last executing test programs: 16.366362113s ago: executing program 3 (id=205): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000019340)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000019380)='./nfsd\x00', &(0x7f00000193c0)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019400)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write$binfmt_aout(r5, 0x0, 0x0) 11.699090338s ago: executing program 3 (id=210): socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000007c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001400)={{0xffffffffffffffff, &(0x7f00000002c0)='%[\'[*+/[\x00', 0x101000, &(0x7f00000004c0)={@align=0xffffffffffffff00, {0xf5, 0x5d7, 0xe, 0x1400}}, 0x8, &(0x7f00000003c0), &(0x7f0000000540)=0x6}, 0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400080000000000611474000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e0000001e6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a0101000000000000c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e1f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) close(r4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}]}]}, 0x54}}, 0x0) 11.696217119s ago: executing program 2 (id=211): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)=0xc, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0xff, 0xe, 0x7ffffffe}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac"], 0x18) syz_open_procfs(0x0, &(0x7f0000000380)='net/mcfilter\x00') r2 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f00000001c0)={0x3, 0x0, [0x6, 0x80000000, 0x2, 0x80000000, 0x75, 0x1, 0x7, 0x81]}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 10.527092908s ago: executing program 0 (id=213): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000005c0), 0x0, 0x179602) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x10, 0x140d, 0x1, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys_sec\x00', 0x1ff) r3 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./sys_sec\x00', &(0x7f0000000500)='securityfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000580)=""/9, 0xfffffd87) 9.314235141s ago: executing program 3 (id=214): shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000400), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) mount(0x0, 0x0, &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = fsopen(0x0, 0x1) fsmount(r3, 0x0, 0x1) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000800)={0x1f, @none, 0x18}, 0xa) 9.307770542s ago: executing program 0 (id=222): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x37d4c024, 0x9efa, 0x1, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x90}]}}}]}, 0x40}}, 0x40c0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x404c004}, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x20}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 9.307455272s ago: executing program 1 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 9.307117662s ago: executing program 2 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x239) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/current_tracer\x00', 0x2, 0x0) preadv(r4, 0x0, 0x0, 0xf, 0x94b8) syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00') 7.881474847s ago: executing program 1 (id=217): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=@framed={{0x65, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000001640)='GPL\x00'}, 0x80) readv(r0, &(0x7f00000004c0)=[{0x0}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7.740644742s ago: executing program 3 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) fsopen(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(r3) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x4, @private0, 0x41b}}}, &(0x7f0000000080)=0x84) 6.860686242s ago: executing program 0 (id=219): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x158) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) lseek(r5, 0x5, 0x0) 6.857693172s ago: executing program 1 (id=220): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000340)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1342, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) 5.621849308s ago: executing program 3 (id=221): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2dc, &(0x7f00000004c0)="$eJzs3U9rY1UUAPDz0jTJKJIKrkTwgS5cDdPZukmRDgx2pXShLnRwOiBNEVootIqxK7duXLp1Iwju/BJu/AaCW8GF4KADV96/JnGSR4JkRP39Fu3Jffe8e959SUsWOXnvhZPj+3k8uPr4xxgMsuiMYhQPs9iJTjQ+LX/+nlIqg9HnAQD8mz1MKX5JlXXysogYbK4sAGCD1v7//+3GSwIANuzNt95+fe/gYP+NPB/EnZPPzg+Ld/bF74gbEbH3ID6IcRzFrRjGo4h0rYrvpJQm3bywEy+fTM4Pi8yTd7+vz7/38yDK/N0Yxk45NJ9/92B/N6/M5E+KOp6q1x8V+bdjGM8tWP/uwf7tBflx2ItXXpqp/2YM44f348MYx/2yiCo/OhGf7Ob5a+mL3z56pyivyM8m54f9ct5U2pp72H1SdwgAAAAAAAAAAAAAAAAAAAAAgP+im3XvnH6U/XuKobr/ztaj4sF25I2d+f48VX7WnGi2P1A/pUmKL5v+PLfyPE/1xGl+N57v6qIDAAAAAAAAAAAAAAAAAAAAhbOLy+N74/HRaRn0i6ATEdcj6wVNN4DmY/2rpl+dXVx26pxiZDQz58VoT+9P12pO0bJWbDVzsojWwoqLWPna/0iVVTeqG7Mjzy6r+etvVr4FXy2/9hvzh7bb9udvBL16mYvL4yr4NY7vZYv3sB/NyKB5knw3O6cXqy667FBa4+l3etZbeGi4eHLLXe49XQaTlrUiayvs1Z+uXwXPjI9Os79eRbHJS868XQfNi+ixOYOoNvz6NrVuy+N/KzLdOgAAAAAAAAAAAAAAAAAAYKOmH/qdG66+rv+qNbWT+putDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACelOn3/68RTOrkFSb34vTsH75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/gf+DAAA///6SlfK") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x2200000, &(0x7f0000000840)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@delalloc}, {@nogrpid}, {@nouser_xattr}, {@dioread_nolock}]}, 0xa, 0x572, &(0x7f0000002000)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000032c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000003340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000033c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000003440), 0x651, 0x0) recvmmsg(r2, &(0x7f0000003500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003540)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000003580), &(0x7f00000035c0)='./file0\x00', 0x200008, &(0x7f0000003600)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000003640)="$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") openat(0xffffffffffffff9c, &(0x7f0000003a00)='./file1\x00', 0x101042, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$binfmt_script(r0, &(0x7f0000000a80), 0x208e24b) ftruncate(r0, 0x4a8e) 5.510067469s ago: executing program 0 (id=223): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000c80)="$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") keyctl$join(0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0x40001a2) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socket$inet_tcp(0x2, 0x1, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x21103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) 5.455220805s ago: executing program 2 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) keyctl$chown(0x4, r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48050) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x14, &(0x7f0000000140)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 4.410246041s ago: executing program 1 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet(0x2, 0x1, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x2}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r6 = socket$inet(0x2, 0x1, 0x6) connect(r6, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 3.907737512s ago: executing program 0 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2c, 0x8010, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000001140)={0x3, 0x4}) preadv(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="20810e56"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.892203124s ago: executing program 2 (id=227): shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000400), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) mount(0x0, 0x0, &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = fsopen(0x0, 0x1) fsmount(r3, 0x0, 0x1) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000800)={0x1f, @none, 0x18}, 0xa) 3.002324745s ago: executing program 3 (id=228): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000c80)="$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") keyctl$join(0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0x40001a2) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socket$inet_tcp(0x2, 0x1, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x21103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) 2.251496221s ago: executing program 1 (id=229): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0) 1.167047472s ago: executing program 1 (id=230): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='f2fs\x00', 0x48012, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x0, 0x0, &(0x7f0000000280)) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002600)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd003f0000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) 1.163477042s ago: executing program 2 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) fsopen(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(r3) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x4, @private0, 0x41b}}}, &(0x7f0000000080)=0x84) 1.163219932s ago: executing program 0 (id=238): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3) r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000340)=@str='0', 0x1) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f00000003c0)=@str='1', 0x1) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f0000000440)=@str='active', 0x6) r8 = openat$md(0xffffffffffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) pwrite64(r8, &(0x7f00000004c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) close(r8) write$md_sysfs(r7, &(0x7f0000000500)=@str='clear', 