last executing test programs: 4m45.720320779s ago: executing program 32 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4m4.459099282s ago: executing program 4 (id=1159): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=r0, @ANYBLOB="01000000000002004c0012800b00010067726574617000003c000280060011"], 0x6c}}, 0x0) 4m4.274213168s ago: executing program 4 (id=1162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) 4m4.046138211s ago: executing program 4 (id=1165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0) 4m3.858685224s ago: executing program 4 (id=1169): syz_mount_image$exfat(&(0x7f0000002100), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f0000002180)={[{@allow_utime={'allow_utime', 0x3d, 0xd85}}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@namecase}, {@keep_last_dots}, {@gid={'gid', 0x3d, 0xee01}}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) 4m3.534452501s ago: executing program 4 (id=1175): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 4m2.963188709s ago: executing program 4 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4m2.525274571s ago: executing program 33 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m38.148389047s ago: executing program 0 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x3c, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) 3m37.134176134s ago: executing program 0 (id=1493): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0xc, 0xff6, &(0x7f0000001e00)=""/4086, 0x41100, 0x6}, 0x94) 3m36.848144503s ago: executing program 0 (id=1497): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009010081ffffff03400003000000000800040001000000", 0x24) 3m36.655211176s ago: executing program 0 (id=1501): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ext4\x00', 0x1000040, 0x0) 3m36.20781569s ago: executing program 0 (id=1510): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) io_setup(0x5, &(0x7f0000002800)=0x0) io_submit(r1, 0x1, &(0x7f0000004e80)=[&(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x702a, r0, &(0x7f0000002840)="f9fd5a18", 0x4, 0x1, 0x0, 0x2}]) 3m35.503082258s ago: executing program 0 (id=1518): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @mcast1, 0x10}, 0x1c) 3m35.083067896s ago: executing program 34 (id=1518): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @mcast1, 0x10}, 0x1c) 3m34.861529855s ago: executing program 1 (id=1525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000078000100ffff0000fdc9df250700000043"], 0x18}, 0x1, 0x5502000000000000}, 0x0) 3m34.494310485s ago: executing program 1 (id=1528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), 0x0}, 0x20) 3m33.826892006s ago: executing program 1 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 3m33.519252173s ago: executing program 1 (id=1534): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @local, 0x7}}, 0x24) 3m33.211923487s ago: executing program 1 (id=1536): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 3m32.882671932s ago: executing program 1 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) 3m17.605428057s ago: executing program 35 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) 2m52.840069018s ago: executing program 2 (id=1922): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 2m52.730685599s ago: executing program 2 (id=1927): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = dup(r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x0) 2m52.51545303s ago: executing program 2 (id=1930): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x240000c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) 2m52.108310796s ago: executing program 2 (id=1939): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000005f80)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x1, 0x6bd, &(0x7f0000000cc0)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount$bpf(0x0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240), 0x0, 0x0) 2m51.733110209s ago: executing program 2 (id=1946): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000580)={0xf, {"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", 0x1000}}, 0x1006) 2m51.18718258s ago: executing program 2 (id=1953): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./control\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x26, 0x355, &(0x7f0000002080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4080, 0xff0) 2m50.743904097s ago: executing program 36 (id=1953): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./control\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x26, 0x355, &(0x7f0000002080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4080, 0xff0) 1m30.73493802s ago: executing program 9 (id=2842): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m30.27036748s ago: executing program 9 (id=2850): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x88081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000001140)={0x28, 0x2, r1, 0x0, &(0x7f0000000000)='p', 0xb6299679db8e922f, 0x2823}) 1m29.778887573s ago: executing program 9 (id=2854): mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001080), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m29.534713214s ago: executing program 7 (id=2856): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 1m29.143043476s ago: executing program 7 (id=2859): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="757466383d302c756d61736b3d30303030303030303030303030303030303134373537372c73686f72746e616d653d6d697865642c636865636b3d7374726963742c636f6465706167653d313235302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c696f636861727365743d63703836332c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c726f6469722c0073e891503a0309d91d60a3f79fb445ef040adbfaebe458f48306d4472e78e0c79837a8ba4cdfcf2664aea65ded67e7618d999eb426ea4d6e3c245287de93a7671165d44c0692c1e44faa189afae462610344caaf8690af6f5b8092420bf6e652ec1dd96df4f7fa2122c8a1eb91332abb080a48cf8d995e2f518dc460183619759f02357d416969cde8685c58841fd65e9ae556ec5221ab219a826bb13cc6ebfb345749e676fa449156aaef0e2d00409ca2cf5ae7c47b594d6a41fab2"], 0x26, 0x34b, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/241, 0xf1) 1m28.070653405s ago: executing program 9 (id=2861): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000480)={0x2, 0x1, 0x1, 0x0, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f00000001c0)={0x5, 0x0, 0x1, "0000087aba10fdfffffb05001400", 0x3136564e}) 1m27.879919061s ago: executing program 7 (id=2863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m27.371245708s ago: executing program 7 (id=2865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 1m27.055444016s ago: executing program 9 (id=2866): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000100)={[{@noauto_da_alloc}, {@dioread_lock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x479, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x50) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb, 0xb}}, 0x0) 1m26.807339598s ago: executing program 7 (id=2869): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x9b}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f00000002c0)=ANY=[], 0xfe37, 0x0) 1m25.838867474s ago: executing program 7 (id=2875): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0), 0x10) 1m25.803135802s ago: executing program 9 (id=2887): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) ppoll(&(0x7f0000000240)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) 1m20.269046969s ago: executing program 3 (id=2926): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r1 = fanotify_init(0x4, 0x1000) fanotify_mark(r1, 0x549, 0x8001028, r0, 0x0) 1m16.452711918s ago: executing program 3 (id=2939): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 1m16.273164413s ago: executing program 3 (id=2941): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8ab06005597c8ef039a5be42200", 0x38}, 0x60) getsockname(r0, 0x0, &(0x7f0000000040)) 1m15.995744042s ago: executing program 3 (id=2944): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x10090, &(0x7f00000000c0)=ANY=[], 0x0, 0x14de, &(0x7f0000002a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001040)=""/192, 0xc0) 1m15.557363718s ago: executing program 3 (id=2948): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x5507, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fadvise64(r0, 0x4, 0x3f015764000, 0x5) 1m13.147146142s ago: executing program 3 (id=2960): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) cachestat(r0, 0x0, 0x0, 0x0) 1m10.728273208s ago: executing program 37 (id=2887): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) ppoll(&(0x7f0000000240)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) 1m10.664544189s ago: executing program 38 (id=2875): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0), 0x10) 58.023393217s ago: executing program 39 (id=2960): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) cachestat(r0, 0x0, 0x0, 0x0) 57.510377722s ago: executing program 5 (id=3018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94) 54.815449801s ago: executing program 5 (id=3025): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) lseek(r0, 0x96, 0x1) 54.102076049s ago: executing program 5 (id=3028): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) 53.758236136s ago: executing program 5 (id=3030): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000400)={{r1, 0x0, 0x0, [0x0, 0x7]}, {0x80000000, 0x0, 0x0, [0xe, 0x5]}, 0x0, [0xffffffff]}) 53.40351698s ago: executing program 5 (id=3032): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@logbufs={'logbufs', 0x3d, 0x4}}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0805841, &(0x7f0000001200)=ANY=[]) 50.871922191s ago: executing program 5 (id=3041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x9, 0x9, 0xfffff014}, {0x6, 0x0, 0x0, 0xa}]}) 47.543600919s ago: executing program 8 (id=3051): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x3) 47.328175536s ago: executing program 8 (id=3053): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4008, &(0x7f0000000200)={[{@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'macceltic'}}, {@uid={'uid', 0x3d, 0xee01}}, {@part={'part', 0x3d, 0x2001}}, {@part={'part', 0x3d, 0x6}}]}, 0x1, 0x6de, &(0x7f0000000840)="$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") rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') lstat(&(0x7f00000032c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000003c0)) 47.013066932s ago: executing program 8 (id=3055): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 46.696230442s ago: executing program 8 (id=3056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) 46.399298175s ago: executing program 8 (id=3058): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0xb000) 45.152411349s ago: executing program 8 (id=3059): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000"], 0x18}, 0xfc00) close(r0) 35.75791057s ago: executing program 40 (id=3041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x9, 0x9, 0xfffff014}, {0x6, 0x0, 0x0, 0xa}]}) 30.151409277s ago: executing program 41 (id=3059): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000"], 0x18}, 0xfc00) close(r0) 16.988773145s ago: executing program 6 (id=3112): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @empty}, 0xc) 16.887118888s ago: executing program 6 (id=3113): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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") chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xee00) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {0x10, 0x2}, {0x20, 0x4}}, 0x24, 0x1) 16.119456671s ago: executing program 6 (id=3114): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_misc(r0, 0x0, 0x0) 15.728174359s ago: executing program 6 (id=3115): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, 0x0) 15.584626847s ago: executing program 6 (id=3116): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3200c02, &(0x7f0000000140)=ANY=[], 0x3, 0xa9c, &(0x7f0000001340)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x0, 0x7, 0x4fe4, 0x2401}) 15.340646015s ago: executing program 6 (id=3117): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) 0s ago: executing program 42 (id=3117): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) kernel console output (not intermixed with test programs): dered instead of data journaling mode [ 315.570627][T11881] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 315.642940][T11881] EXT4-fs (loop9): 1 truncate cleaned up [ 315.655607][T11881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.763498][T10050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.965814][T11872] loop6: detected capacity change from 0 to 32768 [ 316.019397][T11872] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.074931][ T5943] IPVS: starting estimator thread 0... [ 316.190602][T11905] IPVS: using max 30 ests per chain, 72000 per kthread [ 316.245805][T11872] XFS (loop6): Ending clean mount [ 316.271440][T11872] XFS (loop6): Quotacheck needed: Please wait. [ 316.376793][T11872] XFS (loop6): Quotacheck: Done. [ 316.509678][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.523012][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.618854][ T7545] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.626381][T11885] loop3: detected capacity change from 0 to 32768 [ 316.726869][T11885] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 316.960709][T11885] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 317.077916][T11885] XFS (loop3): Starting recovery (logdev: internal) [ 317.148030][T11885] XFS (loop3): Ending recovery (logdev: internal) [ 317.355951][T10823] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.368076][T11963] loop8: detected capacity change from 0 to 1024 [ 318.405304][T11963] EXT4-fs: inline encryption not supported [ 318.422369][T11963] EXT4-fs: Ignoring removed bh option [ 318.525757][T11963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.740475][T11963] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 318.824567][T11963] EXT4-fs (loop8): Remounting filesystem read-only [ 319.002674][ T9700] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.168432][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2391'. [ 319.368491][T11965] loop7: detected capacity change from 0 to 32768 [ 319.509206][T11965] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 319.545430][T11965] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 319.839423][ T8898] ocfs2: Unmounting device (7,7) on (node local) [ 319.920939][T12004] loop8: detected capacity change from 0 to 1024 [ 319.974533][ T5914] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 320.025875][T12004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.089439][T12004] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.153978][ T5914] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.184041][ T5914] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.200497][ T30] audit: type=1800 