last executing test programs: 1m55.865683153s ago: executing program 3 (id=102): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m55.285736801s ago: executing program 3 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000009e140)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xc4) 1m55.020393603s ago: executing program 3 (id=107): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1m54.620461162s ago: executing program 3 (id=111): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0000008a3f00"}) r2 = syz_open_pts(r0, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000100)={0x2, 0x3, 0xb4e, 0x4}) 1m53.959671236s ago: executing program 3 (id=114): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b40)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x5, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) 1m53.397226133s ago: executing program 3 (id=118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = io_uring_setup(0x207e05, &(0x7f00000000c0)={0x0, 0x5b02, 0x10, 0x3, 0x2002}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000240)=0x9) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x3280) close_range(r1, 0xffffffffffffffff, 0x0) 1m45.22721598s ago: executing program 4 (id=174): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlink(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)='./file0\x00') r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(r0, &(0x7f0000000200)='./bus/file0\x00', 0x111) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 1m45.005151015s ago: executing program 0 (id=175): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m44.91748981s ago: executing program 4 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) close(0xffffffffffffffff) close(r0) 1m44.895506697s ago: executing program 0 (id=177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0xffffffff, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x0) read(r2, 0x0, 0x0) 1m44.518970359s ago: executing program 4 (id=178): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x201, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acb"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m44.042302266s ago: executing program 0 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0x4) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m43.472784659s ago: executing program 0 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001100)={[{@utf8}, {@utf8no}, {@fat=@nfs}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m43.348531849s ago: executing program 0 (id=183): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) close(0x3) 1m42.933083145s ago: executing program 0 (id=185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1m42.341676457s ago: executing program 32 (id=185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1m42.308360155s ago: executing program 4 (id=188): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 1m42.114127105s ago: executing program 4 (id=190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000009740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}], 0x1, 0x8010) 1m40.293039291s ago: executing program 4 (id=194): r0 = socket(0xa, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mmap(&(0x7f0000adf000/0x1000)=nil, 0x1000, 0x0, 0x82999772405174b0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x3e3, 0x4) 1m39.647600567s ago: executing program 33 (id=194): r0 = socket(0xa, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mmap(&(0x7f0000adf000/0x1000)=nil, 0x1000, 0x0, 0x82999772405174b0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x3e3, 0x4) 1m38.177134845s ago: executing program 34 (id=118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = io_uring_setup(0x207e05, &(0x7f00000000c0)={0x0, 0x5b02, 0x10, 0x3, 0x2002}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000240)=0x9) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x3280) close_range(r1, 0xffffffffffffffff, 0x0) 1m26.064310224s ago: executing program 2 (id=228): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x5) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x7, 0x4, 0xea1, 0x3, 0x6, "8dc59cefadb94243"}) 1m25.012378916s ago: executing program 2 (id=222): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x12, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f4d5, 0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 1m24.665044022s ago: executing program 2 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001d"], 0x24}}, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000400), 0x2000011a) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2020, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.217493395s ago: executing program 2 (id=233): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$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") syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1m23.497160359s ago: executing program 2 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR=']']}]}}]}]}]}}]}, 0x78}}, 0x200400d4) 1m22.73648125s ago: executing program 2 (id=244): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000009d000085000000860000008500000050000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m22.314959345s ago: executing program 35 (id=244): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000009d000085000000860000008500000050000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 38.116368288s ago: executing program 8 (id=494): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107242, 0x99) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101142, 0x94) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x1, 0x3, 0x80000007f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x4, 0x0, 0x0, 0x3}) 36.73370315s ago: executing program 1 (id=502): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 36.704474456s ago: executing program 8 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x70bd2c, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 36.563136956s ago: executing program 1 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 36.398577225s ago: executing program 8 (id=507): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000080)=ANY=[], 0xfb, 0x1207, &(0x7f0000002480)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file2\x00', 0x1200800, &(0x7f0000000d80)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="a6af891d142bbbe86c2b6cb36b33222faaa95d42ac9eefc3f3124a519189b105d77c5f5267121c1709f9b52c28984e911a7c212f5fe7e889b44e4ca40b3ebaece2616d6362b1693c449f8817ba2c676a9a594ab102657ed11fd5212c751748b9b6b44eb6b3e3f94bf5d923ae1ec51b7df1c05c477d2895a622af38e383ecf19fa373261516c29d9224042ffdb4d9ccff9b0aaacfb34448ace2e91deb11b7b187780c8ef4700bcb", @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRESHEX], 0x0, 0x1df, &(0x7f0000000380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x60a67833d935e3b, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) 36.164482912s ago: executing program 1 (id=510): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001a40)='veno\x00', 0x5) sendfile(r0, r1, 0x0, 0x8000002b) 35.733223088s ago: executing program 8 (id=512): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x4) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 35.584060715s ago: executing program 8 (id=515): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) 35.449040276s ago: executing program 8 (id=516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) 27.404602132s ago: executing program 1 (id=510): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001a40)='veno\x00', 0x5) sendfile(r0, r1, 0x0, 0x8000002b) 20.277111457s ago: executing program 36 (id=516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) 18.927329334s ago: executing program 1 (id=510): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001a40)='veno\x00', 0x5) sendfile(r0, r1, 0x0, 0x8000002b) 17.339102663s ago: executing program 5 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) 17.125520619s ago: executing program 5 (id=606): r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x1000, 0x3, 0x0, 0x18, 0x0, 0x0, {0x3}}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x84, 0xcd984632594afaee}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 16.96404523s ago: executing program 5 (id=608): ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 16.790303004s ago: executing program 5 (id=609): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) 16.671346266s ago: executing program 5 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x1901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r1, &(0x7f0000000180)='\x00', 0x160) 16.209935477s ago: executing program 5 (id=614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002ac0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="7a97d377a1dc17c5", 0x8}], 0x1, 0x0, 0x0, 0x20000004}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) 10.367630103s ago: executing program 7 (id=638): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6607, &(0x7f0000000200)={0x0, 0x357a, 0x40, 0x3, 0x212}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xb, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000007b01"]) 10.129570295s ago: executing program 7 (id=639): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 9.917574355s ago: executing program 7 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xb5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x20000800) 9.556921213s ago: executing program 7 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffef, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.197143008s ago: executing program 7 (id=643): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1, 0x3, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x0, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200, 0x2, 0x42, 0x8000, 0xfffffffc, r2, r3, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.85747164s ago: executing program 7 (id=644): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010028bd7000fe03000100000000080001002c"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 6.720850546s ago: executing program 6 (id=647): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0xe4) 6.248197844s ago: executing program 6 (id=648): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d64697361626c652c6d6f64653d6c66732c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c6e6f71756f74612c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c686561702c616c6c6f635f6d6f64653d72657573652c00d1d40380dcbac32451ce729413dffc8d82d943990413d56ca60200000000000000f37ab9e5f6fd"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='\v', 0x1}], 0x1) r2 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r2, 0x3, 0x20fe, 0x7000000) 5.14656245s ago: executing program 6 (id=651): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 3.936295846s ago: executing program 6 (id=653): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x845, &(0x7f00000000c0)={[{@fat=@flush}, {@shortname_winnt}, {@rodir}, {@fat=@showexec}, {@utf8no}]}, 0x0, 0x274, &(0x7f0000000780)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 3.711784533s ago: executing program 6 (id=654): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0xf}}, {@noblock_validity}, {@jqfmt_vfsv1}, {@norecovery}, {@acl}, {@errors_remount}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x201, 0x0) pwritev2(r1, &(0x7f0000000200)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) fallocate(r0, 0x20, 0x0, 0x7000000) 3.395487823s ago: executing program 6 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) close(r1) 2.583643123s ago: executing program 37 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r1) 2.540984068s ago: executing program 1 (id=510): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001a40)='veno\x00', 0x5) sendfile(r0, r1, 0x0, 0x8000002b) 1.69210265s ago: executing program 9 (id=659): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x80}}) socket$inet(0x2, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.321376071s ago: executing program 9 (id=660): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 838.625913ms ago: executing program 9 (id=661): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x7b46, {0x5, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e1cff00170400000034130000000000000000000000000000e600"}}) 609.877241ms ago: executing program 9 (id=662): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1}, 0x40002000) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000240)=0x4) 142.232786ms ago: executing program 9 (id=663): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x3d) ptrace(0x4208, r0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xc) 0s ago: executing program 9 (id=664): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 790 [ 156.215004][ T7071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.215040][ T7071] ? do_sys_openat2+0x165/0x1d0 [ 156.215074][ T7071] ? __lock_acquire+0xad5/0xd80 [ 156.215125][ T7071] ? __fget_files+0x2a/0x420 [ 156.215148][ T7071] ? __fget_files+0x2a/0x420 [ 156.215182][ T7071] ? f2fs_ioctl+0x157/0x420 [ 156.215213][ T7071] ? __pfx_f2fs_ioctl+0x10/0x10 [ 156.215245][ T7071] __se_sys_ioctl+0xf1/0x160 [ 156.215278][ T7071] do_syscall_64+0xf3/0x230 [ 156.215301][ T7071] ? clear_bhb_loop+0x45/0xa0 [ 156.215328][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.215349][ T7071] RIP: 0033:0x7fae4bd8d169 [ 156.215370][ T7071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.215388][ T7071] RSP: 002b:00007fae4cb63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.215413][ T7071] RAX: ffffffffffffffda RBX: 00007fae4bfa5fa0 RCX: 00007fae4bd8d169 [ 156.215428][ T7071] RDX: 0000200000000300 RSI: 000000008004587d RDI: 0000000000000005 [ 156.215442][ T7071] RBP: 00007fae4be0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.215455][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.215468][ T7071] R13: 0000000000000000 R14: 00007fae4bfa5fa0 R15: 00007ffc37ce8c28 [ 156.215508][ T7071] [ 156.779982][ T7071] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 157.027381][ T7119] loop6: detected capacity change from 0 to 32768 [ 157.048393][ T7119] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.291 (7119) [ 157.100680][ T7119] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.131021][ T7119] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 157.243710][ T7152] netlink: 96 bytes leftover after parsing attributes in process `syz.8.297'. [ 157.297271][ T7119] BTRFS info (device loop6): rebuilding free space tree [ 157.421122][ T7119] BTRFS info (device loop6): disabling free space tree [ 157.468340][ T7119] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.502666][ T7119] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.870771][ T7163] loop8: detected capacity change from 0 to 8192 [ 157.940215][ T7173] BTRFS info (device loop6): balance: start -d -m [ 157.952700][ T7163] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.032883][ T7173] BTRFS info (device loop6): relocating block group 6881280 flags data|metadata [ 158.279010][ T7173] BTRFS info (device loop6): relocating block group 5242880 flags data|metadata [ 158.372635][ T7173] BTRFS info (device loop6): balance: canceled [ 158.553478][ T6580] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.217802][ T7199] loop5: detected capacity change from 0 to 4096 [ 159.381520][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.309'. [ 159.434662][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.526597][ T7219] bridge_slave_1 (unregistering): left allmulticast mode [ 159.554164][ T7219] bridge_slave_1 (unregistering): left promiscuous mode [ 159.562903][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.289966][ T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 160.332549][ T7241] loop7: detected capacity change from 0 to 2048 [ 160.485505][ T7241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.534708][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 160.605463][ T47] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 160.664446][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.715391][ T7241] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.743585][ T47] usb 7-1: Product: syz [ 160.776194][ T47] usb 7-1: Manufacturer: syz [ 160.780850][ T47] usb 7-1: SerialNumber: syz [ 160.846773][ T7241] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 160.950481][ T7241] EXT4-fs (loop7): This should not happen!! Data will be lost [ 160.950481][ T7241] [ 160.982547][ T47] usb 7-1: config 0 descriptor?? [ 161.022241][ T47] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 161.041807][ T7241] EXT4-fs (loop7): Total free blocks count 0 [ 161.137176][ T7241] EXT4-fs (loop7): Free/Dirty block details [ 161.187535][ T7241] EXT4-fs (loop7): free_blocks=2415919104 [ 161.193536][ T7241] EXT4-fs (loop7): dirty_blocks=48 [ 161.257680][ T7241] EXT4-fs (loop7): Block reservation details [ 161.308698][ T7241] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 161.587597][ T6592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.841749][ T7229] loop8: detected capacity change from 0 to 32768 [ 162.116893][ T7260] loop7: detected capacity change from 0 to 256 [ 162.214405][ T7260] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 162.454993][ T7239] loop1: detected capacity change from 0 to 262144 [ 162.463471][ T30] audit: type=1800 audit(1744097469.576:17): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.319" name="file1" dev="loop7" ino=16 res=0 errno=0 [ 162.485068][ T7239] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.317 (7239) [ 162.491084][ T47] gspca_sonixj: i2c_w8 err -71 [ 162.528027][ T7239] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 162.541289][ T7239] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 162.550632][ T7239] BTRFS info (device loop1): using free-space-tree [ 162.556284][ T7260] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 162.565039][ T30] audit: type=1800 audit(1744097469.676:18): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.319" name="file1" dev="loop7" ino=16 res=0 errno=0 [ 162.589688][ T7229] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fix_errors=yes,norecovery,version_upgrade=none [ 162.607987][ T7260] exFAT-fs (loop7): error, broken FAT chain. [ 162.615377][ T47] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 162.627143][ T7260] exFAT-fs (loop7): error, failed to bmap (inode : ffff8880789694a8 iblock : 8, err : -5) [ 162.640701][ T47] usb 7-1: USB disconnect, device number 2 [ 162.658399][ T7229] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 162.678410][ T7260] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 162.689920][ T7229] bcachefs (loop8): Version upgrade required: [ 162.689920][ T7229] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 162.689920][ T7229] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 162.689920][ T7229] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 162.842002][ T7275] : entered promiscuous mode [ 162.857429][ T7229] bcachefs (loop8): bcachefs (loop8): error validating btree node at btree alloc level 0/0 [ 162.857465][ T7229] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 162.857483][ T7229] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 162.943249][ T7229] bcachefs (loop8): btree_node_read_work: rewriting btree node at due to error [ 162.943249][ T7229] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 163.063863][ T7229] bcachefs (loop8): accounting_read... done [ 163.130137][ T7229] bcachefs (loop8): alloc_read... done [ 163.163234][ T7229] bcachefs (loop8): snapshots_read... done [ 163.191135][ T7229] bcachefs (loop8): Fixed errors, running fsck a second time to verify fs is clean [ 163.276673][ T7229] bcachefs (loop8): done starting filesystem [ 163.307316][ T5841] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 163.464735][ T6911] bcachefs (loop8): shutting down [ 163.791710][ T6911] bcachefs (loop8): shutdown complete [ 166.154633][ T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 166.324743][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 166.342577][ T47] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 166.357240][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.378728][ T47] usb 7-1: Product: syz [ 166.382952][ T47] usb 7-1: Manufacturer: syz [ 166.391910][ T47] usb 7-1: SerialNumber: syz [ 166.403353][ T47] usb 7-1: config 0 descriptor?? [ 166.616978][ T47] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 166.863735][ T47] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 166.875828][ T47] usb 7-1: USB disconnect, device number 3 [ 166.914746][ T7367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.045594][ T7356] loop1: detected capacity change from 0 to 32768 [ 167.071770][ T7356] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.325 (7356) [ 167.136239][ T7356] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 167.157306][ T7356] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 167.197795][ T7356] BTRFS info (device loop1): using free-space-tree [ 167.228814][ T7356] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 167.277098][ T7356] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 167.359884][ T7356] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 167.403463][ T7356] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 167.465987][ T7356] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 167.549142][ T7356] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 167.567179][ T7356] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 167.765413][ T7365] loop8: detected capacity change from 0 to 32768 [ 167.826618][ T7392] syzkaller0: entered promiscuous mode [ 167.827248][ T5841] BTRFS info (device loop1 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 167.832709][ T7392] syzkaller0: entered allmulticast mode [ 167.871344][ T7365] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.061764][ T7365] XFS (loop8): Ending clean mount [ 168.208970][ T7409] loop5: detected capacity change from 0 to 512 [ 168.357247][ T7409] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 168.423343][ T7409] Quota error (device loop5): write_blk: dquota write failed [ 168.443005][ T7409] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 168.474691][ T7409] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 168.577713][ T7421] loop6: detected capacity change from 0 to 8192 [ 168.582441][ T7409] EXT4-fs (loop5): 1 truncate cleaned up [ 168.600674][ T7409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.623122][ T7409] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.755439][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.346262][ T30] audit: type=1326 audit(1744097476.486:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.5.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae4bd8d169 code=0x0 [ 170.647673][ T6911] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.673957][ C1] Unknown status report in ack skb [ 170.888172][ T7443] loop6: detected capacity change from 0 to 512 [ 171.010069][ T7443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.041082][ T7443] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.192627][ T30] audit: type=1800 audit(1744097478.326:20): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.360" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 171.228427][ T30] audit: type=1800 audit(1744097478.326:21): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.360" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 171.350582][ T47] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 171.481620][ T6580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.535084][ T47] usb 9-1: Using ep0 maxpacket: 16 [ 171.543089][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 171.556465][ T47] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.569159][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.619576][ T47] usb 9-1: Product: syz [ 171.639177][ T47] usb 9-1: Manufacturer: syz [ 171.643861][ T47] usb 9-1: SerialNumber: syz [ 171.664830][ T47] usb 9-1: config 0 descriptor?? [ 171.683873][ T47] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.699771][ T47] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 171.718411][ T30] audit: type=1326 audit(1744097478.856:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.5.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae4bd8d169 code=0x0 [ 172.289670][ T47] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 172.494483][ T5948] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.674479][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 172.682194][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.713514][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.743398][ T5948] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.763102][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.803142][ T5948] usb 2-1: config 0 descriptor?? [ 172.813593][ T5948] hub 2-1:0.0: USB hub found [ 172.921453][ T47] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.949632][ T47] em28xx 9-1:0.0: board has no eeprom [ 173.019730][ T5948] hub 2-1:0.0: 1 port detected [ 173.034980][ T47] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 173.042862][ T47] em28xx 9-1:0.0: dvb set to bulk mode. [ 173.065815][ T5911] em28xx 9-1:0.0: Binding DVB extension [ 173.092631][ T47] usb 9-1: USB disconnect, device number 2 [ 173.106021][ T47] em28xx 9-1:0.0: Disconnecting em28xx [ 173.474068][ T7514] loop6: detected capacity change from 0 to 40427 [ 173.481988][ T7514] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 173.489873][ T7514] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 173.499376][ T7517] loop5: detected capacity change from 0 to 2048 [ 173.579743][ T7517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.617928][ T7514] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 173.626570][ T7514] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 173.637339][ T5911] em28xx 9-1:0.0: Registering input extension [ 173.643918][ T47] em28xx 9-1:0.0: Closing input extension [ 173.676262][ T47] em28xx 9-1:0.0: Freeing device [ 173.735939][ T5911] hub 2-1:0.0: activate --> -90 [ 173.837411][ T7508] loop7: detected capacity change from 0 to 32768 [ 173.903634][ T7514] syz.6.388: attempt to access beyond end of device [ 173.903634][ T7514] loop6: rw=2049, sector=77824, nr_sectors = 2120 limit=40427 [ 173.936117][ T7514] syz.6.388: attempt to access beyond end of device [ 173.936117][ T7514] loop6: rw=2049, sector=79944, nr_sectors = 1976 limit=40427 [ 173.963588][ T7514] syz.6.388: attempt to access beyond end of device [ 173.963588][ T7514] loop6: rw=2049, sector=49152, nr_sectors = 2072 limit=40427 [ 173.993975][ T7514] syz.6.388: attempt to access beyond end of device [ 173.993975][ T7514] loop6: rw=2049, sector=51224, nr_sectors = 2024 limit=40427 [ 174.009774][ T7514] syz.6.388: attempt to access beyond end of device [ 174.009774][ T7514] loop6: rw=2049, sector=57344, nr_sectors = 24 limit=40427 [ 174.055314][ T7508] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 174.214155][ T53] kworker/u8:3: attempt to access beyond end of device [ 174.214155][ T53] loop6: rw=1, sector=77824, nr_sectors = 2120 limit=40427 [ 174.238426][ T47] usb 2-1: USB disconnect, device number 5 [ 174.262424][ T53] kworker/u8:3: attempt to access beyond end of device [ 174.262424][ T53] loop6: rw=1, sector=79944, nr_sectors = 1976 limit=40427 [ 174.290417][ T53] kworker/u8:3: attempt to access beyond end of device [ 174.290417][ T53] loop6: rw=1, sector=49152, nr_sectors = 2072 limit=40427 [ 174.330433][ T53] kworker/u8:3: attempt to access beyond end of device [ 174.330433][ T53] loop6: rw=1, sector=51224, nr_sectors = 2024 limit=40427 [ 174.350187][ T53] kworker/u8:3: attempt to access beyond end of device [ 174.350187][ T53] loop6: rw=1, sector=57344, nr_sectors = 24 limit=40427 [ 174.363481][ T6592] ocfs2: Unmounting device (7,7) on (node local) [ 174.569700][ T30] audit: type=1326 audit(1744097481.696:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae4bd8d169 code=0x0 [ 174.727983][ T1216] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 174.916366][ T1216] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 174.953470][ T1216] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.983863][ T1216] usb 9-1: config 0 descriptor?? [ 175.006439][ T1216] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 175.053799][ T7543] loop1: detected capacity change from 0 to 256 [ 175.363923][ T7537] loop7: detected capacity change from 0 to 40427 [ 175.386452][ T7537] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3fffff [ 175.417337][ T7537] F2FS-fs (loop7): invalid crc value [ 175.585170][ T7537] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 175.687394][ T7537] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x847/0x2570 [ 175.709799][ T7537] F2FS-fs (loop7): inconsistent node block, node_type:0, nid:14, node_footer[nid:14,ino:10,ofs:3,cpver:0,blkaddr:0] [ 175.812954][ T7553] loop5: detected capacity change from 0 to 40427 [ 175.817095][ T6592] CPU: 1 UID: 0 PID: 6592 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 175.817131][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.817146][ T6592] Call Trace: [ 175.817156][ T6592] [ 175.817165][ T6592] dump_stack_lvl+0x241/0x360 [ 175.817207][ T6592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.817242][ T6592] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 175.817278][ T6592] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 175.817313][ T6592] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 175.817345][ T6592] f2fs_handle_critical_error+0x392/0x5a0 [ 175.817380][ T6592] f2fs_write_end_io+0x563/0x790 [ 175.817416][ T6592] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 175.817448][ T6592] ? bio_endio+0x7e4/0x890 [ 175.817476][ T6592] ? bio_endio+0x82a/0x890 [ 175.817503][ T6592] __submit_merged_bio+0x2a9/0x710 [ 175.817523][ T6592] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 175.817567][ T6592] f2fs_submit_merged_write_cond+0x29f/0x380 [ 175.817617][ T6592] f2fs_write_data_pages+0x2f99/0x38d0 [ 175.817687][ T6592] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.817730][ T6592] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 175.817803][ T6592] ? __pfx_stack_trace_save+0x10/0x10 [ 175.817841][ T6592] ? stack_depot_save_flags+0x44/0x940 [ 175.817876][ T6592] ? kasan_save_stack+0x4f/0x60 [ 175.817903][ T6592] ? kasan_save_stack+0x3f/0x60 [ 175.817929][ T6592] ? kasan_record_aux_stack+0xbf/0xd0 [ 175.817951][ T6592] ? call_rcu+0x172/0xad0 [ 175.817979][ T6592] ? __schedule+0x1b90/0x5240 [ 175.818010][ T6592] ? schedule_timeout+0xb1/0x2b0 [ 175.818036][ T6592] ? wait_for_completion+0x32f/0x600 [ 175.818055][ T6592] ? kthread_stop+0x1a1/0x640 [ 175.818116][ T6592] ? kill_f2fs_super+0x134/0x6d0 [ 175.818142][ T6592] ? deactivate_locked_super+0xc4/0x130 [ 175.818167][ T6592] ? cleanup_mnt+0x422/0x4c0 [ 175.818191][ T6592] ? task_work_run+0x251/0x310 [ 175.818210][ T6592] ? syscall_exit_to_user_mode+0x13f/0x340 [ 175.818231][ T6592] ? do_syscall_64+0x100/0x230 [ 175.818252][ T6592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.818291][ T6592] ? __lock_acquire+0xad5/0xd80 [ 175.818314][ T6592] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.818343][ T6592] do_writepages+0x38c/0x640 [ 175.818367][ T6592] ? __lock_acquire+0xad5/0xd80 [ 175.818396][ T6592] ? __pfx_do_writepages+0x10/0x10 [ 175.818417][ T6592] ? do_raw_spin_lock+0x151/0x370 [ 175.818462][ T6592] ? do_raw_spin_unlock+0x13c/0x8b0 [ 175.818506][ T6592] filemap_fdatawrite+0x1f2/0x2a0 [ 175.818538][ T6592] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 175.818576][ T6592] ? mlock_drain_local+0x79/0x490 [ 175.818652][ T6592] ? do_raw_spin_unlock+0x13c/0x8b0 [ 175.818694][ T6592] f2fs_sync_dirty_inodes+0x34f/0x860 [ 175.818739][ T6592] f2fs_write_checkpoint+0x857/0x1da0 [ 175.818791][ T6592] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 175.818865][ T6592] ? kfree+0x198/0x430 [ 175.818894][ T6592] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 175.818924][ T6592] ? kill_f2fs_super+0x290/0x6d0 [ 175.818958][ T6592] kill_f2fs_super+0x2b8/0x6d0 [ 175.818993][ T6592] ? __pfx_kill_f2fs_super+0x10/0x10 [ 175.819029][ T6592] ? shrinker_free+0x2ca/0x3d0 [ 175.819062][ T6592] deactivate_locked_super+0xc4/0x130 [ 175.819100][ T6592] cleanup_mnt+0x422/0x4c0 [ 175.819144][ T6592] ? lockdep_hardirqs_on+0x9d/0x150 [ 175.819171][ T6592] task_work_run+0x251/0x310 [ 175.819200][ T6592] ? __pfx_task_work_run+0x10/0x10 [ 175.819227][ T6592] ? syscall_exit_to_user_mode+0xa3/0x340 [ 175.819254][ T6592] syscall_exit_to_user_mode+0x13f/0x340 [ 175.819281][ T6592] do_syscall_64+0x100/0x230 [ 175.819304][ T6592] ? clear_bhb_loop+0x45/0xa0 [ 175.819331][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.819353][ T6592] RIP: 0033:0x7f3d79d8e497 [ 175.819373][ T6592] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 175.819393][ T6592] RSP: 002b:00007ffe7ca332b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 175.819415][ T6592] RAX: 0000000000000000 RBX: 00007f3d79e0e08c RCX: 00007f3d79d8e497 [ 175.819430][ T6592] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7ca33370 [ 175.819442][ T6592] RBP: 00007ffe7ca33370 R08: 0000000000000000 R09: 0000000000000000 [ 175.819454][ T6592] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7ca34400 [ 175.819467][ T6592] R13: 00007f3d79e0e08c R14: 000000000002ae77 R15: 00007ffe7ca34440 [ 175.819500][ T6592] [ 175.821030][ T6592] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 175.836037][ T7553] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 176.281270][ T7553] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 176.401870][ T7553] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 176.409540][ T7553] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 176.550481][ T1216] usb 9-1: USB disconnect, device number 3 [ 177.000216][ T7562] loop6: detected capacity change from 0 to 32768 [ 177.034682][ T7562] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 177.074452][ T7562] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 177.314208][ T6580] ocfs2: Unmounting device (7,6) on (node local) [ 177.658640][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805cdafc00: rx timeout, send abort [ 177.671847][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805cdafc00: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 178.444529][ T5948] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 178.521439][ T7579] loop5: detected capacity change from 0 to 32768 [ 178.586044][ T7579] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 178.604560][ T7579] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 178.641678][ T5948] usb 7-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 178.651007][ T5911] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 178.660832][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.669912][ T5948] usb 7-1: Product: syz [ 178.674170][ T5948] usb 7-1: Manufacturer: syz [ 178.682268][ T5948] usb 7-1: SerialNumber: syz [ 178.700765][ T5948] usb 7-1: config 0 descriptor?? [ 178.720225][ T7579] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 178.721650][ T5948] usb 7-1: interface 