last executing test programs: 8.528381315s ago: executing program 0 (id=1): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 8.350308149s ago: executing program 0 (id=5): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 7.267043895s ago: executing program 0 (id=6): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 7.226822347s ago: executing program 2 (id=3): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) readlinkat(r0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000880)=""/205, 0xcd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f0000000780)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) 7.105758049s ago: executing program 1 (id=7): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000340)='./file0\x00', 0x129a40, 0x8a) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x25) syz_emit_ethernet(0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045f8005e00000000002f907800000000000000002480655800000000004e9ed18dc41114000000100008000100000086dd080088be00000000100000000100000000000000080022eb050000002000000e02000000000000000000000008"], 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004804) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0)=0x319, 0x4) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000001) 6.777138287s ago: executing program 0 (id=9): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl(r0, 0x9, &(0x7f0000000180)="058b188d56db9426239f153e650276552a7210c0adc623094dd4cd8809b7fcdb020f33c654435d37d5ffa9977b1b9e05fb74c7bfb86d40e6d4759495a4d0e8f31e6f4337f06284c35e872efbbf311ed54c3062ee5131de91df35013e7529b28cca2c5fd320a99d7a171b1462332061c4dec1dfdabd5a9ff1d590f6f0aa16898e4fb9b8eb890a5326d83b0fdbd59c418819caf1") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\x00', 0x2) 4.711143036s ago: executing program 2 (id=10): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) 4.169461409s ago: executing program 2 (id=12): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 4.012050663s ago: executing program 2 (id=13): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x3ff) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x7f) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x2, 0x0}, 0xfffffffffffffe72) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbd4e85ec82d10000000c848722ba3b132e4fde178c945bd950b0000e801fc8a1be9b4ebbe9c228ba6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x97) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x19) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0xff010000000003) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate(0xc, r4, &(0x7f00000000c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', '!I\\', 0x20, 0x8, 0x20, [0x35]}, 0x2e, r8) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 3.241779622s ago: executing program 1 (id=14): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 2.030544451s ago: executing program 1 (id=15): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aa2b77aaaa44aaaaaaaaaabb08004621002800680000e1de3c2121e486e3ac1414aa000000004e20"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.352857337s ago: executing program 1 (id=18): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f0000000780)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) 1.22694128s ago: executing program 1 (id=19): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb970a0df15000000cdb70466518907efd04373a0e64e30bbd8", 0x41) 1.123961962s ago: executing program 0 (id=20): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 1.025871105s ago: executing program 1 (id=22): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x904}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x4000) socket$inet6(0xa, 0x80002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x98c, 0x2a8, 0x2a8, 0x98c, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7fffffff, {0x8000}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) r6 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1000, 0x12) syz_open_dev$midi(&(0x7f0000000000), 0x4, 0x84080) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x0) 380.41093ms ago: executing program 3 (id=27): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180), &(0x7f0000000780)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) 270.169183ms ago: executing program 3 (id=28): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffa, 0xffdffff6, 0xffffffff, 0x8, "feee000000050000006e19a6680000204a00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xa) 252.207173ms ago: executing program 3 (id=29): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x78) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 164.375545ms ago: executing program 3 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x301}, 0x14}}, 0x0) 54.019648ms ago: executing program 3 (id=31): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 0s ago: executing program 3 (id=32): preadv(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0x81, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f00000000c0)='./sys\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x5, 0x0, 0x58, 0x0, &(0x7f0000001200)="3f93ce563573824c1c7f724e1f12f12881ccbc5c1beb28ec62a71836aa2cedec73de947a83900c7c62095baf1705d5dbdc0968290d0c9609a0b95ba2af57f238bc355757d52d3574765afacd2b0f61c3677daef4072991f7", &(0x7f0000001280), 0x1, 0x0, 0x5}, 0x50) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0', 0x1) write(r1, &(0x7f00000001a0)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 66.825326][ T5766] cgroup: Unknown subsys name 'net' [ 