audit(1751801283.681:81): pid=12004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2412" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 320.241878][ T5914] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.265367][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.323009][T12002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 320.361981][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.437343][ T9700] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.570999][T12015] loop9: detected capacity change from 0 to 1024 [ 320.578174][T12002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 320.584722][T12002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 320.629107][T12015] EXT4-fs: inline encryption not supported [ 320.654523][T12002] vhci_hcd vhci_hcd.0: Device attached [ 320.664108][T12015] EXT4-fs: Ignoring removed bh option [ 320.672700][T12018] vhci_hcd: connection closed [ 320.676101][ T12] vhci_hcd: stop threads [ 320.716776][ T12] vhci_hcd: release socket [ 320.721358][ T12] vhci_hcd: disconnect device [ 320.736524][ T5943] usb 4-1: USB disconnect, device number 8 [ 320.788843][T12015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.973980][T12015] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 321.090488][T12015] EXT4-fs (loop9): Remounting filesystem read-only [ 321.125562][T12007] loop5: detected capacity change from 0 to 32768 [ 321.152750][T12007] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2400 (12007) [ 321.214665][T12007] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.250536][T10050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.272824][T12007] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 321.282564][T12007] BTRFS info (device loop5): using free-space-tree [ 321.556170][T12053] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2413'. [ 321.754470][T12007] BTRFS info (device loop5 state M): max_inline set to 4096 [ 321.840868][T12061] loop8: detected capacity change from 0 to 1024 [ 321.865265][T12061] EXT4-fs: Ignoring removed orlov option [ 321.877137][ T5847] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.888786][T12061] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 321.922557][T12063] loop7: detected capacity change from 0 to 2048 [ 321.965976][T12061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.148672][T12063] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.268996][ T9700] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.045557][T12093] loop5: detected capacity change from 0 to 64 [ 323.140377][T12097] loop6: detected capacity change from 0 to 512 [ 323.257138][T12097] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 323.264976][ T5847] hfs: node 4:3 still has 2 user(s)! [ 323.283549][T12074] loop9: detected capacity change from 0 to 32768 [ 323.318177][T12097] EXT4-fs (loop6): 1 truncate cleaned up [ 323.329056][T12097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.349617][T12074] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2421 (12074) [ 323.380527][T12074] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 323.455126][T12074] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm [ 323.467078][T12109] loop5: detected capacity change from 0 to 512 [ 323.505991][T12109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.522254][T12109] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.534868][T12074] BTRFS info (device loop9): disk space caching is enabled [ 323.542126][T12074] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 323.609991][ T7545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.722497][ T30] audit: type=1800 audit(1751801287.201:82): pid=12109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2436" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 323.742947][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.777699][T12074] BTRFS info (device loop9): rebuilding free space tree [ 323.817000][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.909674][T12074] BTRFS info (device loop9): disabling free space tree [ 323.919720][T12074] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 323.970345][T12074] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 324.219193][T12074] BTRFS info (device loop9): balance: start -susage=0..511,limit=0 [ 324.261963][T12074] BTRFS info (device loop9): balance: ended with status: 0 [ 324.457432][T10050] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 324.556445][T12156] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2450'. [ 324.574911][T12156] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2450'. [ 324.641575][T12156] netlink: 'syz.3.2450': attribute type 5 has an invalid length. [ 324.724344][T12156] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2450'. [ 324.887111][T12168] loop5: detected capacity change from 0 to 1024 [ 325.615322][T12183] loop5: detected capacity change from 0 to 1764 [ 326.128914][T12199] loop8: detected capacity change from 0 to 4096 [ 326.506237][T12210] loop7: detected capacity change from 0 to 1024 [ 326.525544][T12212] syz_tun: entered promiscuous mode [ 326.547455][T12209] syz_tun: left promiscuous mode [ 326.552122][T12210] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 326.604627][T12210] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 326.651758][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2478'. [ 326.667917][T12210] JBD2: no valid journal superblock found [ 326.695385][T12210] EXT4-fs (loop7): Could not load journal inode [ 327.068609][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2482'. [ 327.118224][T12227] loop7: detected capacity change from 0 to 512 [ 327.183435][T12227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.222864][T12227] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.253846][T12192] loop9: detected capacity change from 0 to 40427 [ 327.295307][T12192] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 327.338279][T12192] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 327.371005][T12192] F2FS-fs (loop9): invalid crc value [ 327.510478][ T8898] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.662351][T12233] loop6: detected capacity change from 0 to 4096 [ 327.800173][T12233] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 327.837827][T12192] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 327.870519][T12192] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 327.982940][T12248] loop8: detected capacity change from 0 to 4096 [ 327.999427][ T7545] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22. [ 328.011268][ T30] audit: type=1800 audit(1751801291.491:83): pid=12192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2467" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 328.022573][T12251] loop3: detected capacity change from 0 to 512 [ 328.098269][T12255] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.174894][T12251] EXT4-fs (loop3): filesystem is read-only [ 328.231257][T12251] EXT4-fs (loop3): filesystem is read-only [ 328.254279][T12251] EXT4-fs (loop3): orphan cleanup on readonly fs [ 328.276815][T12251] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.2492: bad orphan inode 16 [ 328.356296][T12251] ext4_test_bit(bit=15, block=3) = 0 [ 328.363597][T12251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 328.575947][T10823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.604947][T12268] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 328.611536][T12268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 328.658268][T12268] vhci_hcd vhci_hcd.0: Device attached [ 