 7m15.400698144s ago: executing program 5 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000ac0)=0x7ff, 0x12) 7m10.050708698s ago: executing program 5 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000019b40)=0x7) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) write(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000019c80)={0x0, 0xea60}, 0x10) 7m6.745613129s ago: executing program 5 (id=16): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000004740)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) close(r2) r3 = syz_open_procfs(0x0, &(0x7f00000016c0)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) 6m51.079170893s ago: executing program 32 (id=16): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000004740)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) close(r2) r3 = syz_open_procfs(0x0, &(0x7f00000016c0)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) 5m26.127238165s ago: executing program 0 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() openat$ptp0(0xffffffffffffff9c, 0x0, 0x40, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) unshare(0x24020400) fcntl$getown(r1, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 5m16.891363116s ago: executing program 2 (id=175): openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x100, 0x52) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5m16.799305656s ago: executing program 0 (id=176): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) memfd_create(0x0, 0x0) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20000040) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x7) r5 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0xa, 0xbb48, {r4}, {r5}, 0x9, 0x9}) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000000a00)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000019a00)={0x2020}, 0x2020) pread64(r7, &(0x7f0000000480)=""/101, 0x65, 0x800) 5m13.196886463s ago: executing program 2 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x19a, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000140)='./file3\x00', 0x400, &(0x7f00000001c0)=ANY=[], 0x1, 0xaea, &(0x7f00000004c0)="$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") 5m12.152730024s ago: executing program 0 (id=180): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x129942, 0x18) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@nodecompose}, {@gid}, {@gid}, {@gid}]}, 0x1, 0x5ef, &(0x7f0000000540)="$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") 5m11.579497091s ago: executing program 2 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) syz_emit_ethernet(0x7a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0) 5m10.904393348s ago: executing program 2 (id=183): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x3, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000005c0)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/target/usb_gadget\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 5m7.185928057s ago: executing program 2 (id=187): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xb3b2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000001a180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r4, &(0x7f000001a1c0)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f000001a240)={{@host, 0x2d7e}, 0x0, 0x0, 0x10001}) 5m7.142920396s ago: executing program 4 (id=188): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) write(r0, 0x0, 0x49) 5m5.13547503s ago: executing program 2 (id=190): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) 5m3.192883582s ago: executing program 4 (id=192): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000a80)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") syz_mount_image$squashfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x801, &(0x7f0000001740)=ANY=[], 0x2, 0x187, &(0x7f0000001780)="$eJzskr9OKkEUxr/ZXXbh/iH3tjRQkPunUNZFjZ2W2NvZSJYViYsKS6IQijXGUFgYS5+AB/EFtDA+ADUFsTZrZvbMZsRHcH4F35wzZ86Zb9ijqBc5AN4WYx87EJgo4okxWADKLM3NjVTvSJ9Jb1PBI9XtUv6KtBQNRzbVVPA7TRw3wzDoVwC8ilyWirYvDcxFq5fF2OeLAwBJkiQ81wJ4OX4oNSaAnlJTsoCCMJFkNdwID/4CqA26Z7VoOFrpdJvtoB2ceGZ901133Q2vdtgJAzf9ZcoIsgKu/wE4eWTw/RyAaxHZ+IYPCOvyapwcwArY58s8MPZt+YZFhmUM5WySMKE/lbkW5P8F7OEPb4jzmCnZquhiQVhqgMH8TrvyLINDs/KiatU/DVsTMDA65kxhwRRBITUgG3ozJahvxfJuE2pdJW2QTklnpOWlT8aKudkbiv7x++OiORj01+xsxeTKy3Ler1h9MD713pDmUh6MT2+r0Wg0Go1Go9FoNF+N9wAAAP//oxFyOA==") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001940)={0x7, 0x100}, 0x0) r1 = getpid() close(0x3) sched_setscheduler(r1, 0x1, &(0x7f0000001980)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000019c0)=0x7) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r2, 0x87, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001a80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001b00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001b40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b80)=0x6) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000001bc0)={0x1f, 0x80, @none, 0x2, 0x1}, 0x4) listen(r0, 0x5) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000240)) accept4(r0, 0x0, 0x0, 0x0) 4m59.756764405s ago: executing program 4 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) syz_emit_ethernet(0x7a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0) 4m58.384165409s ago: executing program 4 (id=197): symlinkat(0x0, 0xffffffffffffff9c, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000980)) timer_settime(0x0, 0x0, &(0x7f00000009c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) tee(r0, r3, 0x4e, 0x5) write$eventfd(r1, &(0x7f0000000b00)=0x2, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m58.258990215s ago: executing program 0 (id=199): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x3, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/target/usb_gadget\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4m56.918186214s ago: executing program 4 (id=202): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xb3b2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000001a180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r4, &(0x7f000001a1c0)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f000001a240)={{@host, 0x2d7e}, 0x0, 0x0, 0x10001}) 4m56.646105644s ago: executing program 0 (id=203): socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000326c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000032700)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000032780)={0x7, 0x8, 0xfa00, {r5, 0x1}}, 0x10) 4m53.871164652s ago: executing program 4 (id=205): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x1, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) 4m52.094867802s ago: executing program 0 (id=206): sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x19a, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000140)='./file3\x00', 0x400, &(0x7f00000001c0)=ANY=[], 0x1, 0xaea, &(0x7f00000004c0)="$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") 4m46.529227064s ago: executing program 33 (id=190): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) 4m38.021282149s ago: executing program 34 (id=205): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x1, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) 4m36.815227688s ago: executing program 35 (id=206): sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x19a, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000140)='./file3\x00', 0x400, &(0x7f00000001c0)=ANY=[], 0x1, 0xaea, &(0x7f00000004c0)="$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") 1m24.813906403s ago: executing program 3 (id=443): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xf, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x20980, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x4, 0x0, &(0x7f0000000600)='\x00\x00\x00\x00', 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r5, &(0x7f0000000740)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019740)=0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000019840)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000019880)=""/9, 0xffffff7a) socket$netlink(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) 1m21.734943532s ago: executing program 3 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000380)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 1m14.158783577s ago: executing program 3 (id=454): signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x7fffffffffffffff]}, 0x8, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r1, &(0x7f0000000440)=""/75, 0x4b) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x8a000, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x23}], 0x1, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000540), 0x8) close(0x3) write$sysctl(0xffffffffffffffff, &(0x7f0000000600)='0', 0x2) mount$tmpfs(0x0, &(0x7f0000000640)='./cgroup\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@grpquota}]}) mount(&(0x7f0000000700)=@filename='./dev/mtdblock0\x00', &(0x7f0000000740)='./dev/mtdblock0\x00', &(0x7f0000000780)='adfs\x00', 0x2008000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 1m11.674363315s ago: executing program 3 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m11.207344623s ago: executing program 3 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x0, &(0x7f0000955000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000400)=0xfffffffe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x9801) move_mount(r4, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') umount2(&(0x7f0000000380)='./file0\x00', 0x8) 1m8.868481522s ago: executing program 3 (id=459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 53.203985742s ago: executing program 36 (id=459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 10.574205347s ago: executing program 6 (id=519): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) unlink(&(0x7f00000003c0)='./cgroup\x00') migrate_pages(0x0, 0x3, 0x0, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x48) 9.407040838s ago: executing program 6 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) unshare(0x24020400) fcntl$getown(r1, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 8.552790638s ago: executing program 1 (id=521): listen(0xffffffffffffffff, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)="8e19b5e12682e6bcd031e90e9cfcceb1fcb2", &(0x7f00000002c0), 0xa7c, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000840)=@filename='mtd0\x00', &(0x7f0000000880)='./mnt\x00', &(0x7f00000008c0)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/fillfile\x00', 0x42, 0x9f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) write(r1, &(0x7f0000000940)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 7.452034472s ago: executing program 1 (id=522): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='L', 0x1) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.48326403s ago: executing program 6 (id=523): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='L', 0x1) write$char_usb(r0, 0x0, 0x0) 3.895278532s ago: executing program 1 (id=524): socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='exfat\x00', 0x8080, &(0x7f0000000440)='discard') r1 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x28102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) epoll_create1(0x80000) read$char_usb(0xffffffffffffffff, &(0x7f0000000600)=""/214, 0xd6) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000005c0)={[{@dyn}]}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 2.694207648s ago: executing program 1 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) splice(r1, 0x0, r0, &(0x7f0000000340)=0x8, 0x1, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000bc0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa006}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x800) 2.56696018s ago: executing program 6 (id=526): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)='\x00'/94, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 2.142920975s ago: executing program 6 (id=527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.079788856s ago: executing program 1 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000009bc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000022bc0)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x6, &(0x7f00000003c0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000400)='GPL\x00', 0x4, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 48.414444ms ago: executing program 1 (id=529): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, 0x41424344, 0x0, 0x0, 0x9, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@add_addr4={0x1e, 0x10, 0x0, 0x3, 0x8, @loopback, "", 0x1}]}}}}}}}, 0x0) 0s ago: executing program 6 (id=530): listen(0xffffffffffffffff, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)="8e19b5e12682e6bcd031e90e9cfcceb1fcb2", &(0x7f00000002c0), 0xa7c, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000840)=@filename='mtd0\x00', &(0x7f0000000880)='./mnt\x00', &(0x7f00000008c0)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/fillfile\x00', 0x42, 0x9f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) write(r1, &(0x7f0000000940)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) kernel console output (not intermixed with test programs): : 249 > 9 [ 265.937947][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.942103][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.956557][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.650136][ T5634] Bluetooth: hci6: command 0x0406 tx timeout [ 268.163788][ T53] Bluetooth: hci0: command tx timeout [ 268.277949][ T6864] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 269.168909][ T6858] loop0: detected capacity change from 0 to 2048 [ 269.328203][ T6866] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.704220][ T53] Bluetooth: hci0: command tx timeout [ 273.188481][ T53] Bluetooth: hci0: command tx timeout [ 273.580779][ T6841] rxe_eth0 speed is unknown, defaulting to 1000 [ 273.873019][ T6883] usb usb7: usbfs: process 6883 (syz.6.223) did not claim interface 0 before use [ 274.843173][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.858526][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.872001][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.896214][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.899651][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.071868][ T3249] bridge_slave_1: left allmulticast mode [ 275.071898][ T3249] bridge_slave_1: left promiscuous mode [ 275.072103][ T3249] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.115125][ T3249] bridge_slave_0: left allmulticast mode [ 275.115155][ T3249] bridge_slave_0: left promiscuous mode [ 275.115412][ T3249] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.261117][ T5634] Bluetooth: hci0: command tx timeout [ 275.466557][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.468404][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.485833][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.501586][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.507954][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.940207][ T5634] Bluetooth: hci1: command tx timeout [ 276.997202][ T3249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.022541][ T3249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.037220][ T3249] bond0 (unregistering): Released all slaves [ 277.075153][ T3249] bond1 (unregistering): Released all slaves [ 277.087667][ T6910] loop6: detected capacity change from 0 to 32768 [ 277.092770][ T6910] (syz.6.229,6910,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 277.093143][ T6910] (syz.6.229,6910,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 277.118962][ T6910] JBD2: Ignoring recovery information on journal [ 277.572672][ T5634] Bluetooth: hci3: command tx timeout [ 277.730718][ T6910] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 278.279755][ T6910] FAULT_INJECTION: forcing a failure. [ 278.279755][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 278.279807][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.6.