last executing test programs: 4m19.899091266s ago: executing program 0 (id=1): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 4m19.08406391s ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {&(0x7f0000000400)=""/32, 0x20}], 0x2}, 0x0) 4m2.598422684s ago: executing program 32 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {&(0x7f0000000400)=""/32, 0x20}], 0x2}, 0x0) 1m7.670448208s ago: executing program 4 (id=744): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r4, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x4, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6417}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m6.104102542s ago: executing program 4 (id=751): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1m3.97834961s ago: executing program 4 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0x8', 0x3) 1m3.010468928s ago: executing program 4 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) timer_create(0x0, 0x0, &(0x7f00000004c0)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0x100, 0x4, 0x0, 0x3, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r6}) 1m1.637801613s ago: executing program 4 (id=768): io_setup(0x6, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00004b8000/0x1000)=nil, 0x1000, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64d0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f000049d000/0x3000)=nil, 0x3000}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x4748, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xa00) sendmsg(r4, 0x0, 0x44880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) 57.243599495s ago: executing program 4 (id=771): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 41.057547211s ago: executing program 33 (id=771): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 24.80771384s ago: executing program 1 (id=858): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 22.279146449s ago: executing program 1 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) timer_create(0x0, 0x0, &(0x7f00000004c0)) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x100, 0x4, 0x0, 0x3, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r5, 0x2000) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="97fa9587e01e", @broadcast, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xdc, 0x3, 0x2}]}}, {{0x4e24, 0x4e24, 0x4, 0x1, 0xb, 0x0, 0x0, 0x5, 0x4, "5105a2", 0x8, 'iH9'}}}}}}, 0x0) 21.731812365s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000002000000b7040000000000008500000033000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 21.535048999s ago: executing program 1 (id=866): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x60}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 20.756294323s ago: executing program 3 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300", 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r4, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000480)=0xc) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) 20.063523928s ago: executing program 1 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 19.074334884s ago: executing program 3 (id=875): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsmount(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010003000000000004000100000000002000"], 0x1c, 0x2) 18.472429189s ago: executing program 1 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000500)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x1, 0x0) read(r0, &(0x7f0000000000)=""/1024, 0x400) write(r1, &(0x7f0000000000), 0x400) close(r0) 15.709968006s ago: executing program 2 (id=882): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r4, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x4, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6417}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) 10.609323947s ago: executing program 3 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x1}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 10.558027405s ago: executing program 6 (id=890): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 10.101449831s ago: executing program 2 (id=892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000002000000b7040000000000008500000033000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 9.227799902s ago: executing program 6 (id=893): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x401, 0x6}]}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 9.227545198s ago: executing program 2 (id=894): prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 8.969243083s ago: executing program 5 (id=895): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0x200, 0x5, 0x4, 0x1}, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.487076478s ago: executing program 6 (id=896): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7.221807408s ago: executing program 3 (id=897): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee615514da29a9fa215ad9", 0x9f}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xfffffff9}, {{0x0, 0x0, 0x0}, 0x816a}], 0x2, 0x20000020, 0x0) 7.063409597s ago: executing program 5 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000480)=0xc) 6.94594691s ago: executing program 6 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') write$char_usb(r0, &(0x7f0000000800)='(', 0x1) 6.47009207s ago: executing program 5 (id=900): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsmount(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010003000000000004000100000000002000"], 0x1c, 0x2) 5.261922131s ago: executing program 2 (id=901): getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, &(0x7f0000000400)) 4.983282952s ago: executing program 3 (id=902): syz_read_part_table(0x5f6, &(0x7f0000000000)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ptrace(0x10, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 4.685684472s ago: executing program 6 (id=903): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r4, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x4, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6417}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) 3.938017996s ago: executing program 2 (id=904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.81071362s ago: executing program 5 (id=905): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 3.066509769s ago: executing program 34 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000500)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x1, 0x0) read(r0, &(0x7f0000000000)=""/1024, 0x400) write(r1, &(0x7f0000000000), 0x400) close(r0) 3.003056735s ago: executing program 5 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) 989.896883ms ago: executing program 6 (id=908): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00007df000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000328000/0x2000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 986.211457ms ago: executing program 2 (id=909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x1}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 231.255126ms ago: executing program 3 (id=910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) listen(r1, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0x200, 0x5, 0x4, 0x1}, 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 5 (id=911): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000240)={0xe, 0x2}) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) kernel console output (not intermixed with test programs): 629] bridge_slave_1: entered promiscuous mode [ 96.214990][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.226362][ T5630] team0: Port device team_slave_1 added [ 96.285196][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.373094][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.396726][ T5631] team0: Port device team_slave_0 added [ 96.403481][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.410553][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.436476][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.451566][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.461553][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.468664][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.494623][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.509951][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.534534][ T5631] team0: Port device team_slave_1 added [ 96.540936][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.548066][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.574223][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.588330][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.598269][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.605270][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.631212][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.644792][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.668895][ T5634] team0: Port device team_slave_0 added [ 96.734523][ T5634] team0: Port device team_slave_1 added [ 96.754267][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.761237][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.787165][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.797931][ T5644] Bluetooth: hci1: command tx timeout [ 96.828982][ T5629] team0: Port device team_slave_0 added [ 96.860023][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.867221][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.877254][ T5644] Bluetooth: hci5: command tx timeout [ 96.893534][ T5647] Bluetooth: hci2: command tx timeout [ 96.899012][ T5644] Bluetooth: hci4: command tx timeout [ 96.904089][ T5635] Bluetooth: hci0: command tx timeout [ 96.904121][ T5635] Bluetooth: hci3: command tx timeout [ 96.905088][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.934710][ T5632] team0: Port device team_slave_0 added [ 96.943571][ T5632] team0: Port device team_slave_1 added [ 96.951120][ T5629] team0: Port device team_slave_1 added [ 97.029414][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.036351][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.062580][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.080900][ T5630] hsr_slave_0: entered promiscuous mode [ 97.087663][ T5630] hsr_slave_1: entered promiscuous mode [ 97.137945][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.144927][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.171322][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.202915][ T5633] hsr_slave_0: entered promiscuous mode [ 97.209437][ T5633] hsr_slave_1: entered promiscuous mode [ 97.215630][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 97.221472][ T5633] Cannot create hsr debugfs directory [ 97.228154][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.235154][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.261309][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.273183][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.280487][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.307567][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.360396][ T5631] hsr_slave_0: entered promiscuous mode [ 97.366920][ T5631] hsr_slave_1: entered promiscuous mode [ 97.373204][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 97.378965][ T5631] Cannot create hsr debugfs directory [ 97.385334][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.392732][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.418684][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.430545][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.437782][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.464151][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.708061][ T5634] hsr_slave_0: entered promiscuous mode [ 97.714622][ T5634] hsr_slave_1: entered promiscuous mode [ 97.721141][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 97.726909][ T5634] Cannot create hsr debugfs directory [ 97.815759][ T5632] hsr_slave_0: entered promiscuous mode [ 97.822264][ T5632] hsr_slave_1: entered promiscuous mode [ 97.828616][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 97.834337][ T5632] Cannot create hsr debugfs directory [ 97.913011][ T5629] hsr_slave_0: entered promiscuous mode [ 97.919827][ T5629] hsr_slave_1: entered promiscuous mode [ 97.926048][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 97.932388][ T5629] Cannot create hsr debugfs directory [ 98.482916][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.496698][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.521601][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.531947][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.540087][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.552050][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.560448][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.570617][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.653733][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.664758][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.673350][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.684898][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.693722][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.704157][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.712760][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.722647][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.837153][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.849906][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.861694][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.872848][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.880761][ T5644] Bluetooth: hci1: command tx timeout [ 98.898082][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.909539][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.917570][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.927717][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.956991][ T5644] Bluetooth: hci2: command tx timeout [ 98.957250][ T5653] Bluetooth: hci4: command tx timeout [ 98.957287][ T5653] Bluetooth: hci3: command tx timeout [ 98.962689][ T5647] Bluetooth: hci0: command tx timeout [ 98.968128][ T5635] Bluetooth: hci5: command tx timeout [ 99.071907][ T5631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.083057][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.106025][ T5631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.117289][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.136033][ T5631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.146091][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.154640][ T5631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.165311][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.183555][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.262267][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.307954][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.319995][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.329735][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.341408][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.356288][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.374262][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.385024][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.394126][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.406198][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.421953][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.446085][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.453531][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.504836][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.511995][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.521827][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.529033][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.567199][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.574377][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.650938][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.663165][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.684702][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.695125][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.720054][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.731524][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.751996][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.762313][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.789806][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.880020][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.956643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.963874][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.010064][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.017290][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.101483][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.241964][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.280491][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.340934][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.348176][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.378605][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.424992][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.432192][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.462003][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.486015][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.493201][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.515246][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.522453][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.678814][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.724565][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.731767][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.804778][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.812007][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.963302][ T5653] Bluetooth: hci1: command tx timeout [ 100.979744][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.038344][ T5653] Bluetooth: hci2: command tx timeout [ 101.043821][ T5635] Bluetooth: hci0: command tx timeout [ 101.049685][ T5637] Bluetooth: hci4: command tx timeout [ 101.050470][ T5647] Bluetooth: hci5: command tx timeout [ 101.062448][ T5644] Bluetooth: hci3: command tx timeout [ 101.355861][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.373452][ T5630] veth0_vlan: entered promiscuous mode [ 101.481970][ T5630] veth1_vlan: entered promiscuous mode [ 101.706292][ T5633] veth0_vlan: entered promiscuous mode [ 101.794463][ T5630] veth0_macvtap: entered promiscuous mode [ 101.825506][ T5633] veth1_vlan: entered promiscuous mode [ 101.844508][ T5630] veth1_macvtap: entered promiscuous mode [ 102.030811][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.098595][ T5633] veth0_macvtap: entered promiscuous mode [ 102.127651][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.182770][ T5633] veth1_macvtap: entered promiscuous mode [ 102.213840][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.270028][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.299301][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.333987][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.364170][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.391373][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.550571][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.583953][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.633141][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.695367][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.736196][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.754625][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.777471][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.786056][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.802287][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.810041][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.822255][ T5632] veth0_vlan: entered promiscuous mode [ 102.909552][ T5632] veth1_vlan: entered promiscuous mode [ 102.962768][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.988914][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.131778][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.165576][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.191516][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.193110][ T5629] veth0_vlan: entered promiscuous mode [ 103.215968][ T5632] veth0_macvtap: entered promiscuous mode [ 103.252635][ T5632] veth1_macvtap: entered promiscuous mode [ 103.263679][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.295796][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.315280][ T5629] veth1_vlan: entered promiscuous mode [ 103.457340][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.527121][ T5631] veth0_vlan: entered promiscuous mode [ 103.542857][ T5631] veth1_vlan: entered promiscuous mode [ 103.552619][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.586954][ T5629] veth0_macvtap: entered promiscuous mode [ 103.647748][ T5629] veth1_macvtap: entered promiscuous mode [ 103.661577][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.347831][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.451870][ T5634] veth0_vlan: entered promiscuous mode [ 104.472773][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.512415][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.524851][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.567792][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.582399][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.612312][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.669815][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 104.684454][ T5631] veth0_macvtap: entered promiscuous mode [ 104.765664][ T5634] veth1_vlan: entered promiscuous mode [ 104.794684][ T5631] veth1_macvtap: entered promiscuous mode [ 104.812412][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.822235][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.832034][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.872431][ T5866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.949427][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.983966][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.996126][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.043598][ T5634] veth0_macvtap: entered promiscuous mode [ 105.054871][ T5634] veth1_macvtap: entered promiscuous mode [ 105.219904][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.329740][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.364366][ T5866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.384860][ T5644] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 105.436022][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.446645][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.506509][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.539616][ T5866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.566961][ T5866] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.869971][ T5866] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.713635][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.762550][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.775092][ T5889] loop2: detected capacity change from 0 to 4096 [ 106.826169][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.849701][ T5889] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.124941][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.141435][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.149864][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.160242][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.171570][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.181744][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.189704][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.216096][ T5889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.202457][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.358597][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.396617][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.534946][ T5901] loop2: detected capacity change from 0 to 512 [ 108.555058][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.569600][ T5901] ======================================================= [ 108.569600][ T5901] WARNING: The mand mount option has been deprecated and [ 108.569600][ T5901] and is ignored by this kernel. Remove the mand [ 108.569600][ T5901] option from the mount to silence this warning. [ 108.569600][ T5901] ======================================================= [ 108.622227][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.647631][ T5905] loop5: detected capacity change from 0 to 512 [ 108.731243][ T5901] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.750129][ T5905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.836381][ T5901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.871288][ T5905] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.931331][ T5901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.979164][ T5901] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.081474][ T5901] EXT4-fs error (device loop2): ext4_get_first_dir_block:3544: inode #12: block 32: comm syz.2.15: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 109.135972][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.220699][ T5901] EXT4-fs (loop2): Remounting filesystem read-only [ 109.541046][ T5919] loop5: detected capacity change from 0 to 128 [ 109.557667][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.664051][ T5919] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 109.675013][ T5354] IPVS: starting estimator thread 0... [ 109.770607][ T5919] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 109.817988][ T5922] IPVS: using max 23 ests per chain, 55200 per kthread [ 109.841611][ T5919] FAT-fs (loop5): Filesystem has been set read-only [ 110.151703][ T5930] syzkaller0: entered promiscuous mode [ 110.188035][ T5930] syzkaller0: entered allmulticast mode [ 110.374453][ T5932] tipc: Started in network mode [ 110.404053][ T5932] tipc: Node identity 56d8a5106f6b, cluster identity 4711 [ 110.503712][ T5932] tipc: Enabled bearer , priority 0 [ 110.852250][ T5939] tipc: Resetting bearer [ 111.641186][ T5929] tipc: Resetting bearer [ 113.128873][ T5929] tipc: Disabling bearer [ 113.504328][ T5354] tipc: Node number set to 968074512 [ 114.556453][ T5971] sock: sock_timestamping_bind_phc: sock not bind to device [ 114.672841][ T5971] zram0: detected capacity change from 0 to 8 [ 114.807125][ T5977] loop4: detected capacity change from 0 to 512 [ 114.869081][ T5977] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.957669][ T5981] loop2: detected capacity change from 0 to 8 [ 115.269750][ T5981] SQUASHFS error: zlib decompression failed, data probably corrupt [ 115.278530][ T5981] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.287173][ T5981] SQUASHFS error: zlib decompression failed, data probably corrupt [ 115.295443][ T5981] SQUASHFS error: Failed to read block 0x4df: -5 [ 115.305390][ T5981] SQUASHFS error: zlib decompression failed, data probably corrupt [ 115.313753][ T5981] SQUASHFS error: Failed to read block 0x4e0: -5 [ 115.333878][ T5981] SQUASHFS error: zlib decompression failed, data probably corrupt [ 115.343178][ T5981] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.475385][ T31] audit: type=1800 audit(1785196735.697:2): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.32" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 115.763665][ T5977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.076120][ T5977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.205804][ T5977] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.962315][ T5992] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 117.419945][ T5991] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.605277][ T10] IPVS: starting estimator thread 0... [ 117.708808][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.726967][ T5993] IPVS: using max 22 ests per chain, 52800 per kthread [ 117.842765][ T5995] loop3: detected capacity change from 0 to 1024 [ 117.905862][ T5998] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 119.491068][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.314311][ T6012] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 120.332978][ T6012] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.351633][ T6012] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.364921][ T6012] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.364921][ T6012] [ 120.374636][ T6012] EXT4-fs (loop3): Total free blocks count 0 [ 120.380684][ T6012] EXT4-fs (loop3): Free/Dirty block details [ 120.386616][ T6012] EXT4-fs (loop3): free_blocks=20480 [ 120.391989][ T6012] EXT4-fs (loop3): dirty_blocks=80 [ 120.399439][ T6012] EXT4-fs (loop3): Block reservation details [ 120.405439][ T6012] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 120.426322][ T6015] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 121.072089][ T5630] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 121.328408][ T6024] loop4: detected capacity change from 0 to 512 [ 121.437857][ T6024] EXT4-fs (loop4): unsupported inode size: 0 [ 121.484488][ T6024] EXT4-fs (loop4): blocksize: 2048 [ 122.168190][ T6032] loop4: detected capacity change from 0 to 512 [ 122.302727][ T6032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.381892][ T6032] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.577742][ T6032] EXT4-fs (loop4): shut down requested (2) [ 122.701978][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.717459][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.728508][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.743117][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.755139][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.838028][ T6047] loop5: detected capacity change from 0 to 512 [ 122.845734][ T6047] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.935507][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.983067][ T6047] EXT4-fs (loop5): Test dummy encryption mode enabled [ 123.043567][ T6047] EXT4-fs (loop5): orphan cleanup on readonly fs [ 123.115414][ T6047] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.52: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 123.237017][ T6047] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.246886][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 123.263167][ C1] EXT4-fs (loop5): initial error at time 1785196743: ext4_xattr_inode_update_ref:1037: inode 11 [ 123.273715][ C1] EXT4-fs (loop5): last error at time 1785196743: ext4_xattr_inode_update_ref:1037: inode 11 [ 123.297226][ T6047] EXT4-fs (loop5): Remounting filesystem read-only [ 123.324041][ T6047] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.5.52: ea_inode dec ref err=-117 [ 123.364915][ T6047] EXT4-fs (loop5): 1 orphan inode deleted [ 123.400574][ T6047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 123.617837][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.808880][ T6061] loop4: detected capacity change from 0 to 4096 [ 123.854591][ T5872] Set syz1 is full, maxelem 65536 reached [ 124.075570][ T6061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.798128][ T5644] Bluetooth: hci6: command tx timeout [ 126.051728][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.887249][ T5644] Bluetooth: hci6: command tx timeout [ 128.956971][ T5644] Bluetooth: hci6: command tx timeout [ 129.134538][ T6114] loop1: detected capacity change from 0 to 2048 [ 129.234756][ T6114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.275665][ T6114] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.076661][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.207402][ T9] IPVS: starting estimator thread 0... [ 130.279283][ T6133] loop3: detected capacity change from 0 to 512 [ 130.327095][ T6134] IPVS: using max 23 ests per chain, 55200 per kthread [ 130.339193][ T6133] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.389582][ T6133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.439540][ T6133] EXT4-fs (loop3): 1 truncate cleaned up [ 130.452663][ T6133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.695130][ T1173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.735313][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.047060][ T5644] Bluetooth: hci6: command tx timeout [ 131.138375][ T6163] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.249391][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.489756][ T6178] Zero length message leads to an empty skb [ 132.550283][ T6178] loop1: detected capacity change from 0 to 512 [ 132.996955][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.458732][ T6187] loop1: detected capacity change from 0 to 256 [ 134.289977][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.316499][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.341472][ T6033] bridge_slave_0: entered allmulticast mode [ 134.396000][ T6033] bridge_slave_0: entered promiscuous mode [ 134.501952][ T1173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.574651][ T6208] loop1: detected capacity change from 0 to 4096 [ 134.574670][ T6205] syzkaller0: entered promiscuous mode [ 134.574702][ T6205] syzkaller0: entered allmulticast mode [ 134.599743][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.618012][ T6208] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.638767][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.657884][ T6033] bridge_slave_1: entered allmulticast mode [ 134.681543][ T6208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.686215][ T6033] bridge_slave_1: entered promiscuous mode [ 134.715813][ T6208] Quota error (device loop1): do_check_range: Getting block 150994949 out of range 1-5 [ 134.744877][ T6208] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 134.754433][ T6208] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.94: Failed to acquire dquot type 0 [ 134.769787][ T6208] EXT4-fs (loop1): Remounting filesystem read-only [ 134.862535][ T6219] sock: sock_timestamping_bind_phc: sock not bind to device [ 134.872110][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.127010][ T1173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.470640][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.496996][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.667494][ T6229] loop5: detected capacity change from 0 to 256 [ 135.724715][ T1173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.875133][ T6230] Character devices: [ 135.875133][ T6230] 1 mem [ 135.875133][ T6230] 2 pty [ 135.875133][ T6230] 3 ttyp [ 135.875133][ T6230] 4 /dev/vc/0 [ 135.875133][ T6230] 4 tty [ 135.875133][ T6230] 4 ttyS [ 135.875133][ T6230] 5 /dev/tty [ 135.875133][ T6230] 5 /dev/console [ 135.875133][ T6230] 5 /dev/ptmx [ 135.875133][ T6230] 5 ttyprintk [ 135.875133][ T6230] 7 vcs [ 135.875133][ T6230] 9 st [ 135.875133][ T6230] 10 misc [ 135.875133][ T6230] 13 input [ 135.875133][ T6230] 14 sound [ 135.875133][ T6230] 21 sg [ 135.875133][ T6230] 29 fb [ 135.875133][ T6230] 81 video4linux [ 135.875133][ T6230] 89 i2c [ 135.875133][ T6230] 90 mtd [ 135.875133][ T6230] 98 comedi [ 135.875133][ T6230] 108 ppp [ 135.875133][ T6230] 116 alsa [ 135.875133][ T6230] 128 ptm [ 135.875133][ T6230] 136 pts [ 135.875133][ T6230] 152 aoechr [ 135.875133][ T6230] 166 ttyACM [ 135.875133][ T6230] 180 usb [ 135.875133][ T6230] 188 ttyUSB [ 135.875133][ T6230] 189 usb_device [ 135.875133][ T6230] 202 cpu/msr [ 135.875133][ T6230] 203 cpu/cpuid [ 135.875133][ T6230] 212 DVB [ 135.875133][ T6230] 216 rfcomm [ 135.875133][ T6230] 226 drm [ 135.875133][ T6230] 231 infiniband_mad [ 135.875133][ T6230] 231 infiniband_verbs [ 135.875133][ T6230] 234 mei [ 135.875133][ T6230] 235 ublk-char [ 135.875133][ T6230] 236 ttynull [ 135.875133][ T6230] 237 noz [ 135.875133][ T6230] 238 gsmtty [ 135.875133][ T6230] 239 bsg [ 135.875133][ T6230] 240 pvfs2-req [ 135.875133][ T6230] 241 counter [ 135.875133][ T6230] 242 tee [ 135.875133][ T6230] 243 iio [ 135.875133][ T6230] 244 ptp [ 135.875133][ T6230] 245 pps [ 135.875133][ T6230] 246 cec [ 135.875133][ T6230] 247 media [ 135.875133][ T6230] 248 rtc [ 135.875133][ T6230] 249 dma_heap [ 135.875133][ T6230] 250 dax [ 135.875133][ T6230] 251 dimmctl [ 135.875133][ T6230] 252 ndctl [ 135.875133][ T6230] 253 tpm [ 135.875133][ T6230] 254 gpiochip [ 135.875133][ T6230] 494 gnss [ 135.947811][ T6234] loop1: detected capacity change from 0 to 512 [ 136.247596][ T6033] team0: Port device team_slave_0 added [ 136.257288][ T6033] team0: Port device team_slave_1 added [ 136.371443][ T6234] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.98: corrupted in-inode xattr: e_value size too large [ 136.400037][ T6234] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.402861][ T6234] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.98: couldn't read orphan inode 15 (err -117) [ 136.412176][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 136.412226][ C0] EXT4-fs (loop1): initial error at time 1785196756: ext4_iget_extra_inode:5179: inode 15 [ 136.412288][ C0] EXT4-fs (loop1): last error at time 1785196756: ext4_iget_extra_inode:5179: inode 15 [ 136.509163][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.511726][ T6234] loop1: lost filesystem error report for type 5 error -117 [ 136.556197][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.572387][ T6234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.706973][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.780592][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.812964][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.933144][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.268147][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.498727][ T6033] hsr_slave_0: entered promiscuous mode [ 137.772276][ T6033] hsr_slave_1: entered promiscuous mode [ 137.821707][ T6033] debugfs: 'hsr0' already exists in 'hsr' [ 138.788788][ T6033] Cannot create hsr debugfs directory [ 139.758551][ T6279] loop4: detected capacity change from 0 to 512 [ 139.779766][ T1173] bridge_slave_1: left allmulticast mode [ 139.812960][ T6279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.834381][ T1173] bridge_slave_1: left promiscuous mode [ 139.906144][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.953926][ T6279] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.056089][ T1173] bridge_slave_0: left allmulticast mode [ 140.085204][ T1173] bridge_slave_0: left promiscuous mode [ 140.109233][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.338706][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.527686][ T6291] Character devices: [ 140.527686][ T6291] 1 mem [ 140.527686][ T6291] 2 pty [ 140.527686][ T6291] 3 ttyp [ 140.527686][ T6291] 4 /dev/vc/0 [ 140.527686][ T6291] 4 tty [ 140.527686][ T6291] 4 ttyS [ 140.527686][ T6291] 5 /dev/tty [ 140.527686][ T6291] 5 /dev/console [ 140.527686][ T6291] 5 /dev/ptmx [ 140.527686][ T6291] 5 ttyprintk [ 140.527686][ T6291] 7 vcs [ 140.527686][ T6291] 9 st [ 140.527686][ T6291] 10 misc [ 140.527686][ T6291] 13 input [ 140.527686][ T6291] 14 sound [ 140.527686][ T6291] 21 sg [ 140.527686][ T6291] 29 fb [ 140.527686][ T6291] 81 video4linux [ 140.527686][ T6291] 89 i2c [ 140.527686][ T6291] 90 mtd [ 140.527686][ T6291] 98 comedi [ 140.527686][ T6291] 108 ppp [ 140.527686][ T6291] 116 alsa [ 140.527686][ T6291] 128 ptm [ 140.527686][ T6291] 136 pts [ 140.527686][ T6291] 152 aoechr [ 140.527686][ T6291] 166 ttyACM [ 140.527686][ T6291] 180 usb [ 140.527686][ T6291] 188 ttyUSB [ 140.527686][ T6291] 189 usb_device [ 140.527686][ T6291] 202 cpu/msr [ 140.527686][ T6291] 203 cpu/cpuid [ 140.527686][ T6291] 212 DVB [ 140.527686][ T6291] 216 rfcomm [ 140.527686][ T6291] 226 drm [ 140.527686][ T6291] 231 infiniband_mad [ 140.527686][ T6291] 231 infiniband_verbs [ 140.527686][ T6291] 234 mei [ 140.527686][ T6291] 235 ublk-char [ 140.527686][ T6291] 236 ttynull [ 140.527686][ T6291] 237 noz [ 140.527686][ T6291] 238 gsmtty [ 140.527686][ T6291] 239 bsg [ 140.527686][ T6291] 240 pvfs2-req [ 140.527686][ T6291] 241 counter [ 140.527686][ T6291] 242 tee [ 140.527686][ T6291] 243 iio [ 140.527686][ T6291] 244 ptp [ 140.527686][ T6291] 245 pps [ 140.527686][ T6291] 246 cec [ 140.527686][ T6291] 247 media [ 140.527686][ T6291] 248 rtc [ 140.527686][ T6291] 249 dma_heap [ 140.527686][ T6291] 250 dax [ 140.527686][ T6291] 251 dimmctl [ 140.527686][ T6291] 252 ndctl [ 140.527686][ T6291] 253 tpm [ 140.527686][ T6291] 254 gpiochip [ 140.527686][ T6291] 494 gnss [ 140.668684][ T6295] loop4: detected capacity change from 0 to 256 [ 142.281030][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.326147][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.344605][ T1173] bond0 (unregistering): Released all slaves [ 143.567622][ T6326] loop2: detected capacity change from 0 to 1024 [ 143.583356][ T6326] EXT4-fs: Ignoring removed bh option [ 144.084917][ T6326] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.511271][ T6326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 144.521687][ T6326] System zones: 0-1, 3-12 [ 144.815485][ T6326] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.128: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.832651][ T6326] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 144.836435][ T6326] EXT4-fs (loop2): Remounting filesystem read-only [ 144.845591][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 144.845624][ C1] EXT4-fs (loop2): initial error at time 1785196765: ext4_map_blocks:833: inode 3: block 1 [ 144.845691][ C1] EXT4-fs (loop2): last error at time 1785196765: ext4_map_blocks:833: inode 3: block 1 [ 144.879272][ T6326] Quota error (device loop2): write_blk: dquota write failed [ 144.886944][ T6326] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 144.897622][ T6326] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 144.907966][ T6326] EXT4-fs (loop2): 1 orphan inode deleted [ 144.916332][ T6326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.298236][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.311758][ T6331] loop1: detected capacity change from 0 to 2048 [ 147.544871][ T6365] loop1: detected capacity change from 0 to 256 [ 148.157439][ T6371] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 151.154338][ T6392] capability: warning: `syz.3.146' uses deprecated v2 capabilities in a way that may be insecure [ 152.365380][ T6033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.495841][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.582223][ T6033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.666431][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.714232][ T6033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.105939][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.004654][ T1173] hsr_slave_0: left promiscuous mode [ 154.058792][ T1173] hsr_slave_1: left promiscuous mode [ 154.081926][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.253273][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.340859][ T6430] loop3: detected capacity change from 0 to 256 [ 154.351006][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.410898][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.471048][ T6433] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.112199][ T6434] loop1: detected capacity change from 0 to 256 [ 155.156983][ T1173] veth1_macvtap: left promiscuous mode [ 155.190794][ T1173] veth0_macvtap: left promiscuous mode [ 155.217187][ T1173] veth1_vlan: left promiscuous mode [ 155.243280][ T1173] veth0_vlan: left promiscuous mode [ 155.697800][ T5644] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 155.707178][ T5644] Bluetooth: hci1: Injecting HCI hardware error event [ 155.719821][ T5647] Bluetooth: hci1: hardware error 0x00 [ 156.619955][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 156.709580][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 157.050225][ T6033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.068808][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.077318][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 157.090076][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 158.054681][ T5647] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 159.306838][ T6481] loop4: detected capacity change from 0 to 256 [ 160.366535][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.475612][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.561288][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.568589][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.702680][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.709977][ T6181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.024792][ T6505] zram0: detected capacity change from 8 to 0 [ 161.585944][ T6517] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.782992][ T6537] loop2: detected capacity change from 0 to 256 [ 162.804304][ T6539] Bluetooth: MGMT ver 1.23 [ 163.946349][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 164.797798][ T6570] loop2: detected capacity change from 0 to 512 [ 164.984085][ T6570] EXT4-fs (loop2): 1 orphan inode deleted [ 164.992187][ T6570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.004818][ T6570] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.356330][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.454563][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.938346][ T6594] loop3: detected capacity change from 0 to 256 [ 168.412827][ T6033] veth0_vlan: entered promiscuous mode [ 168.511951][ T6033] veth1_vlan: entered promiscuous mode [ 168.894205][ T6033] veth0_macvtap: entered promiscuous mode [ 168.912516][ T6033] veth1_macvtap: entered promiscuous mode [ 169.851894][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.894570][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.105332][ T1164] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.159035][ T141] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.172681][ T6648] loop2: detected capacity change from 0 to 256 [ 170.184307][ T141] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.274738][ T141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.333128][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.218'. [ 170.659475][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.755098][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.038593][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.119562][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.130808][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.044616][ T6697] loop3: detected capacity change from 0 to 256 [ 175.318802][ T6702] loop6: detected capacity change from 0 to 2048 [ 175.574339][ T6702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.925356][ T6702] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.454038][ T6725] loop1: detected capacity change from 0 to 256 [ 176.466410][ T6033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.777195][ T6726] loop3: detected capacity change from 0 to 2048 [ 176.949234][ T6726] ext4: Unknown parameter 'nouser_xattr' [ 177.666635][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 180.748578][ T6783] loop4: detected capacity change from 0 to 256 [ 183.952693][ T6831] sock: sock_timestamping_bind_phc: sock not bind to device [ 184.337404][ T6831] zram0: detected capacity change from 0 to 8 [ 186.513238][ T6876] sock: sock_timestamping_bind_phc: sock not bind to device [ 186.589992][ T6877] zram: Cannot change disksize for initialized device [ 188.664391][ T6910] configfs-gadget.g1 gadget.0: HOST MAC 86:06:db:4c:ce:b0 [ 188.714771][ T6910] configfs-gadget.g1 gadget.0: MAC 0e:9f:15:20:05:4e [ 189.949524][ T6917] loop4: detected capacity change from 0 to 1024 [ 190.108050][ T6917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.934215][ T6933] sock: sock_timestamping_bind_phc: sock not bind to device [ 190.973413][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.992844][ T6933] zram: Cannot change disksize for initialized device [ 192.757269][ T6959] none [ 193.210344][ T6971] loop6: detected capacity change from 0 to 2048 [ 193.231968][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.241042][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.297714][ T6971] ext4: Unknown parameter 'nouser_xattr' [ 194.449407][ T6980] sock: sock_timestamping_bind_phc: sock not bind to device [ 194.626898][ T6980] zram: Cannot change disksize for initialized device [ 195.941133][ T6992] loop6: detected capacity change from 0 to 128 [ 196.032456][ T6992] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 196.567747][ T6999] loop1: detected capacity change from 0 to 2048 [ 196.634252][ T7008] none [ 196.725267][ T6999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.789627][ T6999] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.090974][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.804596][ T7033] loop1: detected capacity change from 0 to 2048 [ 197.837173][ T7033] ext4: Unknown parameter 'nouser_xattr' [ 199.315504][ T7057] loop4: detected capacity change from 0 to 256 [ 202.243857][ T7093] loop6: detected capacity change from 0 to 2048 [ 202.269126][ T7093] EXT4-fs: Ignoring removed oldalloc option [ 203.083809][ T7105] loop1: detected capacity change from 0 to 2048 [ 203.284218][ T7093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.307568][ T7105] loop1: p2 < > p3 < p5 > p4 [ 203.345588][ T7105] loop1: partition table partially beyond EOD, truncated [ 203.417740][ T7105] loop1: p2 start 4278190080 is beyond EOD, truncated [ 203.643261][ T7105] loop1: p4 size 8192 extends beyond EOD, truncated [ 203.760125][ T7105] loop1: p5 size 8192 extends beyond EOD, truncated [ 204.064314][ T7127] loop3: detected capacity change from 0 to 256 [ 204.131218][ T6033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.276971][ T6747] udevd[6747]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 204.337622][ T5746] udevd[5746]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 204.735878][ T5745] udevd[5745]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 209.889923][ T7182] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.711055][ T7199] loop6: detected capacity change from 0 to 1024 [ 211.726667][ T7199] EXT4-fs: Ignoring removed bh option [ 212.089843][ T7199] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.118373][ T7199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 212.127519][ T7199] System zones: 0-1, 3-12 [ 212.423184][ T7199] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.383: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.437628][ T7199] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 212.455526][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 212.471073][ C1] EXT4-fs (loop6): initial error at time 1786769697: ext4_map_blocks:833: inode 3: block 1 [ 212.481164][ C1] EXT4-fs (loop6): last error at time 1786769697: ext4_map_blocks:833: inode 3: block 1 [ 212.708162][ T7199] EXT4-fs (loop6): Remounting filesystem read-only [ 212.715250][ T7199] Quota error (device loop6): write_blk: dquota write failed [ 212.723139][ T7199] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 212.734184][ T7199] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 212.745035][ T7199] EXT4-fs (loop6): 1 orphan inode deleted [ 212.770889][ T7199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.149497][ T6033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.171720][ T7208] loop3: detected capacity change from 0 to 2048 [ 214.379945][ T7208] ext4: Unknown parameter 'nouser_xattr' [ 215.294923][ T7220] loop2: detected capacity change from 0 to 128 [ 215.310248][ T7220] EXT4-fs: Ignoring removed nobh option [ 215.636586][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 215.642766][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 215.649056][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 215.659557][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 215.871111][ T7220] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.938145][ T7220] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.115302][ T5774] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 217.171510][ T5759] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 217.503435][ T5759] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 217.668383][ T5632] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.864511][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.553820][ T5774] usb 6-1: unable to get BOS descriptor or descriptor too short [ 218.567625][ T7255] qrtr: Invalid version 7 [ 218.574101][ T5774] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 218.585997][ T5774] usb 6-1: can't read configurations, error -71 [ 219.464704][ T7269] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.568659][ T5759] usb 4-1: config 0 descriptor?? [ 220.398874][ T5759] usb 4-1: Cannot read MAC address [ 220.407906][ T5759] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 222.332554][ T5759] usb 4-1: USB disconnect, device number 2 [ 223.729902][ T7294] loop4: detected capacity change from 0 to 2048 [ 223.881105][ T7294] loop4: p2 < > p3 < p5 > p4 [ 223.934408][ T7294] loop4: partition table partially beyond EOD, truncated [ 223.986194][ T7294] loop4: p2 start 4278190080 is beyond EOD, truncated [ 224.026245][ T7294] loop4: p4 size 8192 extends beyond EOD, truncated [ 225.067227][ T7294] loop4: p5 size 8192 extends beyond EOD, truncated [ 225.748752][ T4988] loop4: p2 < > p3 < p5 > p4 [ 225.788374][ T4988] loop4: partition table partially beyond EOD, truncated [ 225.831757][ T4988] loop4: p2 start 4278190080 is beyond EOD, truncated [ 225.886344][ T4988] loop4: p4 size 8192 extends beyond EOD, truncated [ 225.961539][ T4988] loop4: p5 size 8192 extends beyond EOD, truncated [ 227.070826][ T4988] loop4: p2 < > p3 < p5 > p4 [ 227.088734][ T4988] loop4: partition table partially beyond EOD, truncated [ 227.114446][ T4988] loop4: p2 start 4278190080 is beyond EOD, truncated [ 227.153233][ T4988] loop4: p4 size 8192 extends beyond EOD, truncated [ 227.189437][ T4988] loop4: p5 size 8192 extends beyond EOD, truncated [ 228.176279][ T7335] loop1: detected capacity change from 0 to 1024 [ 228.235902][ T7335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.657227][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.455882][ T7347] »»»»»»: renamed from vlan0 (while UP) [ 230.388160][ T5644] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 230.398124][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 230.398168][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.398192][ T5644] Workqueue: hci3 hci_rx_work [ 230.398237][ T5644] Call Trace: [ 230.398249][ T5644] [ 230.398262][ T5644] dump_stack_lvl+0x100/0x190 [ 230.398307][ T5644] sysfs_warn_dup.cold+0x1c/0x28 [ 230.398365][ T5644] sysfs_create_dir_ns+0x24b/0x2b0 [ 230.398417][ T5644] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 230.398466][ T5644] ? find_held_lock+0x2b/0x80 [ 230.398521][ T5644] ? kobject_add_internal+0x25f/0x930 [ 230.398581][ T5644] ? kobject_add_internal+0x25f/0x930 [ 230.398643][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.398693][ T5644] ? do_raw_spin_unlock+0x145/0x1e0 [ 230.398747][ T5644] kobject_add_internal+0x2c8/0x930 [ 230.398815][ T5644] kobject_add+0x16a/0x1e0 [ 230.398881][ T5644] ? __pfx_kobject_add+0x10/0x10 [ 230.398938][ T5644] ? class_to_subsys+0x10f/0x150 [ 230.399004][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.399050][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.399094][ T5644] ? kobject_put+0xb9/0x640 [ 230.399147][ T5644] ? _raw_spin_unlock+0x28/0x50 [ 230.399199][ T5644] device_add+0x294/0x1970 [ 230.399258][ T5644] ? __pfx_dev_set_name+0x10/0x10 [ 230.399298][ T5644] ? __pfx_device_add+0x10/0x10 [ 230.399357][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.399401][ T5644] ? mgmt_send_event_skb+0x2fb/0x460 [ 230.399460][ T5644] hci_conn_add_sysfs+0x1a3/0x260 [ 230.399515][ T5644] le_conn_complete_evt+0x11eb/0x1f60 [ 230.399573][ T5644] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 230.399616][ T5644] ? hci_event_packet+0x186/0xcd0 [ 230.399657][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.399715][ T5644] hci_le_conn_complete_evt+0x23c/0x3a0 [ 230.399763][ T5644] ? skb_pull_data+0x15f/0x1e0 [ 230.399829][ T5644] hci_le_meta_evt+0x34a/0x5f0 [ 230.399878][ T5644] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 230.399931][ T5644] hci_event_packet+0x51c/0xcd0 [ 230.399975][ T5644] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 230.400025][ T5644] ? __pfx_hci_event_packet+0x10/0x10 [ 230.400071][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.400118][ T5644] ? kcov_remote_start+0x384/0x670 [ 230.400158][ T5644] ? lockdep_hardirqs_on+0x78/0x100 [ 230.400203][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.400259][ T5644] hci_rx_work+0x451/0xfc0 [ 230.400311][ T5644] process_one_work+0xa23/0x1940 [ 230.400368][ T5644] ? __pfx_process_one_work+0x10/0x10 [ 230.400403][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.400463][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.400515][ T5644] worker_thread+0x5ef/0xe50 [ 230.400570][ T5644] ? kthread+0x13a/0x450 [ 230.400626][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 230.400660][ T5644] kthread+0x370/0x450 [ 230.400717][ T5644] ? __pfx_kthread+0x10/0x10 [ 230.400783][ T5644] ret_from_fork+0x72b/0xd50 [ 230.400844][ T5644] ? __pfx_ret_from_fork+0x10/0x10 [ 230.400892][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.400936][ T5644] ? rcu_is_watching+0x12/0xc0 [ 230.400990][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.401034][ T5644] ? __switch_to+0x800/0x10f0 [ 230.401093][ T5644] ? __switch_to_asm+0x39/0x70 [ 230.401145][ T5644] ? __pfx_kthread+0x10/0x10 [ 230.401206][ T5644] ret_from_fork_asm+0x1a/0x30 [ 230.401282][ T5644] [ 230.734027][ T5644] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 230.748373][ T5644] Bluetooth: hci3: failed to register connection device [ 230.872565][ T7362] loop2: detected capacity change from 0 to 512 [ 231.187517][ T7362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.221605][ T7362] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.506065][ T7384] syzkaller0: entered promiscuous mode [ 231.544237][ T7384] syzkaller0: entered allmulticast mode [ 231.605391][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.643323][ T7384] TC_ACT_REPEAT abuse ? [ 231.716234][ T7392] FAULT_INJECTION: forcing a failure. [ 231.716234][ T7392] name fail_futex, interval 1, probability 0, space 0, times 1 [ 231.772137][ T7392] CPU: 1 UID: 0 PID: 7392 Comm: syz.5.440 Not tainted syzkaller #0 PREEMPT(full) [ 231.772184][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 231.772206][ T7392] Call Trace: [ 231.772217][ T7392] [ 231.772231][ T7392] dump_stack_lvl+0x100/0x190 [ 231.772278][ T7392] should_fail_ex.cold+0x5/0xa [ 231.772313][ T7392] ? __lock_acquire+0x49f/0x1a40 [ 231.772360][ T7392] get_futex_key+0x1d2/0x14f0 [ 231.772412][ T7392] ? __pfx_get_futex_key+0x10/0x10 [ 231.772456][ T7392] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.772500][ T7392] ? lock_acquire+0x1b9/0x370 [ 231.772541][ T7392] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.772597][ T7392] futex_wake+0xf4/0x5e0 [ 231.772665][ T7392] ? __pfx_futex_wake+0x10/0x10 [ 231.772720][ T7392] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.772767][ T7392] ? find_held_lock+0x2b/0x80 [ 231.772830][ T7392] ? exit_mm_release+0x19/0x30 [ 231.772874][ T7392] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.772931][ T7392] do_futex+0x2b2/0x440 [ 231.772982][ T7392] ? __pfx_do_futex+0x10/0x10 [ 231.773028][ T7392] ? __might_fault+0xc5/0x140 [ 231.773092][ T7392] mm_release+0x24a/0x2f0 [ 231.773136][ T7392] do_exit+0x707/0x2ae0 [ 231.773192][ T7392] ? signal_wake_up_state+0xa8/0x130 [ 231.773253][ T7392] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.773299][ T7392] ? __pfx_do_exit+0x10/0x10 [ 231.773350][ T7392] ? do_group_exit+0x1bd/0x2a0 [ 231.773407][ T7392] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.773450][ T7392] ? rcu_is_watching+0x12/0xc0 [ 231.773511][ T7392] do_group_exit+0xd5/0x2a0 [ 231.773571][ T7392] __x64_sys_exit_group+0x3e/0x50 [ 231.773627][ T7392] x64_sys_call+0x102c/0x1530 [ 231.773677][ T7392] do_syscall_64+0x115/0x870 [ 231.773730][ T7392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.773768][ T7392] RIP: 0033:0x7fa158d9de99 [ 231.773802][ T7392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.773836][ T7392] RSP: 002b:00007ffeb76faf48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 231.773871][ T7392] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa158d9de99 [ 231.773894][ T7392] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.773916][ T7392] RBP: 00007ffeb76fafac R08: 0000000000000000 R09: 00000000000927c0 [ 231.773939][ T7392] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000044 [ 231.773961][ T7392] R13: 00000000000927c0 R14: 0000000000038c2f R15: 00007ffeb76fb000 [ 231.774009][ T7392] [ 234.941535][ T5647] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 234.951532][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 234.951578][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 234.951602][ T5647] Workqueue: hci0 hci_rx_work [ 234.951649][ T5647] Call Trace: [ 234.951661][ T5647] [ 234.951675][ T5647] dump_stack_lvl+0x100/0x190 [ 234.951720][ T5647] sysfs_warn_dup.cold+0x1c/0x28 [ 234.951778][ T5647] sysfs_create_dir_ns+0x24b/0x2b0 [ 234.951831][ T5647] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 234.951881][ T5647] ? find_held_lock+0x2b/0x80 [ 234.951938][ T5647] ? kobject_add_internal+0x25f/0x930 [ 234.951998][ T5647] ? kobject_add_internal+0x25f/0x930 [ 234.952062][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.952107][ T5647] ? do_raw_spin_unlock+0x145/0x1e0 [ 234.952163][ T5647] kobject_add_internal+0x2c8/0x930 [ 234.952231][ T5647] kobject_add+0x16a/0x1e0 [ 234.952290][ T5647] ? __pfx_kobject_add+0x10/0x10 [ 234.952354][ T5647] ? class_to_subsys+0x10f/0x150 [ 234.952421][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.952469][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.952513][ T5647] ? kobject_put+0xb9/0x640 [ 234.952567][ T5647] ? _raw_spin_unlock+0x28/0x50 [ 234.952618][ T5647] device_add+0x294/0x1970 [ 234.952678][ T5647] ? __pfx_dev_set_name+0x10/0x10 [ 234.952719][ T5647] ? __pfx_device_add+0x10/0x10 [ 234.952779][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.952828][ T5647] ? mgmt_send_event_skb+0x2fb/0x460 [ 234.952888][ T5647] hci_conn_add_sysfs+0x1a3/0x260 [ 234.952944][ T5647] le_conn_complete_evt+0x11eb/0x1f60 [ 234.953003][ T5647] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 234.953046][ T5647] ? hci_event_packet+0x186/0xcd0 [ 234.953086][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.953145][ T5647] hci_le_conn_complete_evt+0x23c/0x3a0 [ 234.953192][ T5647] ? skb_pull_data+0x15f/0x1e0 [ 234.953235][ T5647] hci_le_meta_evt+0x34a/0x5f0 [ 234.953285][ T5647] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 234.953345][ T5647] hci_event_packet+0x51c/0xcd0 [ 234.953390][ T5647] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 234.953448][ T5647] ? __pfx_hci_event_packet+0x10/0x10 [ 234.953494][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.953542][ T5647] ? kcov_remote_start+0x384/0x670 [ 234.953583][ T5647] ? lockdep_hardirqs_on+0x78/0x100 [ 234.953628][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.953684][ T5647] hci_rx_work+0x451/0xfc0 [ 234.953739][ T5647] process_one_work+0xa23/0x1940 [ 234.953797][ T5647] ? __pfx_process_one_work+0x10/0x10 [ 234.953832][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.953893][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.953946][ T5647] worker_thread+0x5ef/0xe50 [ 234.954001][ T5647] ? kthread+0x13a/0x450 [ 234.954057][ T5647] ? __pfx_worker_thread+0x10/0x10 [ 234.954092][ T5647] kthread+0x370/0x450 [ 234.954149][ T5647] ? __pfx_kthread+0x10/0x10 [ 234.954212][ T5647] ret_from_fork+0x72b/0xd50 [ 234.954265][ T5647] ? __pfx_ret_from_fork+0x10/0x10 [ 234.954323][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.954369][ T5647] ? __switch_to+0x800/0x10f0 [ 234.954428][ T5647] ? __switch_to_asm+0x39/0x70 [ 234.954480][ T5647] ? __pfx_kthread+0x10/0x10 [ 234.954542][ T5647] ret_from_fork_asm+0x1a/0x30 [ 234.954620][ T5647] [ 234.954684][ T5647] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 235.300916][ T5647] Bluetooth: hci0: failed to register connection device [ 235.652599][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 235.903463][ T7450] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 235.945990][ T7450] overlayfs: failed to set xattr on upper [ 235.981779][ T31] audit: type=1326 audit(1787294009.428:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.461" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ff019de99 code=0x0 [ 236.023510][ T7454] loop4: detected capacity change from 0 to 512 [ 236.043917][ T7450] overlayfs: ...falling back to redirect_dir=nofollow. [ 236.118677][ T7456] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.564973][ T7450] overlayfs: ...falling back to index=off. [ 236.580251][ T7454] EXT4-fs (loop4): Test dummy encryption mode enabled [ 236.659687][ T7450] overlayfs: ...falling back to uuid=null. [ 236.668336][ T7454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.810247][ T7454] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.465: bad orphan inode 16 [ 236.833836][ T7454] loop4: lost filesystem error report for type 5 error -117 [ 236.834318][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 236.848136][ C1] EXT4-fs (loop4): initial error at time 1787294010: ext4_orphan_get:1425 [ 236.856736][ C1] EXT4-fs (loop4): last error at time 1787294010: ext4_orphan_get:1425 [ 236.881570][ T7454] ext4_test_bit(bit=15, block=4) = 0 [ 236.937801][ T7454] EXT4-fs (loop4): 1 orphan inode deleted [ 236.998000][ T7454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.438895][ T5647] Bluetooth: hci3: command 0x0406 tx timeout [ 239.245011][ T5745] udevd[5745]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 239.264285][ T7235] udevd[7235]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 239.313860][ T5871] udevd[5871]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 239.629767][ T5647] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 239.640112][ T5647] CPU: 1 UID: 0 PID: 5647 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 239.640157][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 239.640182][ T5647] Workqueue: hci2 hci_rx_work [ 239.640228][ T5647] Call Trace: [ 239.640239][ T5647] [ 239.640252][ T5647] dump_stack_lvl+0x100/0x190 [ 239.640297][ T5647] sysfs_warn_dup.cold+0x1c/0x28 [ 239.640354][ T5647] sysfs_create_dir_ns+0x24b/0x2b0 [ 239.640406][ T5647] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 239.640455][ T5647] ? find_held_lock+0x2b/0x80 [ 239.640511][ T5647] ? kobject_add_internal+0x25f/0x930 [ 239.640571][ T5647] ? kobject_add_internal+0x25f/0x930 [ 239.640633][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.640678][ T5647] ? do_raw_spin_unlock+0x145/0x1e0 [ 239.640732][ T5647] kobject_add_internal+0x2c8/0x930 [ 239.640799][ T5647] kobject_add+0x16a/0x1e0 [ 239.640864][ T5647] ? __pfx_kobject_add+0x10/0x10 [ 239.640921][ T5647] ? class_to_subsys+0x10f/0x150 [ 239.640986][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.641034][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.641082][ T5647] ? kobject_put+0xb9/0x640 [ 239.641139][ T5647] ? _raw_spin_unlock+0x28/0x50 [ 239.641193][ T5647] device_add+0x294/0x1970 [ 239.641252][ T5647] ? __pfx_dev_set_name+0x10/0x10 [ 239.641292][ T5647] ? __pfx_device_add+0x10/0x10 [ 239.641350][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.641394][ T5647] ? mgmt_send_event_skb+0x2fb/0x460 [ 239.641453][ T5647] hci_conn_add_sysfs+0x1a3/0x260 [ 239.641508][ T5647] le_conn_complete_evt+0x11eb/0x1f60 [ 239.641566][ T5647] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 239.641608][ T5647] ? hci_event_packet+0x186/0xcd0 [ 239.641648][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.641706][ T5647] hci_le_conn_complete_evt+0x23c/0x3a0 [ 239.641753][ T5647] ? skb_pull_data+0x15f/0x1e0 [ 239.641794][ T5647] hci_le_meta_evt+0x34a/0x5f0 [ 239.641849][ T5647] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 239.641901][ T5647] hci_event_packet+0x51c/0xcd0 [ 239.641946][ T5647] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 239.641996][ T5647] ? __pfx_hci_event_packet+0x10/0x10 [ 239.642041][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.642089][ T5647] ? kcov_remote_start+0x384/0x670 [ 239.642129][ T5647] ? lockdep_hardirqs_on+0x78/0x100 [ 239.642174][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.642229][ T5647] hci_rx_work+0x451/0xfc0 [ 239.642287][ T5647] process_one_work+0xa23/0x1940 [ 239.642345][ T5647] ? __pfx_process_one_work+0x10/0x10 [ 239.642380][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.642440][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.642492][ T5647] worker_thread+0x5ef/0xe50 [ 239.642547][ T5647] ? kthread+0x13a/0x450 [ 239.642602][ T5647] ? __pfx_worker_thread+0x10/0x10 [ 239.642636][ T5647] kthread+0x370/0x450 [ 239.642692][ T5647] ? __pfx_kthread+0x10/0x10 [ 239.642753][ T5647] ret_from_fork+0x72b/0xd50 [ 239.642804][ T5647] ? __pfx_ret_from_fork+0x10/0x10 [ 239.642861][ T5647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.642906][ T5647] ? __switch_to+0x800/0x10f0 [ 239.642965][ T5647] ? __switch_to_asm+0x39/0x70 [ 239.643016][ T5647] ? __pfx_kthread+0x10/0x10 [ 239.643077][ T5647] ret_from_fork_asm+0x1a/0x30 [ 239.643153][ T5647] [ 239.723532][ T7465] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, [ 239.763022][ T5647] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 239.767469][ T7465] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 239.772719][ T5647] Bluetooth: hci2: failed to register connection device [ 240.088350][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.157585][ T5745] udevd[5745]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 240.169856][ T7236] udevd[7236]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 240.205822][ T6747] udevd[6747]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 240.536498][ T5746] udevd[5746]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 240.537669][ T5745] udevd[5745]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 240.602671][ T6747] udevd[6747]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 240.646401][ T7501] input: syz1 as /devices/virtual/input/input6 [ 241.033261][ T7517] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.531263][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 242.011298][ T7529] file system registered [ 242.607052][ T5630] ffs_data_put(): freeing [ 243.366831][ T7508] loop6: detected capacity change from 0 to 512 [ 243.428128][ T7508] EXT4-fs (loop6): orphan cleanup on readonly fs [ 243.445985][ T7508] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.480: bg 0: block 63: padding at end of block bitmap is not set [ 243.472910][ T7508] loop6: lost filesystem error report for type 5 error -117 [ 243.479577][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 243.493502][ C0] EXT4-fs (loop6): initial error at time 1787294016: ext4_validate_block_bitmap:440 [ 243.502975][ C0] EXT4-fs (loop6): last error at time 1787294016: ext4_validate_block_bitmap:440 [ 243.531162][ T7508] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.480: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 243.653144][ T7565] loop4: detected capacity change from 0 to 1024 [ 243.672765][ T7508] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 243.677898][ T7508] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.6.480: ea_inode dec ref err=-117 [ 243.788122][ T7508] EXT4-fs (loop6): 1 orphan inode deleted [ 243.796431][ T7508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 243.811335][ T7565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.828049][ T7569] loop1: detected capacity change from 0 to 512 [ 244.304676][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.542853][ T6033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.753646][ T5635] Bluetooth: hci6: command 0x0406 tx timeout [ 246.157613][ T5647] Bluetooth: hci2: command 0x0406 tx timeout [ 246.298071][ T5354] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 246.522610][ T5354] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 246.552841][ T5354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.618955][ T7624] sock: sock_timestamping_bind_phc: sock not bind to device [ 246.637649][ T5354] usb 2-1: config 0 descriptor?? [ 246.668364][ T7624] zram: Cannot change disksize for initialized device [ 248.539088][ T5354] usb 2-1: Cannot set autoneg [ 248.553139][ T5354] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 248.569300][ T7669] sock: sock_timestamping_bind_phc: sock not bind to device [ 248.651239][ T7672] zram: Cannot change disksize for initialized device [ 248.867946][ T5354] usb 2-1: USB disconnect, device number 2 [ 249.917265][ T7683] loop4: detected capacity change from 0 to 4096 [ 249.992041][ T7683] EXT4-fs (loop4): Test dummy encryption mode enabled [ 251.061808][ T7683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.527696][ T7683] Quota error (device loop4): do_check_range: Getting block 150994949 out of range 1-5 [ 251.658349][ T7683] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 252.173717][ T7683] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.541: Failed to acquire dquot type 0 [ 252.228104][ T7683] EXT4-fs (loop4): Remounting filesystem read-only [ 252.655425][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.196021][ T31] audit: type=1800 audit(1787294026.730:4): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.550" name="idVendor" dev="configfs" ino=15511 res=0 errno=0 [ 253.337980][ T31] audit: type=1800 audit(1787294026.770:5): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.550" name="UDC" dev="configfs" ino=15514 res=0 errno=0 [ 253.398819][ T31] audit: type=1800 audit(1787294026.780:6): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.550" name="idProduct" dev="configfs" ino=15510 res=0 errno=0 [ 253.402119][ T7723] loop6: detected capacity change from 0 to 8 [ 253.572205][ T7723] SQUASHFS error: Failed to read block 0x4de: -5 [ 253.591984][ T7729] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.609540][ T7723] SQUASHFS error: Failed to read block 0x4de: -5 [ 253.640865][ T7729] zram: Cannot change disksize for initialized device [ 253.654405][ T31] audit: type=1800 audit(1787294027.192:7): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.551" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 253.891010][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.897501][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.086985][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.093719][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.100284][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.106908][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.113377][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.120234][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.126781][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.134748][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.141413][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.149302][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.155858][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.162540][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.169086][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.176417][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.183297][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.189906][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.196525][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.203193][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.209774][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.216420][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.222964][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.229580][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.236138][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.242720][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.249390][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.255979][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.262514][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.269154][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.276428][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.283352][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.289952][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.296548][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.303095][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.844218][ T7747] loop1: detected capacity change from 0 to 2048 [ 254.917989][ T7747] loop1: p2 < > p3 < p5 > p4 [ 254.939390][ T7747] loop1: partition table partially beyond EOD, truncated [ 254.968321][ T7747] loop1: p2 start 4278190080 is beyond EOD, truncated [ 255.022600][ T7747] loop1: p4 size 8192 extends beyond EOD, truncated [ 255.127257][ T7747] loop1: p5 size 8192 extends beyond EOD, truncated [ 256.781639][ T7771] loop1: detected capacity change from 0 to 4096 [ 256.815914][ T7236] udevd[7236]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 256.864935][ T7771] EXT4-fs (loop1): Test dummy encryption mode enabled [ 256.988523][ T7771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.132514][ T7771] Quota error (device loop1): do_check_range: Getting block 150994949 out of range 1-5 [ 257.175465][ T7771] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 257.296795][ T7771] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.564: Failed to acquire dquot type 0 [ 257.391925][ T7771] EXT4-fs (loop1): Remounting filesystem read-only [ 257.579177][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.645869][ T7789] sock: sock_timestamping_bind_phc: sock not bind to device [ 257.716974][ T7789] zram: Cannot change disksize for initialized device [ 257.743062][ T7791] option changes via remount are deprecated (pid=7790 comm=syz.2.570) [ 259.694515][ T7819] loop1: detected capacity change from 0 to 512 [ 259.788848][ T7819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.838176][ T7819] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.347272][ T5644] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 260.442289][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.479351][ T7849] syzkaller1: entered promiscuous mode [ 262.516501][ T7849] syzkaller1: entered allmulticast mode [ 262.530217][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.017280][ T7883] loop4: detected capacity change from 0 to 512 [ 264.024889][ T7883] ext4: Bad value for 'sb' [ 266.198666][ T7910] loop2: detected capacity change from 0 to 128 [ 266.247113][ T7910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 266.263045][ T7910] System zones: 1-3, 19-19, 35-36 [ 266.284003][ T7915] loop4: detected capacity change from 0 to 512 [ 266.314573][ T7910] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 266.315165][ T7915] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.616: inode has both inline data and extents flags [ 266.332341][ T7917] sock: sock_timestamping_bind_phc: sock not bind to device [ 266.342290][ T7915] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.348857][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 266.364475][ C0] EXT4-fs (loop4): initial error at time 1787294039: ext4_orphan_get:1399: inode 15 [ 266.374036][ C0] EXT4-fs (loop4): last error at time 1787294039: ext4_orphan_get:1399: inode 15 [ 266.383434][ T7915] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.616: couldn't read orphan inode 15 (err -117) [ 266.395521][ T7915] loop4: lost filesystem error report for type 5 error -117 [ 266.401797][ T7920] zram: Cannot change disksize for initialized device [ 266.429582][ T7915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.456325][ T7910] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.776149][ T31] audit: type=1804 audit(1787294040.321:8): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.614" name="/newroot/111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=12 res=1 errno=0 [ 267.028733][ T5632] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.138960][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.643021][ T7951] sock: sock_timestamping_bind_phc: sock not bind to device [ 267.694026][ T7951] zram: Cannot change disksize for initialized device [ 267.892820][ T7953] loop1: detected capacity change from 0 to 2048 [ 267.940954][ T7953] ext4: Unknown parameter 'nouser_xattr' [ 269.663946][ T7994] sock: sock_timestamping_bind_phc: sock not bind to device [ 269.854448][ T7994] zram: Cannot change disksize for initialized device [ 270.262465][ T8010] loop3: detected capacity change from 0 to 256 [ 271.721770][ T8021] loop5: detected capacity change from 0 to 2048 [ 272.154798][ T8021] ext4: Unknown parameter 'nouser_xattr' [ 275.528260][ T31] audit: type=1326 audit(1787294048.882:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.3.685" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06dbd9de99 code=0x0 [ 279.773739][ T8123] loop6: detected capacity change from 0 to 512 [ 279.782443][ T5644] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 279.792656][ T5644] CPU: 1 UID: 0 PID: 5644 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 279.792702][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 279.792726][ T5644] Workqueue: hci6 hci_rx_work [ 279.792772][ T5644] Call Trace: [ 279.792783][ T5644] [ 279.792798][ T5644] dump_stack_lvl+0x100/0x190 [ 279.792843][ T5644] sysfs_warn_dup.cold+0x1c/0x28 [ 279.792900][ T5644] sysfs_create_dir_ns+0x24b/0x2b0 [ 279.792953][ T5644] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 279.793003][ T5644] ? find_held_lock+0x2b/0x80 [ 279.793060][ T5644] ? kobject_add_internal+0x25f/0x930 [ 279.793120][ T5644] ? kobject_add_internal+0x25f/0x930 [ 279.793183][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.793229][ T5644] ? do_raw_spin_unlock+0x145/0x1e0 [ 279.793284][ T5644] kobject_add_internal+0x2c8/0x930 [ 279.793361][ T5644] kobject_add+0x16a/0x1e0 [ 279.793457][ T5644] ? __pfx_kobject_add+0x10/0x10 [ 279.793515][ T5644] ? class_to_subsys+0x10f/0x150 [ 279.793582][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.793629][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.793679][ T5644] ? kobject_put+0xb9/0x640 [ 279.793732][ T5644] ? _raw_spin_unlock+0x28/0x50 [ 279.793783][ T5644] device_add+0x294/0x1970 [ 279.793843][ T5644] ? __pfx_dev_set_name+0x10/0x10 [ 279.793883][ T5644] ? __pfx_device_add+0x10/0x10 [ 279.793943][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.793988][ T5644] ? mgmt_send_event_skb+0x2fb/0x460 [ 279.794048][ T5644] hci_conn_add_sysfs+0x1a3/0x260 [ 279.794103][ T5644] le_conn_complete_evt+0x11eb/0x1f60 [ 279.794162][ T5644] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 279.794206][ T5644] ? hci_event_packet+0x186/0xcd0 [ 279.794246][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.794304][ T5644] hci_le_conn_complete_evt+0x23c/0x3a0 [ 279.794358][ T5644] ? skb_pull_data+0x15f/0x1e0 [ 279.794401][ T5644] hci_le_meta_evt+0x34a/0x5f0 [ 279.794451][ T5644] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 279.794504][ T5644] hci_event_packet+0x51c/0xcd0 [ 279.794549][ T5644] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 279.794599][ T5644] ? __pfx_hci_event_packet+0x10/0x10 [ 279.794645][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.794693][ T5644] ? kcov_remote_start+0x384/0x670 [ 279.794734][ T5644] ? lockdep_hardirqs_on+0x78/0x100 [ 279.794779][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.794836][ T5644] hci_rx_work+0x451/0xfc0 [ 279.794890][ T5644] process_one_work+0xa23/0x1940 [ 279.794948][ T5644] ? __pfx_process_one_work+0x10/0x10 [ 279.794983][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.795044][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.795096][ T5644] worker_thread+0x5ef/0xe50 [ 279.795152][ T5644] ? kthread+0x13a/0x450 [ 279.795208][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 279.795243][ T5644] kthread+0x370/0x450 [ 279.795300][ T5644] ? __pfx_kthread+0x10/0x10 [ 279.795369][ T5644] ret_from_fork+0x72b/0xd50 [ 279.795423][ T5644] ? __pfx_ret_from_fork+0x10/0x10 [ 279.795472][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.795517][ T5644] ? rcu_is_watching+0x12/0xc0 [ 279.795570][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.795615][ T5644] ? __switch_to+0x800/0x10f0 [ 279.795674][ T5644] ? __switch_to_asm+0x39/0x70 [ 279.795727][ T5644] ? __pfx_kthread+0x10/0x10 [ 279.795789][ T5644] ret_from_fork_asm+0x1a/0x30 [ 279.795865][ T5644] [ 279.796038][ T5644] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 280.080036][ T8123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.089971][ T5644] Bluetooth: hci6: failed to register connection device [ 280.169830][ T8123] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.289275][ T6033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.417389][ T8174] loop1: detected capacity change from 0 to 128 [ 282.633805][ T8174] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 282.696861][ T8174] hpfs: filesystem error: improperly stopped [ 282.719062][ T8174] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 283.169063][ T8174] hpfs: You really don't want any checks? You are crazy... [ 283.242612][ T8174] hpfs: Code page index out of array [ 283.269408][ T8174] hpfs: code page support is disabled [ 283.310174][ T8174] hpfs: hpfs_map_4sectors(): unaligned read [ 283.331584][ T8179] loop6: detected capacity change from 0 to 2048 [ 283.359924][ T8174] hpfs: hpfs_map_4sectors(): unaligned read [ 283.389588][ T8179] ext4: Unknown parameter 'nouser_xattr' [ 283.413752][ T8174] hpfs: filesystem error: unable to find root dir [ 284.275601][ T8188] loop4: detected capacity change from 0 to 512 [ 284.296842][ T8190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.366801][ T8188] EXT4-fs (loop4): orphan cleanup on readonly fs [ 284.411409][ T8188] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.716: bg 0: block 63: padding at end of block bitmap is not set [ 284.480426][ T8188] loop4: lost filesystem error report for type 5 error -117 [ 284.482729][ T8188] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 284.490211][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 284.490243][ C0] EXT4-fs (loop4): initial error at time 1787294058: ext4_validate_block_bitmap:440 [ 284.490284][ C0] EXT4-fs (loop4): last error at time 1787294058: ext4_validate_block_bitmap:440 [ 284.647854][ T8188] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.716: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 284.705451][ T8188] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 284.706117][ T8188] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.716: ea_inode dec ref err=-117 [ 284.775016][ T8188] EXT4-fs (loop4): 1 orphan inode deleted [ 284.795764][ T8188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 285.724374][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.192506][ T8211] loop5: detected capacity change from 0 to 512 [ 286.306327][ T5647] Bluetooth: hci6: command 0x0406 tx timeout [ 286.833977][ T8211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.329240][ T8211] ext4 filesystem being mounted at /110/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.645830][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.725'. [ 291.392450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 294.189850][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.446690][ T8250] MPI: mpi too large (113288 bits) [ 295.331976][ T8256] loop3: detected capacity change from 0 to 512 [ 295.532578][ T8256] EXT4-fs (loop3): orphan cleanup on readonly fs [ 295.648441][ T8256] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.738: bg 0: block 63: padding at end of block bitmap is not set [ 295.822144][ T8256] loop3: lost filesystem error report for type 5 error -117 [ 295.829555][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 295.843443][ C1] EXT4-fs (loop3): initial error at time 1787294069: ext4_validate_block_bitmap:440 [ 295.853056][ C1] EXT4-fs (loop3): last error at time 1787294069: ext4_validate_block_bitmap:440 [ 295.873163][ T8256] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.738: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 295.931596][ T8256] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.936929][ T8256] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.738: ea_inode dec ref err=-117 [ 296.015640][ T8256] EXT4-fs (loop3): 1 orphan inode deleted [ 296.051545][ T8256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 296.196215][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.564202][ T8280] bridge_slave_0: left allmulticast mode [ 297.327360][ T8280] bridge_slave_0: left promiscuous mode [ 297.376093][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.498644][ T5354] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 297.596331][ T8280] bridge_slave_1: left allmulticast mode [ 297.646288][ T8280] bridge_slave_1: left promiscuous mode [ 297.693447][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.781857][ T8280] bond0: (slave bond_slave_0): Releasing backup interface [ 297.871434][ T8280] bond0: (slave bond_slave_1): Releasing backup interface [ 297.974829][ T8280] team0: Port device team_slave_0 removed [ 298.066318][ T8280] team0: Port device team_slave_1 removed [ 298.096480][ T8280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.144741][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.440726][ T8280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.457966][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.498893][ T8280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 299.297060][ T5354] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 299.326779][ T5354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.419786][ T8303] loop5: detected capacity change from 0 to 164 [ 299.614106][ T8303] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 299.682624][ T5354] usb 3-1: can't set config #1, error -71 [ 299.703448][ T5354] usb 3-1: USB disconnect, device number 2 [ 300.333305][ T8309] loop2: detected capacity change from 0 to 512 [ 300.409583][ T8309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 300.530318][ T8309] EXT4-fs (loop2): 1 truncate cleaned up [ 300.540555][ T8309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.584783][ T8309] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 300.609755][ T8309] EXT4-fs (loop2): Remounting filesystem read-only [ 300.669379][ T8309] overlayfs: failed to verify upper root origin [ 300.762973][ T8320] loop6: detected capacity change from 0 to 512 [ 300.913351][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.925271][ T8320] EXT4-fs (loop6): orphan cleanup on readonly fs [ 300.952886][ T8320] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.761: bg 0: block 63: padding at end of block bitmap is not set [ 301.025563][ T8320] loop6: lost filesystem error report for type 5 error -117 [ 301.027993][ T8320] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.761: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 301.050319][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 301.050356][ C1] EXT4-fs (loop6): initial error at time 1787294074: ext4_validate_block_bitmap:440 [ 301.050400][ C1] EXT4-fs (loop6): last error at time 1787294074: ext4_validate_block_bitmap:440 [ 301.115925][ T8320] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 301.154746][ T8320] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.6.761: ea_inode dec ref err=-117 [ 301.280707][ T8320] EXT4-fs (loop6): 1 orphan inode deleted [ 301.353611][ T8320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 301.583618][ T8332] configfs-gadget.g1 gadget.0: HOST MAC 66:94:f1:d8:ba:15 [ 301.591856][ T8332] configfs-gadget.g1 gadget.0: MAC e2:1d:1d:81:be:d7 [ 306.333023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 306.439969][ T6033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.742593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 310.096193][ T8366] loop6: detected capacity change from 0 to 256 [ 310.205626][ T8366] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 310.215998][ T8366] FAT-fs (loop6): Filesystem has been set read-only [ 310.750430][ T8367] none [ 312.265909][ T8376] Bluetooth: MGMT ver 1.23 [ 315.459809][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.468312][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.125923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 320.399824][ T8421] loop1: detected capacity change from 0 to 4096 [ 320.625187][ T5645] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 320.774685][ T5645] usb 6-1: Using ep0 maxpacket: 16 [ 320.804107][ T5645] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 320.806540][ T8421] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 320.827802][ T5645] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.869027][ T5645] usb 6-1: Product: syz [ 320.889970][ T5645] usb 6-1: Manufacturer: syz [ 320.915354][ T5645] usb 6-1: SerialNumber: syz [ 320.960769][ T5645] usb 6-1: config 0 descriptor?? [ 321.004313][ T5645] usb 6-1: selecting invalid altsetting 1 [ 321.027270][ T5645] technisat-usb2: could not set alternate setting to 0 [ 321.185852][ T5645] technisat-usb2: firmware version: 0.0 [ 321.208804][ T5645] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 321.662474][ T5645] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.733346][ T5645] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 321.804451][ T8424] technisat-usb2: i2c-error: out failed 00 = -22 [ 322.762377][ T5645] usb 6-1: media controller created [ 322.768444][ T5645] technisat-usb2: i2c-error: out failed 53 = -22 [ 322.775372][ T5645] dvb-usb: MAC address reading failed. [ 322.797009][ T5645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.990259][ T8450] loop1: detected capacity change from 0 to 512 [ 323.064651][ T8450] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 323.242773][ T8450] EXT4-fs (loop1): 1 truncate cleaned up [ 323.317420][ T8450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.532168][ T8450] overlayfs: failed to resolve './bus': -2 [ 324.671823][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.698166][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.707944][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.717938][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.728839][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.784277][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.247501][ T5645] DVB: Unable to find symbol stv090x_attach() [ 325.315784][ T5645] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 325.662447][ T5645] rc_core: IR keymap rc-technisat-usb2 not found [ 325.694065][ T5645] Registered IR keymap rc-empty [ 325.805549][ T8487] loop5: detected capacity change from 0 to 128 [ 325.867400][ T5645] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 325.889975][ T5645] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input7 [ 326.269445][ T5645] dvb-usb: schedule remote query interval to 100 msecs. [ 326.278472][ T5645] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 