328.672604][T12269] vhci_hcd: connection closed [ 328.678980][ T36] vhci_hcd: stop threads [ 328.698443][ T36] vhci_hcd: release socket [ 328.702882][ T36] vhci_hcd: disconnect device [ 328.824864][ T5850] Bluetooth: hci3: command 0x0405 tx timeout [ 329.120829][T12278] mkiss: ax0: crc mode is auto. [ 329.679501][T12267] loop7: detected capacity change from 0 to 32768 [ 329.696796][T12276] loop5: detected capacity change from 0 to 32768 [ 329.732325][T12276] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2502 (12276) [ 329.829693][T12276] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.874436][T12276] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 329.907762][T12276] BTRFS info (device loop5): using free-space-tree [ 329.929552][T12292] netlink: 'syz.6.2509': attribute type 29 has an invalid length. [ 329.934709][T12293] loop8: detected capacity change from 0 to 64 [ 329.963054][T12292] netlink: 'syz.6.2509': attribute type 29 has an invalid length. [ 330.172081][T12276] BTRFS info (device loop5): rebuilding free space tree [ 330.571838][T12319] ipvlan2: entered promiscuous mode [ 330.614753][T12319] ipvlan2: entered allmulticast mode [ 330.628550][T12319] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 330.672639][ T5847] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.837903][T12281] loop9: detected capacity change from 0 to 32768 [ 330.921233][T12281] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 331.010291][T12281] XFS (loop9): Ending clean mount [ 331.198969][ T30] audit: type=1326 audit(1751801294.661:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.6.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e678e929 code=0x7ffc0000 [ 331.251675][T10050] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 331.262222][ T30] audit: type=1326 audit(1751801294.671:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.6.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e678e929 code=0x7ffc0000 [ 331.304690][ T30] audit: type=1326 audit(1751801294.671:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.6.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0e678e929 code=0x7ffc0000 [ 331.422705][ T30] audit: type=1326 audit(1751801294.671:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.6.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e678e929 code=0x7ffc0000 [ 331.504406][T12344] mkiss: ax0: crc mode is auto. [ 331.524507][ T30] audit: type=1326 audit(1751801294.671:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.6.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e678e929 code=0x7ffc0000 [ 331.563175][ T30] audit: type=1326 audit(1751801294.671:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.6.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa0e678e929 code=0x7ffc0000 [ 331.647579][ T30] audit: type=1326 audit(1751801294.981:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.6.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e678e929 code=0x7ffc0000 [ 331.745270][ T30] audit: type=1326 audit(1751801294.981:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.6.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e678e929 code=0x7ffc0000 [ 331.942706][T12352] loop6: detected capacity change from 0 to 256 [ 332.005896][T12352] exfat: Deprecated parameter 'utf8' [ 332.011388][T12352] exfat: Deprecated parameter 'utf8' [ 332.054407][T12352] exfat: Deprecated parameter 'utf8' [ 332.168126][T12352] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d) [ 332.809559][T12378] loop5: detected capacity change from 0 to 256 [ 332.840200][T12380] loop3: detected capacity change from 0 to 512 [ 332.881664][T12380] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 332.954556][T12380] EXT4-fs (loop3): 1 truncate cleaned up [ 332.973245][T12388] loop8: detected capacity change from 0 to 512 [ 332.980964][T12378] FAT-fs (loop5): Directory bread(block 64) failed [ 332.990237][T12378] FAT-fs (loop5): Directory bread(block 65) failed [ 332.999695][T12378] FAT-fs (loop5): Directory bread(block 66) failed [ 333.006343][T12378] FAT-fs (loop5): Directory bread(block 67) failed [ 333.013281][T12378] FAT-fs (loop5): Directory bread(block 68) failed [ 333.020236][T12378] FAT-fs (loop5): Directory bread(block 69) failed [ 333.027238][T12378] FAT-fs (loop5): Directory bread(block 70) failed [ 333.033894][T12378] FAT-fs (loop5): Directory bread(block 71) failed [ 333.041328][T12378] FAT-fs (loop5): Directory bread(block 72) failed [ 333.042369][T12380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.048247][T12378] FAT-fs (loop5): Directory bread(block 73) failed [ 333.057556][T12388] EXT4-fs (loop8): Test dummy encryption mode enabled [ 333.143473][T12388] EXT4-fs error (device loop8): __ext4_iget:5379: inode #11: block 1: comm syz.8.2543: invalid block [ 333.155879][ T5941] iguanair 6-1:0.0: failed to get version [ 333.182546][ T5941] iguanair 6-1:0.0: probe with driver iguanair failed with error -110 [ 333.245695][T12380] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 333.250379][T12388] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2543: couldn't read orphan inode 11 (err -117) [ 333.279831][ T5941] usb 6-1: USB disconnect, device number 17 [ 333.292467][T12388] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.427686][T10823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.771241][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2550'. [ 333.830544][T12401] IPVS: Error joining to the multicast group [ 333.909348][ T9700] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.187085][T12377] loop6: detected capacity change from 0 to 32768 [ 334.210977][T12413] 9pnet_fd: p9_fd_create_tcp (12413): problem binding to privport [ 334.283068][T12377] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.293960][T12421] loop3: detected capacity change from 0 to 512 [ 334.358823][T12421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.397040][T12421] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.491195][ T30] audit: type=1326 audit(1751801297.971:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.5.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 334.540745][T12435] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.541465][T12377] XFS (loop6): Ending clean mount [ 334.553968][ T30] audit: type=1326 audit(1751801297.971:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.5.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 334.579886][T12421] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2557: bg 0: block 145: padding at end of block bitmap is not set [ 334.613147][ T30] audit: type=1326 audit(1751801297.981:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.5.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 334.703047][ T30] audit: type=1326 audit(1751801297.981:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.5.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 334.736405][ T7545] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.766691][ T30] audit: type=1326 audit(1751801297.981:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.5.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 334.836409][T10823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.844302][ T30] audit: type=1326 audit(1751801297.991:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.5.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 334.965530][ T30] audit: type=1326 audit(1751801297.991:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.5.