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.279859][ T6910] Tainted: [L]=SOFTLOCKUP [ 278.279873][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 278.279895][ T6910] Call Trace: [ 278.279913][ T6910] [ 278.279927][ T6910] dump_stack_lvl+0x100/0x190 [ 278.279999][ T6910] should_fail_ex.cold+0x5/0xa [ 278.280056][ T6910] should_failslab+0xc2/0x120 [ 278.280120][ T6910] __kmalloc_cache_noprof+0x91/0x6d0 [ 278.280162][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.280216][ T6910] ? kasan_save_stack+0x3f/0x50 [ 278.280271][ T6910] ? ocfs2_xattr_bucket_new+0xd2/0x170 [ 278.280343][ T6910] ocfs2_xattr_bucket_new+0xd2/0x170 [ 278.280405][ T6910] ocfs2_xattr_set_handle+0x589/0x690 [ 278.280461][ T6910] ? __pfx_ocfs2_xattr_set_handle+0x10/0x10 [ 278.280563][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.280610][ T6910] ? __kmalloc_noprof+0x350/0x840 [ 278.280670][ T6910] ocfs2_set_acl+0x379/0x550 [ 278.280739][ T6910] ocfs2_init_acl+0x258/0x430 [ 278.280796][ T6910] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 278.280844][ T6910] ? ocfs2_block_signals+0x88/0xc0 [ 278.280883][ T6910] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 278.280921][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.280966][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.281013][ T6910] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 278.281070][ T6910] ocfs2_mknod+0x1657/0x2750 [ 278.281137][ T6910] ? __pfx_ocfs2_mknod+0x10/0x10 [ 278.281187][ T6910] ? __lock_acquire+0x5c0/0x1f40 [ 278.281249][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.281295][ T6910] ? do_raw_spin_lock+0x128/0x260 [ 278.281366][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.281416][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.281462][ T6910] ? do_raw_spin_lock+0x128/0x260 [ 278.281518][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.281564][ T6910] ? find_held_lock+0x2b/0x80 [ 278.281604][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.281659][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.281705][ T6910] ? put_pid+0x24/0x30 [ 278.281759][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.281804][ T6910] ? ocfs2_inode_unlock_tracker+0x1a3/0x210 [ 278.281870][ T6910] ? __pfx_ocfs2_permission+0x10/0x10 [ 278.281907][ T6910] ? __pfx_map_id_range_up+0x10/0x10 [ 278.281976][ T6910] ? __pfx_make_vfsgid+0x10/0x10 [ 278.282043][ T6910] ocfs2_mkdir+0xef/0x430 [ 278.282087][ T6910] ? security_inode_permission+0xc4/0x280 [ 278.282148][ T6910] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 278.282200][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.282261][ T6910] vfs_mkdir+0x36d/0x8a0 [ 278.282323][ T6910] filename_mkdirat+0x4c4/0x630 [ 278.282371][ T6910] ? __pfx_filename_mkdirat+0x10/0x10 [ 278.282414][ T6910] ? strncpy_from_user+0x19d/0x2d0 [ 278.282465][ T6910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.282512][ T6910] ? do_getname+0x191/0x390 [ 278.282565][ T6910] __x64_sys_mkdirat+0x89/0xc0 [ 278.282609][ T6910] do_syscall_64+0x123/0x7b0 [ 278.282675][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.282714][ T6910] RIP: 0033:0x7fb5d25a8f19 [ 278.282744][ T6910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.282780][ T6910] RSP: 002b:00007fb5d3494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 278.282818][ T6910] RAX: ffffffffffffffda RBX: 00007fb5d2825fa0 RCX: 00007fb5d25a8f19 [ 278.282844][ T6910] RDX: 0000000000000000 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 278.282869][ T6910] RBP: 00007fb5d2637f6d R08: 0000000000000000 R09: 0000000000000000 [ 278.282893][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.282917][ T6910] R13: 00007fb5d2826038 R14: 00007fb5d2825fa0 R15: 00007ffe64d90878 [ 278.282970][ T6910] [ 278.285399][ T6910] (syz.6.229,6910,0):ocfs2_xattr_set_handle:3929 ERROR: status = -12 [ 278.285460][ T6910] (syz.6.229,6910,0):ocfs2_mknod:417 ERROR: status = -12 [ 278.287603][ T6910] (syz.6.229,6910,0):ocfs2_mknod:507 ERROR: status = -12 [ 278.287645][ T6910] (syz.6.229,6910,0):ocfs2_mkdir:663 ERROR: status = -12 [ 280.397937][ T5634] Bluetooth: hci1: command tx timeout [ 280.398000][ T5634] Bluetooth: hci3: command tx timeout [ 283.167841][ T53] Bluetooth: hci3: command tx timeout [ 283.167891][ T53] Bluetooth: hci1: command tx timeout [ 283.966477][ T6043] ocfs2: Unmounting device (7,6) on (node local) [ 284.484460][ T6942] loop3: detected capacity change from 0 to 32768 [ 284.542060][ T6942] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 284.542090][ T6942] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 284.645589][ T6942] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 284.681552][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 284.681581][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 284.963708][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 282ms [ 284.986488][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 284.987205][ T6942] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 285.178109][ T5634] Bluetooth: hci1: command tx timeout [ 285.178156][ T5634] Bluetooth: hci3: command tx timeout [ 287.755505][ T3249] hsr_slave_0: left promiscuous mode [ 287.757967][ T3249] hsr_slave_1: left promiscuous mode [ 287.758942][ T3249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.782191][ T3249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.257203][ T6978] usb usb7: usbfs: process 6978 (syz.3.237) did not claim interface 0 before use [ 288.337877][ T3249] team0 (unregistering): Port device team_slave_1 removed [ 288.360845][ T3249] team0 (unregistering): Port device team_slave_0 removed [ 288.656231][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 288.764186][ T6901] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.766972][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.767079][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.767290][ T6841] bridge_slave_0: entered allmulticast mode [ 288.769693][ T6841] bridge_slave_0: entered promiscuous mode [ 288.774728][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.774847][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.775121][ T6841] bridge_slave_1: entered allmulticast mode [ 288.778360][ T6841] bridge_slave_1: entered promiscuous mode [ 289.722020][ T6841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.746934][ T6841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.835505][ T6994] loop6: detected capacity change from 0 to 256 [ 289.939107][ T6841] team0: Port device team_slave_0 added [ 289.969586][ T6841] team0: Port device team_slave_1 added [ 290.542176][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.542224][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.542288][ T6841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.741797][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.741920][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.742039][ T6841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.156246][ T6841] hsr_slave_0: entered promiscuous mode [ 291.157556][ T6841] hsr_slave_1: entered promiscuous mode [ 291.158433][ T6841] debugfs: 'hsr0' already exists in 'hsr' [ 291.158456][ T6841] Cannot create hsr debugfs directory [ 291.273682][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.318667][ T7001] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EPERM) [ 291.318696][ T7001] device-mapper: ioctl: error adding target to table [ 291.600739][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.545524][ T6890] rxe_eth0 speed is unknown, defaulting to 1000 [ 293.896381][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.999233][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.239841][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.303261][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 296.796464][ T7043] usb usb7: usbfs: process 7043 (syz.1.252) did not claim interface 0 before use [ 297.009507][ T6841] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 297.038195][ T6841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.053404][ T6841] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 297.088052][ T6841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.132515][ T6841] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 297.155015][ T6841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.157751][ T6841] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 297.196244][ T6841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.408286][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.695546][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.819904][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 301.829270][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.829476][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.829669][ T6901] bridge_slave_0: entered allmulticast mode [ 301.854703][ T6901] bridge_slave_0: entered promiscuous mode [ 301.885928][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.913062][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.913310][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.913493][ T6901] bridge_slave_1: entered allmulticast mode [ 301.919097][ T6901] bridge_slave_1: entered promiscuous mode [ 302.015084][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.044926][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.079763][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.379855][ T6901] team0: Port device team_slave_0 added [ 302.556295][ T6901] team0: Port device team_slave_1 added [ 302.662281][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.662411][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.662571][ T6890] bridge_slave_0: entered allmulticast mode [ 302.702862][ T6890] bridge_slave_0: entered promiscuous mode [ 302.830325][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.830529][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.830684][ T6890] bridge_slave_1: entered allmulticast mode [ 302.847496][ T6890] bridge_slave_1: entered promiscuous mode [ 302.897238][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.897263][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.897308][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.110913][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.110938][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.110984][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.195729][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.316099][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.223576][ T7101] fuse: Unknown parameter 'g00000000000000000000' [ 304.491134][ T7116] loop3: detected capacity change from 0 to 512 [ 304.509100][ T7116] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.257: iget: bad i_size value: 38620345925642 [ 304.509138][ T7116] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.522381][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 304.522418][ C0] EXT4-fs (loop3): initial error at time 1794374668: ext4_orphan_get:1404: inode 15 [ 304.522467][ C0] EXT4-fs (loop3): last error at time 1794374668: ext4_orphan_get:1404: inode 15 [ 304.522823][ T7116] EXT4-fs error (device loop3): ext4_orphan_get:1407: comm syz.3.257: couldn't read orphan inode 15 (err -117) [ 304.522858][ T7116] loop3: lost filesystem error report for type 5 error -117 [ 304.539434][ T7116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.657804][ T6901] hsr_slave_0: entered promiscuous mode [ 304.666660][ T7120] EXT4-fs error (device loop3): ext4_validate_block_bitmap:435: comm syz.3.257: bg 0: block 5: invalid block bitmap [ 304.674883][ T6901] hsr_slave_1: entered promiscuous mode [ 304.675941][ T6901] debugfs: 'hsr0' already exists in 'hsr' [ 304.675964][ T6901] Cannot create hsr debugfs directory [ 304.712642][ T7120] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1156 with error 28 [ 304.712707][ T7120] EXT4-fs (loop3): This should not happen!! Data will be lost [ 304.712707][ T7120] [ 304.712733][ T7120] EXT4-fs (loop3): Total free blocks count 0 [ 304.712756][ T7120] EXT4-fs (loop3): Free/Dirty block details [ 304.712785][ T7120] EXT4-fs (loop3): free_blocks=0 [ 304.712808][ T7120] EXT4-fs (loop3): dirty_blocks=1172 [ 304.712832][ T7120] EXT4-fs (loop3): Block reservation details [ 304.712853][ T7120] EXT4-fs (loop3): i_reserved_data_blocks=1172 [ 304.847105][ T51] bridge_slave_1: left allmulticast mode [ 304.847144][ T51] bridge_slave_1: left promiscuous mode [ 304.847418][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.880957][ T51] bridge_slave_0: left allmulticast mode [ 304.880995][ T51] bridge_slave_0: left promiscuous mode [ 304.887578][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.857710][ T51] bridge_slave_1: left allmulticast mode [ 306.857748][ T51] bridge_slave_1: left promiscuous mode [ 306.857989][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.888876][ T5896] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1156 with max blocks 16 with error 28 [ 306.892167][ T51] bridge_slave_0: left allmulticast mode [ 306.892199][ T51] bridge_slave_0: left promiscuous mode [ 306.900471][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.056135][ T5823] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 307.094281][ T5823] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.724537][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.729491][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.753550][ T51] bond0 (unregistering): Released all slaves [ 309.122487][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.128938][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.136953][ T51] bond0 (unregistering): Released all slaves [ 310.964130][ T6890] team0: Port device team_slave_0 added [ 311.177686][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 311.203349][ T6890] team0: Port device team_slave_1 added [ 311.561216][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.563764][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.563792][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.563836][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.682990][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.683017][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.683069][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.415260][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.147960][ T6890] hsr_slave_0: entered promiscuous mode [ 314.157059][ T6890] hsr_slave_1: entered promiscuous mode [ 314.166278][ T6890] debugfs: 'hsr0' already exists in 'hsr' [ 314.166304][ T6890] Cannot create hsr debugfs directory [ 314.419313][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.419467][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.657154][ T7190] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 314.660530][ T7190] exFAT-fs (nbd3): unable to read boot sector [ 314.660569][ T7190] exFAT-fs (nbd3): failed to read boot sector [ 314.660641][ T7190] exFAT-fs (nbd3): failed to recognize exfat type [ 317.779537][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.779616][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.828494][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.828658][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.278719][ T6901] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 318.313372][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.432821][ T6901] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 318.484552][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.487509][ T6901] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 318.533762][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 318.702692][ T6901] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 318.735122][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.604851][ T7219] loop6: detected capacity change from 0 to 2048 [ 321.117215][ T7219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.041013][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 322.274285][ T51] hsr_slave_0: left promiscuous mode [ 322.285608][ T51] hsr_slave_1: left promiscuous mode [ 322.286619][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.286647][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.313007][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.313037][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.366992][ T51] hsr_slave_0: left promiscuous mode [ 322.369159][ T51] hsr_slave_1: left promiscuous mode [ 322.386580][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.386611][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.393822][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.393851][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.496141][ T51] veth1_macvtap: left promiscuous mode [ 322.496181][ T51] veth0_macvtap: left promiscuous mode [ 322.496305][ T51] veth1_vlan: left promiscuous mode [ 322.496370][ T51] veth0_vlan: left promiscuous mode [ 322.528243][ T51] veth1_macvtap: left promiscuous mode [ 322.528280][ T51] veth0_macvtap: left promiscuous mode [ 322.528525][ T51] veth1_vlan: left promiscuous mode [ 322.528592][ T51] veth0_vlan: left promiscuous mode [ 325.638865][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.645165][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.649235][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.650787][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.651533][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.865989][ T53] Bluetooth: hci5: command tx timeout [ 328.553394][ T51] team0 (unregistering): Port device team_slave_1 removed [ 328.596788][ T51] team0 (unregistering): Port device team_slave_0 removed [ 330.536820][ T53] Bluetooth: hci5: command tx timeout [ 331.188592][ T51] team0 (unregistering): Port device team_slave_1 removed [ 331.224176][ T51] team0 (unregistering): Port device team_slave_0 removed [ 331.359640][ T7271] mmap: syz.1.295 (7271) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.392899][ T7271] jffs2: notice: (7271) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 332.610310][ T53] Bluetooth: hci5: command tx timeout [ 332.921899][ T7280] loop1: detected capacity change from 0 to 2048 [ 333.063253][ T7280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.266658][ T53] Bluetooth: hci5: command tx timeout [ 336.951695][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.494057][ T5634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.502545][ T5634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.590785][ T5634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.622762][ T5634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.664175][ T5634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.786491][ T7249] rxe_eth0 speed is unknown, defaulting to 1000 [ 338.821464][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.828268][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.591940][ T5639] Bluetooth: hci7: command tx timeout [ 340.594738][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.598035][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.603100][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.612146][ T5634] Bluetooth: hci7: command tx timeout [ 342.690341][ T5634] Bluetooth: hci0: command tx timeout [ 343.168449][ T7367] loop1: detected capacity change from 0 to 2048 [ 343.205207][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 343.304194][ T7367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.672320][ T7309] rxe_eth0 speed is unknown, defaulting to 1000 [ 344.216788][ T7330] rxe_eth0 speed is unknown, defaulting to 1000 [ 344.740129][ T5634] Bluetooth: hci7: command tx timeout [ 344.770588][ T5634] Bluetooth: hci0: command tx timeout [ 347.389184][ T5634] Bluetooth: hci7: command tx timeout [ 347.389202][ T53] Bluetooth: hci0: command tx timeout [ 349.897003][ T53] Bluetooth: hci0: command tx timeout [ 350.238883][ T7413] loop6: detected capacity change from 0 to 512 [ 350.269315][ T7413] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.309: iget: bad i_size value: 38620345925642 [ 350.269353][ T7413] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 350.270147][ T7413] EXT4-fs error (device loop6): ext4_orphan_get:1407: comm syz.6.309: couldn't read orphan inode 15 (err -117) [ 350.270187][ T7413] loop6: lost filesystem error report for type 5 error -117 [ 350.282884][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 350.282914][ C0] EXT4-fs (loop6): initial error at time 1794374714: ext4_orphan_get:1404: inode 15 [ 350.282961][ C0] EXT4-fs (loop6): last error at time 1794374714: ext4_orphan_get:1407 [ 350.286035][ T7413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.493245][ T7418] EXT4-fs error (device loop6): ext4_validate_block_bitmap:435: comm syz.6.309: bg 0: block 5: invalid block bitmap [ 350.560389][ T7418] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 350.560450][ T7418] EXT4-fs (loop6): This should not happen!! Data will be lost [ 350.560450][ T7418] [ 350.560476][ T7418] EXT4-fs (loop6): Total free blocks count 0 [ 350.560499][ T7418] EXT4-fs (loop6): Free/Dirty block details [ 350.560521][ T7418] EXT4-fs (loop6): free_blocks=0 [ 350.560546][ T7418] EXT4-fs (loop6): dirty_blocks=4004 [ 350.560574][ T7418] EXT4-fs (loop6): Block reservation details [ 350.560595][ T7418] EXT4-fs (loop6): i_reserved_data_blocks=4004 [ 350.905672][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.905805][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.905968][ T7249] bridge_slave_0: entered allmulticast mode [ 350.911417][ T7249] bridge_slave_0: entered promiscuous mode [ 351.152408][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.152533][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.152679][ T7249] bridge_slave_1: entered allmulticast mode [ 351.157428][ T7249] bridge_slave_1: entered promiscuous mode [ 351.179306][ T32] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1952 with error 28 [ 351.428241][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.456169][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.457538][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.457656][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.457818][ T7309] bridge_slave_0: entered allmulticast mode [ 351.468473][ T7309] bridge_slave_0: entered promiscuous mode [ 351.573150][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.573243][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.573363][ T7309] bridge_slave_1: entered allmulticast mode [ 351.585130][ T7309] bridge_slave_1: entered promiscuous mode [ 353.420815][ T7249] team0: Port device team_slave_0 added [ 353.621138][ T7249] team0: Port device team_slave_1 added [ 353.679590][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.704172][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.909622][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 354.071517][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.071558][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.071603][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.079589][ T7309] team0: Port device team_slave_0 added [ 354.096232][ T7309] team0: Port device team_slave_1 added [ 354.205187][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.205213][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.205260][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.267220][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.267245][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.267291][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.279877][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.279899][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.279944][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.778970][ T7249] hsr_slave_0: entered promiscuous mode [ 354.785962][ T7249] hsr_slave_1: entered promiscuous mode [ 354.786823][ T7249] debugfs: 'hsr0' already exists in 'hsr' [ 354.786847][ T7249] Cannot create hsr debugfs directory [ 357.552459][ T7309] hsr_slave_0: entered promiscuous mode [ 357.553548][ T7309] hsr_slave_1: entered promiscuous mode [ 357.555901][ T7309] debugfs: 'hsr0' already exists in 'hsr' [ 357.555925][ T7309] Cannot create hsr debugfs directory [ 357.649843][ T51] bridge_slave_1: left allmulticast mode [ 357.649873][ T51] bridge_slave_1: left promiscuous mode [ 357.660346][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.731648][ T7456] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 357.732588][ T7456] exFAT-fs (nbd1): unable to read boot sector [ 357.732671][ T7456] exFAT-fs (nbd1): failed to read boot sector [ 357.732738][ T7456] exFAT-fs (nbd1): failed to recognize exfat type [ 358.232097][ T51] bridge_slave_0: left allmulticast mode [ 358.232577][ T51] bridge_slave_0: left promiscuous mode [ 358.256321][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.438183][ T51] bridge_slave_1: left allmulticast mode [ 358.452533][ T51] bridge_slave_1: left promiscuous mode [ 358.455812][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.536243][ T51] bridge_slave_0: left allmulticast mode [ 358.536279][ T51] bridge_slave_0: left promiscuous mode [ 358.536487][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.732082][ T7461] loop3: detected capacity change from 0 to 2048 [ 358.790349][ T7461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.975104][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.007892][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.029606][ T51] bond0 (unregistering): Released all slaves [ 360.046485][ T7473] loop6: detected capacity change from 0 to 4096 [ 361.096816][ T7473] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 361.145199][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.186941][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.207160][ T51] bond0 (unregistering): Released all slaves [ 361.224837][ T7473] ntfs3(loop6): Failed to load $Extend (-22). [ 361.224873][ T7473] ntfs3(loop6): Failed to initialize $Extend. [ 363.622606][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.622801][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.623006][ T7330] bridge_slave_0: entered allmulticast mode [ 363.667342][ T7330] bridge_slave_0: entered promiscuous mode [ 363.945029][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.945153][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.945299][ T7330] bridge_slave_1: entered allmulticast mode [ 363.962619][ T7330] bridge_slave_1: entered promiscuous mode [ 364.248904][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 364.579818][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.668217][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.558266][ T7503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.870418][ T7330] team0: Port device team_slave_0 added [ 366.998855][ T7330] team0: Port device team_slave_1 added [ 367.061447][ T5823] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 367.099311][ T51] hsr_slave_0: left promiscuous mode [ 367.106943][ T51] hsr_slave_1: left promiscuous mode [ 367.107892][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.113703][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.146569][ T51] hsr_slave_0: left promiscuous mode [ 367.153907][ T51] hsr_slave_1: left promiscuous mode [ 367.154881][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.155763][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.213144][ T5823] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 367.216158][ T5823] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.216222][ T5823] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 367.216268][ T5823] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 367.216334][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.669892][ T5823] cxacru_cm: 162 callbacks suppressed [ 367.669927][ T5823] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 367.669989][ T5823] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 367.670414][ T5823] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 367.725869][ T5823] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 367.765242][ T5823] usb 7-1: USB disconnect, device number 3 [ 367.855263][ T51] team0 (unregistering): Port device team_slave_1 removed [ 367.886090][ T51] team0 (unregistering): Port device team_slave_0 removed [ 372.721104][ T7523] syz.6.338 (7523) used greatest stack depth: 19520 bytes left [ 372.901814][ T51] team0 (unregistering): Port device team_slave_1 removed [ 372.952707][ T51] team0 (unregistering): Port device team_slave_0 removed [ 373.378524][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.378551][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.378597][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.439042][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.439063][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.439099][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.579156][ T7330] hsr_slave_0: entered promiscuous mode [ 377.585880][ T7330] hsr_slave_1: entered promiscuous mode [ 377.594733][ T7330] debugfs: 'hsr0' already exists in 'hsr' [ 377.594764][ T7330] Cannot create hsr debugfs directory [ 378.215207][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.215297][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.425458][ T7552] loop1: detected capacity change from 0 to 2048 [ 378.497865][ T7552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.796565][ T7559] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.335: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 378.860487][ T7552] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.335: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 378.870370][ T7559] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.335: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 379.066692][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.176568][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 381.975449][ T7309] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 382.029950][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.056974][ T51] bridge_slave_1: left allmulticast mode [ 382.057010][ T51] bridge_slave_1: left promiscuous mode [ 382.057251][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.082732][ T51] bridge_slave_0: left allmulticast mode [ 382.082766][ T51] bridge_slave_0: left promiscuous mode [ 382.084048][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.421254][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.440559][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.462176][ T51] bond0 (unregistering): Released all slaves [ 382.495946][ T7309] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 382.519069][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.531146][ T7309] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 382.558392][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.569943][ T7309] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 382.602581][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.099759][ T7249] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 383.130204][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.136405][ T7249] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 383.166981][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.169982][ T7249] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 383.182915][ T7589] loop6: detected capacity change from 0 to 32768 [ 383.217663][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.348783][ T6364] JFS: metapage_get_blocks failed [ 383.356451][ T7589] JFS: metapage_get_blocks failed [ 383.361424][ T123] blkno = 5002c, nblocks = 4 [ 383.361445][ T123] ERROR: (device loop6): dbUpdatePMap.cold: blocks are outside the map [ 383.361445][ T123] [ 383.363517][ T6364] JFS: metapage_get_blocks failed [ 383.364596][ T123] ERROR: (device loop6): remounting filesystem as read-only [ 383.366123][ T7589] JFS: metapage_get_blocks failed [ 383.444854][ T7249] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 383.488790][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.338093][ T51] hsr_slave_0: left promiscuous mode [ 384.423636][ T51] hsr_slave_1: left promiscuous mode [ 384.426925][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.443139][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.894336][ T51] team0 (unregistering): Port device team_slave_1 removed [ 384.925878][ T51] team0 (unregistering): Port device team_slave_0 removed [ 385.284300][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.429948][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.483451][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.483584][ T6367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.554979][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.555109][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.040601][ T7330] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 387.078884][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.088200][ T7330] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 387.144183][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.159257][ T7330] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 387.205762][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.208938][ T7330] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 387.265131][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.883871][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.906041][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.909732][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.946228][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.948312][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.983124][ T53] Bluetooth: hci1: command tx timeout [ 390.179735][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.292885][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.347315][ T7659] loop1: detected capacity change from 0 to 128 [ 390.364989][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.365113][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.423593][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.423745][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.439727][ T7659] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 390.486817][ T7659] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 390.638371][ T5635] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.745336][ T5289] 8021q: adding VLAN 0 to HW filter on device eth14 [ 392.050531][ T53] Bluetooth: hci1: command tx timeout [ 393.292892][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.986791][ T7309] veth0_vlan: entered promiscuous mode [ 394.007964][ T7309] veth1_vlan: entered promiscuous mode [ 394.069615][ T7309] veth0_macvtap: entered promiscuous mode [ 394.084639][ T7309] veth1_macvtap: entered promiscuous mode [ 394.119671][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.130089][ T53] Bluetooth: hci1: command tx timeout [ 394.139966][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.220877][ T53] Bluetooth: hci1: command tx timeout [ 396.436219][ T6367] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.554936][ T7644] rxe_eth0 speed is unknown, defaulting to 1000 [ 396.592364][ T5894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.674831][ T4667] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.676654][ T101] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.155321][ T5895] bridge_slave_1: left allmulticast mode [ 397.155362][ T5895] bridge_slave_1: left promiscuous mode [ 397.155616][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.198808][ T5895] bridge_slave_0: left allmulticast mode [ 397.198847][ T5895] bridge_slave_0: left promiscuous mode [ 397.199129][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.257859][ T7725] loop6: detected capacity change from 0 to 512 [ 398.486605][ T7725] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.369: iget: bad i_size value: 38620345925642 [ 398.486646][ T7725] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 398.487216][ T7725] EXT4-fs error (device loop6): ext4_orphan_get:1407: comm syz.6.369: couldn't read orphan inode 15 (err -117) [ 398.487254][ T7725] loop6: lost filesystem error report for type 5 error -117 [ 398.490048][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 398.490079][ C0] EXT4-fs (loop6): initial error at time 1794374762: ext4_orphan_get:1404: inode 15 [ 398.490126][ C0] EXT4-fs (loop6): last error at time 1794374762: ext4_orphan_get:1407 [ 398.501593][ T7725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.837185][ T7731] EXT4-fs error (device loop6): ext4_validate_block_bitmap:435: comm syz.6.369: bg 0: block 5: invalid block bitmap [ 398.867122][ T7731] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1236 with error 28 [ 398.867172][ T7731] EXT4-fs (loop6): This should not happen!! Data will be lost [ 398.867172][ T7731] [ 398.867198][ T7731] EXT4-fs (loop6): Total free blocks count 0 [ 398.867222][ T7731] EXT4-fs (loop6): Free/Dirty block details [ 398.867243][ T7731] EXT4-fs (loop6): free_blocks=0 [ 398.867268][ T7731] EXT4-fs (loop6): dirty_blocks=1248 [ 398.867292][ T7731] EXT4-fs (loop6): Block reservation details [ 398.867314][ T7731] EXT4-fs (loop6): i_reserved_data_blocks=1248 [ 399.291950][ T5896] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 1236 with max blocks 12 with error 28 [ 399.570120][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 399.581515][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 399.586637][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 399.600218][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 399.602431][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 399.689355][ T7739] netlink: 'syz.6.371': attribute type 39 has an invalid length. [ 399.720118][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.725761][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.728344][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.729413][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.748890][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.785860][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.841884][ T31] audit: type=1400 audit(1794374763.868:233): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=7737 comm="syz.6.371" [ 399.880825][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.923158][ T5895] bond0 (unregistering): Released all slaves [ 400.369461][ T7743] can0: slcan on ttyS3. [ 401.035776][ T7737] can0 (unregistered): slcan off ttyS3. [ 401.497300][ T5895] hsr_slave_0: left promiscuous mode [ 401.511257][ T5895] hsr_slave_1: left promiscuous mode [ 401.512268][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.517920][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.315718][ T31] audit: type=1400 audit(1794374766.208:234): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7764 comm="syz.1.373" [ 403.321408][ T53] Bluetooth: hci3: command tx timeout [ 403.322384][ T53] Bluetooth: hci5: command tx timeout [ 404.752005][ T5788] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 404.817011][ T7788] loop3: detected capacity change from 0 to 2048 [ 404.851033][ T7788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.910152][ T5788] usb 7-1: Using ep0 maxpacket: 32 [ 404.911087][ T5788] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 404.912501][ T5788] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 404.912540][ T5788] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 404.912576][ T5788] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 404.912638][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 404.912743][ T5788] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 404.912787][ T5788] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 404.912850][ T5788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.033377][ T5788] usb 7-1: config 0 descriptor?? [ 405.178106][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 405.341818][ T5634] Bluetooth: hci5: command tx timeout [ 405.343467][ T5634] Bluetooth: hci3: command tx timeout [ 406.149215][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 406.177590][ T5788] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 406.447231][ C0] usblp0: nonzero read bulk status received: -71 [ 406.449218][ T7784] usblp0: error -71 reading from printer [ 406.450385][ C0] usblp0: nonzero read bulk status received: -71 [ 406.450836][ T5753] usb 7-1: USB disconnect, device number 4 [ 408.152191][ T5634] Bluetooth: hci3: command tx timeout [ 408.152244][ T5634] Bluetooth: hci5: command tx timeout [ 408.254414][ T5753] usblp0: removed [ 408.758070][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 410.942849][ T53] Bluetooth: hci5: command tx timeout [ 410.942897][ T53] Bluetooth: hci3: command tx timeout [ 410.974976][ T7738] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.005434][ T7846] loop6: detected capacity change from 0 to 8 [ 412.967699][ T7735] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.233687][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.233824][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.233971][ T7644] bridge_slave_0: entered allmulticast mode [ 414.293424][ T7644] bridge_slave_0: entered promiscuous mode [ 414.309494][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.315674][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.315835][ T7644] bridge_slave_1: entered allmulticast mode [ 414.346154][ T7644] bridge_slave_1: entered promiscuous mode [ 416.499143][ T5289] 8021q: adding VLAN 0 to HW filter on device eth16 [ 416.588774][ T7644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.778543][ T7644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.883776][ T7644] team0: Port device team_slave_0 added [ 416.892617][ T7644] team0: Port device team_slave_1 added [ 417.079364][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.079408][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.079455][ T7644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.216642][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.216669][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.216717][ T7644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.559279][ T7644] hsr_slave_0: entered promiscuous mode [ 417.578363][ T7644] hsr_slave_1: entered promiscuous mode [ 417.587095][ T7644] debugfs: 'hsr0' already exists in 'hsr' [ 417.587119][ T7644] Cannot create hsr debugfs directory [ 417.864762][ T5895] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.249476][ T5895] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.343687][ T7905] jffs2: notice: (7905) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 419.090454][ T5895] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.876313][ T5895] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.868121][ T7930] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 422.868121][ T7930] program syz.6.399 not setting count and/or reply_len properly [ 423.003765][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.003891][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.004057][ T7738] bridge_slave_0: entered allmulticast mode [ 423.014651][ T7738] bridge_slave_0: entered promiscuous mode [ 423.213952][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.214076][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.214243][ T7738] bridge_slave_1: entered allmulticast mode [ 423.239552][ T7738] bridge_slave_1: entered promiscuous mode [ 425.479311][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.705922][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.709100][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.709263][ T7735] bridge_slave_0: entered allmulticast mode [ 425.713933][ T7735] bridge_slave_0: entered promiscuous mode [ 425.722245][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.742793][ T5289] 8021q: adding VLAN 0 to HW filter on device eth17 [ 425.824850][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.824974][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.825127][ T7735] bridge_slave_1: entered allmulticast mode [ 425.837613][ T7735] bridge_slave_1: entered promiscuous mode [ 427.899958][ T7738] team0: Port device team_slave_0 added [ 427.975238][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.985658][ T7738] team0: Port device team_slave_1 added [ 429.875511][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.563172][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.563198][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.563244][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.621584][ T5895] bridge_slave_1: left allmulticast mode [ 430.621620][ T5895] bridge_slave_1: left promiscuous mode [ 430.621892][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.651818][ T5895] bridge_slave_0: left allmulticast mode [ 430.651860][ T5895] bridge_slave_0: left promiscuous mode [ 430.652184][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.692192][ T5895] bridge_slave_1: left allmulticast mode [ 430.692224][ T5895] bridge_slave_1: left promiscuous mode [ 430.692413][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.695091][ T5895] bridge_slave_0: left allmulticast mode [ 430.695114][ T5895] bridge_slave_0: left promiscuous mode [ 430.695270][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.811089][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.826997][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.858140][ T5895] bond0 (unregistering): Released all slaves [ 431.895998][ T7968] jffs2: notice: (7968) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 432.818112][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.667426][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.688826][ T5895] bond0 (unregistering): Released all slaves [ 436.863867][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.863894][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.863940][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.049016][ T7735] team0: Port device team_slave_0 added [ 437.195149][ T7735] team0: Port device team_slave_1 added [ 437.383208][ T7738] hsr_slave_0: entered promiscuous mode [ 437.396989][ T7738] hsr_slave_1: entered promiscuous mode [ 437.408315][ T7738] debugfs: 'hsr0' already exists in 'hsr' [ 437.408341][ T7738] Cannot create hsr debugfs directory [ 437.600154][ T5823] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 437.713215][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.713242][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.713289][ T7735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.787432][ T5823] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 437.794700][ T5823] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.794770][ T5823] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 437.794822][ T5823] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 437.794884][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.856271][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.856297][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.856344][ T7735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.088548][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.088628][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.130261][ T5823] cxacru 7-1:1.0: receive of cm 0x90 failed (-104) [ 440.695461][ T8002] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 441.150525][ T5760] usb 7-1: USB disconnect, device number 5 [ 445.050602][ T5895] hsr_slave_0: left promiscuous mode [ 445.052464][ T5895] hsr_slave_1: left promiscuous mode [ 445.053545][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.055775][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.119731][ T5895] hsr_slave_0: left promiscuous mode [ 445.131635][ T5895] hsr_slave_1: left promiscuous mode [ 445.135225][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.135255][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.139457][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.171772][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.204523][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.422'. [ 445.234172][ T5895] veth1_macvtap: left promiscuous mode [ 445.234226][ T5895] veth0_macvtap: left promiscuous mode [ 445.234376][ T5895] veth1_vlan: left promiscuous mode [ 445.234462][ T5895] veth0_vlan: left promiscuous mode [ 449.729588][ T8040] loop1: detected capacity change from 0 to 2048 [ 449.789992][ T8040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.019141][ T8046] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.427: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 450.059415][ T8040] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.427: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 450.079039][ T8046] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.427: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 450.223619][ T5635] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 450.280422][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.387476][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.389805][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.405627][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.417989][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.427606][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.713076][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 450.737766][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 450.823047][ T5753] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 450.982356][ T5753] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 450.983693][ T5753] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.983756][ T5753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 450.983810][ T5753] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 450.983873][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.624794][ T8060] loop6: detected capacity change from 0 to 8 [ 452.202915][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 452.244963][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 452.442042][ T5753] cxacru 2-1:1.0: send of cm 0x90 failed (-71) [ 452.464330][ T53] Bluetooth: hci0: command tx timeout [ 452.472232][ T8061] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 452.494707][ T5753] usb 2-1: USB disconnect, device number 3 [ 452.653433][ T8065] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard [ 452.654150][ T8065] exFAT-fs (nbd6): unable to read boot sector [ 452.654164][ T8065] exFAT-fs (nbd6): failed to read boot sector [ 452.654177][ T8065] exFAT-fs (nbd6): failed to recognize exfat type [ 453.604793][ T8068] loop1: detected capacity change from 0 to 1024 [ 453.607552][ T8068] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 453.641235][ T7735] hsr_slave_0: entered promiscuous mode [ 453.666469][ T7735] hsr_slave_1: entered promiscuous mode [ 453.667313][ T7735] debugfs: 'hsr0' already exists in 'hsr' [ 453.667337][ T7735] Cannot create hsr debugfs directory [ 453.670249][ T8068] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 2: comm syz.1.430: lblock 2 mapped to illegal pblock 2 (length 1) [ 453.670310][ T8068] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 453.671174][ T8068] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 453.671266][ T8068] EXT4-fs error (device loop1): __ext4_get_inode_loc:5708: comm syz.1.430: Invalid inode table block 1 in block_group 0 [ 453.671316][ T8068] loop1: lost filesystem error report for type 5 error -117 [ 453.674459][ T8068] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 453.674493][ T8068] loop1: lost filesystem error report for type 5 error -117 [ 453.675757][ T8068] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.430: mark_inode_dirty error [ 453.675801][ T8068] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 453.679420][ T8068] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 453.679451][ T8068] EXT4-fs error (device loop1): ext4_acquire_dquot:7118: comm syz.1.430: Failed to acquire dquot type 0 [ 453.679488][ T8068] loop1: lost filesystem error report for type 5 error -117 [ 453.680451][ T8068] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 453.680484][ T8068] loop1: lost filesystem error report for type 5 error -117 [ 453.681836][ T8068] EXT4-fs error (device loop1): ext4_evict_inode:336: inode #11: comm syz.1.430: mark_inode_dirty error [ 453.681878][ T8068] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 453.683517][ T8068] EXT4-fs warning (device loop1): ext4_evict_inode:338: couldn't mark inode dirty (err -117) [ 453.683920][ T8068] EXT4-fs (loop1): 1 orphan inode deleted [ 453.686015][ T8068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.715928][ T51] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 453.761206][ T51] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 453.761262][ T51] EXT4-fs error (device loop1): ext4_release_dquot:7154: comm kworker/u8:3: Failed to release dquot type 0 [ 454.149471][ T8077] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #2: block 16: comm syz.1.430: lblock 0 mapped to illegal pblock 16 (length 1) [ 454.750136][ T53] Bluetooth: hci0: command tx timeout [ 454.920287][ T5760] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 455.136466][ T5760] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 455.209576][ T5760] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 455.209722][ T5760] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 455.209854][ T5760] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 455.247359][ T5760] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 455.247504][ T5760] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 455.287417][ T5760] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 455.287649][ T5760] usb 7-1: Product: syz [ 455.287888][ T5760] usb 7-1: Manufacturer: syz [ 455.300971][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.309786][ T5635] EXT4-fs error (device loop1): __ext4_get_inode_loc:5708: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 455.309831][ T5635] loop1: lost filesystem error report for type 5 error -117 [ 455.330433][ T5635] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 455.330470][ T5635] loop1: lost filesystem error report for type 5 error -117 [ 455.342934][ T5635] EXT4-fs error (device loop1): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 455.342977][ T5635] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 455.344130][ T5635] EXT4-fs error (device loop1): __ext4_get_inode_loc:5708: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 455.344175][ T5635] loop1: lost filesystem error report for type 5 error -117 [ 455.504608][ T5760] cdc_wdm 7-1:1.0: skipping garbage [ 455.504725][ T5760] cdc_wdm 7-1:1.0: skipping garbage [ 455.562370][ T5760] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 455.562495][ T5760] cdc_wdm 7-1:1.0: Unknown control protocol [ 456.668297][ T8047] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.771600][ T53] Bluetooth: hci0: command tx timeout [ 457.141909][ T5760] usb 7-1: USB disconnect, device number 6 [ 459.377004][ T53] Bluetooth: hci0: command tx timeout [ 459.529231][ T8103] loop6: detected capacity change from 0 to 2048 [ 459.659462][ T8103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.608079][ T8113] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.437: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 461.707096][ T8103] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.437: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 461.724182][ T8113] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.437: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 462.029242][ T6043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.829203][ T5634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 463.843261][ T4945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 463.844030][ T4945] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 463.844915][ T4945] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 463.845484][ T4945] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 463.895436][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.899822][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.917061][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.917935][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.918491][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.546172][ T5895] bridge_slave_1: left allmulticast mode [ 465.546209][ T5895] bridge_slave_1: left promiscuous mode [ 465.546450][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.585315][ T5895] bridge_slave_0: left allmulticast mode [ 465.585352][ T5895] bridge_slave_0: left promiscuous mode [ 465.592337][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.037196][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.050292][ T53] Bluetooth: hci7: command tx timeout [ 466.066685][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.083408][ T5895] bond0 (unregistering): Released all slaves [ 466.130493][ T53] Bluetooth: hci1: command tx timeout [ 466.351404][ T1216] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 466.501795][ T1216] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 466.503122][ T1216] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.503191][ T1216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 466.503239][ T1216] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 466.503310][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.742892][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.745212][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.745394][ T8047] bridge_slave_0: entered allmulticast mode [ 466.761015][ T8047] bridge_slave_0: entered promiscuous mode [ 466.776504][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.777648][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.777828][ T8047] bridge_slave_1: entered allmulticast mode [ 466.795679][ T8047] bridge_slave_1: entered promiscuous mode [ 469.759341][ T1216] cxacru 2-1:1.0: send of cm 0x90 failed (-104) [ 469.762116][ T53] Bluetooth: hci7: command tx timeout [ 469.762158][ T53] Bluetooth: hci1: command tx timeout [ 469.786850][ T8170] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 470.048356][ T8047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.048519][ T8118] rxe_eth0 speed is unknown, defaulting to 1000 [ 470.065083][ T5823] usb 2-1: USB disconnect, device number 4 [ 470.137971][ T8047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.573824][ T8178] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 470.655310][ T5895] hsr_slave_0: left promiscuous mode [ 470.673862][ T5895] hsr_slave_1: left promiscuous mode [ 470.674837][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.696918][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.733001][ T4945] Bluetooth: hci1: command tx timeout [ 472.733049][ T4945] Bluetooth: hci7: command tx timeout [ 473.419984][ T8188] loop1: detected capacity change from 0 to 2048 [ 473.505700][ T8188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.726489][ T8194] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.449: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 473.753061][ T8195] FAULT_INJECTION: forcing a failure. [ 473.753061][ T8195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.753113][ T8195] CPU: 0 UID: 0 PID: 8195 Comm: syz.6.450 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.753167][ T8195] Tainted: [L]=SOFTLOCKUP [ 473.753181][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 473.753203][ T8195] Call Trace: [ 473.753216][ T8195] [ 473.753229][ T8195] dump_stack_lvl+0x100/0x190 [ 473.753295][ T8195] should_fail_ex.cold+0x5/0xa [ 473.753349][ T8195] _copy_from_user+0x2e/0xd0 [ 473.753413][ T8195] __mfill_atomic_pte+0x53f/0xb50 [ 473.753467][ T8195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.753516][ T8195] ? __pfx___mfill_atomic_pte+0x10/0x10 [ 473.753564][ T8195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.753610][ T8195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.753654][ T8195] ? mm_alloc_pmd+0x2c2/0x470 [ 473.753707][ T8195] mfill_atomic_copy+0x727/0x1620 [ 473.753788][ T8195] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 473.753834][ T8195] ? lock_acquire+0x1d1/0x380 [ 473.753886][ T8195] ? __might_fault+0xc5/0x140 [ 473.753924][ T8195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.753968][ T8195] ? find_held_lock+0x2b/0x80 [ 473.754030][ T8195] userfaultfd_ioctl+0x2278/0x6550 [ 473.754088][ T8195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.754133][ T8195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 473.754200][ T8195] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 473.754248][ T8195] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 473.754315][ T8195] ? __fget_files+0x34/0x3d0 [ 473.754355][ T8195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.754399][ T8195] ? find_held_lock+0x2b/0x80 [ 473.754435][ T8195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.754479][ T8195] ? hook_file_ioctl_common+0x140/0x440 [ 473.754550][ T8195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.754596][ T8195] ? __fget_files+0x21f/0x3d0 [ 473.754639][ T8195] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 473.754693][ T8195] ? __x64_sys_ioctl+0x18e/0x210 [ 473.754744][ T8195] __x64_sys_ioctl+0x18e/0x210 [ 473.754809][ T8195] do_syscall_64+0x123/0x7b0 [ 473.754872][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.754912][ T8195] RIP: 0033:0x7fb5d25a8f19 [ 473.754942][ T8195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.754979][ T8195] RSP: 002b:00007fb5d3494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.755015][ T8195] RAX: ffffffffffffffda RBX: 00007fb5d2825fa0 RCX: 00007fb5d25a8f19 [ 473.755040][ T8195] RDX: 0000200000000bc0 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 473.755064][ T8195] RBP: 00007fb5d2637f6d R08: 0000000000000000 R09: 0000000000000000 [ 473.755087][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.755110][ T8195] R13: 00007fb5d2826038 R14: 00007fb5d2825fa0 R15: 00007ffe64d90878 [ 473.755161][ T8195] [ 473.799978][ T8191] EXT4-fs error (device loop1): ext4_validate_block_bitmap:435: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 473.846752][ T8188] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.449: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 473.858351][ T8194] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.449: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 474.060868][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.320848][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 476.003245][ T53] Bluetooth: hci7: command tx timeout [ 476.003294][ T53] Bluetooth: hci1: command tx timeout [ 476.192156][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 476.493661][ T8201] loop6: detected capacity change from 0 to 2048 [ 476.518326][ T8201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.757021][ T8047] team0: Port device team_slave_0 added [ 476.774254][ T8047] team0: Port device team_slave_1 added [ 477.640578][ T8119] rxe_eth0 speed is unknown, defaulting to 1000 [ 479.572769][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.572796][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.572843][ T8047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.631492][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.631517][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.631559][ T8047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.713263][ T8047] hsr_slave_0: entered promiscuous mode [ 479.714093][ T8047] hsr_slave_1: entered promiscuous mode [ 479.714716][ T8047] debugfs: 'hsr0' already exists in 'hsr' [ 479.714735][ T8047] Cannot create hsr debugfs directory [ 480.116636][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 480.150928][ T5360] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 480.302612][ T5360] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 480.305457][ T5360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.305524][ T5360] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 480.305572][ T5360] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 480.305636][ T5360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.630466][ T5360] cxacru 7-1:1.0: send of cm 0x90 failed (-104) [ 482.659613][ T8233] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 484.929458][ T31] audit: type=1800 audit(1794374848.948:235): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.460" name="file2" dev="sda1" ino=2065 res=0 errno=-22 [ 485.133233][ T5753] usb 7-1: USB disconnect, device number 7 [ 487.028721][ T5289] 8021q: adding VLAN 0 to HW filter on device eth18 [ 487.489248][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.489405][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.489584][ T8118] bridge_slave_0: entered allmulticast mode [ 487.526938][ T8118] bridge_slave_0: entered promiscuous mode [ 487.774790][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.774921][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.775099][ T8118] bridge_slave_1: entered allmulticast mode [ 487.807452][ T8118] bridge_slave_1: entered promiscuous mode [ 488.212891][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.249104][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.499230][ T8277] jffs2: notice: (8277) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 488.602935][ T8118] team0: Port device team_slave_0 added [ 488.749856][ T8118] team0: Port device team_slave_1 added [ 489.028400][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.028427][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.028474][ T8118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.042186][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.042209][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.042254][ T8118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.364516][ T5895] bridge_slave_1: left allmulticast mode [ 490.364862][ T5895] bridge_slave_1: left promiscuous mode [ 490.366341][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.448585][ T5895] bridge_slave_0: left allmulticast mode [ 490.448930][ T5895] bridge_slave_0: left promiscuous mode [ 490.465692][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.603804][ T5895] bridge_slave_1: left allmulticast mode [ 490.604436][ T5895] bridge_slave_1: left promiscuous mode [ 490.619637][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.688510][ T5895] bridge_slave_0: left allmulticast mode [ 490.688815][ T5895] bridge_slave_0: left promiscuous mode [ 490.705420][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.173825][ T8296] loop1: detected capacity change from 0 to 2048 [ 491.239915][ T8296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.473869][ T8302] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.461: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 491.494528][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.467'. [ 491.653751][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.814221][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.851906][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.874625][ T5895] bond0 (unregistering): Released all slaves [ 491.978210][ T8307] jffs2: notice: (8307) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 493.538711][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.559149][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.575189][ T5895] bond0 (unregistering): Released all slaves [ 494.239017][ T8324] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard [ 494.242114][ T8324] exFAT-fs (nbd6): unable to read boot sector [ 494.242134][ T8324] exFAT-fs (nbd6): failed to read boot sector [ 494.242188][ T8324] exFAT-fs (nbd6): failed to recognize exfat type [ 496.083951][ T8118] hsr_slave_0: entered promiscuous mode [ 496.087224][ T8118] hsr_slave_1: entered promiscuous mode [ 496.089588][ T8118] debugfs: 'hsr0' already exists in 'hsr' [ 496.089612][ T8118] Cannot create hsr debugfs directory [ 497.009240][ T8047] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 497.071751][ T8047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.079316][ T8047] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 497.138909][ T8047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.994455][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.994578][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.994726][ T8119] bridge_slave_0: entered allmulticast mode [ 498.053997][ T8119] bridge_slave_0: entered promiscuous mode [ 498.247696][ T8047] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 498.272939][ T8047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.285254][ T8047] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 498.304004][ T8047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.344984][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.345185][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.345355][ T8119] bridge_slave_1: entered allmulticast mode [ 498.372223][ T8119] bridge_slave_1: entered promiscuous mode [ 498.522031][ T5895] hsr_slave_0: left promiscuous mode [ 498.529126][ T5895] hsr_slave_1: left promiscuous mode [ 498.533409][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.538757][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.606454][ T5895] hsr_slave_0: left promiscuous mode [ 498.609325][ T5895] hsr_slave_1: left promiscuous mode [ 498.624264][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.639461][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.841611][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.846080][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.848456][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.849566][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.851717][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 499.327029][ T8357] loop6: detected capacity change from 0 to 2048 [ 499.383727][ T8357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.424926][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 499.622928][ T8361] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.477: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 499.788320][ T6043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.821790][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 500.489820][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 500.521899][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 500.941285][ T53] Bluetooth: hci3: command tx timeout [ 501.093046][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.093148][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.273299][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.499263][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.766647][ T8119] team0: Port device team_slave_0 added [ 502.904816][ T8119] team0: Port device team_slave_1 added [ 503.010426][ T53] Bluetooth: hci3: command tx timeout [ 503.096096][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.096122][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.096168][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.286552][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.286578][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.286625][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.504351][ T8119] hsr_slave_0: entered promiscuous mode [ 503.505460][ T8119] hsr_slave_1: entered promiscuous mode [ 503.507993][ T8119] debugfs: 'hsr0' already exists in 'hsr' [ 503.508017][ T8119] Cannot create hsr debugfs directory [ 503.546942][ T8351] rxe_eth0 speed is unknown, defaulting to 1000 [ 506.158462][ T53] Bluetooth: hci3: command tx timeout [ 506.259846][ T5895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.152173][ T5895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.210226][ T53] Bluetooth: hci3: command tx timeout [ 510.332480][ T5895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.405416][ T8431] warning: `syz.6.485' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 510.889506][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.899581][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 510.900750][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 510.902459][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 510.909992][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 511.057156][ T5895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.423728][ T8118] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 511.435173][ T8118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.437842][ T8118] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 511.459236][ T8118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.465103][ T8118] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 511.494301][ T8118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.738423][ T8118] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 511.762534][ T8118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.500374][ T5895] bridge_slave_1: left allmulticast mode [ 512.500416][ T5895] bridge_slave_1: left promiscuous mode [ 512.500670][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.533684][ T5895] bridge_slave_0: left allmulticast mode [ 512.533722][ T5895] bridge_slave_0: left promiscuous mode [ 512.540316][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.013143][ T5634] Bluetooth: hci4: command tx timeout [ 513.078860][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.097822][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.114291][ T5895] bond0 (unregistering): Released all slaves [ 513.160198][ T5289] 8021q: adding VLAN 0 to HW filter on device eth19 [ 513.586194][ T8437] rxe_eth0 speed is unknown, defaulting to 1000 [ 513.736324][ T8479] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 513.740196][ T8479] exFAT-fs (nbd1): unable to read boot sector [ 513.740258][ T8479] exFAT-fs (nbd1): failed to read boot sector [ 513.740319][ T8479] exFAT-fs (nbd1): failed to recognize exfat type [ 515.092120][ T5634] Bluetooth: hci4: command tx timeout [ 515.240832][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.240967][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.241673][ T8351] bridge_slave_0: entered allmulticast mode [ 515.247805][ T8351] bridge_slave_0: entered promiscuous mode [ 515.335638][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.335822][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.336021][ T8351] bridge_slave_1: entered allmulticast mode [ 515.347959][ T8351] bridge_slave_1: entered promiscuous mode [ 515.573223][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.792179][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.899012][ T8119] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 515.926507][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.927692][ T8119] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 515.977614][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.021797][ T8351] team0: Port device team_slave_0 added [ 517.025279][ T8351] team0: Port device team_slave_1 added [ 517.655564][ T5634] Bluetooth: hci4: command tx timeout [ 517.795594][ T8119] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 517.814114][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.823149][ T8119] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 517.842753][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.872565][ T5895] hsr_slave_0: left promiscuous mode [ 517.877247][ T5895] hsr_slave_1: left promiscuous mode [ 517.878579][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.878612][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.883080][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.883109][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.919492][ T5895] veth1_macvtap: left promiscuous mode [ 517.919543][ T5895] veth0_macvtap: left promiscuous mode [ 517.919722][ T5895] veth1_vlan: left promiscuous mode [ 517.919806][ T5895] veth0_vlan: left promiscuous mode [ 518.714230][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 518.732955][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 518.735955][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 518.738351][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 518.762184][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 519.009242][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 519.032293][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 519.680154][ T8535] jffs2: notice: (8535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 519.989603][ T53] Bluetooth: hci4: command tx timeout [ 520.769408][ T8533] loop1: detected capacity change from 0 to 32768 [ 520.853476][ T53] Bluetooth: hci0: command tx timeout [ 521.046968][ T8533] (syz.1.495,8533,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 521.048487][ T8533] (syz.1.495,8533,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 521.335558][ T8533] JBD2: Ignoring recovery information on journal [ 521.425853][ T8533] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 521.590323][ T8533] FAULT_INJECTION: forcing a failure. [ 521.590323][ T8533] name failslab, interval 1, probability 0, space 0, times 0 [ 521.590376][ T8533] CPU: 0 UID: 0 PID: 8533 Comm: syz.1.