1 not found [ 178.866010][ T5911] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 178.882867][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.907113][ T5911] usb 8-1: config 0 descriptor?? [ 178.949672][ T47] usb 7-1: USB disconnect, device number 4 [ 179.071413][ T7579] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 179.206260][ T5911] usb 8-1: Cannot read MAC address [ 179.212044][ T5911] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 179.250096][ T5911] usb 8-1: USB disconnect, device number 2 [ 179.850481][ T7618] loop1: detected capacity change from 0 to 1024 [ 179.883768][ T7622] loop5: detected capacity change from 0 to 2048 [ 179.917122][ T7618] EXT4-fs: Ignoring removed oldalloc option [ 179.925906][ T7622] udf: Bad value for 'session' [ 179.965317][ T7618] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 180.044303][ T7618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.370180][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.674433][ T30] audit: type=1800 audit(1744097487.796:24): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.432" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 180.992445][ T1216] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.154508][ T1216] usb 2-1: Using ep0 maxpacket: 8 [ 181.176663][ T1216] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 181.196184][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.239152][ T1216] usb 2-1: config 0 descriptor?? [ 181.478435][ T1216] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 181.555160][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.814535][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 181.830263][ T5911] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 181.859180][ T5911] usb 6-1: config 0 has no interface number 0 [ 181.880887][ T5911] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.928826][ T5911] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 181.964819][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.987844][ T5911] usb 6-1: Product: syz [ 181.992074][ T5911] usb 6-1: Manufacturer: syz [ 182.006992][ T5911] usb 6-1: SerialNumber: syz [ 182.025028][ T5911] usb 6-1: config 0 descriptor?? [ 182.038031][ T5911] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 182.085486][ T5911] em28xx 6-1:0.132: Video interface 132 found: [ 182.556791][ T5911] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 182.682460][ T7659] loop6: detected capacity change from 0 to 32768 [ 182.757535][ T1216] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 182.767891][ T7659] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.779852][ T1216] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 182.794967][ T1216] asix 2-1:0.0: probe with driver asix failed with error -71 [ 182.838549][ T1216] usb 2-1: USB disconnect, device number 6 [ 183.085181][ T7659] XFS (loop6): Ending clean mount [ 183.117608][ T7659] XFS (loop6): Quotacheck needed: Please wait. [ 183.214790][ T5911] em28xx 6-1:0.132: failed to read eeprom (err=-110) [ 183.234588][ T5911] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 183.304472][ T7659] XFS (loop6): Quotacheck: Done. [ 183.484778][ T5911] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 183.501072][ T5911] em28xx 6-1:0.132: analog set to bulk mode. [ 183.528275][ T5948] em28xx 6-1:0.132: Registering V4L2 extension [ 183.547437][ T5911] usb 6-1: USB disconnect, device number 2 [ 183.559900][ T5911] em28xx 6-1:0.132: Disconnecting em28xx [ 183.779184][ T6580] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.020870][ T5948] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 184.083245][ T5948] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 184.124840][ T5948] em28xx 6-1:0.132: No AC97 audio processor [ 184.178965][ T5948] usb 6-1: Decoder not found [ 184.183618][ T5948] em28xx 6-1:0.132: failed to create media graph [ 184.224478][ T5948] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 184.248865][ T5948] em28xx 6-1:0.132: Remote control support is not available for this card. [ 184.304801][ T5911] em28xx 6-1:0.132: Closing input extension [ 184.349847][ T5911] em28xx 6-1:0.132: Freeing device [ 184.924950][ T47] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 185.106268][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 185.159112][ T47] usb 7-1: unable to get BOS descriptor or descriptor too short [ 185.182233][ T47] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.204082][ T47] usb 7-1: config 1 has no interface number 1 [ 185.221036][ T47] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 185.223906][ T7684] loop1: detected capacity change from 0 to 40427 [ 185.269490][ T47] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.283589][ T7684] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 185.292195][ T7684] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 185.294418][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.303868][ T7684] F2FS-fs (loop1): invalid crc value [ 185.340917][ T47] usb 7-1: Product: syz [ 185.372930][ T47] usb 7-1: Manufacturer: syz [ 185.384611][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 185.402681][ T47] usb 7-1: SerialNumber: syz [ 185.514435][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 185.524987][ T7684] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 185.532101][ T7684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.564742][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 185.582896][ T5911] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 185.612320][ T5911] usb 6-1: config 0 has no interface number 0 [ 185.664471][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 185.665908][ T5911] usb 6-1: config 0 interface 184 has no altsetting 0 [ 185.681680][ T9] usb 8-1: config 0 has an invalid interface number: 244 but max is 0 [ 185.690001][ T9] usb 8-1: config 0 has no interface number 0 [ 185.707278][ T5911] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.726957][ T9] usb 8-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 185.728141][ T47] usb 7-1: failed to enable PITCH for EP 0x82 [ 185.751820][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.759965][ T5911] usb 6-1: Product: syz [ 185.764160][ T5911] usb 6-1: Manufacturer: syz [ 185.769237][ T5911] usb 6-1: SerialNumber: syz [ 185.774066][ T47] usb 7-1: 2:1: cannot set freq 8069021 to ep 0x82 [ 185.774422][ T9] usb 8-1: config 0 interface 244 has no altsetting 0 [ 185.783817][ T5911] usb 6-1: config 0 descriptor?? [ 185.802241][ T5911] smsc75xx v1.0.0 [ 185.839438][ T9] usb 8-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 185.858126][ T47] usb 7-1: USB disconnect, device number 5 [ 185.865836][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.924900][ T9] usb 8-1: Product: syz [ 185.934920][ T9] usb 8-1: Manufacturer: syz [ 185.941707][ T9] usb 8-1: SerialNumber: syz [ 185.967432][ T9] usb 8-1: config 0 descriptor?? [ 186.008863][ T9] snd_usb_toneport 8-1:0.244: Line 6 GuitarPort found [ 186.222368][ T9] snd_usb_toneport 8-1:0.244: cannot get proper max packet size [ 186.240693][ T9] snd_usb_toneport 8-1:0.244: Line 6 GuitarPort now disconnected [ 186.265319][ T9] snd_usb_toneport 8-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 186.365531][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.457'. [ 186.392487][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.457'. [ 186.463300][ T47] usb 8-1: USB disconnect, device number 3 [ 187.032021][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 187.050193][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 187.075542][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 187.111761][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 187.137403][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 187.164806][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 187.194515][ T5911] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 187.228550][ T5911] usb 6-1: USB disconnect, device number 3 [ 187.625698][ T7732] loop6: detected capacity change from 0 to 32768 [ 187.697823][ T7749] loop1: detected capacity change from 0 to 8192 [ 187.710209][ T7732] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 187.763894][ T7759] netlink: 'syz.5.472': attribute type 1 has an invalid length. [ 187.803867][ T7749] process 'syz.1.471' launched './file1' with NULL argv: empty string added [ 187.842228][ T7759] bond1: entered promiscuous mode [ 187.848161][ T7759] bond1: entered allmulticast mode [ 187.886972][ T7732] XFS (loop6): Ending clean mount [ 187.908580][ T7762] bond1: (slave geneve2): making interface the new active one [ 187.943174][ T7762] geneve2: entered promiscuous mode [ 188.003604][ T7762] geneve2: entered allmulticast mode [ 188.021654][ T7762] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 188.252541][ T7767] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.274186][ T6580] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 188.495556][ T7775] batadv_slave_1: entered promiscuous mode [ 188.516434][ T7775] lo: entered promiscuous mode [ 188.529817][ T7773] lo: left promiscuous mode [ 188.556433][ T7773] batadv_slave_1: left promiscuous mode [ 188.956339][ T1098] Bluetooth: hci5: Frame reassembly failed (-84) [ 189.083191][ T7771] loop7: detected capacity change from 0 to 32768 [ 189.101692][ T7771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.477 (7771) [ 189.130367][ T7771] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.142595][ T7781] loop6: detected capacity change from 0 to 32768 [ 189.154465][ T7781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.476 (7781) [ 189.172131][ T7771] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 189.181275][ T7771] BTRFS info (device loop7): disk space caching is enabled [ 189.184164][ T7781] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.188934][ T7771] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 189.222260][ T7781] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 189.234998][ T7781] BTRFS info (device loop6): disk space caching is enabled [ 189.242777][ T7781] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 189.382857][ T7771] BTRFS info (device loop7): rebuilding free space tree [ 189.433473][ T7781] BTRFS info (device loop6): rebuilding free space tree [ 189.438723][ T7771] BTRFS info (device loop7): disabling free space tree [ 189.451315][ T7771] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.461893][ T7771] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.494932][ T53] Bluetooth: hci6: Frame reassembly failed (-84) [ 189.523208][ T7781] BTRFS info (device loop6): disabling free space tree [ 189.544585][ T7781] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.554296][ T7781] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.729998][ T1098] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 189.948001][ T6592] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.110635][ T6580] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.440441][ T7832] loop7: detected capacity change from 0 to 512 [ 190.493169][ T7832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.506367][ T7832] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.569795][ T30] audit: type=1800 audit(1744097497.706:25): pid=7832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.487" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 190.682060][ T7840] EXT4-fs error (device loop7): ext4_get_first_dir_block:3527: inode #12: comm syz.7.487: Attempting to read directory block (0) that is past i_size (3) [ 190.718500][ T7840] EXT4-fs (loop7): Remounting filesystem read-only [ 190.810636][ T6592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.941688][ T36] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 191.004394][ T36] Quota error (device loop7): write_blk: dquota write failed [ 191.012354][ T36] Quota error (device loop7): free_dqentry: Can't write quota data block 5 [ 191.023961][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 191.028074][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 191.374678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 191.477109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 191.486340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 191.519321][ T5847] Bluetooth: hci6: command 0x1003 tx timeout [ 191.530159][ T5832] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 191.679299][ T7853] loop8: detected capacity change from 0 to 512 [ 191.834810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 191.881547][ T7853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.935939][ T7853] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.010352][ T30] audit: type=1326 audit(1744097499.126:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4bd8d169 code=0x7fc00000 [ 192.088927][ T30] audit: type=1326 audit(1744097499.126:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae4bd8d169 code=0x7fc00000 [ 192.188836][ T30] audit: type=1326 audit(1744097499.126:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4bd8d169 code=0x7fc00000 [ 192.249489][ T30] audit: type=1800 audit(1744097499.266:29): pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.494" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 192.350868][ T30] audit: type=1800 audit(1744097499.266:30): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.494" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 192.447648][ T6911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.926224][ T7883] loop8: detected capacity change from 0 to 8192 [ 193.004485][ T5824] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 193.053687][ T7890] loop7: detected capacity change from 0 to 512 [ 193.117679][ T7890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.141908][ T7890] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.209389][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 193.235622][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.274578][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.280871][ T6592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.304683][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.343067][ T5824] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.362717][ T5824] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.381701][ T5824] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.393450][ T5824] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 193.429365][ T5824] usb 6-1: Manufacturer: syz [ 193.449049][ T5824] usb 6-1: config 0 descriptor?? [ 193.500671][ T7899] loop6: detected capacity change from 0 to 1024 [ 193.594585][ T7899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.641371][ T7899] overlayfs: conflicting lowerdir path [ 193.707274][ T7899] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.514: Abort forced by user [ 193.748091][ T7899] EXT4-fs (loop6): Remounting filesystem read-only [ 193.754469][ T5824] rc_core: IR keymap rc-hauppauge not found [ 193.760582][ T5824] Registered IR keymap rc-empty [ 193.774928][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 193.777788][ T7899] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 193.794519][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 193.817453][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 193.837721][ T7899] overlayfs: cleanup of 'bus/work' failed (-30) [ 193.854414][ T7899] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 193.862649][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 193.877003][ T7899] overlayfs: failed to set uuid (/file1, err=-30); falling back to uuid=null. [ 193.917768][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 193.963696][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.004688][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.032681][ T6580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.044718][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.066098][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.085067][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.114646][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.135871][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.194761][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.224913][ T5824] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.237208][ T7898] loop7: detected capacity change from 0 to 32768 [ 194.256621][ T5824] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 194.273714][ T5824] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 194.289230][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.301567][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.301652][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.321069][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.325733][ T7898] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 194.332160][ T5824] usb 6-1: USB disconnect, device number 4 [ 194.354954][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.365872][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.368100][ T7898] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 194.393786][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.545695][ T6592] ocfs2: Unmounting device (7,7) on (node local) [ 195.145270][ T7910] chnl_net:caif_netlink_parms(): no params data found [ 195.409330][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.440005][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.472165][ T7910] bridge_slave_0: entered allmulticast mode [ 195.507049][ T7910] bridge_slave_0: entered promiscuous mode [ 195.534123][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.541514][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.549141][ T7910] bridge_slave_1: entered allmulticast mode [ 195.559161][ T7910] bridge_slave_1: entered promiscuous mode [ 195.623250][ T7945] loop7: detected capacity change from 0 to 512 [ 195.678554][ T7910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.703973][ T7910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.766430][ T7945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.839434][ T7945] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.939862][ T7910] team0: Port device team_slave_0 added [ 195.997519][ T7910] team0: Port device team_slave_1 added [ 196.113306][ T7958] loop6: detected capacity change from 0 to 128 [ 196.178925][ T6592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.208788][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.243421][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.271756][ T7910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.288056][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.299807][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.327329][ T7910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.459034][ T5832] Bluetooth: hci3: command tx timeout [ 196.521914][ T7910] hsr_slave_0: entered promiscuous mode [ 196.567314][ T7910] hsr_slave_1: entered promiscuous mode [ 196.573535][ T7910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.634406][ T7910] Cannot create hsr debugfs directory [ 197.311951][ T7960] loop6: detected capacity change from 0 to 32768 [ 197.331993][ T7960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.535 (7960) [ 197.358382][ T7910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.384203][ T7960] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.418093][ T7960] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 197.427334][ T7960] BTRFS info (device loop6): disk space caching is enabled [ 197.446308][ T7960] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 197.503001][ T7910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.526325][ T7966] loop5: detected capacity change from 0 to 32768 [ 197.533869][ T7966] XFS: ikeep mount option is deprecated. [ 197.537697][ T7976] block nbd7: shutting down sockets [ 197.611950][ T7910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.633493][ T7966] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 197.680742][ T7991] loop7: detected capacity change from 0 to 2048 [ 197.695810][ T7991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.718474][ T7910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.780360][ T7966] XFS (loop5): Ending clean mount [ 197.789078][ T7960] BTRFS info (device loop6): rebuilding free space tree [ 197.798701][ T7966] XFS (loop5): Quotacheck needed: Please wait. [ 197.866153][ T7960] BTRFS info (device loop6): disabling free space tree [ 197.905926][ T7960] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 197.920888][ T7966] XFS (loop5): Quotacheck: Done. [ 197.925281][ T6592] UDF-fs: warning (device loop7): udf_evict_inode: Inode 1415 (mode 100004) has inode size 3708 different from extent length 4096. Filesystem need not be standards compliant. [ 197.930674][ T7960] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.033588][ T7910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.059797][ T7910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.093396][ T53] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 198.100521][ T7910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.150603][ T7910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.174072][ T6580] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.249404][ T8003] loop7: detected capacity change from 0 to 512 [ 198.262024][ T8003] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 198.318560][ T6546] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 198.544509][ T5832] Bluetooth: hci3: command tx timeout [ 198.620747][ T7910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.723921][ T7910] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.791053][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.798243][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.846535][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.853756][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.334044][ T7910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.399183][ T8013] loop5: detected capacity change from 0 to 4096 [ 199.560659][ T7910] veth0_vlan: entered promiscuous mode [ 199.577563][ T7910] veth1_vlan: entered promiscuous mode [ 199.614858][ T7910] veth0_macvtap: entered promiscuous mode [ 199.624223][ T7910] veth1_macvtap: entered promiscuous mode [ 199.738365][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.780245][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.821162][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.832282][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.842734][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.853825][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.864186][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.885156][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.896704][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.908199][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.918641][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.929830][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.941134][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.952140][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.962741][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.983947][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.999597][ T7910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.036616][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.048420][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.063730][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.075517][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.088220][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.099571][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.110102][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.132035][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.142664][ T5824] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 200.163118][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.175177][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.188917][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.199882][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.210419][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.221964][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.233459][ T7910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.257793][ T7910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.279851][ T7910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.318629][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.333688][ T7910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.466271][ T5824] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.506497][ T7910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.576588][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.584864][ T7910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.598742][ T7910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.608361][ T5824] usb 8-1: config 0 descriptor?? [ 200.614551][ T5832] Bluetooth: hci3: command tx timeout [ 200.792063][ T8030] loop5: detected capacity change from 0 to 2048 [ 200.836785][ T5824] usbhid 8-1:0.0: can't add hid device: -71 [ 200.867508][ T8030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.880515][ T5824] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 200.916005][ T5824] usb 8-1: USB disconnect, device number 4 [ 200.961399][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.976120][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.059219][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.070071][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.366944][ T5824] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 201.534598][ T5824] usb 8-1: Using ep0 maxpacket: 32 [ 201.559021][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.580510][ T5824] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 201.598318][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.621554][ T5824] usb 8-1: config 0 descriptor?? [ 201.630294][ T5824] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 201.656629][ T5824] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 202.149999][ T5911] usb 8-1: USB disconnect, device number 5 [ 202.160428][ T5911] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 202.657907][ T8053] loop5: detected capacity change from 0 to 1024 [ 202.665387][ T8053] EXT4-fs: Ignoring removed orlov option [ 202.671093][ T8053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.691296][ T8054] loop6: detected capacity change from 0 to 512 [ 202.698633][ T8054] EXT4-fs: Ignoring removed oldalloc option [ 202.713641][ T8054] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.787203][ T8053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.801528][ T8054] EXT4-fs (loop6): 1 truncate cleaned up [ 202.812693][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.813266][ T8054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.836006][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.847058][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.858717][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.869895][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.907677][ T8054] tipc: Started in network mode [ 202.912711][ T8054] tipc: Node identity 405864656275675f08, cluster identity 4711 [ 202.951130][ T8062] loop7: detected capacity change from 0 to 1024 [ 202.970384][ T8062] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.039837][ T30] audit: type=1800 audit(1744097510.176:31): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.559" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 203.082322][ T8062] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 203.101666][ T8062] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 203.114749][ T8062] EXT4-fs (loop7): This should not happen!! Data will be lost [ 203.114749][ T8062] [ 203.129332][ T8062] EXT4-fs (loop7): Total free blocks count 0 [ 203.135456][ T8062] EXT4-fs (loop7): Free/Dirty block details [ 203.141446][ T8062] EXT4-fs (loop7): free_blocks=68451041280 [ 203.147984][ T8062] EXT4-fs (loop7): dirty_blocks=64 [ 203.155117][ T8062] EXT4-fs (loop7): Block reservation details [ 203.163858][ T8062] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 203.171959][ T8062] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 203.217638][ T6580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.405400][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.433809][ T8071] tipc: Enabled bearer , priority 10 [ 203.502546][ T8071] netlink: 14 bytes leftover after parsing attributes in process `syz.6.560'. [ 203.520926][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 203.538011][ T8071] tipc: Resetting bearer [ 203.596937][ T8071] tipc: Disabling bearer [ 203.907184][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.919472][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.928603][ T8059] bridge_slave_0: entered allmulticast mode [ 203.937871][ T8059] bridge_slave_0: entered promiscuous mode [ 203.966680][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.977831][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.985698][ T8059] bridge_slave_1: entered allmulticast mode [ 203.993960][ T8059] bridge_slave_1: entered promiscuous mode [ 204.067354][ T8088] warning: `syz.7.567' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.149157][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.183349][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.295128][ T8078] loop5: detected capacity change from 0 to 32768 [ 204.323520][ T8059] team0: Port device team_slave_0 added [ 204.332863][ T8078] JBD2: Can't enable checksumming v2 and v3 at the same time! [ 204.337842][ T8059] team0: Port device team_slave_1 added [ 204.354660][ T8078] (syz.5.562,8078,1):ocfs2_journal_init:951 ERROR: Linux journal layer error [ 204.394124][ T8078] (syz.5.562,8078,0):ocfs2_check_volume:2344 ERROR: Could not initialize journal! [ 204.403647][ T8078] (syz.5.562,8078,0):ocfs2_check_volume:2429 ERROR: status = -22 [ 204.416040][ T8078] (syz.5.562,8078,0):ocfs2_mount_volume:1764 ERROR: status = -22 [ 204.440083][ T8078] (syz.5.562,8078,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 204.499326][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.513233][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.582860][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.597351][ T8101] loop6: detected capacity change from 0 to 256 [ 204.600609][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.610655][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.643856][ T8101] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 204.657487][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.794839][ T8059] hsr_slave_0: entered promiscuous mode [ 204.806106][ T8059] hsr_slave_1: entered promiscuous mode [ 204.822894][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.842413][ T8059] Cannot create hsr debugfs directory [ 204.935548][ T5832] Bluetooth: hci3: command tx timeout [ 204.975566][ T5824] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 205.100456][ T8059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.134829][ T5824] usb 7-1: Using ep0 maxpacket: 32 [ 205.144933][ T5824] usb 7-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 205.160819][ T5824] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.196301][ T8059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.216231][ T5824] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 205.226480][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.235107][ T5824] usb 7-1: Product: syz [ 205.239394][ T5824] usb 7-1: Manufacturer: syz [ 205.243996][ T5824] usb 7-1: SerialNumber: syz [ 205.253540][ T5824] usb 7-1: config 0 descriptor?? [ 205.269346][ T5824] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.314280][ T8059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.362020][ T5824] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 205.398149][ T8059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.495214][ T5824] usb 7-1: USB disconnect, device number 6 [ 205.637794][ T8059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.653680][ T8059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.669326][ T8059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.735194][ T8059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.030968][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.056317][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.069511][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.076731][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.186195][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.193447][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.682167][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.891880][ T8059] veth0_vlan: entered promiscuous mode [ 206.918511][ T8059] veth1_vlan: entered promiscuous mode [ 206.998979][ T8059] veth0_macvtap: entered promiscuous mode [ 207.015024][ T5832] Bluetooth: hci3: command tx timeout [ 207.033210][ T8059] veth1_macvtap: entered promiscuous mode [ 207.070529][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.081196][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.091715][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.113958][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.121520][ T8140] loop5: detected capacity change from 0 to 8192 [ 207.131806][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.142650][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.159653][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.170562][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.181513][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.192420][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.202623][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.216506][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.233188][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.245055][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.258919][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.269690][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.279942][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.290592][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.302499][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.326072][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.338116][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.369708][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.390892][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.403640][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.422601][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.432780][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.445452][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.458657][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.469293][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.479234][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.492886][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.502921][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.513516][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.523463][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.534092][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.543999][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.563377][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.576640][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.619626][ T8059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.636818][ T8059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.662963][ T8059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.682655][ T8059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.753176][ T8147] loop7: detected capacity change from 0 to 512 [ 207.865739][ T8147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.879002][ T8147] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.969792][ T8147] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.589: corrupted inode contents [ 208.011458][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.591'. [ 208.025128][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.032992][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.049330][ T8147] EXT4-fs error (device loop7): ext4_dirty_inode:6074: inode #2: comm syz.7.589: mark_inode_dirty error [ 208.123791][ T8147] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.589: corrupted inode contents [ 208.161735][ T8147] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.589: mark_inode_dirty error [ 208.173447][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.173501][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.506779][ T6592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.551302][ T8162] loop6: detected capacity change from 0 to 40427 [ 208.572613][ T8162] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3fffff [ 208.586829][ T8162] F2FS-fs (loop6): invalid crc value [ 208.696569][ T8162] F2FS-fs (loop6): Start checkpoint disabled! [ 208.712210][ T8162] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 208.767043][ T8162] F2FS-fs (loop6): inject no free segment in get_new_segment of __allocate_new_segment+0x1d9/0x950 [ 208.815097][ T2989] bio_check_eod: 3 callbacks suppressed [ 208.815119][ T2989] kworker/u8:8: attempt to access beyond end of device [ 208.815119][ T2989] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.837868][ T2989] CPU: 0 UID: 0 PID: 2989 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 208.837901][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.837917][ T2989] Workqueue: writeback wb_workfn (flush-7:6) [ 208.837952][ T2989] Call Trace: [ 208.837961][ T2989] [ 208.837971][ T2989] dump_stack_lvl+0x241/0x360 [ 208.838009][ T2989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.838041][ T2989] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 208.838073][ T2989] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.838107][ T2989] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 208.838139][ T2989] f2fs_handle_critical_error+0x392/0x5a0 [ 208.838175][ T2989] f2fs_write_end_io+0x563/0x790 [ 208.838211][ T2989] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 208.838243][ T2989] ? bio_endio+0x7e4/0x890 [ 208.838269][ T2989] ? bio_endio+0x82a/0x890 [ 208.838296][ T2989] __submit_merged_bio+0x2a9/0x710 [ 208.838317][ T2989] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 208.838360][ T2989] f2fs_submit_merged_write_cond+0x29f/0x380 [ 208.838418][ T2989] f2fs_write_data_pages+0x2f99/0x38d0 [ 208.838497][ T2989] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 208.838542][ T2989] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 208.838621][ T2989] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 208.838665][ T2989] ? trace_f2fs_writepages+0x8c/0x220 [ 208.838691][ T2989] ? f2fs_write_node_pages+0x4ba/0x730 [ 208.838721][ T2989] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 208.838761][ T2989] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 208.838790][ T2989] do_writepages+0x38c/0x640 [ 208.838823][ T2989] ? __pfx_do_writepages+0x10/0x10 [ 208.838843][ T2989] ? __lock_acquire+0xad5/0xd80 [ 208.838881][ T2989] ? reacquire_held_locks+0x12a/0x1e0 [ 208.838907][ T2989] ? writeback_sb_inodes+0x43f/0x1360 [ 208.838959][ T2989] __writeback_single_inode+0x14f/0x10d0 [ 208.839002][ T2989] writeback_sb_inodes+0x822/0x1360 [ 208.839038][ T2989] ? rcu_is_watching+0x15/0xb0 [ 208.839105][ T2989] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 208.839190][ T2989] ? rcu_is_watching+0x15/0xb0 [ 208.839219][ T2989] ? queue_io+0x310/0x4d0 [ 208.839261][ T2989] wb_writeback+0x415/0xb90 [ 208.839300][ T2989] ? queue_io+0x2e1/0x4d0 [ 208.839338][ T2989] ? __pfx_wb_writeback+0x10/0x10 [ 208.839393][ T2989] wb_workfn+0x412/0x10b0 [ 208.839457][ T2989] ? __pfx_wb_workfn+0x10/0x10 [ 208.839480][ T2989] ? register_lock_class+0x54/0x330 [ 208.839513][ T2989] ? __lock_acquire+0xad5/0xd80 [ 208.839572][ T2989] ? process_scheduled_works+0x9cb/0x18e0 [ 208.839597][ T2989] process_scheduled_works+0xac3/0x18e0 [ 208.839665][ T2989] ? __pfx_process_scheduled_works+0x10/0x10 [ 208.839705][ T2989] ? assign_work+0x367/0x3d0 [ 208.839739][ T2989] worker_thread+0x870/0xd50 [ 208.839785][ T2989] ? __kthread_parkme+0x1a8/0x200 [ 208.839819][ T2989] ? __pfx_worker_thread+0x10/0x10 [ 208.839845][ T2989] kthread+0x7b7/0x940 [ 208.839879][ T2989] ? __pfx_worker_thread+0x10/0x10 [ 208.839906][ T2989] ? __pfx_kthread+0x10/0x10 [ 208.839934][ T2989] ? __pfx_kthread+0x10/0x10 [ 208.839959][ T2989] ? __pfx_kthread+0x10/0x10 [ 208.839983][ T2989] ? __pfx_kthread+0x10/0x10 [ 208.840006][ T2989] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.840028][ T2989] ? lockdep_hardirqs_on+0x9d/0x150 [ 208.840044][ T2989] ? __pfx_kthread+0x10/0x10 [ 208.840070][ T2989] ret_from_fork+0x4b/0x80 [ 208.840088][ T2989] ? __pfx_kthread+0x10/0x10 [ 208.840111][ T2989] ret_from_fork_asm+0x1a/0x30 [ 208.840146][ T2989] [ 208.843544][ T2989] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 208.856322][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.594'. [ 209.353599][ T8171] loop7: detected capacity change from 0 to 2048 [ 209.441526][ T8160] loop5: detected capacity change from 0 to 32768 [ 209.486448][ T8171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.599753][ T30] audit: type=1800 audit(1744097516.726:32): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.592" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 209.642399][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.652243][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.696175][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.708059][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.715893][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.827532][ T6592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.901954][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 211.317331][ T5824] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 211.455524][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.481126][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.499394][ T8175] bridge_slave_0: entered allmulticast mode [ 211.508898][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 211.531669][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 211.554660][ T8175] bridge_slave_0: entered promiscuous mode [ 211.564990][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.585738][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.593115][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.601748][ T5824] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.615320][ T8175] bridge_slave_1: entered allmulticast mode [ 211.623359][ T8175] bridge_slave_1: entered promiscuous mode [ 211.629769][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.638704][ T5824] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.648285][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.661214][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.669438][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.680205][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.705710][ T5824] usb 8-1: config 0 descriptor?? [ 211.711622][ T8194] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 211.745764][ T5847] Bluetooth: hci3: command tx timeout [ 211.803027][ T8210] loop6: detected capacity change from 0 to 256 [ 211.864299][ T8210] exfat: Bad value for 'uid' [ 211.879935][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.891487][ T8210] exfat: Bad value for 'uid' [ 211.986508][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.150993][ T5824] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 212.178461][ T5824] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 212.205243][ T5824] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 212.235360][ T8175] team0: Port device team_slave_0 added [ 212.286555][ T8175] team0: Port device team_slave_1 added [ 212.296778][ T8217] loop6: detected capacity change from 0 to 8192 [ 212.423332][ T8194] loop7: detected capacity change from 0 to 512 [ 212.490013][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.502606][ T8194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 212.519615][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.547417][ T8175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.555447][ T8194] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.585663][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.614639][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.660461][ T1216] usb 8-1: USB disconnect, device number 6 [ 212.684809][ T8175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.948398][ T8175] hsr_slave_0: entered promiscuous mode [ 212.966079][ T8175] hsr_slave_1: entered promiscuous mode [ 212.974018][ T8175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.986424][ T8175] Cannot create hsr debugfs directory [ 213.165566][ T8205] chnl_net:caif_netlink_parms(): no params data found [ 213.260704][ T6592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 213.704735][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.711989][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.734824][ T5847] Bluetooth: hci4: command tx timeout [ 213.771770][ T8205] bridge_slave_0: entered allmulticast mode [ 213.815115][ T5847] Bluetooth: hci3: command tx timeout [ 213.835852][ T8205] bridge_slave_0: entered promiscuous mode [ 213.842847][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.856112][ T30] audit: type=1326 audit(1744097520.996:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 213.856333][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.888137][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.905091][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.912963][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.926067][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.933259][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.015200][ T30] audit: type=1326 audit(1744097520.996:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d79d8d169 code=0x7ffc0000 [ 214.037751][ T8205] bridge_slave_1: entered allmulticast mode [ 214.075279][ T8205] bridge_slave_1: entered promiscuous mode [ 214.175192][ T30] audit: type=1326 audit(1744097520.996:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 214.263536][ T30] audit: type=1326 audit(1744097520.996:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d79d8d169 code=0x7ffc0000 [ 214.355048][ T30] audit: type=1326 audit(1744097520.996:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d79d8d169 code=0x7ffc0000 [ 214.423893][ T8205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.438865][ T30] audit: type=1326 audit(1744097520.996:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 214.468059][ T8205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.514476][ T30] audit: type=1326 audit(1744097520.996:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 214.597357][ T30] audit: type=1326 audit(1744097520.996:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d79d8d169 code=0x7ffc0000 [ 214.662878][ T30] audit: type=1326 audit(1744097521.086:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 214.706887][ T30] audit: type=1326 audit(1744097521.086:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d79d8d169 code=0x7ffc0000 [ 214.739915][ T8205] team0: Port device team_slave_0 added [ 214.755104][ T8205] team0: Port device team_slave_1 added [ 214.762135][ T30] audit: type=1326 audit(1744097521.086:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d79d8d169 code=0x7ffc0000 [ 214.795128][ T30] audit: type=1326 audit(1744097521.086:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 214.817524][ T30] audit: type=1326 audit(1744097521.086:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d79d8d169 code=0x7ffc0000 [ 214.849800][ T30] audit: type=1326 audit(1744097521.086:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d79d8d169 code=0x7ffc0000 [ 214.886629][ T8175] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 214.915872][ T30] audit: type=1326 audit(1744097521.086:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 214.961048][ T30] audit: type=1326 audit(1744097521.086:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 214.996998][ T30] audit: type=1326 audit(1744097521.086:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 215.021766][ T30] audit: type=1326 audit(1744097521.086:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.7.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d79d29359 code=0x7ffc0000 [ 215.058278][ T8175] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 215.071113][ T8175] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 215.093773][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.104463][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.163782][ T8205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.186866][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.193854][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.239380][ T8205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.281901][ T8175] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 215.496818][ T8205] hsr_slave_0: entered promiscuous mode [ 215.503703][ T8205] hsr_slave_1: entered promiscuous mode [ 215.510954][ T8205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.518847][ T8205] Cannot create hsr debugfs directory [ 215.700253][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.625'. [ 215.815229][ T5832] Bluetooth: hci4: command tx timeout [ 215.895114][ T5832] Bluetooth: hci3: command tx timeout [ 215.960933][ T8246] chnl_net:caif_netlink_parms(): no params data found [ 215.984905][ T5832] Bluetooth: hci0: command tx timeout [ 216.099424][ T8205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.276701][ T8205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.478776][ T8205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.515781][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.523365][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.533718][ T8246] bridge_slave_0: entered allmulticast mode [ 216.558488][ T8246] bridge_slave_0: entered promiscuous mode [ 216.636853][ T8205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.675635][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.682874][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.694622][ T8246] bridge_slave_1: entered allmulticast mode [ 216.707288][ T8246] bridge_slave_1: entered promiscuous mode [ 216.806651][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.829860][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.962114][ T8246] team0: Port device team_slave_0 added [ 216.981272][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.047506][ T8287] loop7: detected capacity change from 0 to 32768 [ 217.063583][ T8287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.632 (8287) [ 217.088774][ T8246] team0: Port device team_slave_1 added [ 217.098460][ T8287] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.116565][ T8287] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 217.135148][ T8287] BTRFS info (device loop7): using free-space-tree [ 217.223333][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.231030][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.257968][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.294298][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.346434][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.353419][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.403960][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.416124][ T6592] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.602626][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.609896][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.635751][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.642969][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.665475][ T8205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.855094][ T8246] hsr_slave_0: entered promiscuous mode [ 217.884996][ T8246] hsr_slave_1: entered promiscuous mode [ 217.891532][ T8246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.905266][ T5832] Bluetooth: hci4: command tx timeout [ 217.931872][ T8246] Cannot create hsr debugfs directory [ 217.950463][ T8205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.983710][ T5832] Bluetooth: hci3: command tx timeout [ 217.994966][ T8309] loop6: detected capacity change from 0 to 4096 [ 218.009593][ T8309] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 218.054685][ T5832] Bluetooth: hci0: command tx timeout [ 218.084535][ T8309] ntfs3(loop6): ino=19, mi_enum_attr [ 218.098821][ T8309] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 218.155446][ T8309] ntfs3(loop6): failed