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 335.030314][ T30] audit: type=1326 audit(1751801297.991:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.5.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 335.061921][ T30] audit: type=1326 audit(1751801298.061:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.9.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf24b8e929 code=0x7ffc0000 [ 335.134314][ T30] audit: type=1326 audit(1751801298.081:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.9.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf24b8e929 code=0x7ffc0000 [ 335.212729][T12455] loop5: detected capacity change from 0 to 1024 [ 335.311861][T12455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.395108][T12455] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.428649][T12386] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 335.492253][T12465] loop3: detected capacity change from 0 to 64 [ 335.579856][T12469] loop6: detected capacity change from 0 to 256 [ 335.608869][T12469] exfat: Deprecated parameter 'utf8' [ 335.616088][T12465] hfs: request for non-existent node 56 in B*Tree [ 335.621796][T12469] exfat: Deprecated parameter 'utf8' [ 335.629369][T12465] hfs: request for non-existent node 56 in B*Tree [ 335.646395][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.665273][T12465] hfs: request for non-existent node 57 in B*Tree [ 335.669395][T12469] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 335.682750][T12465] hfs: request for non-existent node 57 in B*Tree [ 335.953915][T12477] loop9: detected capacity change from 0 to 4096 [ 336.084485][ T5957] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 336.144566][T12487] loop6: detected capacity change from 0 to 256 [ 336.239958][T12487] FAT-fs (loop6): Directory bread(block 64) failed [ 336.259792][ T5957] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.284313][T12487] FAT-fs (loop6): Directory bread(block 65) failed [ 336.301164][ T5957] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.311347][T12487] FAT-fs (loop6): Directory bread(block 66) failed [ 336.318009][ T5957] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.318042][ T5957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.318066][ T5957] usb 9-1: Product: syz [ 336.318083][ T5957] usb 9-1: Manufacturer: syz [ 336.318101][ T5957] usb 9-1: SerialNumber: syz [ 336.364720][T12487] FAT-fs (loop6): Directory bread(block 67) failed [ 336.385511][T12487] FAT-fs (loop6): Directory bread(block 68) failed [ 336.433789][T12487] FAT-fs (loop6): Directory bread(block 69) failed [ 336.459152][T12493] Cannot find add_set index 2 as target [ 336.465612][T12487] FAT-fs (loop6): Directory bread(block 70) failed [ 336.494449][T12487] FAT-fs (loop6): Directory bread(block 71) failed [ 336.501306][T12487] FAT-fs (loop6): Directory bread(block 72) failed [ 336.560053][ T5957] usb 9-1: 0:2 : does not exist [ 336.560685][T12487] FAT-fs (loop6): Directory bread(block 73) failed [ 336.583588][ T5957] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 336.650978][ T5957] usb 9-1: USB disconnect, device number 9 [ 336.701465][T12498] loop9: detected capacity change from 0 to 512 [ 336.758874][T12498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.778700][T12485] loop3: detected capacity change from 0 to 32768 [ 336.801887][T12499] loop7: detected capacity change from 0 to 2048 [ 336.813692][T12498] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.842451][T12485] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.876860][T12511] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.937182][T12516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2595'. [ 336.957819][T12498] EXT4-fs error (device loop9): ext4_empty_dir:3084: inode #12: block 32: comm syz.9.2590: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 336.980874][T12498] EXT4-fs (loop9): Remounting filesystem read-only [ 336.998516][T12498] EXT4-fs warning (device loop9): ext4_empty_dir:3086: inode #12: comm syz.9.2590: directory missing '.' [ 337.049271][T10050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.063493][T12485] XFS (loop3): Ending clean mount [ 337.249019][T10823] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 337.345354][T12530] loop5: detected capacity change from 0 to 256 [ 337.735257][T12541] loop6: detected capacity change from 0 to 1024 [ 337.763177][T12541] EXT4-fs: Ignoring removed oldalloc option [ 337.850974][T12541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.047772][T12557] loop5: detected capacity change from 0 to 128 [ 338.100254][ T7545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.161533][T12557] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 338.212143][T12565] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 338.241116][T12557] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.363970][T12571] devtmpfs: Cannot retroactively limit inodes [ 338.500482][ T5847] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.952963][ T5957] IPVS: starting estimator thread 0... [ 338.992734][T12601] loop9: detected capacity change from 0 to 128 [ 339.044569][T12597] IPVS: using max 24 ests per chain, 57600 per kthread [ 339.072013][T12601] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 339.144817][T12601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.357415][T12609] loop8: detected capacity change from 0 to 2048 [ 339.423546][T12609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.841016][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2638'. [ 339.902632][T12629] tipc: Started in network mode [ 339.941338][T12629] tipc: Node identity ff000000000000000000000000000001, cluster identity 4 [ 339.980787][T12629] tipc: Enabling of bearer rejected, failed to enable media [ 341.166417][T12625] loop9: detected capacity change from 0 to 40427 [ 341.206860][T12625] F2FS-fs (loop9): build fault injection rate: 771 [ 341.278767][T12625] F2FS-fs (loop9): invalid crc value [ 341.459633][T12682] netlink: 'syz.5.2651': attribute type 27 has an invalid length. [ 341.606034][T12625] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 341.694471][ T5943] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 341.725413][T10050] syz-executor: attempt to access beyond end of device [ 341.725413][T10050] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 341.766437][T10050] CPU: 0 UID: 0 PID: 10050 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 341.766476][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.766491][T10050] Call Trace: [ 341.766501][T10050] [ 341.766511][T10050] dump_stack_lvl+0x189/0x250 [ 341.766554][T10050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.766582][T10050] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 341.766622][T10050] ? __pfx_queue_work_on+0x10/0x10 [ 341.766654][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.766692][T10050] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 341.766729][T10050] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 341.766767][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.766794][T10050] ? f2fs_hw_is_readonly+0x39b/0x470 [ 341.766838][T10050] f2fs_handle_critical_error+0x37c/0x540 [ 341.766884][T10050] f2fs_write_end_io+0x495/0x810 [ 341.766908][T10050] ? blkg_put+0x22/0x240 [ 341.766962][T10050] __submit_merged_bio+0x27a/0x6a0 [ 341.767010][T10050] __submit_merged_write_cond+0x255/0x530 [ 341.767058][T10050] f2fs_write_data_pages+0x261d/0x3000 [ 341.767133][T10050] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 