326.309533][ T5645] usb 6-1: USB disconnect, device number 4 [ 326.388597][ T5797] dvb-usb: error -19 while querying for an remote control event. [ 326.853969][ T5644] Bluetooth: hci4: command tx timeout [ 326.859760][ T5645] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 326.896362][ T6388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.147700][ T8512] loop1: detected capacity change from 0 to 4096 [ 327.190373][ T8522] SET target dimension over the limit! [ 327.196053][ T8512] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 327.220995][ T6388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.443398][ T8512] ntfs3(loop1): ino=19, mi_enum_attr [ 327.466378][ T8512] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 327.523848][ T8523] »»»»»»: renamed from vlan0 (while UP) [ 328.590363][ T31] audit: type=1800 audit(1787294102.209:10): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.806" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 328.591993][ T6388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.931281][ T5644] Bluetooth: hci4: command tx timeout [ 329.290451][ T6388] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.622267][ T8551] Character devices: [ 329.622267][ T8551] 1 mem [ 329.622267][ T8551] 2 pty [ 329.622267][ T8551] 3 ttyp [ 329.622267][ T8551] 4 /dev/vc/0 [ 329.622267][ T8551] 4 tty [ 329.622267][ T8551] 4 ttyS [ 329.622267][ T8551] 5 /dev/tty [ 329.622267][ T8551] 5 /dev/console [ 329.622267][ T8551] 5 /dev/ptmx [ 329.622267][ T8551] 5 ttyprintk [ 329.622267][ T8551] 7 vcs [ 329.622267][ T8551] 9 st [ 329.622267][ T8551] 10 misc [ 329.622267][ T8551] 13 input [ 329.622267][ T8551] 14 sound [ 329.622267][ T8551] 21 sg [ 329.622267][ T8551] 29 fb [ 329.622267][ T8551] 81 video4linux [ 329.622267][ T8551] 89 i2c [ 329.622267][ T8551] 90 mtd [ 329.622267][ T8551] 98 comedi [ 329.622267][ T8551] 108 ppp [ 329.622267][ T8551] 116 alsa [ 329.622267][ T8551] 128 ptm [ 329.622267][ T8551] 136 pts [ 329.622267][ T8551] 152 aoechr [ 329.622267][ T8551] 166 ttyACM [ 329.622267][ T8551] 180 usb [ 329.622267][ T8551] 188 ttyUSB [ 329.622267][ T8551] 189 usb_device [ 329.622267][ T8551] 202 cpu/msr [ 329.622267][ T8551] 203 cpu/cpuid [ 329.622267][ T8551] 212 DVB [ 329.622267][ T8551] 216 rfcomm [ 329.622267][ T8551] 226 drm [ 329.622267][ T8551] 231 infiniband_mad [ 329.622267][ T8551] 231 infiniband_verbs [ 329.622267][ T8551] 234 mei [ 329.622267][ T8551] 235 ublk-char [ 329.622267][ T8551] 236 ttynull [ 329.622267][ T8551] 237 noz [ 329.622267][ T8551] 238 gsmtty [ 329.622267][ T8551] 239 bsg [ 329.622267][ T8551] 240 pvfs2-req [ 329.622267][ T8551] 241 counter [ 329.622267][ T8551] 242 tee [ 329.622267][ T8551] 243 iio [ 329.622267][ T8551] 244 ptp [ 329.622267][ T8551] 245 pps [ 329.622267][ T8551] 246 cec [ 329.622267][ T8551] 247 media [ 329.622267][ T8551] 248 rtc [ 329.622267][ T8551] 249 dma_heap [ 329.622267][ T8551] 250 dax [ 329.622267][ T8551] 251 dimmctl [ 329.622267][ T8551] 252 ndctl [ 329.622267][ T8551] 253 tpm [ 329.622267][ T8551] 254 gpiochip [ 329.622267][ T8551] 494 gnss [ 331.119324][ T5644] Bluetooth: hci4: command tx timeout [ 331.621817][ T6388] bridge_slave_1: left allmulticast mode [ 331.628047][ T6388] bridge_slave_1: left promiscuous mode [ 331.634252][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.685325][ T6388] bridge_slave_0: left allmulticast mode [ 331.715893][ T6388] bridge_slave_0: left promiscuous mode [ 331.743238][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.769657][ T6388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.584878][ T5644] Bluetooth: hci4: command tx timeout [ 333.998669][ T6388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.073263][ T6388] bond0 (unregistering): Released all slaves [ 334.927893][ T8619] futex_wake_op: syz.1.834 tries to shift op by 144; fix this program [ 335.609236][ T8634] read descriptors [ 335.791399][ T5632] ffs_data_put(): freeing [ 338.430404][ T6388] hsr_slave_0: left promiscuous mode [ 338.474044][ T6388] hsr_slave_1: left promiscuous mode [ 338.508769][ T6388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.547678][ T6388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.590306][ T6388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.622419][ T6388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.815017][ T6388] veth1_macvtap: left promiscuous mode [ 338.847471][ T6388] veth0_macvtap: left promiscuous mode [ 338.889513][ T6388] veth1_vlan: left promiscuous mode [ 338.922123][ T6388] veth0_vlan: left promiscuous mode [ 342.202129][ T6388] team0 (unregistering): Port device team_slave_1 removed [ 342.235236][ T6388] team0 (unregistering): Port device team_slave_0 removed [ 342.463186][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.476728][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.484924][ T8460] bridge_slave_0: entered allmulticast mode [ 342.493164][ T8460] bridge_slave_0: entered promiscuous mode [ 342.563435][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 342.844074][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.875929][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.902051][ T8460] bridge_slave_1: entered allmulticast mode [ 342.949244][ T8460] bridge_slave_1: entered promiscuous mode [ 344.777672][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.901634][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.823209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 345.940975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 346.938747][ T8460] team0: Port device team_slave_0 added [ 346.981890][ T8460] team0: Port device team_slave_1 added [ 347.444043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 350.444670][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.515862][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.621820][ T8460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.658541][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.666999][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.765601][ T8460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.569213][ T8460] hsr_slave_0: entered promiscuous mode [ 353.709149][ T8460] hsr_slave_1: entered promiscuous mode [ 353.741323][ T8460] debugfs: 'hsr0' already exists in 'hsr' [ 353.768268][ T8460] Cannot create hsr debugfs directory [ 354.220925][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 359.524366][ T8873] overlayfs: failed to clone upperpath [ 362.881228][ T8460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 362.961119][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.019666][ T8460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 363.110626][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.168059][ T8460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 363.373575][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.538819][ T8916] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.908'. [ 363.640711][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.662495][ T8460] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 363.669411][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.679409][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.710959][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.723624][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.915468][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.622778][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 468.629819][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5629/1:b..l [ 468.638481][ C1] rcu: (detected by 1, t=10506 jiffies, g=36605, q=326 ncpus=2) [ 468.646224][ C1] task:syz-executor state:R running task stack:23928 pid:5629 tgid:5629 ppid:1 task_flags:0x40054c flags:0x00080003 [ 468.661260][ C1] Call Trace: [ 468.664555][ C1] [ 468.667490][ C1] __schedule+0x125c/0x6730 [ 468.672024][ C1] ? rcu_is_watching+0x12/0xc0 [ 468.676823][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.682482][ C1] ? trace_sched_exit_tp+0x120/0x160 [ 468.687827][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.693491][ C1] ? __pfx___schedule+0x10/0x10 [ 468.698372][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.704031][ C1] ? rcu_is_watching+0x12/0xc0 [ 468.708835][ C1] preempt_schedule_irq+0x50/0x90 [ 468.713884][ C1] irqentry_exit+0x205/0xa00 [ 468.718500][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.724177][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 468.730181][ C1] RIP: 0010:lock_release+0x19e/0x310 [ 468.735491][ C1] Code: ff 65 0f c1 05 e3 8d 7e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ed 46 7e 12 0f 85 4d 01 00 00 48 83 c4 [ 468.755127][ C1] RSP: 0018:ffffc9000368f540 EFLAGS: 00000206 [ 468.761218][ C1] RAX: 0000000000000046 RBX: ffffffff8ebe8180 RCX: ffffc9000368f54c [ 468.769198][ C1] RDX: 0000000000000000 RSI: ffffffff8e1840ee RDI: ffffffff8c400980 [ 468.777179][ C1] RBP: ffffffff81b846be R08: 0000000000000001 R09: 0000000000000007 [ 468.785163][ C1] R10: 0000000000000200 R11: 000000000000cbee R12: ffff888079fc5d00 [ 468.793142][ C1] R13: ffffc9000368f5f8 R14: 0000000000000202 R15: 0000000000000001 [ 468.801126][ C1] ? unwind_next_frame+0x3be/0x2090 [ 468.806394][ C1] unwind_next_frame+0x3c3/0x2090 [ 468.811457][ C1] ? get_signal+0x1ec7/0x21e0 [ 468.816168][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 468.822542][ C1] arch_stack_walk+0x94/0xf0 [ 468.827185][ C1] ? arch_do_signal_or_restart+0x91/0x7e0 [ 468.832927][ C1] stack_trace_save+0x8e/0xc0 [ 468.837647][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 468.843066][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.848809][ C1] ? __lock_acquire+0x49f/0x1a40 [ 468.853768][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 468.859595][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.865301][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 468.870532][ C1] save_stack+0x162/0x1e0 [ 468.874969][ C1] ? __pfx_save_stack+0x10/0x10 [ 468.879832][ C1] ? free_pages_prepare+0x586/0xd80 [ 468.885064][ C1] ? __free_contig_range_common+0x14f/0x250 [ 468.890982][ C1] ? free_pages_bulk+0xbd/0x200 [ 468.895861][ C1] ? vm_area_free_pages+0xad/0x2b0 [ 468.901007][ C1] ? vfree+0x107/0x750 [ 468.905092][ C1] ? kcov_close+0x34/0x60 [ 468.909436][ C1] ? __fput+0x3ff/0xb50 [ 468.913634][ C1] ? task_work_run+0x150/0x240 [ 468.918414][ C1] ? do_exit+0x951/0x2ae0 [ 468.922776][ C1] ? do_group_exit+0xd5/0x2a0 [ 468.927493][ C1] ? get_signal+0x1ec7/0x21e0 [ 468.932205][ C1] ? page_ext_put+0x3e/0xd0 [ 468.936743][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.942431][ C1] __reset_page_owner+0x84/0x190 [ 468.947392][ C1] free_pages_prepare+0x586/0xd80 [ 468.952453][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.958126][ C1] __free_contig_range_common+0x14f/0x250 [ 468.963886][ C1] free_pages_bulk+0xbd/0x200 [ 468.968599][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.974309][ C1] vm_area_free_pages+0xad/0x2b0 [ 468.979296][ C1] vfree+0x107/0x750 [ 468.983208][ C1] ? kcov_close+0x2b/0x60 [ 468.987564][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.993229][ C1] ? rcu_is_watching+0x12/0xc0 [ 468.998030][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 469.003855][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.009523][ C1] ? __pfx_kcov_close+0x10/0x10 [ 469.014398][ C1] kcov_close+0x34/0x60 [ 469.018572][ C1] __fput+0x3ff/0xb50 [ 469.022604][ C1] ? cleanup_mnt+0x263/0x450 [ 469.027230][ C1] task_work_run+0x150/0x240 [ 469.031926][ C1] ? __pfx_task_work_run+0x10/0x10 [ 469.037084][ C1] do_exit+0x951/0x2ae0 [ 469.041288][ C1] ? __pfx_do_exit+0x10/0x10 [ 469.045909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.051571][ C1] ? do_raw_spin_lock+0x128/0x260 [ 469.056623][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.062280][ C1] ? find_held_lock+0x2b/0x80 [ 469.067081][ C1] ? get_signal+0x7e0/0x21e0 [ 469.071699][ C1] do_group_exit+0xd5/0x2a0 [ 469.076239][ C1] get_signal+0x1ec7/0x21e0 [ 469.080769][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.086425][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.092088][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.097753][ C1] ? __pfx_get_signal+0x10/0x10 [ 469.102638][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.108293][ C1] ? putname+0xb6/0x110 [ 469.112496][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 469.118070][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 469.124262][ C1] ? __x64_sys_openat+0x12d/0x210 [ 469.129311][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.134975][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 469.140374][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.146034][ C1] ? rcu_is_watching+0x12/0xc0 [ 469.150834][ C1] do_syscall_64+0x666/0x870 [ 469.155456][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.161368][ C1] RIP: 0033:0x7f0ff019d1bc [ 469.165795][ C1] RSP: 002b:00007ffc5e1ea960 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 469.174229][ C1] RAX: fffffffffffffffc RBX: 00007f0ff023330a RCX: 00007f0ff019d1bc [ 469.182295][ C1] RDX: 0000000000090800 RSI: 00007ffc5e1ebb70 RDI: 00000000ffffff9c [ 469.190269][ C1] RBP: 00007ffc5e1ebb70 R08: 00007ffc5e1ecb70 R09: 00000000ffffffff [ 469.198249][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc5e1ebb70 [ 469.206275][ C1] R13: 00007f0ff023330a R14: 0000000000054960 R15: 00007ffc5e1edd30 [ 469.214300][ C1] [ 469.217499][ C1] rcu: rcu_preempt kthread starved for 10460 jiffies! g36605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 469.228713][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 469.238689][ C1] rcu: RCU grace-period kthread stack dump: [ 469.244581][ C1] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 469.258221][ C1] Call Trace: [ 469.261524][ C1] [ 469.264477][ C1] __schedule+0x125c/0x6730 [ 469.269014][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.274697][ C1] ? __pfx___schedule+0x10/0x10 [ 469.279565][ C1] ? find_held_lock+0x2b/0x80 [ 469.284277][ C1] ? schedule+0x225/0x2c0 [ 469.288621][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.294287][ C1] schedule+0xdd/0x2c0 [ 469.298374][ C1] schedule_timeout+0x127/0x280 [ 469.303265][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 469.308676][ C1] ? __pfx_process_timeout+0x10/0x10 [ 469.314007][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.319669][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 469.325508][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.331170][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 469.336658][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 469.341443][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.347098][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 469.352405][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 469.357457][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 469.362680][ C1] rcu_gp_kthread+0x179/0x230 [ 469.367377][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 469.372940][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 469.378777][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.384435][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.390087][ C1] ? __kthread_parkme+0x18c/0x230 [ 469.395144][ C1] ? kthread+0x13a/0x450 [ 469.399425][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 469.404659][ C1] kthread+0x370/0x450 [ 469.408773][ C1] ? __pfx_kthread+0x10/0x10 [ 469.413404][ C1] ret_from_fork+0x72b/0xd50 [ 469.418029][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 469.423170][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.428835][ C1] ? __switch_to+0x800/0x10f0 [ 469.433553][ C1] ? __switch_to_asm+0x39/0x70 [ 469.438350][ C1] ? __pfx_kthread+0x10/0x10 [ 469.442982][ C1] ret_from_fork_asm+0x1a/0x30 [ 469.447802][ C1] [ 469.450819][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 469.457147][ C1] CPU: 1 UID: 0 PID: 5960 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 469.466708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 