0x5) 0s ago: executing program 2 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000fe80000000000000000000000000002b86dd000095b866eb7c934087d73ab4534aeee34e49e933d9990300a4e4ae85878eb677561fd0ec2cbc1b08ec4b123cfa2786f9d355820e0700"], 0x38}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 73.420665][ T5769] cgroup: Unknown subsys name 'net' [ 73.553229][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.888499][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.238222][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.266829][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.274460][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.282866][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.290707][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.298335][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.369944][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.401262][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 76.407270][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.415140][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.425152][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.433773][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.440809][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.442511][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.448524][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.462835][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.470812][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.478350][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.485758][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.524650][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 76.541629][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.543671][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.558210][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.566771][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.567618][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.600425][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.609040][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.618136][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.626822][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.634131][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.737694][ T5790] (null): rxe_set_mtu: Set mtu to 1024 [ 76.743440][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.763319][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 76.777298][ T789] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.783779][ T5780] infiniband rxe0: set active [ 76.788964][ T5780] infiniband rxe0: added rxe_eth0 [ 76.845367][ T5780] RDS/IB: rxe0: added [ 76.853794][ T5780] smc: adding ib device rxe0 with port count 1 [ 76.860560][ T5780] smc: ib device rxe0 port 1 has pnetid [ 76.875143][ T789] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.909575][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.010638][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 77.163884][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.172054][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.186799][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.194190][ T5783] bridge_slave_0: entered allmulticast mode [ 77.218097][ T5783] bridge_slave_0: entered promiscuous mode [ 77.237987][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.245132][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.266840][ T5783] bridge_slave_1: entered allmulticast mode [ 77.274103][ T5783] bridge_slave_1: entered promiscuous mode [ 77.343148][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.369657][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.435601][ T5783] team0: Port device team_slave_0 added [ 77.443050][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.464046][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.478445][ T5783] team0: Port device team_slave_1 added [ 77.528231][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.535517][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.543771][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.571220][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.591884][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.599094][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.626554][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.727298][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.785685][ T5783] hsr_slave_0: entered promiscuous mode [ 77.793273][ T5783] hsr_slave_1: entered promiscuous mode [ 78.151722][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 78.171084][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.357389][ T5787] Bluetooth: hci0: command tx timeout [ 78.383529][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.414941][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.424757][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.432990][ T5790] bridge_slave_0: entered allmulticast mode [ 78.444501][ T5790] bridge_slave_0: entered promiscuous mode [ 78.454964][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.481060][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 78.496804][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.504061][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.511549][ T5790] bridge_slave_1: entered allmulticast mode [ 78.517996][ T5787] Bluetooth: hci1: command tx timeout [ 78.518932][ T5790] bridge_slave_1: entered promiscuous mode [ 78.530807][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.582079][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.630566][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.671677][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.677222][ T5787] Bluetooth: hci3: command tx timeout [ 78.686346][ T5787] Bluetooth: hci2: command tx timeout [ 78.696479][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 78.774703][ T5790] team0: Port device team_slave_0 added [ 78.795832][ T5447] infiniband rxe0: set active [ 78.802755][ T5790] team0: Port device team_slave_1 added [ 78.854145][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.875655][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.883418][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.909579][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.935675][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.943563][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.951204][ T5780] bridge_slave_0: entered allmulticast mode [ 78.958038][ T5780] bridge_slave_0: entered promiscuous mode [ 78.965442][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.974725][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.001773][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.021647][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.029114][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.036295][ T5780] bridge_slave_1: entered allmulticast mode [ 79.047882][ T5780] bridge_slave_1: entered promiscuous mode [ 79.098741][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.105940][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.113272][ T5786] bridge_slave_0: entered allmulticast mode [ 79.121253][ T5786] bridge_slave_0: entered promiscuous mode [ 79.143653][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.161644][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.173107][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.180626][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.187840][ T5786] bridge_slave_1: entered allmulticast mode [ 79.194482][ T5786] bridge_slave_1: entered promiscuous mode [ 79.254313][ T5790] hsr_slave_0: entered promiscuous mode [ 79.260635][ T5790] hsr_slave_1: entered promiscuous mode [ 79.266737][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.274544][ T5790] Cannot create hsr debugfs directory [ 79.300415][ T5780] team0: Port device team_slave_0 added [ 79.309292][ T5780] team0: Port device team_slave_1 added [ 79.328606][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.340763][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.408375][ T5786] team0: Port device team_slave_0 added [ 79.417857][ T5786] team0: Port device team_slave_1 added [ 79.425574][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.432850][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.458783][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.471543][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.478622][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.504809][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.576001][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.583315][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.609340][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.621762][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.629080][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.655316][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.713686][ T5780] hsr_slave_0: entered promiscuous mode [ 79.721020][ T5780] hsr_slave_1: entered promiscuous mode [ 79.727728][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.735287][ T5780] Cannot create hsr debugfs directory [ 79.842984][ T5786] hsr_slave_0: entered promiscuous mode [ 79.851355][ T5786] hsr_slave_1: entered promiscuous mode [ 79.858032][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.865593][ T5786] Cannot create hsr debugfs directory [ 