341.767177][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767246][T10050] ? __mod_zone_page_state+0xd7/0x140 [ 341.767291][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767317][T10050] ? folios_put_refs+0x560/0x640 [ 341.767358][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767385][T10050] ? __lock_acquire+0xab9/0xd20 [ 341.767425][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767451][T10050] ? do_raw_spin_lock+0x121/0x290 [ 341.767496][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767530][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767557][T10050] ? do_raw_spin_unlock+0x122/0x240 [ 341.767594][T10050] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 341.767621][T10050] do_writepages+0x32e/0x550 [ 341.767661][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767700][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767728][T10050] ? do_raw_spin_unlock+0x122/0x240 [ 341.767771][T10050] filemap_fdatawrite+0x191/0x230 [ 341.767803][T10050] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 341.767895][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.767930][T10050] ? do_raw_spin_unlock+0x122/0x240 [ 341.767973][T10050] f2fs_sync_dirty_inodes+0x31f/0x830 [ 341.768023][T10050] f2fs_write_checkpoint+0x94a/0x1de0 [ 341.768086][T10050] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 341.768174][T10050] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 341.768200][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.768227][T10050] ? kfree+0x18e/0x440 [ 341.768257][T10050] ? kill_f2fs_super+0x298/0x6c0 [ 341.768294][T10050] kill_f2fs_super+0x2c3/0x6c0 [ 341.768331][T10050] ? __pfx_kill_f2fs_super+0x10/0x10 [ 341.768354][T10050] ? radix_tree_delete_item+0x2b6/0x400 [ 341.768405][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.768431][T10050] ? shrinker_free+0x2ce/0x3e0 [ 341.768475][T10050] deactivate_locked_super+0xbc/0x130 [ 341.768506][T10050] cleanup_mnt+0x425/0x4c0 [ 341.768531][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.768558][T10050] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.768592][T10050] task_work_run+0x1d4/0x260 [ 341.768636][T10050] ? __pfx_task_work_run+0x10/0x10 [ 341.768671][T10050] ? __x64_sys_umount+0x122/0x160 [ 341.768714][T10050] ? exit_to_user_mode_loop+0x40/0x110 [ 341.768748][T10050] exit_to_user_mode_loop+0xec/0x110 [ 341.768776][T10050] do_syscall_64+0x2bd/0x3b0 [ 341.768801][T10050] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.768823][T10050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.768846][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.768872][T10050] ? exc_page_fault+0x9f/0xf0 [ 341.768914][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.768938][T10050] RIP: 0033:0x7faf24b8fc57 [ 341.768961][T10050] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 341.768981][T10050] RSP: 002b:00007ffc845d35f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 341.769007][T10050] RAX: 0000000000000000 RBX: 00007faf24c10925 RCX: 00007faf24b8fc57 [ 341.769024][T10050] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc845d36b0 [ 341.769039][T10050] RBP: 00007ffc845d36b0 R08: 0000000000000000 R09: 0000000000000000 [ 341.769054][T10050] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc845d4740 [ 341.769070][T10050] R13: 00007faf24c10925 R14: 000000000005367a R15: 00007ffc845d4780 [ 341.769112][T10050] [ 341.770335][T10050] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 342.335236][ T5943] usb 9-1: Using ep0 maxpacket: 32 [ 342.350788][ T5943] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 342.370208][ T5943] usb 9-1: config 0 has no interface number 0 [ 342.408498][ T5943] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 342.442196][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.481238][ T5943] usb 9-1: Product: syz [ 342.494379][ T5943] usb 9-1: Manufacturer: syz [ 342.499047][ T5943] usb 9-1: SerialNumber: syz [ 342.562864][ T5943] usb 9-1: config 0 descriptor?? [ 342.587932][ T5943] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 342.815106][ T5943] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 342.854626][ T5943] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 342.933429][T12719] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2664'. [ 342.993084][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 343.198630][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 343.209200][ T5943] usb 9-1: USB disconnect, device number 10 [ 343.243246][ T5943] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 343.286210][T12729] loop9: detected capacity change from 0 to 1024 [ 343.293461][ T5943] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 343.333566][ T5943] quatech2 9-1:0.51: device disconnected [ 343.379802][T12729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.464768][T12729] EXT4-fs: Cannot specify journal on remount [ 343.589132][T10050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.213778][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 344.213801][ T30] audit: type=1326 audit(1751801307.691:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.7.2684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10f2d8e929 code=0x0 [ 344.241849][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.632725][T12795] openvswitch: netlink: ct_state flags 0000ffff unsupported [ 344.986598][T12811] loop6: detected capacity change from 0 to 256 [ 345.146697][T12811] FAT-fs (loop6): Directory bread(block 64) failed [ 345.184429][T12811] FAT-fs (loop6): Directory bread(block 65) failed [ 345.191194][T12811] FAT-fs (loop6): Directory bread(block 66) failed [ 345.240060][T12811] FAT-fs (loop6): Directory bread(block 67) failed [ 345.274528][T12811] FAT-fs (loop6): Directory bread(block 68) failed [ 345.281149][T12811] FAT-fs (loop6): Directory bread(block 69) failed [ 345.320729][T12811] FAT-fs (loop6): Directory bread(block 70) failed [ 345.327404][T12811] FAT-fs (loop6): Directory bread(block 71) failed [ 345.334893][T12811] FAT-fs (loop6): Directory bread(block 72) failed [ 345.341434][T12811] FAT-fs (loop6): Directory bread(block 73) failed [ 345.690512][T12789] loop8: detected capacity change from 0 to 32768 [ 345.788784][T12789] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 345.812886][T12845] loop3: detected capacity change from 0 to 164 [ 345.872069][T12848] loop6: detected capacity change from 0 to 2048 [ 345.907940][T12845] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 345.975048][T12855] loop7: detected capacity change from 0 to 16 [ 345.995906][T12855] erofs (device loop7): mounted with root inode @ nid 36. [ 346.034128][T12789] XFS (loop8): Ending clean mount [ 346.057633][T12859] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.073855][T12789] XFS (loop8): Quotacheck needed: Please wait. [ 346.116785][ T30] audit: type=1800 audit(1751801309.591:109): pid=12848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2709" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 346.198245][T12855] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 346.212007][T12859] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 346.259921][T12855] erofs (device loop7): read error -117 @ 43 of nid 36 [ 346.267743][T12859] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 346.304545][T12789] XFS (loop8): Quotacheck: Done. [ 346.316791][T12859] Remounting filesystem read-only [ 346.374491][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 346.440492][ T7545] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 