469.476780][ C1] Workqueue: events_unbound toggle_allocation_gate [ 469.483334][ C1] RIP: 0010:smp_call_function_many_cond+0x593/0x1870 [ 469.490038][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 54 99 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41 [ 469.509661][ C1] RSP: 0018:ffffc90004eef858 EFLAGS: 00000293 [ 469.515741][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fda5f2 [ 469.523721][ C1] RDX: ffff88807b955d00 RSI: ffffffff81fda5cc RDI: ffff88807b955d00 [ 469.531706][ C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000 [ 469.539687][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 469.547661][ C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0 [ 469.555644][ C1] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 469.564585][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.571288][ C1] CR2: 00007f06dc027dac CR3: 000000000e994000 CR4: 0000000000350ef0 [ 469.579301][ C1] Call Trace: [ 469.582580][ C1] [ 469.585518][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 469.590594][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 469.596945][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 469.602369][ C1] ? __pfx___text_poke+0x10/0x10 [ 469.607454][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 469.612518][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 469.617655][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 469.623587][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 469.629334][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.635025][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 469.641286][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.646938][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 469.653235][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.658888][ C1] ? find_held_lock+0x2b/0x80 [ 469.663601][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.669265][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 469.675265][ C1] jump_label_update+0x37a/0x550 [ 469.680242][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 469.686175][ C1] static_key_enable+0x1a/0x20 [ 469.690972][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 469.696386][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 469.702324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.707992][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.713651][ C1] ? rcu_is_watching+0x12/0xc0 [ 469.718454][ C1] process_one_work+0xa23/0x1940 [ 469.723431][ C1] ? __pfx_process_one_work+0x10/0x10 [ 469.728815][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.734486][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.740238][ C1] worker_thread+0x5ef/0xe50 [ 469.744860][ C1] ? kthread+0x13a/0x450 [ 469.749134][ C1] ? __pfx_worker_thread+0x10/0x10 [ 469.754259][ C1] kthread+0x370/0x450 [ 469.758362][ C1] ? __pfx_kthread+0x10/0x10 [ 469.762999][ C1] ret_from_fork+0x72b/0xd50 [ 469.767618][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 469.772758][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.778415][ C1] ? __switch_to+0x800/0x10f0 [ 469.783132][ C1] ? __switch_to_asm+0x39/0x70 [ 469.787925][ C1] ? __pfx_kthread+0x10/0x10 [ 469.792554][ C1] ret_from_fork_asm+0x1a/0x30 [ 469.797370][ C1] [ 615.596178][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 245s! [kworker/u8:13:5960] [ 615.596223][ C1] Modules linked in: [ 615.596242][ C1] irq event stamp: 1559052 [ 615.596256][ C1] hardirqs last enabled at (1559051): [] irqentry_exit+0x24d/0xa00 [ 615.596320][ C1] hardirqs last disabled at (1559052): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 615.596374][ C1] softirqs last enabled at (1559044): [] __irq_exit_rcu+0x162/0x210 [ 615.596429][ C1] softirqs last disabled at (1558917): [] __irq_exit_rcu+0x162/0x210 [ 615.596491][ C1] CPU: 1 UID: 0 PID: 5960 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 615.596535][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 615.596562][ C1] Workqueue: events_unbound toggle_allocation_gate [ 615.596629][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 615.596676][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 54 99 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 615.596712][ C1] RSP: 0018:ffffc90004eef858 EFLAGS: 00000293 [ 615.596740][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fda5f2 [ 615.596763][ C1] RDX: ffff88807b955d00 RSI: ffffffff81fda5cc RDI: ffff88807b955d00 [ 615.596789][ C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000 [ 615.596812][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 615.596835][ C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0 [ 615.596863][ C1] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 615.596895][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.596920][ C1] CR2: 00007f06dc027dac CR3: 000000000e994000 CR4: 0000000000350ef0 [ 615.596945][ C1] Call Trace: [ 615.596958][ C1] [ 615.596980][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 615.597060][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 615.597103][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 615.597172][ C1] ? __pfx___text_poke+0x10/0x10 [ 615.597230][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 615.597286][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 615.597330][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 615.597397][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 615.597442][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.597491][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 615.597534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.597578][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 615.597619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.597663][ C1] ? find_held_lock+0x2b/0x80 [ 615.597721][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.597774][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 615.597815][ C1] jump_label_update+0x37a/0x550 [ 615.597883][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 615.597946][ C1] static_key_enable+0x1a/0x20 [ 615.598002][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 615.598062][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 615.598125][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.598177][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.598220][ C1] ? rcu_is_watching+0x12/0xc0 [ 615.598284][ C1] process_one_work+0xa23/0x1940 [ 615.598341][ C1] ? __pfx_process_one_work+0x10/0x10 [ 615.598376][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.598435][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.598485][ C1] worker_thread+0x5ef/0xe50 [ 615.598538][ C1] ? kthread+0x13a/0x450 [ 615.598596][ C1] ? __pfx_worker_thread+0x10/0x10 [ 615.598631][ C1] kthread+0x370/0x450 [ 615.598686][ C1] ? __pfx_kthread+0x10/0x10 [ 615.598746][ C1] ret_from_fork+0x72b/0xd50 [ 615.598797][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 615.598848][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.598891][ C1] ? __switch_to+0x800/0x10f0 [ 615.598954][ C1] ? __switch_to_asm+0x39/0x70 [ 615.599005][ C1] ? __pfx_kthread+0x10/0x10 [ 615.599065][ C1] ret_from_fork_asm+0x1a/0x30 [ 615.599142][ C1] [ 615.599156][ C1] Sending NMI from CPU 1 to CPUs 0: [ 616.000010][ C0] NMI backtrace for cpu 0 [ 616.000036][ C0] CPU: 0 UID: 0 PID: 8929 Comm: syz.5.911 Not tainted syzkaller #0 PREEMPT(full) [ 616.000075][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 616.000096][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 [ 616.000156][ C0] Code: 00 00 00 5b e9 02 85 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 05 e1 59 12 48 8b 34 24 <65> 48 8b 15 e1 e0 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 616.000188][ C0] RSP: 0018:ffffc90000007de0 EFLAGS: 00000002 [ 616.000215][ C0] RAX: 0000000080010001 RBX: 0000000000000001 RCX: ffffffff89c6fcb2 [ 616.000237][ C0] RDX: 0000000000000001 RSI: ffffffff89c6fa16 RDI: ffff8880341d0000 [ 616.000259][ C0] RBP: ffff88807bc10400 R08: 0000000000000001 R09: 0000000000000000 [ 616.000279][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 616.000299][ C0] R13: 18cf9d723d2fcb12 R14: ffff88807bc13400 R15: ffff88807bc13400 [ 616.000323][ C0] FS: 00007fa159c0c6c0(0000) GS:ffff888123dde000(0000) knlGS:0000000000000000 [ 616.000352][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.000374][ C0] CR2: 00007fa159c0bff8 CR3: 000000002d08c000 CR4: 0000000000350ef0 [ 616.000395][ C0] Call Trace: [ 616.000407][ C0] [ 616.000418][ C0] advance_sched+0x736/0xd20 [ 616.000468][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.000516][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.000555][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 616.000602][ C0] ? __pfx_advance_sched+0x10/0x10 [ 616.000651][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 616.000712][ C0] hrtimer_interrupt+0x3e5/0x940 [ 616.000775][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 616.000829][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 616.000871][ C0] [ 616.000881][ C0] [ 616.000893][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.000930][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 616.000968][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 30 29 f6 48 89 df e8 de 7f 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 8f 18 f6 65 8b 05 ee 78 a7 08 85 c0 74 16 5b [ 616.001001][ C0] RSP: 0018:ffffc9000f587b28 EFLAGS: 00000246 [ 616.001026][ C0] RAX: 0000000000000006 RBX: ffffffff9b73d3d8 RCX: 0000000000000000 [ 616.001047][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a9f82 RDI: ffffffff8c400980 [ 616.001069][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 616.001089][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff9b73d140 [ 616.001110][ C0] R13: 0000000000000000 R14: ffffc9000f587c80 R15: 7fffffffffffffff [ 616.001147][ C0] __do_adjtimex+0x892/0xe70 [ 616.001190][ C0] ? __pfx___do_adjtimex+0x10/0x10 [ 616.001234][ C0] ? __lock_acquire+0x49f/0x1a40 [ 616.001276][ C0] do_adjtimex+0xa0/0x370 [ 616.001318][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 616.001358][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.001414][ C0] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 616.001462][ C0] __do_sys_clock_adjtime+0x177/0x290 [ 616.001510][ C0] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 616.001557][ C0] ? __pfx_do_futex+0x10/0x10 [ 616.001601][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.001665][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.001710][ C0] do_syscall_64+0x115/0x870 [ 616.001754][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.001788][ C0] RIP: 0033:0x7fa158d9de99 [ 616.001814][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.001846][ C0] RSP: 002b:00007fa159c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 616.001875][ C0] RAX: ffffffffffffffda RBX: 00007fa159026270 RCX: 00007fa158d9de99 [ 616.001897][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 616.001918][ C0] RBP: 00007fa158e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 616.001938][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.001958][ C0] R13: 00007fa159026308 R14: 00007fa159026270 R15: 00007ffeb76fac08 [ 616.001994][ C0] [ 616.406641][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 616.413326][ C1] CPU: 1 UID: 0 PID: 5960 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.424459][ C1] Tainted: [L]=SOFTLOCKUP [ 616.428780][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 616.438843][ C1] Workqueue: events_unbound toggle_allocation_gate [ 616.445403][ C1] Call Trace: [ 616.448685][ C1] [ 616.451528][ C1] dump_stack_lvl+0x100/0x190 [ 616.456234][ C1] vpanic+0x552/0x970 [ 616.460233][ C1] ? __pfx_vpanic+0x10/0x10 [ 616.464748][ C1] ? __entry_text_end+0x1020b5/0x1020b9 [ 616.470316][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 616.475553][ C1] panic+0xd1/0xe0 [ 616.479289][ C1] ? __pfx_panic+0x10/0x10 [ 616.483717][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.489385][ C1] ? __pfx_printk_trigger_flush+0x10/0x10 [ 616.495149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.500838][ C1] ? wq_watchdog_touch+0xec/0x1a0 [ 616.505904][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 616.511211][ C1] ? watchdog_timer_fn+0x702/0x7a0 [ 616.516349][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 616.521573][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 616.527053][ C1] __hrtimer_run_queues+0x13f/0x9c0 [ 616.532310][ C1] hrtimer_interrupt+0x3e5/0x940 [ 616.537304][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 616.543323][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 616.548985][ C1] [ 616.551913][ C1] [ 616.554841][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.560844][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 616.567545][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 54 99 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 616.587178][ C1] RSP: 0018:ffffc90004eef858 EFLAGS: 00000293 [ 616.593261][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fda5f2 [ 616.601239][ C1] RDX: ffff88807b955d00 RSI: ffffffff81fda5cc RDI: ffff88807b955d00 [ 616.609221][ C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000 [ 616.617199][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 616.625178][ C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0 [ 616.633170][ C1] ? smp_call_function_many_cond+0x5b2/0x1870 [ 616.639270][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 616.645379][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 616.651478][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 616.656563][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 616.662914][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 616.668336][ C1] ? __pfx___text_poke+0x10/0x10 [ 616.673318][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 616.678379][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 616.683516][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 616.689455][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 616.695198][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.700868][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 616.707157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.712829][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 616.719106][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.724781][ C1] ? find_held_lock+0x2b/0x80 [ 616.729499][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.735168][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 616.741169][ C1] jump_label_update+0x37a/0x550 [ 616.746154][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 616.752089][ C1] static_key_enable+0x1a/0x20 [ 616.756899][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 616.762227][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 616.768158][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.773817][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.779470][ C1] ? rcu_is_watching+0x12/0xc0 [ 616.784287][ C1] process_one_work+0xa23/0x1940 [ 616.789262][ C1] ? __pfx_process_one_work+0x10/0x10 [ 616.794643][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.800311][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.805970][ C1] worker_thread+0x5ef/0xe50 [ 616.810593][ C1] ? kthread+0x13a/0x450 [ 616.814870][ C1] ? __pfx_worker_thread+0x10/0x10 [ 616.819993][ C1] kthread+0x370/0x450 [ 616.824122][ C1] ? __pfx_kthread+0x10/0x10 [ 616.828754][ C1] ret_from_fork+0x72b/0xd50 [ 616.833371][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 616.838508][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.844178][ C1] ? __switch_to+0x800/0x10f0 [ 616.848908][ C1] ? __switch_to_asm+0x39/0x70 [ 616.853702][ C1] ? __pfx_kthread+0x10/0x10 [ 616.858331][ C1] ret_from_fork_asm+0x1a/0x30 [ 616.863152][ C1] [ 618.036167][ C1] Shutting down cpus with NMI [ 618.041196][ C1] Kernel Offset: disabled [ 618.045633][ C1] Rebooting in 86400 seconds..