66.974155][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.437025][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.611629][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.620649][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.634164][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.638663][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.643433][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.657218][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.664929][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.667794][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.672753][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.687235][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.687679][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.698197][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.710088][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.715950][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.717486][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.725017][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.732904][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.741990][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.753345][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.759191][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.763708][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.777025][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.781170][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.791513][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.169298][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 71.283424][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 71.323631][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 71.388481][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.396342][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.403780][ T5780] bridge_slave_0: entered allmulticast mode [ 71.410540][ T5780] bridge_slave_0: entered promiscuous mode [ 71.424058][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.431250][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.438473][ T5780] bridge_slave_1: entered allmulticast mode [ 71.445570][ T5780] bridge_slave_1: entered promiscuous mode [ 71.467722][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 71.532743][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.540044][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.547707][ T5779] bridge_slave_0: entered allmulticast mode [ 71.554422][ T5779] bridge_slave_0: entered promiscuous mode [ 71.582329][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.596301][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.605613][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.618711][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.622890][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.625209][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.632312][ T5779] bridge_slave_1: entered allmulticast mode [ 71.645729][ T5779] bridge_slave_1: entered promiscuous mode [ 71.652718][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.660523][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.667793][ T5778] bridge_slave_0: entered allmulticast mode [ 71.674472][ T5778] bridge_slave_0: entered promiscuous mode [ 71.710098][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.717579][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.724738][ T5778] bridge_slave_1: entered allmulticast mode [ 71.732030][ T5778] bridge_slave_1: entered promiscuous mode [ 71.782066][ T5780] team0: Port device team_slave_0 added [ 71.796589][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.818185][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.829679][ T5780] team0: Port device team_slave_1 added [ 71.848214][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.893870][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.935399][ T5779] team0: Port device team_slave_0 added [ 71.942361][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.951871][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.959250][ T5781] bridge_slave_0: entered allmulticast mode [ 71.965906][ T5781] bridge_slave_0: entered promiscuous mode [ 71.974746][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.982001][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.989434][ T5781] bridge_slave_1: entered allmulticast mode [ 71.996211][ T5781] bridge_slave_1: entered promiscuous mode [ 72.003776][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.011578][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.038166][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.054436][ T5778] team0: Port device team_slave_0 added [ 72.062065][ T5779] team0: Port device team_slave_1 added [ 72.090390][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.097632][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.123943][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.136480][ T5778] team0: Port device team_slave_1 added [ 72.184981][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.192191][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.218452][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.231215][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.238217][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.272235][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.285721][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.298781][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.334211][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.341358][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.367294][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.413947][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.421134][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.447151][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.484527][ T5781] team0: Port device team_slave_0 added [ 72.495461][ T5779] hsr_slave_0: entered promiscuous mode [ 72.502511][ T5779] hsr_slave_1: entered promiscuous mode [ 72.525050][ T5780] hsr_slave_0: entered promiscuous mode [ 72.531890][ T5780] hsr_slave_1: entered promiscuous mode [ 72.538776][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.546696][ T5780] Cannot create hsr debugfs directory [ 72.554544][ T5781] team0: Port device team_slave_1 added [ 72.584672][ T5778] hsr_slave_0: entered promiscuous mode [ 72.591885][ T5778] hsr_slave_1: entered promiscuous mode [ 72.598389][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.605959][ T5778] Cannot create hsr debugfs directory [ 72.632363][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.640172][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.668835][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.719979][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.727133][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.753599][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.807377][ T5787] Bluetooth: hci0: command tx timeout [ 72.807390][ T5789] Bluetooth: hci2: command tx timeout [ 72.819272][ T5785] Bluetooth: hci1: command tx timeout [ 72.852837][ T5781] hsr_slave_0: entered promiscuous mode [ 72.860135][ T5781] hsr_slave_1: entered promiscuous mode [ 72.866135][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.876658][ T5781] Cannot create hsr debugfs directory [ 72.886845][ T5785] Bluetooth: hci3: command tx timeout [ 73.161718][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.185479][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.198540][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.209716][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.271232][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.284235][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.321857][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.332672][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.415663][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.429091][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.445924][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.455802][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.520680][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.538132][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.561086][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.571853][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.641316][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.692072][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.711185][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.728979][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.736286][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.764539][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.771727][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.789169][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.806956][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.814059][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.840874][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.848031][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.884251][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.902059][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.962510][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.985593][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.992803][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.005971][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.024725][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.031903][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.054697][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.061834][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.090434][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.097621][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.532553][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.580857][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.645808][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.703141][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.711051][ T5780] veth0_vlan: entered promiscuous mode [ 74.742146][ T5779] veth0_vlan: entered promiscuous mode [ 74.767456][ T5780] veth1_vlan: entered promiscuous mode [ 74.780285][ T5779] veth1_vlan: entered promiscuous mode [ 74.806494][ T5781] veth0_vlan: entered promiscuous mode [ 74.845436][ T5781] veth1_vlan: entered promiscuous mode [ 74.867602][ T5778] veth0_vlan: entered promiscuous mode [ 74.876403][ T5780] veth0_macvtap: entered promiscuous mode [ 74.887327][ T5787] Bluetooth: hci1: command tx timeout [ 74.887411][ T5789] Bluetooth: hci0: command tx timeout [ 74.892799][ T5785] Bluetooth: hci2: command tx timeout [ 74.920252][ T5778] veth1_vlan: entered promiscuous mode [ 74.929420][ T5780] veth1_macvtap: entered promiscuous mode [ 74.948661][ T5779] veth0_macvtap: entered promiscuous mode [ 74.967119][ T5785] Bluetooth: hci3: command tx timeout [ 74.980424][ T5779] veth1_macvtap: entered promiscuous mode [ 75.000674][ T5781] veth0_macvtap: entered promiscuous mode [ 75.019954][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.039948][ T5781] veth1_macvtap: entered promiscuous mode [ 75.053675][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.072076][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.081525][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.090757][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100629][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.122666][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.141760][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.154033][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.188716][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.202421][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.214618][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.232755][ T5778] veth0_macvtap: entered promiscuous mode [ 75.243195][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.255368][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.265960][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.276702][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.289660][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.300068][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.309849][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.320502][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.329270][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.345574][ T5778] veth1_macvtap: entered promiscuous mode [ 