346.573129][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 346.582620][ T24] usb 6-1: config 156 has too many interfaces: 43, using maximum allowed: 32 [ 346.620941][ T9700] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 346.634699][ T24] usb 6-1: config 156 has an invalid descriptor of length 1, skipping remainder of the config [ 346.664446][ T24] usb 6-1: config 156 has 0 interfaces, different from the descriptor's value: 43 [ 346.695461][T12878] loop7: detected capacity change from 0 to 8 [ 346.710800][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.744275][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.752367][ T24] usb 6-1: Product: syz [ 346.757288][ T24] usb 6-1: Manufacturer: syz [ 346.761895][ T24] usb 6-1: SerialNumber: syz [ 346.777042][T12878] SQUASHFS error: lzo decompression failed, data probably corrupt [ 346.804676][T12878] SQUASHFS error: Failed to read block 0x91: -5 [ 346.835206][T12878] SQUASHFS error: Unable to read metadata cache entry [8f] [ 346.844369][T12878] SQUASHFS error: Unable to read inode 0x11f [ 347.008494][ T24] usb 6-1: USB disconnect, device number 18 [ 347.058463][T12887] macsec1: entered promiscuous mode [ 347.063959][T12887] macsec1: entered allmulticast mode [ 347.488265][T12906] veth0_to_bond: entered allmulticast mode [ 347.700117][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2731'. [ 347.768505][T12918] loop7: detected capacity change from 0 to 512 [ 347.799606][T12918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.812739][T12924] loop5: detected capacity change from 0 to 64 [ 347.852570][T12923] loop6: detected capacity change from 0 to 512 [ 347.887722][ T30] audit: type=1800 audit(1751801311.371:110): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2734" name="bus" dev="loop5" ino=21 res=0 errno=0 [ 347.908117][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.920764][T12918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.979308][T12923] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 348.018242][T12918] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.067025][T12923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 348.107795][T12923] System zones: 1-12 [ 348.112083][T12923] EXT4-fs (loop6): orphan cleanup on readonly fs [ 348.147568][ T30] audit: type=1800 audit(1751801311.631:111): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2733" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 348.212788][T12923] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 348.286183][T12923] EXT4-fs (loop6): 1 truncate cleaned up [ 348.342323][T12923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.372919][ T8898] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.538757][ T7545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.694762][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 348.876037][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 348.896317][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.920751][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.961248][ T24] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 349.012939][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.052967][ T24] usb 4-1: config 0 descriptor?? [ 349.080247][T12967] loop5: detected capacity change from 0 to 4096 [ 349.116962][T12967] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.130438][T12967] EXT4-fs (loop5): Test dummy encryption mode enabled [ 349.160714][T12967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.286930][T12977] loop6: detected capacity change from 0 to 4096 [ 349.359888][T12981] loop9: detected capacity change from 0 to 1024 [ 349.420480][T12981] hfsplus: bad catalog entry type [ 349.428002][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.529750][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.547585][ T2131] hfsplus: b-tree write err: -5, ino 4 [ 349.576943][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.599388][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.630343][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.660727][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.694307][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.708275][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.732382][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.757742][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.794606][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.808329][ T24] saitek 0003:06A3:0CCD.0021: unknown main item tag 0x0 [ 349.832161][ T24] saitek 0003:06A3:0CCD.0021: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.3-1/input0 [ 349.897958][ T24] usb 4-1: USB disconnect, device number 9 [ 350.027731][T12964] loop7: detected capacity change from 0 to 32768 [ 350.043195][T12964] XFS: noikeep mount option is deprecated. [ 350.097373][T12964] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.228465][T12964] XFS (loop7): Ending clean mount [ 350.291156][T12964] XFS (loop7): Quotacheck needed: Please wait. [ 350.319935][T13004] loop5: detected capacity change from 0 to 4096 [ 350.378847][T13004] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 350.432728][T12964] XFS (loop7): Quotacheck: Done. [ 350.451874][T13020] loop6: detected capacity change from 0 to 256 [ 350.494933][T13020] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 350.550236][T13004] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 350.576984][ T8898] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.731198][T13027] netlink: 47 bytes leftover after parsing attributes in process `syz.3.2776'. [ 350.775104][T13026] loop9: detected capacity change from 0 to 1024 [ 351.527889][T13056] loop3: detected capacity change from 0 to 128 [ 351.641712][T13023] loop8: detected capacity change from 0 to 32768 [ 351.728308][T13023] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 351.754345][ T5943] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 351.799646][T13061] loop6: detected capacity change from 0 to 4096 [ 351.896285][T13023] XFS (loop8): Ending clean mount [ 351.916705][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.928472][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 351.942097][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 351.973669][ T5943] usb 6-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 351.995364][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.045578][ T5943] usb 6-1: config 0 descriptor?? [ 352.053773][T13055] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 352.077187][ T9700] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 352.084777][T13055] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 352.601482][ T5943] nzxt-smart2 0003:1E71:200F.0022: unknown main item tag 0x0 [ 352.620977][ T5943] nzxt-smart2 0003:1E71:200F.0022: unknown main item tag 0x0 [ 352.634345][ T5943] nzxt-smart2 0003:1E71:200F.0022: unknown main item tag 0x0 [ 352.667325][ T5943] nzxt-smart2 0003:1E71:200F.0022: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.5-1/input0 [ 352.804396][ T5943] usb 6-1: USB disconnect, device number 19 [ 353.000492][T13113] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2813'. [ 353.024805][T13108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2813'. [ 353.122813][T13115] loop9: detected capacity change from 0 to 1764 [ 353.170931][T13120] loop8: detected capacity change from 0 to 1024 [ 353.329075][ T2131] hfsplus: b-tree write err: -5, ino 4 [ 353.490522][ T5850] Bluetooth: hci3: unexpected event