to convert "c46c" to macceltic [ 218.169384][ T8309] ntfs3(loop6): ino=20, mi_enum_attr [ 218.621800][ T8205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.787036][ T8205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.798523][ T8314] loop6: detected capacity change from 0 to 2048 [ 218.849547][ T8314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.402963][ T8246] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.531064][ T8246] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.662364][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.721016][ T8332] cgroup: fork rejected by pids controller in /syz7 [ 219.768703][ T6580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.793146][ T8246] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.899170][ T8205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.975846][ T5832] Bluetooth: hci4: command tx timeout [ 220.042281][ T8246] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.134857][ T5832] Bluetooth: hci0: command tx timeout [ 220.220112][ T8205] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.279634][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.286978][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.401433][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.408660][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.587393][ T8205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.601984][ T8205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.700957][ T8246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.758741][ T8175] veth0_vlan: entered promiscuous mode [ 220.785727][ T8246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.827026][ T8246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.881600][ T8175] veth1_vlan: entered promiscuous mode [ 220.926954][ T8246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.101845][ T8175] veth0_macvtap: entered promiscuous mode [ 221.123622][ T8205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.185615][ T8175] veth1_macvtap: entered promiscuous mode [ 221.262158][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.278907][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.289213][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.299832][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.324509][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.344975][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.365170][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.394379][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.414506][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.434401][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.454935][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.474705][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.504491][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.524982][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.544815][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.565849][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.594415][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.607518][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.614872][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.614897][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.614915][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.616814][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.638431][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.674229][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.691721][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.701812][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.737995][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.759618][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.782162][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.814369][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.826164][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.837169][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.847365][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.864443][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.874788][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.885306][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.900198][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.916988][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.926907][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.937455][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.947373][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.968250][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.970474][ T8353] loop6: detected capacity change from 0 to 32768 [ 221.984526][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.000311][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.010521][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.021904][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.035722][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.053829][ T8353] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.092505][ T8175] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.106225][ T8175] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.115700][ T8175] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.132620][ T8175] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.216701][ T5832] Bluetooth: hci0: command tx timeout [ 222.243302][ T8353] XFS (loop6): Ending clean mount [ 222.331782][ T8364] delete_channel: no stack [ 222.361712][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.372772][ T6580] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.394917][ T8205] veth0_vlan: entered promiscuous mode [ 222.539228][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.546491][ T8205] veth1_vlan: entered promiscuous mode [ 222.554654][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.572593][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.703080][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.710332][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.756668][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.764735][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.826263][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.833459][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.863258][ T8205] veth0_macvtap: entered promiscuous mode [ 222.928500][ T8205] veth1_macvtap: entered promiscuous mode [ 223.158183][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.214925][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.254258][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.275494][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.296184][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.326295][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.354521][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.378112][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.388548][ T8376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.394591][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.421125][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.448292][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.466376][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.474050][ T8370] loop6: detected capacity change from 0 to 40427 [ 223.476447][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.488454][ T8370] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3fffff [ 223.494050][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.502947][ T8370] F2FS-fs (loop6): heap/no_heap options were deprecated [ 223.521688][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.525919][ T8370] F2FS-fs (loop6): invalid crc value [ 223.535604][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.551497][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.562478][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.572773][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.595932][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.617139][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.643357][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.653007][ T8370] F2FS-fs (loop6): Start checkpoint disabled! [ 223.657707][ T8205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.688089][ T8370] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 223.713767][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 223.734777][ T5832] Bluetooth: hci2: command tx timeout [ 223.769245][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.794380][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.805601][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.816643][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.829254][ T8370] syz.6.648: attempt to access beyond end of device [ 223.829254][ T8370] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.845850][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.856932][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.868960][ T8370] F2FS-fs (loop6): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x197/0xcc0 [ 223.882739][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.894966][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.905614][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.916433][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.926609][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.941845][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.963900][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.977489][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.988235][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.999126][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.009412][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.020279][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.031549][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.045372][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.055599][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.067474][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.083830][ T8205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.084286][ T8312] kworker/u8:9: attempt to access beyond end of device [ 224.084286][ T8312] loop6: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 224.120785][ T1098] kworker/u8:5: attempt to access beyond end of device [ 224.120785][ T1098] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 224.151304][ T1098] CPU: 1 UID: 0 PID: 1098 Comm: kworker/u8:5 Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 224.151335][ T1098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.151349][ T1098] Workqueue: writeback wb_workfn (flush-7:6) [ 224.151403][ T1098] Call Trace: [ 224.151411][ T1098] [ 224.151421][ T1098] dump_stack_lvl+0x241/0x360 [ 224.151459][ T1098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.151492][ T1098] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 224.151525][ T1098] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.151571][ T1098] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 224.151601][ T1098] f2fs_handle_critical_error+0x392/0x5a0 [ 224.151635][ T1098] f2fs_write_end_io+0x563/0x790 [ 224.151670][ T1098] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 224.151702][ T1098] ? bio_endio+0x7e4/0x890 [ 224.151727][ T1098] ? bio_endio+0x82a/0x890 [ 224.151755][ T1098] __submit_merged_bio+0x2a9/0x710 [ 224.151774][ T1098] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 224.151816][ T1098] f2fs_submit_merged_write_cond+0x29f/0x380 [ 224.151866][ T1098] f2fs_write_data_pages+0x2f99/0x38d0 [ 224.151976][ T1098] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.152000][ T1098] ? __local_bh_enable_ip+0x168/0x200 [ 224.152044][ T1098] ? trace_cfg80211_return_bss+0x87/0x210 [ 224.152164][ T1098] ? __lock_acquire+0xad5/0xd80 [ 224.152219][ T1098] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.152255][ T1098] do_writepages+0x38c/0x640 [ 224.152288][ T1098] ? __pfx_do_writepages+0x10/0x10 [ 224.152308][ T1098] ? __lock_acquire+0xad5/0xd80 [ 224.152351][ T1098] ? reacquire_held_locks+0x12a/0x1e0 [ 224.152378][ T1098] ? writeback_sb_inodes+0x43f/0x1360 [ 224.152422][ T1098] __writeback_single_inode+0x14f/0x10d0 [ 224.152465][ T1098] writeback_sb_inodes+0x822/0x1360 [ 224.152544][ T1098] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 224.152632][ T1098] ? rcu_is_watching+0x15/0xb0 [ 224.152661][ T1098] ? queue_io+0x310/0x4d0 [ 224.152704][ T1098] wb_writeback+0x415/0xb90 [ 224.152744][ T1098] ? queue_io+0x2e1/0x4d0 [ 224.152776][ T1098] ? __pfx_wb_writeback+0x10/0x10 [ 224.152831][ T1098] wb_workfn+0x412/0x10b0 [ 224.152891][ T1098] ? __pfx_wb_workfn+0x10/0x10 [ 224.152914][ T1098] ? register_lock_class+0x54/0x330 [ 224.152947][ T1098] ? __lock_acquire+0xad5/0xd80 [ 224.152975][ T1098] ? lockdep_hardirqs_on+0x9d/0x150 [ 224.153024][ T1098] ? process_scheduled_works+0x9cb/0x18e0 [ 224.153048][ T1098] process_scheduled_works+0xac3/0x18e0 [ 224.153124][ T1098] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.153164][ T1098] ? assign_work+0x367/0x3d0 [ 224.153198][ T1098] worker_thread+0x870/0xd50 [ 224.153259][ T1098] ? __kthread_parkme+0x1a8/0x200 [ 224.153292][ T1098] ? __pfx_worker_thread+0x10/0x10 [ 224.153319][ T1098] kthread+0x7b7/0x940 [ 224.153353][ T1098] ? __pfx_worker_thread+0x10/0x10 [ 224.153381][ T1098] ? __pfx_kthread+0x10/0x10 [ 224.153407][ T1098] ? __pfx_kthread+0x10/0x10 [ 224.153437][ T1098] ? __pfx_kthread+0x10/0x10 [ 224.153467][ T1098] ? __pfx_kthread+0x10/0x10 [ 224.153495][ T1098] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.153523][ T1098] ? lockdep_hardirqs_on+0x9d/0x150 [ 224.153543][ T1098] ? __pfx_kthread+0x10/0x10 [ 224.153575][ T1098] ret_from_fork+0x4b/0x80 [ 224.153596][ T1098] ? __pfx_kthread+0x10/0x10 [ 224.153627][ T1098] ret_from_fork_asm+0x1a/0x30 [ 224.153671][ T1098] [ 224.153680][ T1098] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 224.191719][ T8205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.511277][ T8205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.520100][ T8205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.529162][ T8205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.790713][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.804908][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.825480][ T8354] bridge_slave_0: entered allmulticast mode [ 224.839182][ T8354] bridge_slave_0: entered promiscuous mode [ 224.869751][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.882838][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.898160][ T8354] bridge_slave_1: entered allmulticast mode [ 224.921095][ T8354] bridge_slave_1: entered promiscuous mode [ 225.051388][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.085241][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.233593][ T8354] team0: Port device team_slave_0 added [ 225.278719][ T8396] loop6: detected capacity change from 0 to 128 [ 225.301238][ T8354] team0: Port device team_slave_1 added [ 225.332616][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.355372][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.466102][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.494765][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.535673][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.566631][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.568219][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.587473][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.614613][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.658092][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.826559][ T5832] Bluetooth: hci2: command tx timeout [ 225.849792][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.990454][ T8354] hsr_slave_0: entered promiscuous mode [ 226.010048][ T8354] hsr_slave_1: entered promiscuous mode [ 226.025275][ T8354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.048863][ T8354] Cannot create hsr debugfs directory [ 226.978750][ T8354] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.114678][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.127425][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.139453][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.146687][ T8354] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.180704][ T8246] veth0_vlan: entered promiscuous mode [ 227.190897][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.199098][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.253262][ T8354] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.270843][ T8246] veth1_vlan: entered promiscuous mode [ 227.377311][ T8354] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.403916][ T8246] veth0_macvtap: entered promiscuous mode [ 227.492856][ T8246] veth1_macvtap: entered promiscuous mode [ 227.759603][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.800618][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.854380][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.874450][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.892568][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.904161][ T5832] Bluetooth: hci2: command tx timeout [ 