75.377657][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.395152][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.406023][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.416821][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.428644][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.452884][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.464343][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.473698][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.482668][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.543124][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.554371][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.565839][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.566457][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.586119][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.597666][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.608879][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.620053][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.631440][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.642587][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.653243][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.663328][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.673857][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.683768][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.694813][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.706272][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.741290][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.750114][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.759810][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.769226][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.806250][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.815198][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.888889][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.911274][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.968432][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.976301][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.040660][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.073734][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.141244][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.153164][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.174484][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.181461][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.283821][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.334667][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.425844][ T5847] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 77.122820][ T5785] Bluetooth: hci2: command tx timeout [ 77.122825][ T5789] Bluetooth: hci1: command tx timeout [ 77.122853][ T5785] Bluetooth: hci0: command tx timeout [ 77.128911][ T5789] Bluetooth: hci3: command tx timeout [ 78.638521][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.206848][ T5787] Bluetooth: hci0: command tx timeout [ 79.217163][ T5787] Bluetooth: hci3: command tx timeout [ 79.222622][ T5787] Bluetooth: hci1: command tx timeout [ 79.228766][ T5785] Bluetooth: hci2: command tx timeout [ 79.499506][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.734016][ T27] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.743196][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.756209][ T27] usb 2-1: config 0 descriptor?? [ 79.790811][ T11] device offline error, dev sda, sector 695542 op 0x1:(WRITE) flags 0x4000 phys_seg 56 prio class 2 [ 79.838224][ T11] device offline error, dev sda, sector 520502 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 79.873255][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2017 starting block 65062) [ 79.912850][ T3472] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2017, error -5) [ 79.937162][ T3472] Buffer I/O error on device sda1, logical block 65024 [ 79.944322][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2018 starting block 65063) [ 79.960834][ T3472] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2018, error -5) [ 79.971172][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.975699][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2019 starting block 65064) [ 79.998203][ T3472] Buffer I/O error on device sda1, logical block 65025 [ 80.000586][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.013831][ T3472] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2019, error -5) [ 80.071328][ T11] device offline error, dev sda, sector 696048 op 0x1:(WRITE) flags 0x4000 phys_seg 58 prio class 2 [ 80.121173][ T11] device offline error, dev sda, sector 696560 op 0x1:(WRITE) flags 0x4000 phys_seg 21 prio class 2 [ 80.121195][ T3472] Buffer I/O error on device sda1, logical block 65026 [ 80.146719][ T11] device offline error, dev sda, sector 697072 op 0x1:(WRITE) flags 0x4000 phys_seg 8 prio class 2 [ 80.171843][ T11] device offline error, dev sda, sector 697584 op 0x1:(WRITE) flags 0x4000 phys_seg 12 prio class 2 [ 80.185063][ T11] device offline error, dev sda, sector 698096 op 0x1:(WRITE) flags 0x4000 phys_seg 6 prio class 2 [ 80.208480][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 80.212439][ T11] device offline error, dev sda, sector 698608 op 0x1:(WRITE) flags 0x4000 phys_seg 7 prio class 2 [ 80.240460][ T11] device offline error, dev sda, sector 699120 op 0x1:(WRITE) flags 0x4000 phys_seg 45 prio class 2 [ 80.279876][ T11] device offline error, dev sda, sector 699632 op 0x1:(WRITE) flags 0x4000 phys_seg 16 prio class 2 [ 80.317362][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2021 starting block 87774) [ 80.363232][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2021 starting block 88080) [ 80.403161][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88102) [ 80.406474][ T49] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 80.421251][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88170) [ 80.475403][ T49] Buffer I/O error on device sda1, logical block 87786 [ 80.489765][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88195) [ 80.499727][ T49] Buffer I/O error on device sda1, logical block 87787 [ 80.520151][ T49] Buffer I/O error on device sda1, logical block 87788 [ 80.538401][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88232) [ 80.546889][ T49] Buffer I/O error on device sda1, logical block 87789 [ 80.571323][ T49] Buffer I/O error on device sda1, logical block 87790 [ 80.606262][ T49] Buffer I/O error