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.590429][ T8533] Tainted: [L]=SOFTLOCKUP [ 521.590444][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 521.590467][ T8533] Call Trace: [ 521.590479][ T8533] [ 521.590494][ T8533] dump_stack_lvl+0x100/0x190 [ 521.590562][ T8533] should_fail_ex.cold+0x5/0xa [ 521.590619][ T8533] should_failslab+0xc2/0x120 [ 521.590684][ T8533] __kmalloc_cache_noprof+0x91/0x6d0 [ 521.590734][ T8533] ? ocfs2_dentry_attach_lock+0x875/0xdb0 [ 521.590806][ T8533] ocfs2_dentry_attach_lock+0x875/0xdb0 [ 521.590872][ T8533] ? __pfx_ocfs2_dentry_attach_lock+0x10/0x10 [ 521.590932][ T8533] ? ocfs2_block_signals+0x88/0xc0 [ 521.590973][ T8533] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 521.591013][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591061][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591108][ T8533] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 521.591165][ T8533] ocfs2_mknod+0x1704/0x2750 [ 521.591230][ T8533] ? __pfx_ocfs2_mknod+0x10/0x10 [ 521.591280][ T8533] ? __lock_acquire+0x5c0/0x1f40 [ 521.591342][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591425][ T8533] ? do_raw_spin_lock+0x128/0x260 [ 521.591495][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591551][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591598][ T8533] ? do_raw_spin_lock+0x128/0x260 [ 521.591656][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591704][ T8533] ? find_held_lock+0x2b/0x80 [ 521.591747][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591804][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591852][ T8533] ? put_pid+0x24/0x30 [ 521.591908][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.591956][ T8533] ? ocfs2_inode_unlock_tracker+0x1a3/0x210 [ 521.592024][ T8533] ? __pfx_ocfs2_permission+0x10/0x10 [ 521.592063][ T8533] ? __pfx_map_id_range_up+0x10/0x10 [ 521.592133][ T8533] ? __pfx_make_vfsgid+0x10/0x10 [ 521.592203][ T8533] ocfs2_mkdir+0xef/0x430 [ 521.592247][ T8533] ? security_inode_permission+0xc4/0x280 [ 521.592325][ T8533] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 521.592380][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.592436][ T8533] vfs_mkdir+0x36d/0x8a0 [ 521.592500][ T8533] filename_mkdirat+0x4c4/0x630 [ 521.592550][ T8533] ? __pfx_filename_mkdirat+0x10/0x10 [ 521.592594][ T8533] ? strncpy_from_user+0x19d/0x2d0 [ 521.592651][ T8533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.592699][ T8533] ? do_getname+0x191/0x390 [ 521.592754][ T8533] __x64_sys_mkdirat+0x89/0xc0 [ 521.592799][ T8533] do_syscall_64+0x123/0x7b0 [ 521.592866][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.592908][ T8533] RIP: 0033:0x7eff90fa8f19 [ 521.592940][ T8533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.592979][ T8533] RSP: 002b:00007eff91f3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 521.593017][ T8533] RAX: ffffffffffffffda RBX: 00007eff91225fa0 RCX: 00007eff90fa8f19 [ 521.593045][ T8533] RDX: 0000000000000000 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 521.593077][ T8533] RBP: 00007eff91037f6d R08: 0000000000000000 R09: 0000000000000000 [ 521.593102][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.593126][ T8533] R13: 00007eff91226038 R14: 00007eff91225fa0 R15: 00007fffbbcb84e8 [ 521.593178][ T8533] [ 521.593194][ T8533] (syz.1.495,8533,0):ocfs2_dentry_attach_lock:271 ERROR: status = -12 [ 521.593237][ T8533] (syz.1.495,8533,0):ocfs2_mknod:438 ERROR: status = -12 [ 521.594091][ T8533] (syz.1.495,8533,0):ocfs2_mknod:507 ERROR: status = -12 [ 521.594133][ T8533] (syz.1.495,8533,0):ocfs2_mkdir:663 ERROR: status = -12 [ 522.219746][ T5635] ocfs2: Unmounting device (7,1) on (node local) [ 522.416465][ T8119] kthread_run failed with err -4 [ 522.429708][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.429734][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.429781][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.489864][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 522.506105][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 522.514084][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 522.521476][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 522.522300][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 522.573995][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.574018][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.574057][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.065724][ T5634] Bluetooth: hci0: command tx timeout [ 524.066048][ T31] audit: type=1400 audit(1794374887.568:236): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8562 comm="syz.1.498" [ 524.530400][ T53] Bluetooth: hci5: command tx timeout [ 524.575878][ T8351] hsr_slave_0: entered promiscuous mode [ 524.592159][ T8351] hsr_slave_1: entered promiscuous mode [ 524.593026][ T8351] debugfs: 'hsr0' already exists in 'hsr' [ 524.593055][ T8351] Cannot create hsr debugfs directory [ 524.855903][ T5289] 8021q: adding VLAN 0 to HW filter on device eth20 [ 526.130939][ T53] Bluetooth: hci0: command tx timeout [ 526.592103][ T8521] rxe_eth0 speed is unknown, defaulting to 1000 [ 526.617721][ T53] Bluetooth: hci5: command tx timeout [ 527.647191][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.647318][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.647505][ T8437] bridge_slave_0: entered allmulticast mode [ 527.676543][ T8437] bridge_slave_0: entered promiscuous mode [ 527.695652][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.696131][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.696322][ T8437] bridge_slave_1: entered allmulticast mode [ 527.723312][ T8437] bridge_slave_1: entered promiscuous mode [ 527.834286][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.210151][ T53] Bluetooth: hci0: command tx timeout [ 528.321228][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.690213][ T53] Bluetooth: hci5: command tx timeout [ 529.962913][ T8437] team0: Port device team_slave_0 added [ 530.037137][ T8556] rxe_eth0 speed is unknown, defaulting to 1000 [ 530.111006][ T8437] team0: Port device team_slave_1 added [ 530.608612][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.608638][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.608685][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.617711][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.617751][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.617797][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.401578][ T53] Bluetooth: hci5: command tx timeout [ 532.738894][ T8624] loop6: detected capacity change from 0 to 32768 [ 532.749826][ T8624] (syz.6.505,8624,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 532.757724][ T8624] (syz.6.505,8624,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 532.818612][ T8624] JBD2: Ignoring recovery information on journal [ 532.833534][ T8437] hsr_slave_0: entered promiscuous mode [ 532.836331][ T8437] hsr_slave_1: entered promiscuous mode [ 532.838708][ T8437] debugfs: 'hsr0' already exists in 'hsr' [ 532.838732][ T8437] Cannot create hsr debugfs directory [ 532.896129][ T8624] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 532.995239][ T8623] FAULT_INJECTION: forcing a failure. [ 532.995239][ T8623] name failslab, interval 1, probability 0, space 0, times 0 [ 532.995291][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.6.505 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.995345][ T8623] Tainted: [L]=SOFTLOCKUP [ 532.995359][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 532.995383][ T8623] Call Trace: [ 532.995395][ T8623] [ 532.995409][ T8623] dump_stack_lvl+0x100/0x190 [ 532.995476][ T8623] should_fail_ex.cold+0x5/0xa [ 532.995532][ T8623] should_failslab+0xc2/0x120 [ 532.995595][ T8623] __kmalloc_cache_noprof+0x91/0x6d0 [ 532.995642][ T8623] ? ocfs2_dentry_attach_lock+0x875/0xdb0 [ 532.995713][ T8623] ocfs2_dentry_attach_lock+0x875/0xdb0 [ 532.995778][ T8623] ? __pfx_ocfs2_dentry_attach_lock+0x10/0x10 [ 532.995846][ T8623] ? ocfs2_block_signals+0x88/0xc0 [ 532.995887][ T8623] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 532.995927][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.995975][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.996021][ T8623] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 532.996077][ T8623] ocfs2_mknod+0x1704/0x2750 [ 532.996142][ T8623] ? __pfx_ocfs2_mknod+0x10/0x10 [ 532.996190][ T8623] ? __lock_acquire+0x5c0/0x1f40 [ 532.996246][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.996292][ T8623] ? do_raw_spin_lock+0x128/0x260 [ 532.996363][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.996413][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.996459][ T8623] ? do_raw_spin_lock+0x128/0x260 [ 532.996516][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.996563][ T8623] ? find_held_lock+0x2b/0x80 [ 532.996604][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.996659][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.996706][ T8623] ? put_pid+0x24/0x30 [ 532.996760][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.996806][ T8623] ? ocfs2_inode_unlock_tracker+0x1a3/0x210 [ 532.996878][ T8623] ? __pfx_ocfs2_permission+0x10/0x10 [ 532.996915][ T8623] ? __pfx_map_id_range_up+0x10/0x10 [ 532.996985][ T8623] ? __pfx_make_vfsgid+0x10/0x10 [ 532.997052][ T8623] ocfs2_mkdir+0xef/0x430 [ 532.997095][ T8623] ? security_inode_permission+0xc4/0x280 [ 532.997156][ T8623] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 532.997208][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.997262][ T8623] vfs_mkdir+0x36d/0x8a0 [ 532.997324][ T8623] filename_mkdirat+0x4c4/0x630 [ 532.997372][ T8623] ? __pfx_filename_mkdirat+0x10/0x10 [ 532.997415][ T8623] ? strncpy_from_user+0x19d/0x2d0 [ 532.997466][ T8623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.997512][ T8623] ? do_getname+0x191/0x390 [ 532.997566][ T8623] __x64_sys_mkdirat+0x89/0xc0 [ 532.997608][ T8623] do_syscall_64+0x123/0x7b0 [ 532.997670][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.997710][ T8623] RIP: 0033:0x7fb5d25a8f19 [ 532.997741][ T8623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.997779][ T8623] RSP: 002b:00007fb5d3494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 532.997816][ T8623] RAX: ffffffffffffffda RBX: 00007fb5d2825fa0 RCX: 00007fb5d25a8f19 [ 532.997849][ T8623] RDX: 0000000000000000 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 532.997873][ T8623] RBP: 00007fb5d2637f6d R08: 0000000000000000 R09: 0000000000000000 [ 532.997898][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.997921][ T8623] R13: 00007fb5d2826038 R14: 00007fb5d2825fa0 R15: 00007ffe64d90878 [ 532.997973][ T8623] [ 532.999154][ T8623] (syz.6.505,8623,1):ocfs2_dentry_attach_lock:271 ERROR: status = -12 [ 532.999198][ T8623] (syz.6.505,8623,1):ocfs2_mknod:438 ERROR: status = -12 [ 532.999973][ T8623] (syz.6.505,8623,1):ocfs2_mknod:507 ERROR: status = -12 [ 533.068618][ T8623] (syz.6.505,8623,1):ocfs2_mkdir:663 ERROR: status = -12 [ 533.446408][ T6043] ocfs2: Unmounting device (7,6) on (node local) [ 533.686230][ T5895] bridge_slave_1: left allmulticast mode [ 533.686267][ T5895] bridge_slave_1: left promiscuous mode [ 533.686497][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.689552][ T5895] bridge_slave_0: left allmulticast mode [ 533.689584][ T5895] bridge_slave_0: left promiscuous mode [ 533.692245][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.860124][ T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 533.928928][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.944475][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.946326][ T5895] bond0 (unregistering): Released all slaves [ 534.038830][ T30] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 534.043682][ T30] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 534.043723][ T30] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 534.043756][ T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 534.043819][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 534.043864][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 534.050892][ T30] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 534.050930][ T30] usb 7-1: Product: syz [ 534.050955][ T30] usb 7-1: Manufacturer: syz [ 534.098161][ T30] cdc_wdm 7-1:1.0: skipping garbage [ 534.098190][ T30] cdc_wdm 7-1:1.0: skipping garbage [ 534.113172][ T30] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 534.113201][ T30] cdc_wdm 7-1:1.0: Unknown control protocol [ 536.538726][ T5895] hsr_slave_0: left promiscuous mode [ 536.541263][ T5895] hsr_slave_1: left promiscuous mode [ 536.543716][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.546000][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.773811][ T30] usb 7-1: USB disconnect, device number 8 [ 537.763109][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 537.864542][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 538.087999][ T8673] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard [ 538.089833][ T8673] exFAT-fs (nbd6): unable to read boot sector [ 538.089873][ T8673] exFAT-fs (nbd6): failed to read boot sector [ 538.089943][ T8673] exFAT-fs (nbd6): failed to recognize exfat type [ 539.593705][ T8351] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 539.643428][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.353319][ T8351] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 540.373310][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.396719][ T8351] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 540.413696][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.586221][ T8351] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 540.594018][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.756579][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.756788][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.757058][ T8521] bridge_slave_0: entered allmulticast mode [ 540.759364][ T8521] bridge_slave_0: entered promiscuous mode [ 540.763990][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.764115][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.764267][ T8521] bridge_slave_1: entered allmulticast mode [ 540.766225][ T8521] bridge_slave_1: entered promiscuous mode [ 540.806779][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.811618][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.195596][ T8521] team0: Port device team_slave_0 added [ 541.315906][ T8521] team0: Port device team_slave_1 added [ 541.661075][ T8556] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.661198][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.662595][ T8556] bridge_slave_0: entered allmulticast mode [ 541.693866][ T8556] bridge_slave_0: entered promiscuous mode [ 541.708712][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.708734][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.708770][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.793761][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.793789][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.793838][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.917711][ T8556] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.917938][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.918122][ T8556] bridge_slave_1: entered allmulticast mode [ 541.930069][ T8556] bridge_slave_1: entered promiscuous mode [ 542.024180][ T8556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.027874][ T8556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.263456][ T8521] hsr_slave_0: entered promiscuous mode [ 542.438833][ T8521] hsr_slave_1: entered promiscuous mode [ 542.448105][ T8521] debugfs: 'hsr0' already exists in 'hsr' [ 542.448127][ T8521] Cannot create hsr debugfs directory [ 542.541475][ T8556] team0: Port device team_slave_0 added [ 542.581462][ T8556] team0: Port device team_slave_1 added [ 543.231214][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.231241][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.231288][ T8556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.236622][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.236644][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.236691][ T8556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.298501][ T8710] jffs2: notice: (8710) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 544.484781][ T8556] hsr_slave_0: entered promiscuous mode [ 544.505454][ T8556] hsr_slave_1: entered promiscuous mode [ 544.508356][ T8556] debugfs: 'hsr0' already exists in 