227.913661][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.923750][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.925698][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.940120][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.953692][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.965199][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.975851][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.976605][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.986756][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.993500][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.011304][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.021411][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.022117][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.043169][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.053309][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.068826][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.078928][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.089557][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.104935][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.115590][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.125961][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.141213][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.151361][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.161958][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.174120][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.323678][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.335828][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.351477][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.362494][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.372793][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.384945][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.395308][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.408286][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.418526][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.429901][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.440519][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.456193][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.466490][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.477317][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.487709][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.498659][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.524592][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.535986][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.551242][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.562302][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.574804][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.586848][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.602058][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.612923][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.625554][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.690910][ T8246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.714628][ T8246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.731572][ T8246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.754513][ T8246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.801136][ T8409] chnl_net:caif_netlink_parms(): no params data found [ 228.906786][ T8354] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 229.011674][ T8354] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 229.092919][ T8354] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 229.134966][ T8354] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.219688][ T8435] netlink: 'syz.9.664': attribute type 10 has an invalid length. [ 229.229993][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.237694][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.255442][ T5847] Bluetooth: hci1: command tx timeout [ 229.268638][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.275897][ T8435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.283514][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.290847][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.307528][ T8435] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 229.323080][ T62] [ 229.326705][ T62] ============================= [ 229.331591][ T62] WARNING: suspicious RCU usage [ 229.336967][ T62] 6.15.0-rc1-next-20250408-syzkaller #0 Not tainted [ 229.343585][ T62] ----------------------------- [ 229.348614][ T62] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! [ 229.357601][ T62] [ 229.357601][ T62] other info that might help us debug this: [ 229.357601][ T62] [ 229.369626][ T62] [ 229.369626][ T62] rcu_scheduler_active = 2, debug_locks = 1 [ 229.379258][ T62] 3 locks held by kworker/u8:4/62: [ 229.384476][ T62] #0: ffff88807994a148 ((wq_completion)bond0#12){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 229.395749][ T62] #1: ffffc90001547c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 229.408790][ T62] #2: ffffffff8ed3d200 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 229.419580][ T62] [ 229.419580][ T62] stack backtrace: [ 229.427348][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 229.427387][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.427401][ T62] Workqueue: bond0 bond_mii_monitor [ 229.427438][ T62] Call Trace: [ 229.427446][ T62] [ 229.427455][ T62] dump_stack_lvl+0x241/0x360 [ 229.427492][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.427523][ T62] ? __pfx__printk+0x10/0x10 [ 229.427567][ T62] lockdep_rcu_suspicious+0x175/0x200 [ 229.427599][ T62] dev_activate+0xff/0x1240 [ 229.427625][ T62] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 229.427655][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.427677][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 229.427708][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.427741][ T62] ? __pfx_dev_activate+0x10/0x10 [ 229.427760][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 229.427791][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.427826][ T62] ? rfc2863_policy+0x10e/0x3f0 [ 229.427857][ T62] linkwatch_do_dev+0xfb/0x170 [ 229.427885][ T62] ethtool_op_get_link+0x15/0x60 [ 229.427909][ T62] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 229.427931][ T62] bond_check_dev_link+0x1fb/0x4b0 [ 229.427965][ T62] ? __pfx_bond_check_dev_link+0x10/0x10 [ 229.428017][ T62] bond_mii_monitor+0x49d/0x3170 [ 229.428060][ T62] ? validate_chain+0x8a7/0x24e0 [ 229.428086][ T62] ? bond_mii_monitor+0x17f/0x3170 [ 229.428132][ T62] ? __pfx_bond_mii_monitor+0x10/0x10 [ 229.428169][ T62] ? irqentry_exit+0x63/0x90 [ 229.428187][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.428217][ T62] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 229.428258][ T62] ? lock_acquire+0x167/0x2f0 [ 229.428294][ T62] ? process_scheduled_works+0x9cb/0x18e0 [ 229.428318][ T62] process_scheduled_works+0xac3/0x18e0 [ 229.428385][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 229.428422][ T62] ? assign_work+0x367/0x3d0 [ 229.428453][ T62] worker_thread+0x870/0xd50 [ 229.428498][ T62] ? __kthread_parkme+0x1a8/0x200 [ 229.428529][ T62] ? __pfx_worker_thread+0x10/0x10 [ 229.428556][ T62] kthread+0x7b7/0x940 [ 229.428588][ T62] ? __pfx_worker_thread+0x10/0x10 [ 229.428615][ T62] ? __pfx_kthread+0x10/0x10 [ 229.428642][ T62] ? __pfx_kthread+0x10/0x10 [ 229.428671][ T62] ? __pfx_kthread+0x10/0x10 [ 229.428700][ T62] ? __pfx_kthread+0x10/0x10 [ 229.428729][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.428757][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.428777][ T62] ? __pfx_kthread+0x10/0x10 [ 229.428819][ T62] ret_from_fork+0x4b/0x80 [ 229.428840][ T62] ? __pfx_kthread+0x10/0x10 [ 229.428869][ T62] ret_from_fork_asm+0x1a/0x30 [ 229.428907][ T62] [ 229.444511][ T62] [ 229.721115][ T62] ============================= [ 229.726111][ T62] WARNING: suspicious RCU usage [ 229.730976][ T62] 6.15.0-rc1-next-20250408-syzkaller #0 Not tainted [ 229.738098][ T62] ----------------------------- [ 229.742997][ T62] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 229.751895][ T62] [ 229.751895][ T62] other info that might help us debug this: [ 229.751895][ T62] [ 229.762241][ T62] [ 229.762241][ T62] rcu_scheduler_active = 2, debug_locks = 1 [ 229.770491][ T62] 3 locks held by kworker/u8:4/62: [ 229.778046][ T62] #0: ffff88807994a148 ((wq_completion)bond0#12){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 229.791691][ T62] #1: ffffc90001547c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 229.804773][ T62] #2: ffffffff8ed3d200 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 229.814632][ T62] [ 229.814632][ T62] stack backtrace: [ 229.820556][ T62] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 229.820585][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.820599][ T62] Workqueue: bond0 bond_mii_monitor [ 229.820635][ T62] Call Trace: [ 229.820644][ T62] [ 229.820654][ T62] dump_stack_lvl+0x241/0x360 [ 229.820690][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.820721][ T62] ? __pfx__printk+0x10/0x10 [ 229.820756][ T62] ? print_lock+0x171/0x1a0 [ 229.820788][ T62] lockdep_rcu_suspicious+0x175/0x200 [ 229.820820][ T62] transition_one_qdisc+0x8e/0x1c0 [ 229.820846][ T62] dev_activate+0x835/0x1240 [ 229.820871][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.820894][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 229.820926][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.820958][ T62] ? __pfx_dev_activate+0x10/0x10 [ 229.820977][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 229.821007][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.821042][ T62] ? rfc2863_policy+0x10e/0x3f0 [ 229.821071][ T62] linkwatch_do_dev+0xfb/0x170 [ 229.821100][ T62] ethtool_op_get_link+0x15/0x60 [ 229.821122][ T62] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 229.821144][ T62] bond_check_dev_link+0x1fb/0x4b0 [ 229.821178][ T62] ? __pfx_bond_check_dev_link+0x10/0x10 [ 229.821231][ T62] bond_mii_monitor+0x49d/0x3170 [ 229.821273][ T62] ? validate_chain+0x8a7/0x24e0 [ 229.821329][ T62] ? bond_mii_monitor+0x17f/0x3170 [ 229.821392][ T62] ? __pfx_bond_mii_monitor+0x10/0x10 [ 229.821428][ T62] ? irqentry_exit+0x63/0x90 [ 229.821446][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.821476][ T62] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 229.821516][ T62] ? lock_acquire+0x167/0x2f0 [ 229.821553][ T62] ? process_scheduled_works+0x9cb/0x18e0 [ 229.821577][ T62] process_scheduled_works+0xac3/0x18e0 [ 229.821636][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 229.821675][ T62] ? assign_work+0x367/0x3d0 [ 229.821706][ T62] worker_thread+0x870/0xd50 [ 229.821750][ T62] ? __kthread_parkme+0x1a8/0x200 [ 229.821781][ T62] ? __pfx_worker_thread+0x10/0x10 [ 229.821819][ T62] kthread+0x7b7/0x940 [ 229.821867][ T62] ? __pfx_worker_thread+0x10/0x10 [ 229.821894][ T62] ? __pfx_kthread+0x10/0x10 [ 229.821921][ T62] ? __pfx_kthread+0x10/0x10 [ 229.821949][ T62] ? __pfx_kthread+0x10/0x10 [ 229.821978][ T62] ? __pfx_kthread+0x10/0x10 [ 229.822006][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.822033][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.822053][ T62] ? __pfx_kthread+0x10/0x10 [ 229.822083][ T62] ret_from_fork+0x4b/0x80 [ 229.822105][ T62] ? __pfx_kthread+0x10/0x10 [ 229.822134][ T62] ret_from_fork_asm+0x1a/0x30 [ 229.822174][ T62] [ 230.093252][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.133068][ T5847] Bluetooth: hci2: command tx timeout [ 230.143568][ T62] [ 230.143585][ T62] ============================= [ 230.143593][ T62] WARNING: suspicious RCU usage [ 230.143604][ T62] 6.15.0-rc1-next-20250408-syzkaller #0 Not tainted [ 230.143618][ T62] ----------------------------- [ 230.143627][ T62] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 230.143644][ T62] [ 230.143644][ T62] other info that might help us debug this: [ 230.143644][ T62] [ 230.143653][ T62] [ 230.143653][ T62] rcu_scheduler_active = 2, debug_locks = 1 [ 230.143668][ T62] 3 locks held by kworker/u8:4/62: [ 230.143682][ T62] #0: ffff88807994a148 ((wq_completion)bond0#12){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 230.143762][ T62] #1: ffffc90001547c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 230.143829][ T62] #2: ffffffff8ed3d200 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 230.143903][ T62] [ 230.143903][ T62] stack backtrace: [ 230.143916][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 230.143940][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.143954][ T62] Workqueue: bond0 bond_mii_monitor [ 230.143985][ T62] Call Trace: [ 230.143994][ T62] [ 230.144003][ T62] dump_stack_lvl+0x241/0x360 [ 230.144039][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.144070][ T62] ? __pfx__printk+0x10/0x10 [ 230.144113][ T62] lockdep_rcu_suspicious+0x175/0x200 [ 230.144145][ T62] dev_activate+0x922/0x1240 [ 230.144171][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.144194][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 230.144225][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.144257][ T62] ? __pfx_dev_activate+0x10/0x10 [ 230.144277][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 230.144312][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.144347][ T62] ? rfc2863_policy+0x10e/0x3f0 [ 230.144376][ T62] linkwatch_do_dev+0xfb/0x170 [ 230.144404][ T62] ethtool_op_get_link+0x15/0x60 [ 230.144427][ T62] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 230.144449][ T62] bond_check_dev_link+0x1fb/0x4b0 [ 230.144484][ T62] ? __pfx_bond_check_dev_link+0x10/0x10 [ 230.144544][ T62] bond_mii_monitor+0x49d/0x3170 [ 230.144588][ T62] ? validate_chain+0x8a7/0x24e0 [ 230.144614][ T62] ? bond_mii_monitor+0x17f/0x3170 [ 230.144660][ T62] ? __pfx_bond_mii_monitor+0x10/0x10 [ 230.144697][ T62] ? irqentry_exit+0x63/0x90 [ 230.144714][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.144744][ T62] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.144785][ T62] ? lock_acquire+0x167/0x2f0 [ 230.144821][ T62] ? process_scheduled_works+0x9cb/0x18e0 [ 230.144845][ T62] process_scheduled_works+0xac3/0x18e0 [ 230.144905][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.144941][ T62] ? assign_work+0x367/0x3d0 [ 230.144973][ T62] worker_thread+0x870/0xd50 [ 230.145017][ T62] ? __kthread_parkme+0x1a8/0x200 [ 230.145048][ T62] ? __pfx_worker_thread+0x10/0x10 [ 230.145073][ T62] kthread+0x7b7/0x940 [ 230.145105][ T62] ? __pfx_worker_thread+0x10/0x10 [ 230.145133][ T62] ? __pfx_kthread+0x10/0x10 [ 230.145159][ T62] ? __pfx_kthread+0x10/0x10 [ 230.145189][ T62] ? __pfx_kthread+0x10/0x10 [ 230.145217][ T62] ? __pfx_kthread+0x10/0x10 [ 230.145246][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.145273][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.145293][ T62] ? __pfx_kthread+0x10/0x10 [ 230.145324][ T62] ret_from_fork+0x4b/0x80 [ 230.145345][ T62] ? __pfx_kthread+0x10/0x10 [ 230.145375][ T62] ret_from_fork_asm+0x1a/0x30 [ 230.145413][ T62] [ 230.207150][ T5832] Bluetooth: hci4: command tx timeout [ 230.242040][ T62] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 230.585845][ T62] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 62, name: kworker/u8:4 [ 230.598984][ T62] preempt_count: 0, expected: 0 [ 230.603874][ T62] RCU nest depth: 1, expected: 0 [ 230.608919][ T62] 3 locks held by kworker/u8:4/62: [ 230.614055][ T62] #0: ffff88807994a148 ((wq_completion)bond0#12){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 230.625581][ T62] #1: ffffc90001547c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 230.638720][ T62] #2: ffffffff8ed3d200 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 230.648589][ T62] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 230.648616][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.648630][ T62] Workqueue: bond0 bond_mii_monitor [ 230.648662][ T62] Call Trace: [ 230.648671][ T62] [ 230.648679][ T62] dump_stack_lvl+0x241/0x360 [ 230.648716][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.648768][ T62] __might_resched+0x558/0x6c0 [ 230.648796][ T62] ? is_bpf_text_address+0x288/0x2a0 [ 230.648825][ T62] ? preempt_schedule_notrace+0xf9/0x140 [ 230.648859][ T62] ? __pfx___might_resched+0x10/0x10 [ 230.648886][ T62] ? __pfx___schedule+0x10/0x10 [ 230.648918][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.648951][ T62] down_read+0x90/0xa50 [ 230.648974][ T62] ? dump_stack_lvl+0x2fd/0x360 [ 230.649010][ T62] ? preempt_schedule_notrace+0x103/0x140 [ 230.649043][ T62] ? __pfx_down_read+0x10/0x10 [ 230.649067][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.649098][ T62] ? __pfx__printk+0x10/0x10 [ 230.649133][ T62] ? dev_get_flags+0x147/0x1d0 [ 230.649165][ T62] wext_netdev_notifier_call+0x1f/0x120 [ 230.649199][ T62] notifier_call_chain+0x1a5/0x3f0 [ 230.649236][ T62] netif_state_change+0x123/0x1a0 [ 230.649257][ T62] ? __pfx_netif_state_change+0x10/0x10 [ 230.649279][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 230.649320][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.649356][ T62] ? rfc2863_policy+0x10e/0x3f0 [ 230.649386][ T62] linkwatch_do_dev+0x112/0x170 [ 230.649413][ T62] ethtool_op_get_link+0x15/0x60 [ 230.649436][ T62] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 230.649457][ T62] bond_check_dev_link+0x1fb/0x4b0 [ 230.649490][ T62] ? __pfx_bond_check_dev_link+0x10/0x10 [ 230.649543][ T62] bond_mii_monitor+0x49d/0x3170 [ 230.649588][ T62] ? validate_chain+0x8a7/0x24e0 [ 230.649615][ T62] ? bond_mii_monitor+0x17f/0x3170 [ 230.649662][ T62] ? __pfx_bond_mii_monitor+0x10/0x10 [ 230.649710][ T62] ? irqentry_exit+0x63/0x90 [ 230.649728][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.649758][ T62] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.649798][ T62] ? lock_acquire+0x167/0x2f0 [ 230.649835][ T62] ? process_scheduled_works+0x9cb/0x18e0 [ 230.649859][ T62] process_scheduled_works+0xac3/0x18e0 [ 