on device sda1, logical block 87791 [ 80.606886][ T11] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88278) [ 80.651093][ T49] Buffer I/O error on device sda1, logical block 87792 [ 80.686055][ T49] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 80.704530][ T49] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 80.724337][ T49] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 80.760478][ T49] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 80.802807][ T49] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 80.834430][ T5892] nbd2: detected capacity change from 0 to 1 [ 80.861963][ T5106] Aborting journal on device sda1-8. [ 80.867857][ T11] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm kworker/u4:0: Detected aborted journal [ 80.880036][ T49] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 80.893291][ T5893] nbd2: detected capacity change from 1 to 0 [ 80.912823][ T24] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 80.922490][ T5106] JBD2: I/O error when updating journal superblock for sda1-8. [ 80.932324][ T5890] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.2.13: Detected aborted journal [ 80.949121][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 80.959800][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 80.972249][ T5873] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 81.028466][ T5873] Buffer I/O error on dev sda1, logical block 4260, lost async page write [ 81.050895][ T5873] Buffer I/O error on dev sda1, logical block 23725, lost async page write [ 81.290121][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 81.314765][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 81.323160][ T5873] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 81.361926][ T27] usb 2-1: USB disconnect, device number 2 [ 81.425527][ T5789] block nbd2: Receive control failed (result -104) [ 83.023942][ T5874] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 83.139467][ T5874] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 83.200811][ T5874] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 83.230097][ T5905] Bluetooth: MGMT ver 1.22 [ 83.260347][ T5905] Bluetooth: hci0: unsupported parameter 255 [ 83.304816][ T5905] Bluetooth: hci0: unsupported parameter 255 [ 83.354891][ T5874] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 83.376292][ T5874] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 83.826782][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.016850][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 84.036259][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.054375][ T5822] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.064697][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.088345][ T5822] usb 2-1: config 0 descriptor?? [ 84.311498][ T5822] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 84.339752][ T5934] Bluetooth: hci0: unsupported parameter 255 [ 84.345966][ T5934] Bluetooth: hci0: unsupported parameter 255 [ 84.677358][ T21] process 5915 (syz.1.22) no longer affine to cpu1 [ 84.732852][ T1194] smpboot: CPU 1 is now offline [ 84.797986][ T5941] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 84.820386][ T5926] ------------[ cut here ]------------ [ 84.820892][ T5926] [ 84.820897][ T5926] ====================================================== [ 84.820902][ T5926] WARNING: possible circular locking dependency detected [ 84.820914][ T5926] syzkaller #0 Not tainted [ 84.820923][ T5926] ------------------------------------------------------ [ 84.820929][ T5926] syz.0.20/5926 is trying to acquire lock: [ 84.820937][ T5926] ffffffff8d1263e0 (console_owner){-...}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 84.820991][ T5926] [ 84.820991][ T5926] but task is already holding lock: [ 84.820996][ T5926] ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 84.821041][ T5926] [ 84.821041][ T5926] which lock already depends on the new lock. [ 84.821041][ T5926] [ 84.821046][ T5926] [ 84.821046][ T5926] the existing dependency chain (in reverse order) is: [ 84.821051][ T5926] [ 84.821051][ T5926] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 84.821073][ T5926] _raw_spin_lock_nested+0x32/0x50 [ 84.821091][ T5926] raw_spin_rq_lock_nested+0x29/0x130 [ 84.821114][ T5926] task_fork_fair+0x62/0x1f0 [ 84.821130][ T5926] sched_cgroup_fork+0x352/0x3e0 [ 84.821146][ T5926] copy_process+0x21fd/0x3da0 [ 84.821171][ T5926] kernel_clone+0x24b/0x8a0 [ 84.821188][ T5926] user_mode_thread+0x111/0x180 [ 84.821206][ T5926] rest_init+0x27/0x300 [ 84.821220][ T5926] arch_call_rest_init+0xe/0x10 [ 84.821237][ T5926] start_kernel+0x461/0x4e0 [ 84.821253][ T5926] x86_64_start_reservations+0x2a/0x30 [ 84.821276][ T5926] copy_bootdata+0x0/0xd0 [ 84.821298][ T5926] secondary_startup_64_no_verify+0x179/0x17b [ 84.821320][ T5926] [ 84.821320][ T5926] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 84.821342][ T5926] _raw_spin_lock_irqsave+0xb4/0x100 [ 84.821357][ T5926] try_to_wake_up+0x5b/0x10e0 [ 84.821372][ T5926] kick_pool+0x320/0x420 [ 84.821388][ T5926] create_worker+0x61e/0x820 [ 84.821406][ T5926] workqueue_init+0x306/0x670 [ 84.821428][ T5926] kernel_init_freeable+0x3a7/0x560 [ 84.821445][ T5926] kernel_init+0x1d/0x1c0 [ 84.821459][ T5926] ret_from_fork+0x48/0x80 [ 84.821478][ T5926] ret_from_fork_asm+0x11/0x20 [ 84.821502][ T5926] [ 84.821502][ T5926] -> #3 (&pool->lock){-.-.}-{2:2}: [ 84.821523][ T5926] _raw_spin_lock+0x2e/0x40 [ 84.821538][ T5926] __queue_work+0x72f/0xfd0 [ 84.821553][ T5926] queue_work_on+0x128/0x1f0 [ 84.821569][ T5926] rpm_suspend+0x1133/0x1b60 [ 84.821590][ T5926] __pm_runtime_idle+0x12f/0x1a0 [ 84.821611][ T5926] __device_attach+0x352/0x420 [ 84.821633][ T5926] bus_probe_device+0x180/0x260 [ 84.821653][ T5926] device_add+0x87c/0xc40 [ 84.821670][ T5926] serial_base_port_add+0x2f6/0x430 [ 84.821687][ T5926] serial_core_register_port+0x378/0x20b0 [ 84.821709][ T5926] serial8250_register_8250_port+0x15fd/0x1f40 [ 84.821729][ T5926] serial_pnp_probe+0x577/0x750 [ 84.821747][ T5926] pnp_device_probe+0x305/0x4b0 [ 84.821766][ T5926] really_probe+0x247/0xae0 [ 84.821780][ T5926] __driver_probe_device+0x1f5/0x390 [ 84.821803][ T5926] driver_probe_device+0x4f/0x420 [ 84.821818][ T5926] __driver_attach+0x444/0x6d0 [ 84.821840][ T5926] bus_for_each_dev+0x235/0x2b0 [ 84.821860][ T5926] bus_add_driver+0x340/0x630 [ 84.821880][ T5926] driver_register+0x23a/0x310 [ 84.821895][ T5926] serial8250_init+0x9a/0x170 [ 84.821911][ T5926] do_one_initcall+0x242/0x790 [ 84.821931][ T5926] do_initcall_level+0x13d/0x1f0 [ 84.821951][ T5926] do_initcalls+0x69/0xd0 [ 84.821967][ T5926] kernel_init_freeable+0x3d9/0x560 [ 84.821989][ T5926] kernel_init+0x1d/0x1c0 [ 84.822003][ T5926] ret_from_fork+0x48/0x80 [ 84.822025][ T5926] ret_from_fork_asm+0x11/0x20 [ 84.822045][ T5926] [ 84.822045][ T5926] -> #2 (&dev->power.lock){-.