'hsr' [ 544.508382][ T8556] Cannot create hsr debugfs directory [ 544.571940][ T8437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 544.607732][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.608838][ T8437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 544.650802][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.662166][ T5788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 544.777681][ T8437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.811083][ T5788] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 544.814053][ T5788] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.814098][ T5788] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 544.814133][ T5788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.814197][ T5788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 544.814244][ T5788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 544.819280][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.825656][ T8437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.860754][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.901754][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.901786][ T5788] usb 2-1: Product: syz [ 544.901808][ T5788] usb 2-1: Manufacturer: syz [ 544.932344][ T5788] cdc_wdm 2-1:1.0: skipping garbage [ 544.932374][ T5788] cdc_wdm 2-1:1.0: skipping garbage [ 544.951758][ T5788] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 544.951789][ T5788] cdc_wdm 2-1:1.0: Unknown control protocol [ 545.290816][ T30] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 545.449715][ T30] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 545.466444][ T30] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 545.466522][ T30] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 545.466557][ T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 545.466619][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 545.466701][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 545.474157][ T30] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 545.474195][ T30] usb 7-1: Product: syz [ 545.474252][ T30] usb 7-1: Manufacturer: syz [ 545.569420][ T30] cdc_wdm 7-1:1.0: skipping garbage [ 545.569445][ T30] cdc_wdm 7-1:1.0: skipping garbage [ 545.628621][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.074977][ T8351] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.179127][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.179241][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.296434][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.296552][ T5989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.642501][ T5895] bridge_slave_1: left allmulticast mode [ 546.642540][ T5895] bridge_slave_1: left promiscuous mode [ 546.642826][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.671798][ T5895] bridge_slave_0: left allmulticast mode [ 546.671833][ T5895] bridge_slave_0: left promiscuous mode [ 546.673346][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.713234][ T5895] bridge_slave_1: left allmulticast mode [ 546.713270][ T5895] bridge_slave_1: left promiscuous mode [ 546.713505][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.718808][ T5895] bridge_slave_0: left allmulticast mode [ 546.718837][ T5895] bridge_slave_0: left promiscuous mode [ 546.719031][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.203918][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.228446][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.246419][ T5895] bond0 (unregistering): Released all slaves [ 547.409893][ T30] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 547.409958][ T30] cdc_wdm 7-1:1.0: Unknown control protocol [ 547.602881][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.602991][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.603237][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.603270][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.603518][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.603549][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.603788][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.603820][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.604061][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.604092][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.604334][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.604365][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.604600][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.604630][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.604865][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.604897][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.605141][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.605171][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.605415][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 547.605446][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 547.613121][ T8343] usb 7-1: USB disconnect, device number 9 [ 547.614186][ T30] usb 2-1: USB disconnect, device number 5 [ 547.846861][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.883549][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.899149][ T5895] bond0 (unregistering): Released all slaves [ 547.996808][ T8743] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 547.997098][ T8743] exFAT-fs (nbd1): unable to read boot sector [ 547.997112][ T8743] exFAT-fs (nbd1): failed to read boot sector [ 547.997124][ T8743] exFAT-fs (nbd1): failed to recognize exfat type [ 549.078843][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.289347][ T8521] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 549.327771][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.374938][ T8521] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 549.444220][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.446625][ T8521] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 549.488808][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.075361][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.080243][ T8521] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 552.147472][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.248966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.249102][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.295680][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.295811][ T3249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.396888][ T8772] jffs2: notice: (8772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 552.514390][ C1] ------------[ cut here ]------------ [ 552.514410][ C1] !rcu_read_lock_held() [ 552.514423][ C1] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x54c6/0x7200, CPU#1: ksoftirqd/1/24 [ 552.534932][ C1] Modules linked in: [ 552.538918][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.549874][ C1] Tainted: [L]=SOFTLOCKUP [ 552.554268][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 552.564445][ C1] RIP: 0010:xfrm_output_resume+0x54c6/0x7200 [ 552.570544][ C1] Code: fe ff ff e8 8c 10 b3 fa 31 ff 41 89 c4 89 c6 e8 f0 f2 86 f7 45 84 e4 0f 85 1b f0 ff ff 31 db e9 20 f0 ff ff e8 cb f8 86 f7 90 <0f> 0b 90 e9 cd ef ff ff c6 85 c0 fe ff ff 00 31 db 49 8d 46 4d e9 [ 552.590568][ C1] RSP: 0018:ffffc900001e7868 EFLAGS: 00010246 [ 552.596734][ C1] RAX: 0000000000000000 RBX: ffff8880773c6900 RCX: 0000000000000100 [ 552.604826][ C1] RDX: ffff888020295dc0 RSI: ffffffff8a876735 RDI: 0000000000000005 [ 552.613081][ C1] RBP: ffffc900001e79e0 R08: 0000000000000000 R09: 0000000000000000 [ 552.621156][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 552.629204][ C1] R13: ffff888055ceaec0 R14: ffff888022bdb270 R15: dffffc0000000000 [ 552.637269][ C1] FS: 0000000000000000(0000) GS:ffff888122570000(0000) knlGS:0000000000000000 [ 552.646313][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.653002][ C1] CR2: 0000558095cfe950 CR3: 0000000056c15000 CR4: 0000000000350ef0 [ 552.661076][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 552.669119][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 552.677214][ C1] Call Trace: [ 552.680544][ C1] [ 552.683514][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.689211][ C1] ? rcu_is_watching+0x13/0xc0 [ 552.694062][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 552.699673][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.705382][ C1] ? __asan_memset+0x23/0x50 [ 552.710068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.715793][ C1] ? __skb_ext_alloc+0x6c/0x80 [ 552.720634][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.726334][ C1] ? skb_ext_add+0x624/0x810 [ 552.731041][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.736745][ C1] ? xfrm_state_mtu+0xd3/0x450 [ 552.741618][ C1] xfrm_output+0x33f/0x2040 [ 552.746180][ C1] iptfs_delay_timer+0x1ab7/0x3c20 [ 552.751386][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 552.756415][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 552.761969][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 552.767675][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.773387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.779090][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 552.784383][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.790113][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 552.796008][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.801726][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 552.807454][ C1] ? __hrtimer_run_queues+0x361/0x9a0 [ 552.812925][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.818626][ C1] ? rcu_is_watching+0x13/0xc0 [ 552.823455][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.829178][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 552.834759][ C1] __hrtimer_run_queues+0x448/0x9a0 [ 552.840074][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 552.845276][ C1] handle_softirqs+0x216/0xa20 [ 552.850135][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 552.855486][ C1] ? run_ksoftirqd+0x56/0x60 [ 552.860180][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.865901][ C1] ? rcu_is_watching+0x13/0xc0 [ 552.870753][ C1] run_ksoftirqd+0x38/0x60 [ 552.875225][ C1] smpboot_thread_fn+0x41f/0xb90 [ 552.880258][ C1] ? kthread+0x13a/0x450 [ 552.884554][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 552.890201][ C1] kthread+0x373/0x450 [ 552.894314][ C1] ? __pfx_kthread+0x10/0x10 [ 552.898961][ C1] ret_from_fork+0x730/0xd60 [ 552.903650][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 552.908862][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.914756][ C1] ? __switch_to+0x800/0x10e0 [ 552.919515][ C1] ? __switch_to_asm+0x39/0x70 [ 552.924357][ C1] ? __pfx_kthread+0x10/0x10 [ 552.929046][ C1] ret_from_fork_asm+0x1a/0x30 [ 552.933905][ C1] [ 552.936958][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 552.944240][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.955185][ C1] Tainted: [L]=SOFTLOCKUP [ 552.959496][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 552.969545][ C1] Call Trace: [ 552.972822][ C1] [ 552.975745][ C1] dump_stack_lvl+0x100/0x190 [ 552.980449][ C1] vpanic+0x2dc/0x6f8 [ 552.984436][ C1] panic+0xd1/0xe0 [ 552.988159][ C1] ? __pfx_panic+0x10/0x10 [ 552.992591][ C1] check_panic_on_warn.cold+0x19/0x34 [ 552.997975][ C1] ? xfrm_output_resume+0x54c6/0x7200 [ 553.003353][ C1] __warn.cold+0x191/0x321 [ 553.007802][ C1] __report_bug+0x30f/0x440 [ 553.012332][ C1] ? xfrm_output_resume+0x54c6/0x7200 [ 553.017714][ C1] ? __pfx___report_bug+0x10/0x10 [ 553.022761][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 553.028011][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.033654][ C1] ? irqentry_exit+0x202/0xab0 [ 553.038438][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.044088][ C1] ? xfrm_output_resume+0x54c6/0x7200 [ 553.049475][ C1] ? xfrm_output_resume+0x54c6/0x7200 [ 553.054853][ C1] report_bug+0xb3/0x220 [ 553.059121][ C1] ? xfrm_output_resume+0x54c6/0x7200 [ 553.064499][ C1] handle_bug+0x16a/0x2a0 [ 553.068834][ C1] exc_invalid_op+0x17/0x50 [ 553.073349][ C1] asm_exc_invalid_op+0x1a/0x20 [ 553.078202][ C1] RIP: 0010:xfrm_output_resume+0x54c6/0x7200 [ 553.084191][ C1] Code: fe ff ff e8 8c 10 b3 fa 31 ff 41 89 c4 89 c6 e8 f0 f2 86 f7 45 84 e4 0f 85 1b f0 ff ff 31 db e9 20 f0 ff ff e8 cb f8 86 f7 90 <0f> 0b 90 e9 cd ef ff ff c6 85 c0 fe ff ff 00 31 db 49 8d 46 4d e9 [ 553.103816][ C1] RSP: 0018:ffffc900001e7868 EFLAGS: 00010246 [ 553.109891][ C1] RAX: 0000000000000000 RBX: ffff8880773c6900 RCX: 0000000000000100 [ 553.118041][ C1] RDX: ffff888020295dc0 RSI: ffffffff8a876735 RDI: 0000000000000005 [ 553.126020][ C1] RBP: ffffc900001e79e0 R08: 0000000000000000 R09: 0000000000000000 [ 553.134011][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 553.141989][ C1] R13: ffff888055ceaec0 R14: ffff888022bdb270 R15: dffffc0000000000 [ 553.149976][ C1] ? xfrm_output_resume+0x54c5/0x7200 [ 553.155380][ C1] ? xfrm_output_resume+0x54c5/0x7200 [ 553.160762][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.166410][ C1] ? rcu_is_watching+0x13/0xc0 [ 553.171197][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 553.176755][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.182411][ C1] ? __asan_memset+0x23/0x50 [ 553.187041][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.192687][ C1] ? __skb_ext_alloc+0x6c/0x80 [ 553.197466][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.203109][ C1] ? skb_ext_add+0x624/0x810 [ 553.207718][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.213369][ C1] ? xfrm_state_mtu+0xd3/0x450 [ 553.218155][ C1] xfrm_output+0x33f/0x2040 [ 553.222669][ C1] iptfs_delay_timer+0x1ab7/0x3c20 [ 553.227832][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 553.232817][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 553.238384][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 553.244030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.249699][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.255390][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 553.260655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.266303][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 553.272126][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.277798][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 553.283459][ C1] ? __hrtimer_run_queues+0x361/0x9a0 [ 553.288840][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.294479][ C1] ? rcu_is_watching+0x13/0xc0 [ 553.299251][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.304895][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 553.310378][ C1] __hrtimer_run_queues+0x448/0x9a0 [ 553.315599][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 553.320725][ C1] handle_softirqs+0x216/0xa20 [ 553.325501][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 553.330816][ C1] ? run_ksoftirqd+0x56/0x60 [ 553.335408][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.341052][ C1] ? rcu_is_watching+0x13/0xc0 [ 553.345826][ C1] run_ksoftirqd+0x38/0x60 [ 553.350258][ C1] smpboot_thread_fn+0x41f/0xb90 [ 553.355325][ C1] ? kthread+0x13a/0x450 [ 553.359570][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 553.365053][ C1] kthread+0x373/0x450 [ 553.369131][ C1] ? __pfx_kthread+0x10/0x10 [ 553.373728][ C1] ret_from_fork+0x730/0xd60 [ 553.378340][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 553.383465][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 553.389124][ C1] ? __switch_to+0x800/0x10e0 [ 553.393833][ C1] ? __switch_to_asm+0x39/0x70 [ 553.398612][ C1] ? __pfx_kthread+0x10/0x10 [ 553.403211][ C1] ret_from_fork_asm+0x1a/0x30 [ 553.408004][ C1] [ 553.411309][ C1] Kernel Offset: disabled [ 553.415650][ C1] Rebooting in 86400 seconds..