230.649918][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.649955][ T62] ? assign_work+0x367/0x3d0 [ 230.650004][ T62] worker_thread+0x870/0xd50 [ 230.650049][ T62] ? __kthread_parkme+0x1a8/0x200 [ 230.650081][ T62] ? __pfx_worker_thread+0x10/0x10 [ 230.650108][ T62] kthread+0x7b7/0x940 [ 230.650141][ T62] ? __pfx_worker_thread+0x10/0x10 [ 230.650169][ T62] ? __pfx_kthread+0x10/0x10 [ 230.650196][ T62] ? __pfx_kthread+0x10/0x10 [ 230.650225][ T62] ? __pfx_kthread+0x10/0x10 [ 230.650254][ T62] ? __pfx_kthread+0x10/0x10 [ 230.650283][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.650315][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.650335][ T62] ? __pfx_kthread+0x10/0x10 [ 230.650365][ T62] ret_from_fork+0x4b/0x80 [ 230.650388][ T62] ? __pfx_kthread+0x10/0x10 [ 230.650419][ T62] ret_from_fork_asm+0x1a/0x30 [ 230.650459][ T62] [ 230.650480][ T62] [ 230.961135][ T62] ============================= [ 230.965982][ T62] [ BUG: Invalid wait context ] [ 230.970826][ T62] 6.15.0-rc1-next-20250408-syzkaller #0 Tainted: G W [ 230.978969][ T62] ----------------------------- [ 230.983811][ T62] kworker/u8:4/62 is trying to lock: [ 230.989095][ T62] ffffffff900f3710 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 230.998597][ T62] other info that might help us debug this: [ 231.004497][ T62] context-{5:5} [ 231.007965][ T62] 3 locks held by kworker/u8:4/62: [ 231.013107][ T62] #0: ffff88807994a148 ((wq_completion)bond0#12){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 231.024273][ T62] #1: ffffc90001547c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 231.037166][ T62] #2: ffffffff8ed3d200 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 231.046849][ T62] stack backtrace: [ 231.050568][ T62] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Tainted: G W 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 231.050592][ T62] Tainted: [W]=WARN [ 231.050599][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.050611][ T62] Workqueue: bond0 bond_mii_monitor [ 231.050637][ T62] Call Trace: [ 231.050644][ T62] [ 231.050653][ T62] dump_stack_lvl+0x241/0x360 [ 231.050680][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.050703][ T62] ? __pfx__printk+0x10/0x10 [ 231.050730][ T62] __lock_acquire+0xc30/0xd80 [ 231.050753][ T62] lock_acquire+0x116/0x2f0 [ 231.050770][ T62] ? wext_netdev_notifier_call+0x1f/0x120 [ 231.050797][ T62] down_read+0xb3/0xa50 [ 231.050814][ T62] ? wext_netdev_notifier_call+0x1f/0x120 [ 231.050835][ T62] ? dump_stack_lvl+0x2fd/0x360 [ 231.050860][ T62] ? preempt_schedule_notrace+0x103/0x140 [ 231.050885][ T62] ? __pfx_down_read+0x10/0x10 [ 231.050903][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.050926][ T62] ? __pfx__printk+0x10/0x10 [ 231.050949][ T62] ? dev_get_flags+0x147/0x1d0 [ 231.050971][ T62] wext_netdev_notifier_call+0x1f/0x120 [ 231.050993][ T62] notifier_call_chain+0x1a5/0x3f0 [ 231.051017][ T62] netif_state_change+0x123/0x1a0 [ 231.051033][ T62] ? __pfx_netif_state_change+0x10/0x10 [ 231.051049][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 231.051073][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.051099][ T62] ? rfc2863_policy+0x10e/0x3f0 [ 231.051121][ T62] linkwatch_do_dev+0x112/0x170 [ 231.051141][ T62] ethtool_op_get_link+0x15/0x60 [ 231.051160][ T62] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 231.051178][ T62] bond_check_dev_link+0x1fb/0x4b0 [ 231.051205][ T62] ? __pfx_bond_check_dev_link+0x10/0x10 [ 231.051236][ T62] bond_mii_monitor+0x49d/0x3170 [ 231.051265][ T62] ? validate_chain+0x8a7/0x24e0 [ 231.051285][ T62] ? bond_mii_monitor+0x17f/0x3170 [ 231.051315][ T62] ? __pfx_bond_mii_monitor+0x10/0x10 [ 231.051342][ T62] ? irqentry_exit+0x63/0x90 [ 231.051355][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 231.051374][ T62] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.051403][ T62] ? lock_acquire+0x167/0x2f0 [ 231.051425][ T62] ? process_scheduled_works+0x9cb/0x18e0 [ 231.051444][ T62] process_scheduled_works+0xac3/0x18e0 [ 231.051483][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.051507][ T62] ? assign_work+0x367/0x3d0 [ 231.051527][ T62] worker_thread+0x870/0xd50 [ 231.051554][ T62] ? __kthread_parkme+0x1a8/0x200 [ 231.051576][ T62] ? __pfx_worker_thread+0x10/0x10 [ 231.051595][ T62] kthread+0x7b7/0x940 [ 231.051619][ T62] ? __pfx_worker_thread+0x10/0x10 [ 231.051639][ T62] ? __pfx_kthread+0x10/0x10 [ 231.051660][ T62] ? __pfx_kthread+0x10/0x10 [ 231.051683][ T62] ? __pfx_kthread+0x10/0x10 [ 231.051704][ T62] ? __pfx_kthread+0x10/0x10 [ 231.051727][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.051749][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 231.051764][ T62] ? __pfx_kthread+0x10/0x10 [ 231.051787][ T62] ret_from_fork+0x4b/0x80 [ 231.051804][ T62] ? __pfx_kthread+0x10/0x10 [ 231.051827][ T62] ret_from_fork_asm+0x1a/0x30 [ 231.051849][ T62] [ 231.359746][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.376301][ T5832] Bluetooth: hci1: command tx timeout [ 231.385527][ T62] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 231.395415][ T62] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 62, name: kworker/u8:4 [ 231.404533][ T62] preempt_count: 0, expected: 0 [ 231.409428][ T62] RCU nest depth: 1, expected: 0 [ 231.417745][ T62] INFO: lockdep is turned off. [ 231.422531][ T62] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Tainted: G W 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 231.422554][ T62] Tainted: [W]=WARN [ 231.422559][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.422570][ T62] Workqueue: bond0 bond_mii_monitor [ 231.422597][ T62] Call Trace: [ 231.422603][ T62] [ 231.422609][ T62] dump_stack_lvl+0x241/0x360 [ 231.422634][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.422655][ T62] ? __pfx__printk+0x10/0x10 [ 231.422674][ T62] ? preempt_schedule_irq+0x145/0x1c0 [ 231.422696][ T62] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 231.422721][ T62] __might_resched+0x558/0x6c0 [ 231.422739][ T62] ? __asan_memset+0x23/0x50 [ 231.422758][ T62] ? __pfx___might_resched+0x10/0x10 [ 231.422775][ T62] ? br_get_link_ksettings+0x36f/0x420 [ 231.422793][ T62] ? __pfx_br_get_link_ksettings+0x10/0x10 [ 231.422814][ T62] __mutex_lock+0x12c/0x10c0 [ 231.422834][ T62] ? tee_netdev_event+0x86/0x460 [ 231.422855][ T62] ? __pfx___mutex_lock+0x10/0x10 [ 231.422874][ T62] ? net_generic+0x1f/0x240 [ 231.422900][ T62] tee_netdev_event+0x86/0x460 [ 231.422928][ T62] ? nft_offload_netdev_event+0x27d/0x360 [ 231.422962][ T62] notifier_call_chain+0x1a5/0x3f0 [ 231.422986][ T62] netif_state_change+0x123/0x1a0 [ 231.423000][ T62] ? __pfx_netif_state_change+0x10/0x10 [ 231.423014][ T62] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 231.423035][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.423057][ T62] ? rfc2863_policy+0x10e/0x3f0 [ 231.423076][ T62] linkwatch_do_dev+0x112/0x170 [ 231.423094][ T62] ethtool_op_get_link+0x15/0x60 [ 231.423110][ T62] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 231.423126][ T62] bond_check_dev_link+0x1fb/0x4b0 [ 231.423148][ T62] ? __pfx_bond_check_dev_link+0x10/0x10 [ 231.423177][ T62] bond_mii_monitor+0x49d/0x3170 [ 231.423202][ T62] ? validate_chain+0x8a7/0x24e0 [ 231.423220][ T62] ? bond_mii_monitor+0x17f/0x3170 [ 231.423246][ T62] ? __pfx_bond_mii_monitor+0x10/0x10 [ 231.423269][ T62] ? irqentry_exit+0x63/0x90 [ 231.423281][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 231.423298][ T62] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.423323][ T62] ? lock_acquire+0x167/0x2f0 [ 231.423360][ T62] ? process_scheduled_works+0x9cb/0x18e0 [ 231.423377][ T62] process_scheduled_works+0xac3/0x18e0 [ 231.423406][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.423446][ T62] ? assign_work+0x367/0x3d0 [ 231.423468][ T62] worker_thread+0x870/0xd50 [ 231.423493][ T62] ? __kthread_parkme+0x1a8/0x200 [ 231.423512][ T62] ? __pfx_worker_thread+0x10/0x10 [ 231.423530][ T62] kthread+0x7b7/0x940 [ 231.423552][ T62] ? __pfx_worker_thread+0x10/0x10 [ 231.423570][ T62] ? __pfx_kthread+0x10/0x10 [ 231.423589][ T62] ? __pfx_kthread+0x10/0x10 [ 231.423608][ T62] ? __pfx_kthread+0x10/0x10 [ 231.423628][ T62] ? __pfx_kthread+0x10/0x10 [ 231.423648][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.423668][ T62] ? lockdep_hardirqs_on+0x9d/0x150 [ 231.423682][ T62] ? __pfx_kthread+0x10/0x10 [ 231.423702][ T62] ret_from_fork+0x4b/0x80 [ 231.423717][ T62] ? __pfx_kthread+0x10/0x10 [ 231.423737][ T62] ret_from_fork_asm+0x1a/0x30 [ 231.423758][ T62] [ 231.738460][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.752702][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.760651][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.775913][ T8409] bridge_slave_0: entered allmulticast mode [ 231.783088][ T8409] bridge_slave_0: entered promiscuous mode [ 231.790838][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.801878][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.809605][ T8409] bridge_slave_1: entered allmulticast mode [ 231.816596][ T8409] bridge_slave_1: entered promiscuous mode [ 231.827117][ T8246] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 231.887174][ T8409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.899332][ T8409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.935671][ T36] ------------[ cut here ]------------ [ 231.941180][ T36] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 231.953266][ T8418] chnl_net:caif_netlink_parms(): no params data found [ 231.965435][ T36] WARNING: CPU: 1 PID: 36 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x30d/0x360 [ 231.975764][ T36] Modules linked in: [ 231.979051][ T8409] team0: Port device team_slave_0 added [ 231.979680][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 231.998421][ T36] Tainted: [W]=WARN [ 232.002256][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.012422][ T36] Workqueue: bond0 bond_mii_monitor [ 232.017783][ T36] RIP: 0010:__linkwatch_sync_dev+0x30d/0x360 [ 232.023810][ T36] Code: 7c fe ff ff e8 f4 63 cc f7 c6 05 83 28 53 06 01 90 48 c7 c7 60 5c 51 8d 48 c7 c6 8a 9b 67 8e ba 38 00 00 00 e8 04 6b 8b f7 90 <0f> 0b 90 90 e9 4d fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 19 fd ff ff [ 232.043477][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.051109][ T36] RSP: 0018:ffffc90000ad7710 EFLAGS: 00010246 [ 232.059035][ T36] RAX: fe2002b3896f4500 RBX: 0000000000000000 RCX: ffff8881442b9e00 [ 232.059097][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.067188][ T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 232.067207][ T36] RBP: 0000000000000000 R08: ffffffff81824ed2 R09: fffffbfff1d7a700 [ 232.067223][ T36] R10: dffffc0000000000 R11: fffffbfff1d7a700 R12: 0000000000000000 [ 232.067239][ T36] R13: dffffc0000000000 R14: ffff888028016008 R15: ffff888028016000 [ 232.067256][ T36] FS: 0000000000000000(0000) GS:ffff888125089000(0000) knlGS:0000000000000000 [ 232.067275][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.067291][ T36] CR2: 00007f92a88d7d60 CR3: 0000000048f04000 CR4: 00000000003526f0 [ 232.067310][ T36] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 232.067325][ T36] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 232.067340][ T36] Call Trace: [ 232.067348][ T36] [ 232.067356][ T36] ? ethtool_op_get_link+0xd/0x60 [ 232.067387][ T36] ethtool_op_get_link+0x15/0x60 [ 232.067411][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 232.067435][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 232.067469][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 232.067502][ T36] ? lock_acquire+0x5e/0x2f0 [ 232.067536][ T36] ? do_raw_spin_lock+0x151/0x370 [ 232.067566][ T36] ? rcu_read_lock_held+0xa/0x50 [ 232.067596][ T36] bond_mii_monitor+0x49d/0x3170 [ 232.067632][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 232.067664][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 232.067697][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 232.067727][ T36] ? try_to_wake_up+0xa27/0x15d0 [ 232.067758][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.067794][ T36] ? __pfx_try_to_wake_up+0x10/0x10 [ 232.067825][ T36] ? debug_object_deactivate+0x2e1/0x390 [ 232.067858][ T36] ? rcu_is_watching+0x15/0xb0 [ 232.067886][ T36] ? lock_acquire+0x5e/0x2f0 [ 232.067911][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 232.067935][ T36] process_scheduled_works+0xac3/0x18e0 [ 232.067965][ T36] ? schedule+0x163/0x360 [ 232.068002][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 232.068029][ T36] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 232.068059][ T36] ? assign_work+0x367/0x3d0 [ 232.068084][ T36] worker_thread+0x870/0xd50 [ 232.068116][ T36] ? __kthread_parkme+0x1a8/0x200 [ 232.068144][ T36] ? __pfx_worker_thread+0x10/0x10 [ 232.112205][ T8409] team0: Port device team_slave_1 added [ 232.117203][ T36] kthread+0x7b7/0x940 [ 232.117241][ T36] ? __pfx_worker_thread+0x10/0x10 [ 232.117270][ T36] ? __pfx_kthread+0x10/0x10 [ 232.117299][ T36] ? __pfx_kthread+0x10/0x10 [ 232.117328][ T36] ? __pfx_kthread+0x10/0x10 [ 232.117357][ T36] ? __pfx_kthread+0x10/0x10 [ 232.117386][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.117417][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 232.117438][ T36] ? __pfx_kthread+0x10/0x10 [ 232.117468][ T36] ret_from_fork+0x4b/0x80 [ 232.117491][ T36] ? __pfx_kthread+0x10/0x10 [ 232.117520][ T36] ret_from_fork_asm+0x1a/0x30 [ 232.140210][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.142858][ T36] [ 232.305068][ T5832] Bluetooth: hci4: command tx timeout [ 232.308346][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.308371][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 232.308406][ T36] Tainted: [W]=WARN [ 232.308416][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.308433][ T36] Workqueue: bond0 bond_mii_monitor [ 232.308473][ T36] Call Trace: [ 232.308483][ T36] [ 232.308493][ T36] dump_stack_lvl+0x241/0x360 [ 232.308532][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.308564][ T36] ? __pfx__printk+0x10/0x10 [ 232.308598][ T36] ? vscnprintf+0x5d/0x90 [ 232.308629][ T36] panic+0x349/0x880 [ 232.308660][ T36] ? __warn+0x174/0x4d0 [ 232.308691][ T36] ? __pfx_panic+0x10/0x10 [ 232.308727][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 232.308751][ T36] __warn+0x344/0x4d0 [ 232.308781][ T36] ? __linkwatch_sync_dev+0x30d/0x360 [ 232.308813][ T36] report_bug+0x2b3/0x500 [ 232.308847][ T36] ? __linkwatch_sync_dev+0x30d/0x360 [ 232.308876][ T36] ? __linkwatch_sync_dev+0x30d/0x360 [ 232.308904][ T36] ? __linkwatch_sync_dev+0x30f/0x360 [ 232.308931][ T36] handle_bug+0x89/0x170 [ 232.308957][ T36] exc_invalid_op+0x1a/0x50 [ 232.308982][ T36] asm_exc_invalid_op+0x1a/0x20 [ 232.309005][ T36] RIP: 0010:__linkwatch_sync_dev+0x30d/0x360 [ 232.309036][ T36] Code: 7c fe ff ff e8 f4 63 cc f7 c6 05 83 28 53 06 01 90 48 c7 c7 60 5c 51 8d 48 c7 c6 8a 9b 67 8e ba 38 00 00 00 e8 04 6b 8b f7 90 <0f> 0b 90 90 e9 4d fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 19 fd ff ff [ 232.309056][ T36] RSP: 0018:ffffc90000ad7710 EFLAGS: 00010246 [ 232.309077][ T36] RAX: fe2002b3896f4500 RBX: 0000000000000000 RCX: ffff8881442b9e00 [ 232.309096][ T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 232.309111][ T36] RBP: 0000000000000000 R08: ffffffff81824ed2 R09: fffffbfff1d7a700 [ 232.309127][ T36] R10: dffffc0000000000 R11: fffffbfff1d7a700 R12: 0000000000000000 [ 232.309152][ T36] R13: dffffc0000000000 R14: ffff888028016008 R15: ffff888028016000 [ 232.309176][ T36] ? __warn_printk+0x2a2/0x360 [ 232.309213][ T36] ? ethtool_op_get_link+0xd/0x60 [ 232.309239][ T36] ethtool_op_get_link+0x15/0x60 [ 232.309265][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 232.309289][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 232.309323][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 232.309359][ T36] ? lock_acquire+0x5e/0x2f0 [ 232.309384][ T36] ? do_raw_spin_lock+0x151/0x370 [ 232.309416][ T36] ? rcu_read_lock_held+0xa/0x50 [ 232.309451][ T36] bond_mii_monitor+0x49d/0x3170 [ 232.309492][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 232.309526][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 232.309564][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 232.309597][ T36] ? try_to_wake_up+0xa27/0x15d0 [ 232.309631][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.309668][ T36] ? __pfx_try_to_wake_up+0x10/0x10 [ 232.309701][ T36] ? debug_object_deactivate+0x2e1/0x390 [ 232.309741][ T36] ? rcu_is_watching+0x15/0xb0 [ 232.309771][ T36] ? lock_acquire+0x5e/0x2f0 [ 232.309800][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 232.309827][ T36] process_scheduled_works+0xac3/0x18e0 [ 232.309861][ T36] ? schedule+0x163/0x360 [ 232.309901][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 232.309930][ T36] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 232.309964][ T36] ? assign_work+0x367/0x3d0 [ 232.309992][ T36] worker_thread+0x870/0xd50 [ 232.310028][ T36] ? __kthread_parkme+0x1a8/0x200 [ 232.310059][ T36] ? __pfx_worker_thread+0x10/0x10 [ 232.310086][ T36] kthread+0x7b7/0x940 [ 232.310119][ T36] ? __pfx_worker_thread+0x10/0x10 [ 232.310152][ T36] ? __pfx_kthread+0x10/0x10 [ 232.310182][ T36] ? __pfx_kthread+0x10/0x10 [ 232.310213][ T36] ? __pfx_kthread+0x10/0x10 [ 232.310244][ T36] ? __pfx_kthread+0x10/0x10 [ 232.310275][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.310305][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 232.310327][ T36] ? __pfx_kthread+0x10/0x10 [ 232.310358][ T36] ret_from_fork+0x4b/0x80 [ 232.310382][ T36] ? __pfx_kthread+0x10/0x10 [ 232.310414][ T36] ret_from_fork_asm+0x1a/0x30 [ 232.310445][ T36] [ 232.313696][ T36] Kernel Offset: disabled