-.}-{2:2}: [ 84.822067][ T5926] _raw_spin_lock_irqsave+0xb4/0x100 [ 84.822083][ T5926] __pm_runtime_resume+0x10f/0x170 [ 84.822104][ T5926] __uart_start+0x171/0x3e0 [ 84.822118][ T5926] uart_write+0x449/0x5d0 [ 84.822132][ T5926] n_tty_write+0xd3d/0x11e0 [ 84.822158][ T5926] file_tty_write+0x529/0x960 [ 84.822177][ T5926] vfs_write+0x474/0x9a0 [ 84.822198][ T5926] ksys_write+0x151/0x260 [ 84.822218][ T5926] do_syscall_64+0x55/0xb0 [ 84.822236][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.822255][ T5926] [ 84.822255][ T5926] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 84.822277][ T5926] _raw_spin_lock_irqsave+0xb4/0x100 [ 84.822292][ T5926] serial8250_console_write+0x181/0x18b0 [ 84.822314][ T5926] console_flush_all+0x6ad/0xcf0 [ 84.822333][ T5926] console_unlock+0xad/0x350 [ 84.822351][ T5926] vprintk_emit+0x497/0x610 [ 84.822370][ T5926] _printk+0xde/0x130 [ 84.822384][ T5926] register_console+0xb96/0xf00 [ 84.822403][ T5926] univ8250_console_init+0x45/0x50 [ 84.822418][ T5926] console_init+0x17b/0x5d0 [ 84.822435][ T5926] start_kernel+0x2c8/0x4e0 [ 84.822450][ T5926] x86_64_start_reservations+0x2a/0x30 [ 84.822474][ T5926] copy_bootdata+0x0/0xd0 [ 84.822495][ T5926] secondary_startup_64_no_verify+0x179/0x17b [ 84.822517][ T5926] [ 84.822517][ T5926] -> #0 (console_owner){-...}-{0:0}: [ 84.822538][ T5926] __lock_acquire+0x37ef/0x7d80 [ 84.822556][ T5926] lock_acquire+0x19e/0x420 [ 84.822573][ T5926] console_flush_all+0x676/0xcf0 [ 84.822592][ T5926] console_unlock+0xad/0x350 [ 84.822619][ T5926] vprintk_emit+0x497/0x610 [ 84.822637][ T5926] _printk+0xde/0x130 [ 84.822651][ T5926] report_bug+0x34e/0x4f0 [ 84.822670][ T5926] handle_bug+0xcf/0x120 [ 84.822687][ T5926] exc_invalid_op+0x1a/0x50 [ 84.822705][ T5926] asm_exc_invalid_op+0x1a/0x20 [ 84.822722][ T5926] update_rq_clock+0x32e/0x4b0 [ 84.822744][ T5926] __schedule+0x2c72/0x4660 [ 84.822763][ T5926] preempt_schedule_irq+0xbf/0x150 [ 84.822784][ T5926] irqentry_exit+0x67/0x70 [ 84.822805][ T5926] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.822824][ T5926] lock_acquire+0x208/0x420 [ 84.822841][ T5926] __might_fault+0xc6/0x120 [ 84.822858][ T5926] _copy_from_user+0x2a/0xe0 [ 84.822875][ T5926] ___sys_recvmsg+0x174/0x590 [ 84.822893][ T5926] do_recvmmsg+0x377/0x810 [ 84.822910][ T5926] __x64_sys_recvmmsg+0x199/0x250 [ 84.822931][ T5926] do_syscall_64+0x55/0xb0 [ 84.822948][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.822966][ T5926] [ 84.822966][ T5926] other info that might help us debug this: [ 84.822966][ T5926] [ 84.822971][ T5926] Chain exists of: [ 84.822971][ T5926] console_owner --> &p->pi_lock --> &rq->__lock [ 84.822971][ T5926] [ 84.822995][ T5926] Possible unsafe locking scenario: [ 84.822995][ T5926] [ 84.823000][ T5926] CPU0 CPU1 [ 84.823003][ T5926] ---- ---- [ 84.823007][ T5926] lock(&rq->__lock); [ 84.823017][ T5926] lock(&p->pi_lock); [ 84.823028][ T5926] lock(&rq->__lock); [ 84.823038][ T5926] lock(console_owner); [ 84.823048][ T5926] [ 84.823048][ T5926] *** DEADLOCK *** [ 84.823048][ T5926] [ 84.823051][ T5926] 4 locks held by syz.0.20/5926: [ 84.823061][ T5926] #0: ffff88801d393aa0 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xaa/0x120 [ 84.823102][ T5926] #1: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 84.823149][ T5926] #2: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 84.823192][ T5926] #3: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 84.823235][ T5926] [ 84.823235][ T5926] stack backtrace: [ 84.823247][ T5926] CPU: 0 PID: 5926 Comm: syz.0.20 Not tainted syzkaller #0 [ 84.823264][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.823279][ T5926] Call Trace: [ 84.823285][ T5926] [ 84.823292][ T5926] dump_stack_lvl+0x18c/0x250 [ 84.823313][ T5926] ? load_image+0x420/0x420 [ 84.823329][ T5926] ? show_regs_print_info+0x20/0x20 [ 84.823352][ T5926] ? print_circular_bug+0x12b/0x1a0 [ 84.823374][ T5926] check_noncircular+0x2fc/0x400 [ 84.823398][ T5926] ? print_deadlock_bug+0x5d0/0x5d0 [ 84.823418][ T5926] ? lockdep_lock+0xf5/0x230 [ 84.823442][ T5926] __lock_acquire+0x37ef/0x7d80 [ 84.823472][ T5926] ? verify_lock_unused+0x140/0x140 [ 84.823502][ T5926] lock_acquire+0x19e/0x420 [ 84.823520][ T5926] ? console_flush_all+0x10b/0xcf0 [ 84.823544][ T5926] ? __lock_acquire+0x7d80/0x7d80 [ 84.823563][ T5926] ? do_raw_spin_lock+0x11f/0x2b0 [ 84.823585][ T5926] ? read_lock_is_recursive+0x20/0x20 [ 84.823605][ T5926] ? __rwlock_init+0x150/0x150 [ 84.823628][ T5926] ? do_raw_spin_unlock+0x121/0x230 [ 84.823652][ T5926] console_flush_all+0x676/0xcf0 [ 84.823672][ T5926] ? console_flush_all+0x10b/0xcf0 [ 84.823694][ T5926] ? console_flush_all+0x10b/0xcf0 [ 84.823719][ T5926] ? is_console_locked+0x20/0x20 [ 84.823739][ T5926] ? lock_chain_count+0x20/0x20 [ 84.823762][ T5926] console_unlock+0xad/0x350 [ 84.823784][ T5926] ? other_cpu_in_panic+0xf0/0xf0 [ 84.823804][ T5926] ? __lock_acquire+0x1336/0x7d80 [ 84.823827][ T5926] vprintk_emit+0x497/0x610 [ 84.823849][ T5926] ? printk_sprint+0x460/0x460 [ 84.823876][ T5926] _printk+0xde/0x130 [ 84.823894][ T5926] ? load_image+0x420/0x420 [ 84.823912][ T5926] ? find_bug+0xa5/0x3a0 [ 84.823931][ T5926] ? update_rq_clock+0x32e/0x4b0 [ 84.823956][ T5926] report_bug+0x34e/0x4f0 [ 84.823976][ T5926] ? update_rq_clock+0x32e/0x4b0 [ 84.823999][ T5926] ? update_rq_clock+0x32e/0x4b0 [ 84.824022][ T5926] ? update_rq_clock+0x330/0x4b0 [ 84.824045][ T5926] handle_bug+0xcf/0x120 [ 84.824065][ T5926] exc_invalid_op+0x1a/0x50 [ 84.824085][ T5926] asm_exc_invalid_op+0x1a/0x20 [ 84.824104][ T5926] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 84.824129][ T5926] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 f9 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 84.824144][ T5926] RSP: 0018:ffffc90004ec7540 EFLAGS: 00010046 [ 84.824163][ T5926] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 2a2bdb24edf30300 [ 84.824176][ T5926] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 84.824189][ T5926] RBP: ffffc90004ec7790 R08: ffff88802e9b7c27 R09: 0000000000000001 [ 84.824201][ T5926] R10: ffff88802e9b7c18 R11: ffffed1005d36f85 R12: ffffffff8ca97a38 [ 84.824215][ T5926] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 84.824237][ T5926] __schedule+0x2c72/0x4660 [ 84.824268][ T5926] ? asan.module_dtor+0x20/0x20 [ 84.824288][ T5926] ? mark_lock+0x94/0x320 [ 84.824309][ T5926] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 84.824333][ T5926] ? preempt_schedule_irq+0xb4/0x150 [ 84.824356][ T5926] preempt_schedule_irq+0xbf/0x150 [ 84.824378][ T5926] ? preempt_schedule_notrace+0x110/0x110 [ 84.824404][ T5926] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 84.824429][ T5926] irqentry_exit+0x67/0x70 [ 84.824451][ T5926] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.824472][ T5926] RIP: 0010:lock_acquire+0x208/0x420 [ 84.824492][ T5926] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 84.824506][ T5926] RSP: 0018:ffffc90004ec7900 EFLAGS: 00000206 [ 84.824520][ T5926] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 2a2bdb24edf30300 [ 84.824531][ T5926] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 84.824543][ T5926] RBP: ffffc90004ec7a08 R08: dffffc0000000000 R09: 1ffffffff223dea6 [ 84.824557][ T5926] R10: dffffc0000000000 R11: fffffbfff223dea7 R12: 1ffff920009d8f2c [ 84.824570][ T5926] R13: ffff88801d393aa0 R14: 0000000000000246 R15: dffffc0000000000 [ 84.824592][ T5926] ? __might_sleep+0xe0/0xe0 [ 84.824614][ T5926] ? read_lock_is_recursive+0x20/0x20 [ 84.824636][ T5926] ? verify_lock_unused+0x140/0x140 [ 84.824657][ T5926] ? __might_fault+0xaa/0x120 [ 84.824674][ T5926] __might_fault+0xc6/0x120 [ 84.824691][ T5926] ? __might_fault+0xaa/0x120 [ 84.824710][ T5926] _copy_from_user+0x2a/0xe0 [ 84.824728][ T5926] ___sys_recvmsg+0x174/0x590 [ 84.824750][ T5926] ? __sys_recvmsg+0x2a0/0x2a0 [ 84.824778][ T5926] ? __lock_acquire+0x7d80/0x7d80 [ 84.824800][ T5926] ? __might_fault+0xc6/0x120 [ 84.824817][ T5926] ? __might_fault+0xaa/0x120 [ 84.824835][ T5926] do_recvmmsg+0x377/0x810 [ 84.824858][ T5926] ? __sys_recvmmsg+0x290/0x290 [ 84.824882][ T5926] ? __ia32_sys_get_robust_list+0x110/0x110 [ 84.824907][ T5926] __x64_sys_recvmmsg+0x199/0x250 [ 84.824928][ T5926] ? do_recvmmsg+0x810/0x810 [ 84.824948][ T5926] ? lockdep_hardirqs_on+0x98/0x150 [ 84.824973][ T5926] do_syscall_64+0x55/0xb0 [ 84.824991][ T5926] ? clear_bhb_loop+0x40/0x90 [ 84.825011][ T5926] ? clear_bhb_loop+0x40/0x90 [ 84.825031][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.825051][ T5926] RIP: 0033:0x7f5602d9e159 [ 84.825069][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.825082][ T5926] RSP: 002b:00007f5603baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 84.825099][ T5926] RAX: ffffffffffffffda RBX: 00007f5603026090 RCX: 00007f5602d9e159 [ 84.825112][ T5926] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 84.825124][ T5926] RBP: 00007f5602e3503b R08: 0000000000000000 R09: 0000000000000000 [ 84.825135][ T5926] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 84.825145][ T5926] R13: 00007f5603026128 R14: 00007f5603026090 R15: 00007ffc26752e88 [ 84.825169][ T5926] [ 86.156239][ T5926] WARNING: CPU: 0 PID: 5926 at kernel/sched/sched.h:1370 update_rq_clock+0x32e/0x4b0 [ 86.165716][ T5926] Modules linked in: [ 86.169630][ T5926] CPU: 0 PID: 5926 Comm: syz.0.20 Not tainted syzkaller #0 [ 86.176826][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.186877][ T5926] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 86.192444][ T5926] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 f9 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 86.212049][ T5926] RSP: 0018:ffffc90004ec7540 EFLAGS: 00010046 [ 86.218115][ T5926] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 2a2bdb24edf30300 [ 86.226088][ T5926] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 86.234058][ T5926] RBP: ffffc90004ec7790 R08: ffff88802e9b7c27 R09: 0000000000000001 [ 86.242027][ T5926] R10: ffff88802e9b7c18 R11: ffffed1005d36f85 R12: ffffffff8ca97a38 [ 86.249997][ T5926] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 86.257971][ T5926] FS: 00007f5603baf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 86.266910][ T5926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.273502][ T5926] CR2: 00007f098cbbbff8 CR3: 0000000077428000 CR4: 00000000003506f0 [ 86.281475][ T5926] Call Trace: [ 86.284755][ T5926] [ 86.287694][ T5926] __schedule+0x2c72/0x4660 [ 86.292225][ T5926] ? asan.module_dtor+0x20/0x20 [ 86.297076][ T5926] ? mark_lock+0x94/0x320 [ 86.301409][ T5926] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 86.307398][ T5926] ? preempt_schedule_irq+0xb4/0x150 [ 86.312688][ T5926] preempt_schedule_irq+0xbf/0x150 [ 86.317804][ T5926] ? preempt_schedule_notrace+0x110/0x110 [ 86.323530][ T5926] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 86.329345][ T5926] irqentry_exit+0x67/0x70 [ 86.333767][ T5926] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.339751][ T5926] RIP: 0010:lock_acquire+0x208/0x420 [ 86.345062][ T5926] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 86.364665][ T5926] RSP: 0018:ffffc90004ec7900 EFLAGS: 00000206 [ 86.370733][ T5926] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 2a2bdb24edf30300 [ 86.378701][ T5926] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 86.386673][ T5926] RBP: ffffc90004ec7a08 R08: dffffc0000000000 R09: 1ffffffff223dea6 [ 86.394642][ T5926] R10: dffffc0000000000 R11: fffffbfff223dea7 R12: 1ffff920009d8f2c [ 86.402611][ T5926] R13: ffff88801d393aa0 R14: 0000000000000246 R15: dffffc0000000000 [ 86.410594][ T5926] ? __might_sleep+0xe0/0xe0 [ 86.415188][ T5926] ? read_lock_is_recursive+0x20/0x20 [ 86.420570][ T5926] ? verify_lock_unused+0x140/0x140 [ 86.425774][ T5926] ? __might_fault+0xaa/0x120 [ 86.430455][ T5926] __might_fault+0xc6/0x120 [ 86.434967][ T5926] ? __might_fault+0xaa/0x120 [ 86.439645][ T5926] _copy_from_user+0x2a/0xe0 [ 86.444235][ T5926] ___sys_recvmsg+0x174/0x590 [ 86.448926][ T5926] ? __sys_recvmsg+0x2a0/0x2a0 [ 86.453703][ T5926] ? __lock_acquire+0x7d80/0x7d80 [ 86.458733][ T5926] ? __might_fault+0xc6/0x120 [ 86.463410][ T5926] ? __might_fault+0xaa/0x120 [ 86.468086][ T5926] do_recvmmsg+0x377/0x810 [ 86.472525][ T5926] ? __sys_recvmmsg+0x290/0x290 [ 86.477390][ T5926] ? __ia32_sys_get_robust_list+0x110/0x110 [ 86.483295][ T5926] __x64_sys_recvmmsg+0x199/0x250 [ 86.488327][ T5926] ? do_recvmmsg+0x810/0x810 [ 86.492923][ T5926] ? lockdep_hardirqs_on+0x98/0x150 [ 86.498135][ T5926] do_syscall_64+0x55/0xb0 [ 86.502554][ T5926] ? clear_bhb_loop+0x40/0x90 [ 86.507234][ T5926] ? clear_bhb_loop+0x40/0x90 [ 86.511911][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.517814][ T5926] RIP: 0033:0x7f5602d9e159 [ 86.522233][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.541847][ T5926] RSP: 002b:00007f5603baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 86.550261][ T5926] RAX: ffffffffffffffda RBX: 00007f5603026090 RCX: 00007f5602d9e159 [ 86.558274][ T5926] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 86.566245][ T5926] RBP: 00007f5602e3503b R08: 0000000000000000 R09: 0000000000000000 [ 86.574215][ T5926] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 86.582183][ T5926] R13: 00007f5603026128 R14: 00007f5603026090 R15: 00007ffc26752e88 [ 86.590159][ T5926] [ 86.593176][ T5926] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.600454][ T5926] CPU: 0 PID: 5926 Comm: syz.0.20 Not tainted syzkaller #0 [ 86.607648][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.617700][ T5926] Call Trace: [ 86.620976][ T5926] [ 86.623931][ T5926] dump_stack_lvl+0x18c/0x250 [ 86.628627][ T5926] ? show_regs_print_info+0x20/0x20 [ 86.633828][ T5926] ? load_image+0x420/0x420 [ 86.638332][ T5926] panic+0x2ca/0x720 [ 86.642234][ T5926] ? bpf_jit_dump+0xd0/0xd0 [ 86.646750][ T5926] __warn+0x2e0/0x470 [ 86.650740][ T5926] ? update_rq_clock+0x32e/0x4b0 [ 86.655683][ T5926] ? update_rq_clock+0x32e/0x4b0 [ 86.660624][ T5926] report_bug+0x2be/0x4f0 [ 86.664955][ T5926] ? update_rq_clock+0x32e/0x4b0 [ 86.669897][ T5926] ? update_rq_clock+0x32e/0x4b0 [ 86.674845][ T5926] ? update_rq_clock+0x330/0x4b0 [ 86.679786][ T5926] handle_bug+0xcf/0x120 [ 86.684030][ T5926] exc_invalid_op+0x1a/0x50 [ 86.688533][ T5926] asm_exc_invalid_op+0x1a/0x20 [ 86.693387][ T5926] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 86.698941][ T5926] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 f9 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 86.718543][ T5926] RSP: 0018:ffffc90004ec7540 EFLAGS: 00010046 [ 86.724610][ T5926] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 2a2bdb24edf30300 [ 86.732690][ T5926] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 86.740697][ T5926] RBP: ffffc90004ec7790 R08: ffff88802e9b7c27 R09: 0000000000000001 [ 86.748669][ T5926] R10: ffff88802e9b7c18 R11: ffffed1005d36f85 R12: ffffffff8ca97a38 [ 86.756648][ T5926] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 86.764636][ T5926] __schedule+0x2c72/0x4660 [ 86.769165][ T5926] ? asan.module_dtor+0x20/0x20 [ 86.774018][ T5926] ? mark_lock+0x94/0x320 [ 86.778350][ T5926] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 86.784338][ T5926] ? preempt_schedule_irq+0xb4/0x150 [ 86.789625][ T5926] preempt_schedule_irq+0xbf/0x150 [ 86.794763][ T5926] ? preempt_schedule_notrace+0x110/0x110 [ 86.800490][ T5926] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 86.806300][ T5926] irqentry_exit+0x67/0x70 [ 86.810722][ T5926] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.816706][ T5926] RIP: 0010:lock_acquire+0x208/0x420 [ 86.821993][ T5926] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 86.841632][ T5926] RSP: 0018:ffffc90004ec7900 EFLAGS: 00000206 [ 86.847702][ T5926] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 2a2bdb24edf30300 [ 86.855677][ T5926] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 86.863646][ T5926] RBP: ffffc90004ec7a08 R08: dffffc0000000000 R09: 1ffffffff223dea6 [ 86.871617][ T5926] R10: dffffc0000000000 R11: fffffbfff223dea7 R12: 1ffff920009d8f2c [ 86.879585][ T5926] R13: ffff88801d393aa0 R14: 0000000000000246 R15: dffffc0000000000 [ 86.887565][ T5926] ? __might_sleep+0xe0/0xe0 [ 86.892160][ T5926] ? read_lock_is_recursive+0x20/0x20 [ 86.897540][ T5926] ? verify_lock_unused+0x140/0x140 [ 86.902738][ T5926] ? __might_fault+0xaa/0x120 [ 86.907415][ T5926] __might_fault+0xc6/0x120 [ 86.911917][ T5926] ? __might_fault+0xaa/0x120 [ 86.916595][ T5926] _copy_from_user+0x2a/0xe0 [ 86.921187][ T5926] ___sys_recvmsg+0x174/0x590 [ 86.925874][ T5926] ? __sys_recvmsg+0x2a0/0x2a0 [ 86.930646][ T5926] ? __lock_acquire+0x7d80/0x7d80 [ 86.935676][ T5926] ? __might_fault+0xc6/0x120 [ 86.940349][ T5926] ? __might_fault+0xaa/0x120 [ 86.945028][ T5926] do_recvmmsg+0x377/0x810 [ 86.949451][ T5926] ? __sys_recvmmsg+0x290/0x290 [ 86.954306][ T5926] ? __ia32_sys_get_robust_list+0x110/0x110 [ 86.960208][ T5926] __x64_sys_recvmmsg+0x199/0x250 [ 86.965231][ T5926] ? do_recvmmsg+0x810/0x810 [ 86.969826][ T5926] ? lockdep_hardirqs_on+0x98/0x150 [ 86.975035][ T5926] do_syscall_64+0x55/0xb0 [ 86.979452][ T5926] ? clear_bhb_loop+0x40/0x90 [ 86.984127][ T5926] ? clear_bhb_loop+0x40/0x90 [ 86.988803][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.994785][ T5926] RIP: 0033:0x7f5602d9e159 [ 86.999200][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.018805][ T5926] RSP: 002b:00007f5603baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 87.027226][ T5926] RAX: ffffffffffffffda RBX: 00007f5603026090 RCX: 00007f5602d9e159 [ 87.035201][ T5926] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 87.043173][ T5926] RBP: 00007f5602e3503b R08: 0000000000000000 R09: 0000000000000000 [ 87.051143][ T5926] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 87.059111][ T5926] R13: 00007f5603026128 R14: 00007f5603026090 R15: 00007ffc26752e88 [ 87.067088][ T5926] [ 87.070287][ T5926] Kernel Offset: disabled [ 87.074610][ T5926] Rebooting in 86400 seconds..