80.027504][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.111127][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.120933][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.132667][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.161763][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.207296][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.251768][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.259107][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.271423][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.278537][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.289199][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.300169][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.311552][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.326750][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.437551][ T5787] Bluetooth: hci0: command tx timeout [ 80.453525][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.481479][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.491888][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.503903][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.597589][ T5787] Bluetooth: hci1: command tx timeout [ 80.699501][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.721232][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.757033][ T52] Bluetooth: hci3: command tx timeout [ 80.762564][ T5787] Bluetooth: hci2: command tx timeout [ 80.763112][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.784017][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.796707][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.818094][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.825183][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.834513][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.841613][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.861189][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.870002][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.880822][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.887976][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.904648][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.911816][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.943743][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.950921][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.974145][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.981246][ T4878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.020552][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.120221][ T5783] veth0_vlan: entered promiscuous mode [ 81.182532][ T5783] veth1_vlan: entered promiscuous mode [ 81.283573][ T5783] veth0_macvtap: entered promiscuous mode [ 81.313175][ T5783] veth1_macvtap: entered promiscuous mode [ 81.361321][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.392403][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.422164][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.447132][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.455878][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.465377][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.480039][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.584567][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.660788][ T5790] veth0_vlan: entered promiscuous mode [ 81.684815][ T5790] veth1_vlan: entered promiscuous mode [ 81.687383][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.710418][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.741194][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.821565][ T5790] veth0_macvtap: entered promiscuous mode [ 81.839740][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.866784][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.911150][ T5780] veth0_vlan: entered promiscuous mode [ 81.937544][ T5790] veth1_macvtap: entered promiscuous mode [ 81.987315][ T5786] veth0_vlan: entered promiscuous mode [ 81.999513][ T5780] veth1_vlan: entered promiscuous mode [ 82.019959][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.068872][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.097389][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.110585][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.133783][ T5780] veth0_macvtap: entered promiscuous mode [ 82.166372][ T5786] veth1_vlan: entered promiscuous mode [ 82.192635][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.209262][ T5896] syz.0.1[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.218680][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.238435][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.260032][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.286978][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.297695][ T5896] loop0: detected capacity change from 0 to 4096 [ 82.311599][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.321850][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.382689][ T5780] veth1_macvtap: entered promiscuous mode [ 82.495739][ T5786] veth0_macvtap: entered promiscuous mode [ 82.510811][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.528254][ T5787] Bluetooth: hci0: command tx timeout [ 82.544203][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.568022][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.580128][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.586197][ T5896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.595687][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.613791][ T5896] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.632294][ T5786] veth1_macvtap: entered promiscuous mode [ 82.647717][ T5896] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 82.655978][ T5896] System zones: 0-5 [ 82.672325][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.672499][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.690519][ T5787] Bluetooth: hci1: command tx timeout [ 82.704565][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.716267][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.731754][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.743319][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.755429][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.765596][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.774540][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.783796][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.837307][ T5787] Bluetooth: hci2: command tx timeout [ 82.842763][ T5787] Bluetooth: hci3: command tx timeout [ 82.941000][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.980093][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.993032][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.004411][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.029913][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.153109][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.249144][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.264681][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.280957][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.292227][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.309872][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.397900][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.425164][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.440756][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.451701][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.479342][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.500848][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.533314][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.533589][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.545193][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.561320][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.570291][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.579233][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.748163][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.763205][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.508937][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.531900][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.555308][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.563320][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.597561][ T5787] Bluetooth: hci0: command tx timeout [ 85.956732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.144639][ T5787] Bluetooth: hci1: command tx timeout [ 86.144662][ T52] Bluetooth: hci3: command tx timeout [ 86.155496][ T5789] Bluetooth: hci2: command tx timeout [ 86.277218][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.316474][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.369097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 87.688144][ T971] cfg80211: failed to load regulatory.db [ 88.138883][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.153605][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.556202][ T5957] binder: 5950:5957 ioctl c0306201 0 returned -14 [ 91.746591][ C0] sched: RT throttling activated [ 91.779001][ T5894] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.524327][ T5961] loop1: detected capacity change from 0 to 128 [ 92.538731][ T5961] ======================================================= [ 92.538731][ T5961] WARNING: The mand mount option has been deprecated and [ 92.538731][ T5961] and is ignored by this kernel. Remove the mand [ 92.538731][ T5961] option from the mount to silence this warning. [ 92.538731][ T5961] ======================================================= [ 92.574160][ T5961] EXT4-fs: Ignoring removed orlov option [ 92.580079][ T5961] ext4: Unknown parameter 'fsuuid' [ 93.463896][ T5964] loop0: detected capacity change from 0 to 512 [ 93.516250][ T5964] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 93.545025][ T5968] bridge_slave_0: left allmulticast mode [ 93.591644][ T5968] bridge_slave_0: left promiscuous mode [ 93.592912][ T5964] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 93.598419][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.621509][ T5968] bridge_slave_1: left allmulticast mode [ 93.631003][ T5968] bridge_slave_1: left promiscuous mode [ 93.638833][ T5964] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.15: corrupted in-inode xattr: e_value size too large [ 93.639472][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.665624][ T5968] bond0: (slave bond_slave_0): Releasing backup interface [ 93.703364][ T5968] bond0: (slave bond_slave_1): Releasing backup interface [ 93.743295][ T5964] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.15: couldn't read orphan inode 15 (err -117) [ 93.808599][ T5964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.970677][ T5968] team0: Port device team_slave_0 removed [ 94.011390][ T5968] team0: Port device team_slave_1 removed [ 94.030337][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.039483][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.129602][ T5983] loop2: detected capacity change from 0 to 128 [ 94.181059][ T5983] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 94.217285][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.637362][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.700883][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.980504][ T5974] team0: Mode changed to "loadbalance" [ 95.374909][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.459583][ T6001] loop2: detected capacity change from 0 to 64 [ 95.475742][ T6001] hfs: unable to parse mount options [ 95.741842][ T5970] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.361519][ T6013] loop1: detected capacity change from 0 to 128 [ 96.872699][ T6014] Invalid ELF header magic: != ELF [ 97.029101][ T6013] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 97.789994][ T6026] Zero length message leads to an empty skb [ 99.783600][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 99.793584][ T52] CPU: 1 PID: 52 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 99.800979][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 99.811048][ T52] Workqueue: hci2 hci_rx_work [ 99.815779][ T52] Call Trace: [ 99.819071][ T52] [ 99.822013][ T52] dump_stack_lvl+0x18c/0x250 [ 99.826710][ T52] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 99.832363][ T52] ? show_regs_print_info+0x20/0x20 [ 99.837577][ T52] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 99.843252][ T52] sysfs_create_dir_ns+0x26e/0x2a0 [ 99.848390][ T52] ? __lock_acquire+0x7eb0/0x7eb0 [ 99.853433][ T52] ? sysfs_warn_dup+0xa0/0xa0 [ 99.858134][ T52] ? do_raw_spin_unlock+0x121/0x230 [ 99.863355][ T52] kobject_add_internal+0x617/0xc90 [ 99.868577][ T52] kobject_add+0x164/0x240 [ 99.873018][ T52] ? preempt_schedule_thunk+0x1a/0x30 [ 99.878415][ T52] ? kobject_init+0x1d0/0x1d0 [ 99.883116][ T52] ? get_device_parent+0x366/0x390 [ 99.888254][ T52] device_add+0x3fa/0xc40 [ 99.892615][ T52] hci_conn_add_sysfs+0xd5/0x1e0 [ 99.897582][ T52] le_conn_complete_evt+0xfe7/0x1690 [ 99.902895][ T52] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 99.909153][ T52] ? __copy_skb_header+0xa3/0x4a0 [ 99.914193][ T52] ? __asan_memcpy+0x40/0x70 [ 99.918800][ T52] ? __skb_clone+0x5c/0x6c0 [ 99.923322][ T52] ? skb_pull_data+0xf0/0x1f0 [ 99.928025][ T52] hci_le_conn_complete_evt+0x187/0x440 [ 99.933597][ T52] hci_event_packet+0x623/0xe60 [ 99.938474][ T52] ? hci_remote_host_features_evt+0x150/0x150 [ 99.944558][ T52] ? bis_list+0x290/0x290 [ 99.948908][ T52] ? kcov_remote_start+0x513/0x810 [ 99.954037][ T52] ? lockdep_hardirqs_on+0x98/0x150 [ 99.959249][ T52] ? hci_send_to_monitor+0xd7/0x4f0 [ 99.964473][ T52] hci_rx_work+0x43a/0xd60 [ 99.968914][ T52] ? process_scheduled_works+0x975/0x1600 [ 99.974654][ T52] process_scheduled_works+0xa60/0x1600 [ 99.980246][ T52] ? worker_attach_to_pool+0x370/0x370 [ 99.985736][ T52] ? assign_work+0x3cc/0x5d0 [ 99.990351][ T52] worker_thread+0xa5e/0xfe0 [ 99.994992][ T52] kthread+0x2fa/0x390 [ 99.999078][ T52] ? pr_cont_work+0x550/0x550 [ 100.003775][ T52] ? kthread_blkcg+0xd0/0xd0 [ 100.008382][ T52] ret_from_fork+0x48/0x80 [ 100.012816][ T52] ? kthread_blkcg+0xd0/0xd0 [ 100.017420][ T52] ret_from_fork_asm+0x11/0x20 [ 100.022215][ T52] [ 100.125314][ T52] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 100.139863][ T52] Bluetooth: hci2: failed to register connection device [ 100.427042][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 100.706468][ T6028] hsr_slave_1 (unregistering): left promiscuous mode [ 101.689121][ T6046] bridge_slave_0: left allmulticast mode [ 101.694930][ T6046] bridge_slave_0: left promiscuous mode [ 101.705263][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.735373][ T6046] bridge_slave_1: left allmulticast mode [ 101.754212][ T6046] bridge_slave_1: left promiscuous mode [ 101.765962][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.800254][ T6046] bond0: (slave bond_slave_0): Releasing backup interface [ 101.841024][ T6046] bond0: (slave bond_slave_1): Releasing backup interface [ 101.896416][ T6046] team0: Port device team_slave_0 removed [ 101.914540][ T6046] team0: Port device team_slave_1 removed [ 101.925642][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.936446][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.956976][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.976959][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.013571][ T6048] team0: Mode changed to "loadbalance" [ 102.093069][ T6058] loop0: detected capacity change from 0 to 4096 [ 102.108297][ T6058] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 102.142525][ T6058] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 102.163768][ T6058] ntfs3: loop0: Failed to load $MFT. [ 102.265219][ T6060] netlink: 64 bytes leftover after parsing attributes in process `syz.3.32'. [ 102.296651][ T5970] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.362596][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 102.375850][ T6062] netlink: 36 bytes leftover after parsing attributes in process `syz.2.31'. [ 102.384860][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 102.393957][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 103.172697][ T6069] loop1: detected capacity change from 0 to 512 [ 103.180597][ T6069] EXT4-fs: Ignoring removed nobh option [ 104.481993][ T6069] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.35: invalid indirect mapped block 256 (level 2) [ 104.531772][ T6075] loop3: detected capacity change from 0 to 4096 [ 104.539080][ T6069] EXT4-fs (loop1): 2 truncates cleaned up [ 104.545791][ T6069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.558978][ T6075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.572217][ T6075] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.583729][ T6075] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 104.636113][ T6075] System zones: 0-5 [ 105.310462][ T6068] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.35: bg 0: block 5: invalid block bitmap [ 105.652642][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.776120][ T6068] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 105.789000][ T6068] EXT4-fs (loop1): This should not happen!! Data will be lost [ 105.789000][ T6068] [ 105.798810][ T6068] EXT4-fs (loop1): Total free blocks count 0 [ 105.804805][ T6068] EXT4-fs (loop1): Free/Dirty block details [ 105.810801][ T6068] EXT4-fs (loop1): free_blocks=0 [ 105.815783][ T6068] EXT4-fs (loop1): dirty_blocks=33 [ 105.820934][ T6068] EXT4-fs (loop1): Block reservation details [ 105.828218][ T6068] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 106.242846][ T6088] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5783] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6088] [ 106.565007][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.781323][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.995830][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 110.728935][ T6119] FAULT_INJECTION: forcing a failure. [ 110.728935][ T6119] name fail_futex, interval 1, probability 0, space 0, times 1 [ 110.766704][ T6119] CPU: 1 PID: 6119 Comm: syz.1.45 Not tainted syzkaller #0 [ 110.773960][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 110.784033][ T6119] Call Trace: [ 110.787325][ T6119] [ 110.790263][ T6119] dump_stack_lvl+0x18c/0x250 [ 110.794962][ T6119] ? kasan_set_track+0x4e/0x70 [ 110.799759][ T6119] ? show_regs_print_info+0x20/0x20 [ 110.804982][ T6119] ? load_image+0x420/0x420 [ 110.809516][ T6119] should_fail_ex+0x394/0x4c0 [ 110.814217][ T6119] get_futex_key+0x134/0xf40 [ 110.818830][ T6119] ? futex_setup_timer+0xc0/0xc0 [ 110.823794][ T6119] futex_wake+0x127/0x4f0 [ 110.828150][ T6119] ? futex_wake_mark+0x150/0x150 [ 110.833109][ T6119] ? __se_sys_fsetxattr+0x431/0x520 [ 110.838325][ T6119] ? fput+0x154/0x1a0 [ 110.842310][ T6119] do_futex+0x35d/0x3e0 [ 110.846468][ T6119] ? __ia32_sys_get_robust_list+0x110/0x110 [ 110.852367][ T6119] __se_sys_futex+0x3a9/0x440 [ 110.857045][ T6119] ? __x64_sys_futex+0xf0/0xf0 [ 110.861809][ T6119] ? __x64_sys_futex+0x21/0xf0 [ 110.866567][ T6119] do_syscall_64+0x55/0xb0 [ 110.870989][ T6119] ? clear_bhb_loop+0x40/0x90 [ 110.875663][ T6119] ? clear_bhb_loop+0x40/0x90 [ 110.880342][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.886250][ T6119] RIP: 0033:0x7f04fd39fb19 [ 110.890669][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.910272][ T6119] RSP: 002b:00007f04fe2640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.918682][ T6119] RAX: ffffffffffffffda RBX: 00007f04fd625fa8 RCX: 00007f04fd39fb19 [ 110.926650][ T6119] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f04fd625fac [ 110.934613][ T6119] RBP: 00007f04fd625fa0 R08: 0000000000745a54 R09: 0000000000000000 [ 110.942582][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.950553][ T6119] R13: 00007f04fd626038 R14: 00007ffe6e2cc9d0 R15: 00007ffe6e2ccab8 [ 110.958533][ T6119] [ 110.961659][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.129437][ T6124] loop2: detected capacity change from 0 to 512 [ 111.136879][ T6124] EXT4-fs: Ignoring removed nobh option [ 111.208586][ T6124] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.43: invalid indirect mapped block 256 (level 2) [ 111.237162][ T6124] EXT4-fs (loop2): 2 truncates cleaned up [ 111.274881][ T6124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.328624][ T6126] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 113.599305][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.782623][ T6144] loop2: detected capacity change from 0 to 512 [ 113.854729][ T6144] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.50: corrupted in-inode xattr: invalid ea_ino [ 113.869596][ T6144] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.50: couldn't read orphan inode 15 (err -117) [ 113.883091][ T6144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.626620][ C1] hrtimer: interrupt took 50627 ns [ 114.971869][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.351145][ T6166] process 'syz.1.54' launched '/dev/fd/4' with NULL argv: empty string added [ 116.813540][ T27] audit: type=1800 audit(1793631842.885:2): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="file0" dev="overlay" ino=107 res=0 errno=0 [ 117.082499][ T6176] binder: 6169:6176 ioctl c0306201 0 returned -14 [ 117.174779][ T6163] loop3: detected capacity change from 0 to 1024 [ 117.195032][ T6163] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.217893][ T6163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.283312][ T6163] ip_tables: iptables: counters copy to user failed while replacing table [ 117.350156][ T6183] loop1: detected capacity change from 0 to 512 [ 117.362839][ T6183] EXT4-fs: Ignoring removed nobh option [ 117.383416][ T6183] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.58: invalid indirect mapped block 256 (level 2) [ 117.409360][ T6183] EXT4-fs (loop1): 2 truncates cleaned up [ 117.443153][ T6183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.623744][ T6186] loop2: detected capacity change from 0 to 512 [ 117.665665][ T6186] EXT4-fs: Ignoring removed nobh option [ 117.736124][ T6186] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.59: invalid indirect mapped block 256 (level 2) [ 118.241240][ T6182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.58: bg 0: block 5: invalid block bitmap [ 118.274995][ T6182] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 118.287673][ T6182] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.287673][ T6182] [ 118.297422][ T6182] EXT4-fs (loop1): Total free blocks count 0 [ 118.303461][ T6182] EXT4-fs (loop1): Free/Dirty block details [ 118.309431][ T6182] EXT4-fs (loop1): free_blocks=0 [ 118.314417][ T6182] EXT4-fs (loop1): dirty_blocks=33 [ 118.320015][ T6182] EXT4-fs (loop1): Block reservation details [ 118.326064][ T6182] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 118.344758][ T6186] EXT4-fs (loop2): 2 truncates cleaned up [ 118.359119][ T6186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.484065][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.571129][ T6191] trusted_key: encrypted_key: keylen parameter is missing [ 119.407595][ T6147] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 119.559967][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.193232][ T6203] loop0: detected capacity change from 0 to 128 [ 120.206189][ T6203] EXT4-fs: Ignoring removed orlov option [ 120.212150][ T6203] ext4: Unknown parameter 'fsuuid' [ 120.943534][ T6206] usb usb7: usbfs: process 6206 (syz.1.70) did not claim interface 0 before use [ 121.117082][ T5963] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.797576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.108204][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.450959][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 123.168363][ T6220] Invalid ELF header magic: != ELF [ 123.616196][ T6224] syz.1.65: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 123.634733][ T6224] CPU: 1 PID: 6224 Comm: syz.1.65 Not tainted syzkaller #0 [ 123.641968][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 123.652043][ T6224] Call Trace: [ 123.655347][ T6224] [ 123.658299][ T6224] dump_stack_lvl+0x18c/0x250 [ 123.663026][ T6224] ? show_regs_print_info+0x20/0x20 [ 123.668248][ T6224] ? load_image+0x420/0x420 [ 123.672776][ T6224] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 123.679218][ T6224] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 123.685740][ T6224] warn_alloc+0x246/0x340 [ 123.690076][ T6224] ? zone_watermark_ok_safe+0x230/0x230 [ 123.695631][ T6224] ? __mutex_trylock_common+0x160/0x270 [ 123.701177][ T6224] __vmalloc_node_range+0x129/0x1320 [ 123.706465][ T6224] ? tomoyo_path_number_perm+0x217/0x5e0 [ 123.712098][ T6224] ? rcu_is_watching+0x15/0xb0 [ 123.716864][ T6224] ? trace_contention_end+0x39/0xe0 [ 123.722057][ T6224] ? __mutex_lock+0x30d/0xce0 [ 123.726734][ T6224] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 123.732362][ T6224] ? dvb_dvr_do_ioctl+0x79/0x220 [ 123.737296][ T6224] ? tomoyo_path_number_perm+0x217/0x5e0 [ 123.742934][ T6224] ? free_vm_area+0x50/0x50 [ 123.747455][ T6224] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 123.752479][ T6224] vmalloc+0x79/0x90 [ 123.756373][ T6224] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 123.761396][ T6224] dvb_dvr_do_ioctl+0x12e/0x220 [ 123.766249][ T6224] dvb_usercopy+0x195/0x2b0 [ 123.770748][ T6224] ? dvb_dvr_release+0x3e0/0x3e0 [ 123.775699][ T6224] ? dvb_generic_ioctl+0xb0/0xb0 [ 123.780646][ T6224] ? dvb_dvr_poll+0x230/0x230 [ 123.785315][ T6224] dvb_dvr_ioctl+0x29/0x30 [ 123.789734][ T6224] __se_sys_ioctl+0xfd/0x170 [ 123.794330][ T6224] do_syscall_64+0x55/0xb0 [ 123.798745][ T6224] ? clear_bhb_loop+0x40/0x90 [ 123.803417][ T6224] ? clear_bhb_loop+0x40/0x90 [ 123.808091][ T6224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.813985][ T6224] RIP: 0033:0x7f04fd39fb19 [ 123.818413][ T6224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.838012][ T6224] RSP: 002b:00007f04fe222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.846425][ T6224] RAX: ffffffffffffffda RBX: 00007f04fd626180 RCX: 00007f04fd39fb19 [ 123.854397][ T6224] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 123.862362][ T6224] RBP: 00007f04fd437af8 R08: 0000000000000000 R09: 0000000000000000 [ 123.870325][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.878285][ T6224] R13: 00007f04fd626218 R14: 00007f04fd626180 R15: 00007ffe6e2ccab8 [ 123.886261][ T6224] [ 123.896810][ T6224] Mem-Info: [ 123.899967][ T6224] active_anon:13204 inactive_anon:0 isolated_anon:0 [ 123.899967][ T6224] active_file:18492 inactive_file:39976 isolated_file:0 [ 123.899967][ T6224] unevictable:768 dirty:321 writeback:0 [ 123.899967][ T6224] slab_reclaimable:10769 slab_unreclaimable:93453 [ 123.899967][ T6224] mapped:24410 shmem:8936 pagetables:548 [ 123.899967][ T6224] sec_pagetables:0 bounce:0 [ 123.899967][ T6224] kernel_misc_reclaimable:0 [ 123.899967][ T6224] free:1332961 free_pcp:11323 free_cma:0 [ 123.961363][ T6224] Node 0 active_anon:50816kB inactive_anon:0kB active_file:73968kB inactive_file:159704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97640kB dirty:1280kB writeback:0kB shmem:32308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10488kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no [ 125.316735][ T6224] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 125.394695][ T6224] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.451179][ T6224] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 125.457783][ T6224] Node 0 DMA32 free:1377108kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:101684kB inactive_anon:0kB active_file:73968kB inactive_file:158880kB unevictable:1536kB writepending:1380kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:17824kB local_pcp:212kB free_cma:0kB [ 125.522581][ T6232] loop3: detected capacity change from 0 to 512 [ 125.528988][ T6224] lowmem_reserve[]: 0 0 0 0 0 [ 125.533697][ T6224] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.561476][ T6232] EXT4-fs: Ignoring removed nobh option [ 125.604353][ T6232] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.72: invalid indirect mapped block 256 (level 2) [ 125.669138][ T6232] EXT4-fs (loop3): 2 truncates cleaned up [ 125.676188][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.737688][ T6224] lowmem_reserve[]: 0 0 0 0 0 [ 125.742423][ T6224] Node 1 Normal free:3898076kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21120kB local_pcp:11840kB free_cma:0kB [ 126.039273][ T6224] lowmem_reserve[]: 0 0 0 0 0 [ 126.835266][ T6239] Mass Storage Function, version: 2009/09/11 [ 126.841728][ T6239] LUN: removable file: (no medium) [ 126.893527][ T6231] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.72: bg 0: block 5: invalid block bitmap [ 127.009387][ T6231] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 127.022926][ T6231] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.022926][ T6231] [ 127.032636][ T6231] EXT4-fs (loop3): Total free blocks count 0 [ 127.038689][ T6231] EXT4-fs (loop3): Free/Dirty block details [ 127.044588][ T6231] EXT4-fs (loop3): free_blocks=0 [ 127.049582][ T6231] EXT4-fs (loop3): dirty_blocks=33 [ 127.054702][ T6231] EXT4-fs (loop3): Block reservation details [ 127.060717][ T6231] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 127.113869][ T6224] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 127.219205][ T6224] Node 0 DMA32: 185*4kB (UME) 1083*8kB (UME) 899*16kB (UME) 565*32kB (UME) 80*64kB (UME) 40*128kB (UME) 38*256kB (UM) 28*512kB (UM) 9*1024kB (M) 6*2048kB (M) 322*4096kB (UM) = 1416588kB [ 127.254150][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.263568][ T6224] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.311993][ T6224] Node 1 Normal: 177*4kB (UME) 53*8kB (UME) 45*16kB (UME) 55*32kB (UME) 19*64kB (UME) 2*128kB (UE) 1*256kB (U) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898076kB [ 127.354687][ T6241] loop0: detected capacity change from 0 to 512 [ 127.374787][ T6224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.383827][ T6241] EXT4-fs: Ignoring removed nobh option [ 127.393961][ T6224] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.414393][ T6224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.430469][ T6224] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.448385][ T6241] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.81: invalid indirect mapped block 256 (level 2) [ 127.475765][ T6224] 59900 total pagecache pages [ 127.491115][ T6224] 0 pages in swap cache [ 127.495280][ T6224] Free swap = 124996kB [ 127.507092][ T6241] EXT4-fs (loop0): 2 truncates cleaned up [ 127.507571][ T6224] Total swap = 124996kB [ 127.514074][ T6241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.530657][ T6224] 2097051 pages RAM [ 127.535744][ T6224] 0 pages HighMem/MovableOnly [ 127.544270][ T6224] 421729 pages reserved [ 127.548709][ T6224] 0 pages cma reserved [ 128.230115][ T6240] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.81: bg 0: block 5: invalid block bitmap [ 128.776496][ T6240] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 128.789178][ T6240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.789178][ T6240] [ 128.799030][ T6240] EXT4-fs (loop0): Total free blocks count 0 [ 128.805178][ T6240] EXT4-fs (loop0): Free/Dirty block details [ 128.811179][ T6240] EXT4-fs (loop0): free_blocks=0 [ 128.816134][ T6240] EXT4-fs (loop0): dirty_blocks=33 [ 128.821973][ T6240] EXT4-fs (loop0): Block reservation details [ 128.828030][ T6240] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 128.925561][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.559431][ T6259] loop2: detected capacity change from 0 to 128 [ 129.573919][ T6259] EXT4-fs: Ignoring removed orlov option [ 129.582569][ T6259] ext4: Unknown parameter 'fsuuid' [ 131.079868][ T6269] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 131.161865][ T6269] netlink: 64 bytes leftover after parsing attributes in process `syz.0.75'. [ 131.170988][ T6269] netlink: 64 bytes leftover after parsing attributes in process `syz.0.75'. [ 131.179805][ T6269] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 131.197845][ T6269] loop0: detected capacity change from 0 to 512 [ 131.444235][ T6269] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #2: comm syz.0.75: corrupted xattr block 255: invalid header [ 131.460755][ T6269] EXT4-fs (loop0): Remounting filesystem read-only [ 131.467389][ T6269] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 131.484447][ T6269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.843456][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.070776][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.079576][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.266262][ T6290] loop2: detected capacity change from 0 to 4096 [ 135.353253][ T6290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.386677][ T6290] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.515864][ T6290] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 135.544939][ T6290] System zones: 0-5 [ 135.567396][ T6290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.566654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 138.089118][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.172978][ T6312] loop1: detected capacity change from 0 to 512 [ 138.211883][ T6312] ext2: Unknown parameter 'pcr' [ 144.751676][ T6333] Bluetooth: MGMT ver 1.22 [ 145.353489][ T6338] loop3: detected capacity change from 0 to 128 [ 145.365319][ T6338] EXT4-fs: Ignoring removed orlov option [ 145.371260][ T6338] ext4: Unknown parameter 'fsuuid' [ 146.043061][ T6340] sctp: [Deprecated]: syz.1.91 (pid 6340) Use of int in max_burst socket option. [ 146.043061][ T6340] Use struct sctp_assoc_value instead [ 146.171490][ T6339] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.240919][ T6346] loop0: detected capacity change from 0 to 256 [ 146.251225][ T6346] exfat: Deprecated parameter 'namecase' [ 146.257530][ T6346] exfat: Deprecated parameter 'namecase' [ 146.341874][ T6346] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 147.237809][ T6352] loop0: detected capacity change from 0 to 512 [ 147.280901][ T6352] EXT4-fs: Ignoring removed nobh option [ 147.330029][ T6352] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.93: invalid indirect mapped block 256 (level 2) [ 147.480295][ T6352] EXT4-fs (loop0): 2 truncates cleaned up [ 147.501465][ T6352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.327911][ T6351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.93: bg 0: block 5: invalid block bitmap [ 148.668631][ T6351] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 148.681037][ T6351] EXT4-fs (loop0): This should not happen!! Data will be lost [ 148.681037][ T6351] [ 148.690751][ T6351] EXT4-fs (loop0): Total free blocks count 0 [ 148.696782][ T6351] EXT4-fs (loop0): Free/Dirty block details [ 148.702684][ T6351] EXT4-fs (loop0): free_blocks=0 [ 148.707776][ T6351] EXT4-fs (loop0): dirty_blocks=33 [ 148.712897][ T6351] EXT4-fs (loop0): Block reservation details [ 148.718928][ T6351] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 148.942686][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.036836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 149.956798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #14a!!! [ 150.714090][ T27] audit: type=1326 audit(1793631877.145:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fd39fb19 code=0x7ffc0000 [ 151.042156][ T27] audit: type=1326 audit(1793631877.175:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fd39fb19 code=0x7ffc0000 [ 151.172733][ T27] audit: type=1326 audit(1793631877.205:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04fd39fb19 code=0x7ffc0000 [ 151.197174][ T27] audit: type=1326 audit(1793631877.235:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fd39fb19 code=0x7ffc0000 [ 151.253962][ T27] audit: type=1326 audit(1793631877.235:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fd39fb19 code=0x7ffc0000 [ 151.282315][ T27] audit: type=1326 audit(1793631877.345:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04fd36034e code=0x7ffc0000 [ 151.347068][ T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.352840][ T27] audit: type=1326 audit(1793631877.375:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04fd39f7ab code=0x7ffc0000 [ 151.385421][ T27] audit: type=1326 audit(1793631877.385:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04fd39f7ab code=0x7ffc0000 [ 151.421793][ T27] audit: type=1326 audit(1793631877.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04fd39f7ab code=0x7ffc0000 [ 151.450431][ T27] audit: type=1326 audit(1793631877.475:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04fd39f7ab code=0x7ffc0000 [ 151.722302][ T6379] IPVS: sed: FWM 3 0x00000003 - no destination available [ 151.758513][ T5873] IPVS: starting estimator thread 0... [ 153.606857][ T6380] IPVS: using max 24 ests per chain, 57600 per kthread [ 153.677338][ T789] usb 2-1: device descriptor read/all, error -71 [ 154.813691][ T6396] loop1: detected capacity change from 0 to 512 [ 154.842296][ T6395] loop2: detected capacity change from 0 to 1024 [ 154.852718][ T6396] EXT4-fs: Ignoring removed nobh option [ 154.860048][ T6395] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.879064][ T6395] EXT4-fs: Ignoring removed oldalloc option [ 154.911131][ T6396] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.106: invalid indirect mapped block 256 (level 2) [ 154.942038][ T6396] EXT4-fs (loop1): 2 truncates cleaned up [ 154.958561][ T6396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.006111][ T6395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.025436][ T6395] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.655235][ T6394] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.106: bg 0: block 5: invalid block bitmap [ 156.071556][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 156.106482][ T6394] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 156.118989][ T6394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.118989][ T6394] [ 156.128704][ T6394] EXT4-fs (loop1): Total free blocks count 0 [ 156.134693][ T6394] EXT4-fs (loop1): Free/Dirty block details [ 156.140635][ T6394] EXT4-fs (loop1): free_blocks=0 [ 156.145577][ T6394] EXT4-fs (loop1): dirty_blocks=33 [ 156.150747][ T6394] EXT4-fs (loop1): Block reservation details [ 156.156768][ T6394] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 156.507272][ T5873] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 156.562601][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.834035][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.851679][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.364970][ T6416] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.901558][ T5873] usb 1-1: Firmware version (0.0) predates our first public release. [ 158.910030][ T5873] usb 1-1: Please update to version 0.2 or newer [ 159.051906][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'. [ 159.139016][ T5873] usb 1-1: USB disconnect, device number 2 [ 159.755570][ T6426] loop2: detected capacity change from 0 to 512 [ 162.931852][ T6452] loop2: detected capacity change from 0 to 1024 [ 162.943031][ T6452] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.188441][ T6452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.243487][ T6450] ip_tables: iptables: counters copy to user failed while replacing table [ 163.508899][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.419442][ T5872] IPVS: starting estimator thread 0... [ 164.545038][ T6470] IPVS: using max 20 ests per chain, 48000 per kthread [ 165.572083][ T6483] syz.0.120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 167.217672][ T6488] loop2: detected capacity change from 0 to 512 [ 167.224994][ T6488] EXT4-fs: Ignoring removed nobh option [ 167.268148][ T6488] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.124: invalid indirect mapped block 256 (level 2) [ 167.297358][ T6488] EXT4-fs (loop2): 2 truncates cleaned up [ 167.322815][ T6488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.045084][ T6487] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.124: bg 0: block 5: invalid block bitmap [ 168.245444][ T6487] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 168.257890][ T6487] EXT4-fs (loop2): This should not happen!! Data will be lost [ 168.257890][ T6487] [ 168.267635][ T6487] EXT4-fs (loop2): Total free blocks count 0 [ 168.273636][ T6487] EXT4-fs (loop2): Free/Dirty block details [ 168.279891][ T6487] EXT4-fs (loop2): free_blocks=0 [ 168.284851][ T6487] EXT4-fs (loop2): dirty_blocks=33 [ 168.290649][ T6487] EXT4-fs (loop2): Block reservation details [ 168.296777][ T6487] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 169.093413][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.336248][ T6514] loop2: detected capacity change from 0 to 512 [ 169.381491][ T6514] EXT4-fs: Ignoring removed orlov option [ 169.761372][ T6514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.001787][ T6514] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.570251][ T6525] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz.2.128: invalid size [ 170.582877][ T6525] EXT4-fs (loop2): Remounting filesystem read-only [ 170.974225][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.998405][ T50] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.014300][ T50] __quota_error: 2 callbacks suppressed [ 171.014313][ T50] Quota error (device loop2): write_blk: dquota write failed [ 171.027852][ T50] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 171.132747][ T6527] loop2: detected capacity change from 0 to 512 [ 171.144354][ T6527] EXT4-fs: Ignoring removed nobh option [ 171.191869][ T6527] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.130: invalid indirect mapped block 256 (level 2) [ 171.214885][ T6527] EXT4-fs (loop2): 2 truncates cleaned up [ 171.235281][ T6527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.044399][ T6526] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.130: bg 0: block 5: invalid block bitmap [ 172.071960][ T6526] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 172.084907][ T6526] EXT4-fs (loop2): This should not happen!! Data will be lost [ 172.084907][ T6526] [ 172.094831][ T6526] EXT4-fs (loop2): Total free blocks count 0 [ 172.100914][ T6526] EXT4-fs (loop2): Free/Dirty block details [ 172.106903][ T6526] EXT4-fs (loop2): free_blocks=0 [ 172.111885][ T6526] EXT4-fs (loop2): dirty_blocks=33 [ 172.117115][ T6526] EXT4-fs (loop2): Block reservation details [ 172.123170][ T6526] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 172.431118][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.081906][ T6510] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.090990][ T6510] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.133546][ T6510] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.142575][ T6510] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.198274][ T6557] loop3: detected capacity change from 0 to 8 [ 175.729118][ T6563] usb usb7: usbfs: process 6563 (syz.0.139) did not claim interface 0 before use [ 175.840647][ T6557] squashfs image failed sanity check [ 175.898122][ T6339] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.904754][ T6584] trusted_key: encrypted_key: keylen parameter is missing [ 178.974064][ T6595] loop3: detected capacity change from 0 to 64 [ 178.986933][ T6595] hfs: unable to parse mount options [ 180.008278][ T6339] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.838651][ T6605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.148'. [ 180.849632][ T6605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.983850][ T6618] loop0: detected capacity change from 0 to 512 [ 183.112546][ T6623] CIFS mount error: No usable UNC path provided in device string! [ 183.112546][ T6623] [ 183.122967][ T6623] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.378811][ T6624] trusted_key: encrypted_key: keylen parameter is missing [ 185.292425][ T6641] loop2: detected capacity change from 0 to 512 [ 187.065411][ T6632] loop3: detected capacity change from 0 to 32768 [ 187.437644][ T6641] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 187.445781][ T6641] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.157: corrupted in-inode xattr: e_value size too large [ 187.468837][ T6632] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 187.468837][ T6632] [ 187.481585][ T6641] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.157: couldn't read orphan inode 15 (err -117) [ 187.493602][ T6632] ERROR: (device loop3): remounting filesystem as read-only [ 187.502205][ T6641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.536457][ T6632] ialloc: diAlloc returned -5! [ 187.566367][ T5872] IPVS: starting estimator thread 0... [ 188.638519][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.743297][ T6647] IPVS: using max 18 ests per chain, 43200 per kthread [ 191.358537][ T6666] jffs2: notice: (6666) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.643385][ T6687] loop2: detected capacity change from 0 to 256 [ 193.656334][ T6687] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.374417][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380806][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.729768][ T6695] loop2: detected capacity change from 0 to 1024 [ 199.562513][ T6728] loop2: detected capacity change from 0 to 512 [ 200.510505][ T6739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.238045][ T6746] warning: `syz.1.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 201.263713][ T6744] FAULT_INJECTION: forcing a failure. [ 201.263713][ T6744] name failslab, interval 1, probability 0, space 0, times 1 [ 201.263777][ T6744] CPU: 1 PID: 6744 Comm: syz.0.182 Not tainted syzkaller #0 [ 201.263797][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 201.263808][ T6744] Call Trace: [ 201.263816][ T6744] [ 201.263824][ T6744] dump_stack_lvl+0x18c/0x250 [ 201.263856][ T6744] ? show_regs_print_info+0x20/0x20 [ 201.263881][ T6744] ? load_image+0x420/0x420 [ 201.263906][ T6744] ? __might_sleep+0xe0/0xe0 [ 201.263932][ T6744] ? __lock_acquire+0x7eb0/0x7eb0 [ 201.263959][ T6744] should_fail_ex+0x394/0x4c0 [ 201.263987][ T6744] should_failslab+0x9/0x20 [ 201.264003][ T6744] slab_pre_alloc_hook+0x59/0x300 [ 201.264028][ T6744] kmem_cache_alloc+0x5a/0x2d0 [ 201.264045][ T6744] ? __kernfs_new_node+0xe5/0x7f0 [ 201.264079][ T6744] __kernfs_new_node+0xe5/0x7f0 [ 201.264112][ T6744] ? kernfs_new_node+0x260/0x260 [ 201.264153][ T6744] ? up_write+0x1be/0x410 [ 201.264178][ T6744] kernfs_new_node+0x14c/0x260 [ 201.264209][ T6744] __kernfs_create_file+0x4b/0x2e0 [ 201.264232][ T6744] sysfs_add_file_mode_ns+0x237/0x2f0 [ 201.264262][ T6744] sysfs_merge_group+0x184/0x320 [ 201.264288][ T6744] ? sysfs_remove_groups+0xa0/0xa0 [ 201.264306][ T6744] ? device_add_attrs+0x725/0x830 [ 201.264329][ T6744] ? device_add_class_symlinks+0x240/0x240 [ 201.264361][ T6744] dpm_sysfs_add+0xd2/0x270 [ 201.264385][ T6744] device_add+0x55c/0xc40 [ 201.264408][ T6744] device_create+0x26a/0x300 [ 201.264433][ T6744] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 201.264455][ T6744] ? _raw_spin_unlock+0x40/0x40 [ 201.264477][ T6744] ? root_device_unregister+0x100/0x100 [ 201.264496][ T6744] ? update_attr+0x550/0x730 [ 201.264523][ T6744] ? is_console_locked+0x9/0x20 [ 201.264544][ T6744] ? csi_J+0xa16/0xea0 [ 201.264569][ T6744] vcs_make_sysfs+0x32/0x80 [ 201.264593][ T6744] vc_allocate+0x60c/0x6e0 [ 201.264620][ T6744] ? vc_cons_allocated+0x70/0x70 [ 201.264651][ T6744] con_install+0xa0/0x720 [ 201.264673][ T6744] ? mutex_lock_nested+0x20/0x20 [ 201.264694][ T6744] ? show_tty_active+0x30/0x30 [ 201.264727][ T6744] tty_init_dev+0xd3/0x4c0 [ 201.264752][ T6744] tty_open+0x7e2/0xd90 [ 201.264780][ T6744] ? __lock_acquire+0x7eb0/0x7eb0 [ 201.264806][ T6744] ? tty_compat_ioctl+0x8b0/0x8b0 [ 201.264831][ T6744] ? do_raw_spin_unlock+0x121/0x230 [ 201.264859][ T6744] chrdev_open+0x58c/0x600 [ 201.264885][ T6744] ? cd_forget+0x160/0x160 [ 201.264913][ T6744] ? fsnotify_perm+0x3ed/0x5e0 [ 201.264939][ T6744] do_dentry_open+0x880/0x14b0 [ 201.264966][ T6744] ? cd_forget+0x160/0x160 [ 201.264994][ T6744] path_openat+0x284f/0x3270 [ 201.265039][ T6744] ? do_sys_openat2+0xda/0x1d0 [ 201.265061][ T6744] ? __x64_sys_openat+0x139/0x160 [ 201.265087][ T6744] ? verify_lock_unused+0x140/0x140 [ 201.265110][ T6744] ? do_filp_open+0x430/0x430 [ 201.265151][ T6744] do_filp_open+0x1f2/0x430 [ 201.265177][ T6744] ? vfs_tmpfile+0x620/0x620 [ 201.265224][ T6744] ? _raw_spin_unlock+0x28/0x40 [ 201.265244][ T6744] ? alloc_fd+0x590/0x640 [ 201.265278][ T6744] do_sys_openat2+0x134/0x1d0 [ 201.265306][ T6744] ? do_sys_open+0xe0/0xe0 [ 201.265331][ T6744] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 201.265362][ T6744] ? lock_chain_count+0x20/0x20 [ 201.265390][ T6744] __x64_sys_openat+0x139/0x160 [ 201.265419][ T6744] do_syscall_64+0x55/0xb0 [ 201.265441][ T6744] ? clear_bhb_loop+0x40/0x90 [ 201.265464][ T6744] ? clear_bhb_loop+0x40/0x90 [ 201.265488][ T6744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.265507][ T6744] RIP: 0033:0x7fd567f6034e [ 201.265523][ T6744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.265538][ T6744] RSP: 002b:00007fd568da1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.265560][ T6744] RAX: ffffffffffffffda RBX: 00007fd568da26c0 RCX: 00007fd567f6034e [ 201.265574][ T6744] RDX: 0000000000000002 RSI: 00007fd568da1c00 RDI: ffffffffffffff9c [ 201.265588][ T6744] RBP: 00007fd568037af8 R08: 0000000000000000 R09: 0000000000000000 [ 201.265601][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.265613][ T6744] R13: 00007fd568226038 R14: 00007fd568225fa0 R15: 00007fffbffe0528 [ 201.265645][ T6744] [ 201.767985][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 201.768034][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 201.768070][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 201.768094][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 202.640626][ T6758] loop3: detected capacity change from 0 to 512 [ 205.188034][ T6775] loop2: detected capacity change from 0 to 8 [ 205.797475][ T6775] squashfs image failed sanity check [ 209.494327][ T6819] loop0: detected capacity change from 0 to 8 [ 209.521354][ T6819] squashfs image failed sanity check [ 209.675231][ T6822] loop2: detected capacity change from 0 to 512 [ 210.998319][ T6822] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 211.042303][ T6822] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.202: invalid indirect mapped block 256 (level 1) [ 211.226622][ T6822] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.202: invalid indirect mapped block 2683928664 (level 1) [ 211.275962][ T6822] EXT4-fs (loop2): 1 truncate cleaned up [ 211.287809][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.387628][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 212.718856][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.716211][ T6856] loop0: detected capacity change from 0 to 512 [ 215.756803][ T6856] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 215.823243][ T6856] EXT4-fs (loop0): 1 truncate cleaned up [ 215.852022][ T6856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.770974][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.999772][ T6874] loop0: detected capacity change from 0 to 128 [ 218.882074][ T6886] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 218.908400][ T6886] CIFS mount error: No usable UNC path provided in device string! [ 218.908400][ T6886] [ 218.918653][ T6886] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 221.876205][ T6906] loop3: detected capacity change from 0 to 256 [ 221.891873][ T6907] loop0: detected capacity change from 0 to 512 [ 221.930896][ T6907] EXT4-fs: Ignoring removed nobh option [ 221.970267][ T6907] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.223: invalid indirect mapped block 256 (level 2) [ 221.985059][ T6907] EXT4-fs (loop0): 2 truncates cleaned up [ 221.992349][ T6907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.780436][ T6904] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.223: bg 0: block 5: invalid block bitmap [ 222.857169][ T6904] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 222.870427][ T6904] EXT4-fs (loop0): This should not happen!! Data will be lost [ 222.870427][ T6904] [ 222.880148][ T6904] EXT4-fs (loop0): Total free blocks count 0 [ 222.886140][ T6904] EXT4-fs (loop0): Free/Dirty block details [ 222.892097][ T6904] EXT4-fs (loop0): free_blocks=0 [ 222.897094][ T6904] EXT4-fs (loop0): dirty_blocks=33 [ 222.902214][ T6904] EXT4-fs (loop0): Block reservation details [ 222.908286][ T6904] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 223.399576][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.900091][ T6930] xt_hashlimit: size too large, truncated to 1048576 [ 224.907458][ T6930] xt_hashlimit: max too large, truncated to 1048576 [ 224.914782][ T6930] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 225.019906][ T6933] loop3: detected capacity change from 0 to 512 [ 225.035308][ T6933] EXT4-fs: Ignoring removed nobh option [ 225.261373][ T6933] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.228: invalid indirect mapped block 256 (level 2) [ 225.289892][ T6933] EXT4-fs (loop3): 2 truncates cleaned up [ 225.464220][ T6933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.036815][ T6938] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 227.305686][ T6944] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 227.317456][ T6944] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 227.325869][ T6944] CPU: 1 PID: 6944 Comm: syz.0.238 Not tainted syzkaller #0 [ 227.333157][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 227.343215][ T6944] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 227.349567][ T6944] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 227.369183][ T6944] RSP: 0018:ffffc900037ef8e0 EFLAGS: 00010002 [ 227.375261][ T6944] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 227.383244][ T6944] RDX: ffffc9000bbb9000 RSI: 0000000000004379 RDI: 000000000000437a [ 227.391222][ T6944] RBP: ffffc900037ef9f8 R08: 0000000000000003 R09: 0000000000000004 [ 227.399200][ T6944] R10: dffffc0000000000 R11: fffff520006fdf1c R12: 0000000000000000 [ 227.407180][ T6944] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 227.415152][ T6944] FS: 00007fd568da26c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 227.424086][ T6944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.430682][ T6944] CR2: 00007fd568d80ff8 CR3: 0000000031508000 CR4: 00000000003506e0 [ 227.438672][ T6944] Call Trace: [ 227.441958][ T6944] [ 227.444883][ T6944] ? percpu_ref_switch_to_atomic+0xa0/0xa0 [ 227.450689][ T6944] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 227.456143][ T6944] ? _raw_spin_lock+0x40/0x40 [ 227.460815][ T6944] percpu_ref_kill_and_confirm+0x9b/0x130 [ 227.466532][ T6944] __mddev_suspend+0x2d1/0x630 [ 227.471292][ T6944] ? rcu_read_unlock+0xa0/0xa0 [ 227.476050][ T6944] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 227.481679][ T6944] ? lockdep_hardirqs_on+0x98/0x150 [ 227.486871][ T6944] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 227.492500][ T6944] ? raid_disks_store+0xa7/0x550 [ 227.497432][ T6944] raid_disks_store+0xb8/0x550 [ 227.502194][ T6944] ? lockdep_hardirqs_on+0x98/0x150 [ 227.507382][ T6944] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 227.513008][ T6944] ? raid_disks_show+0x140/0x140 [ 227.517941][ T6944] md_attr_store+0x19c/0x390 [ 227.522519][ T6944] ? sysfs_kf_read+0x360/0x360 [ 227.527275][ T6944] kernfs_fop_write_iter+0x3a4/0x520 [ 227.532549][ T6944] vfs_write+0x474/0x9a0 [ 227.536788][ T6944] ? file_end_write+0x250/0x250 [ 227.541635][ T6944] ? __fget_files+0x3fc/0x460 [ 227.546310][ T6944] ? __fdget_pos+0x2a3/0x330 [ 227.550892][ T6944] ? ksys_write+0x74/0x260 [ 227.555304][ T6944] ksys_write+0x151/0x260 [ 227.559629][ T6944] ? __ia32_sys_read+0x90/0x90 [ 227.564384][ T6944] ? lockdep_hardirqs_on+0x98/0x150 [ 227.569570][ T6944] do_syscall_64+0x55/0xb0 [ 227.573977][ T6944] ? clear_bhb_loop+0x40/0x90 [ 227.578648][ T6944] ? clear_bhb_loop+0x40/0x90 [ 227.583319][ T6944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.589204][ T6944] RIP: 0033:0x7fd567f9fb19 [ 227.593608][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.613201][ T6944] RSP: 002b:00007fd568da2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.621613][ T6944] RAX: ffffffffffffffda RBX: 00007fd568225fa0 RCX: 00007fd567f9fb19 [ 227.629575][ T6944] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 227.637537][ T6944] RBP: 00007fd568037af8 R08: 0000000000000000 R09: 0000000000000000 [ 227.645498][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.653456][ T6944] R13: 00007fd568226038 R14: 00007fd568225fa0 R15: 00007fffbffe0528 [ 227.661425][ T6944] [ 227.664456][ T6944] Modules linked in: [ 227.668343][ T6944] ---[ end trace 0000000000000000 ]--- [ 227.673781][ T6944] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 227.680106][ T6944] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 227.699700][ T6944] RSP: 0018:ffffc900037ef8e0 EFLAGS: 00010002 [ 227.705784][ T6944] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 227.713743][ T6944] RDX: ffffc9000bbb9000 RSI: 0000000000004379 RDI: 000000000000437a [ 227.721702][ T6944] RBP: ffffc900037ef9f8 R08: 0000000000000003 R09: 0000000000000004 [ 227.729659][ T6944] R10: dffffc0000000000 R11: fffff520006fdf1c R12: 0000000000000000 [ 227.737618][ T6944] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 227.745577][ T6944] FS: 00007fd568da26c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 227.754493][ T6944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.761063][ T6944] CR2: 00007fd568d80ff8 CR3: 0000000031508000 CR4: 00000000003506e0 [ 227.769026][ T6944] Kernel panic - not syncing: Fatal exception [ 227.775295][ T6944] Kernel Offset: disabled [ 227.779604][ T6944] Rebooting in 86400 seconds..