for opcode 0x040d [ 353.532292][T13140] loop6: detected capacity change from 0 to 1024 [ 353.596754][T13140] hfsplus: bad catalog entry type [ 353.732482][ T6006] hfsplus: b-tree write err: -5, ino 4 [ 353.745151][T13144] loop9: detected capacity change from 0 to 8 [ 353.776019][T13144] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 354.425022][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.222479][T13202] loop8: detected capacity change from 0 to 2048 [ 356.248215][T13204] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2858'. [ 356.302767][T13206] loop7: detected capacity change from 0 to 256 [ 356.392515][T13202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.494144][T13206] FAT-fs (loop7): Directory bread(block 64) failed [ 356.544761][T13206] FAT-fs (loop7): Directory bread(block 65) failed [ 356.614576][T13206] FAT-fs (loop7): Directory bread(block 66) failed [ 356.621244][T13206] FAT-fs (loop7): Directory bread(block 67) failed [ 356.685052][T13206] FAT-fs (loop7): Directory bread(block 68) failed [ 356.731652][T13206] FAT-fs (loop7): Directory bread(block 69) failed [ 356.761014][ T9700] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.795272][T13206] FAT-fs (loop7): Directory bread(block 70) failed [ 356.805093][T13211] loop5: detected capacity change from 0 to 1024 [ 356.840724][T13206] FAT-fs (loop7): Directory bread(block 71) failed [ 356.886132][T13211] EXT4-fs: Ignoring removed nobh option [ 356.891796][T13211] EXT4-fs: Ignoring removed bh option [ 356.919281][T13206] FAT-fs (loop7): Directory bread(block 72) failed [ 356.942033][T13206] FAT-fs (loop7): Directory bread(block 73) failed [ 357.002888][T13211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.062856][T13181] loop3: detected capacity change from 0 to 32768 [ 357.219837][T13211] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2860: error while reading EA inode 32 err=-116 [ 357.317653][T13211] EXT4-fs (loop5): Remounting filesystem read-only [ 357.351237][T13211] EXT4-fs warning (device loop5): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.5.2860: cleanup dec ref error -30 [ 357.479673][T13211] EXT4-fs warning (device loop5): ext4_xattr_block_set:2190: inode #18: comm syz.5.2860: dec ref error=-30 [ 357.791149][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.055179][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2865'. [ 358.227023][T13224] loop5: detected capacity change from 0 to 1024 [ 358.324766][T13224] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 358.415218][T13224] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 358.516808][T13227] loop9: detected capacity change from 0 to 512 [ 358.525100][T13224] JBD2: no valid journal superblock found [ 358.576460][T13224] EXT4-fs (loop5): Could not load journal inode [ 358.597909][T13227] EXT4-fs (loop9): Test dummy encryption mode enabled [ 358.677650][T13227] EXT4-fs error (device loop9): __ext4_iget:5379: inode #11: block 1: comm syz.9.2866: invalid block [ 358.699386][T13232] ipvlan3: entered promiscuous mode [ 358.716870][T13234] loop7: detected capacity change from 0 to 512 [ 358.759153][T13232] ipvlan3: entered allmulticast mode [ 358.801254][T13227] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.2866: couldn't read orphan inode 11 (err -117) [ 358.822593][T13232] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 358.866641][T13234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.906205][T13227] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.981844][T13234] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.081654][T13241] loop3: detected capacity change from 0 to 8 [ 359.198997][T13234] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2869: bg 0: block 145: padding at end of block bitmap is not set [ 360.937607][ T30] audit: type=1326 audit(1751801324.401:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd298e929 code=0x7ffc0000 [ 361.124449][ T30] audit: type=1326 audit(1751801324.471:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fcbd298e929 code=0x7ffc0000 [ 361.266748][ T30] audit: type=1326 audit(1751801324.471:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd298e929 code=0x7ffc0000 [ 362.109727][ T5858] Bluetooth: hci0: unexpected event for opcode 0x040d [ 362.922320][T13308] loop3: detected capacity change from 0 to 64 [ 362.991468][T13308] syz.3.2906: attempt to access beyond end of device [ 362.991468][T13308] loop3: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 363.083602][T13308] Buffer I/O error on dev loop3, logical block 4096, async page read [ 363.145616][T13311] syz.3.2906: attempt to access beyond end of device [ 363.145616][T13311] loop3: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 363.234490][T13308] syz.3.2906: attempt to access beyond end of device [ 363.234490][T13308] loop3: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 363.335145][T13308] Buffer I/O error on dev loop3, logical block 4096, async page read [ 363.387445][ T30] audit: type=1800 audit(1751801326.871:115): pid=13308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2906" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 364.332381][T13328] loop5: detected capacity change from 0 to 4096 [ 364.734767][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 364.945637][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 364.961144][ T24] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 365.009402][ T24] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.058468][ T24] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.129213][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 365.169389][ T24] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 365.210160][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.272684][ T24] usb 9-1: config 0 descriptor?? [ 365.723596][ T24] asus 0003:0B05:17E0.0023: unknown main item tag 0x0 [ 365.784092][ T24] asus 0003:0B05:17E0.0023: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.8-1/input0 [ 365.834844][ T24] asus 0003:0B05:17E0.0023: Asus input not registered [ 365.876496][ T24] asus 0003:0B05:17E0.0023: probe with driver asus failed with error -12 [ 365.937019][ T24] usb 9-1: USB disconnect, device number 11 [ 366.304645][T13352] loop5: detected capacity change from 0 to 32768 [ 366.326083][ T8898] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.347801][T13352] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 366.407032][T13352] XFS (loop5): Ending clean mount [ 366.591536][ T5847] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 367.227367][T13374] loop8: detected capacity change from 0 to 4096 [ 367.261084][T13374] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.270659][T13374] EXT4-fs (loop8): Test dummy encryption mode enabled [ 367.311401][T13374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.384224][ C0] sched: DL replenish lagged too much [ 368.571916][T13379] tipc: Started in network mode [ 368.583043][T13379] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 368.590466][T13379] tipc: Enabled bearer , priority 0 [ 369.197858][T10050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.353917][T13392] loop3: detected capacity change from 0 to 256 [ 369.426863][T13392] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 369.705177][ T24] tipc: Node number set to 11578026 [ 371.048340][T13417] block device autoloading is deprecated and will be removed. [ 371.309950][T13401] loop3: detected capacity change from 0 to 40427 [ 371.366086][T13401] F2FS-fs (loop3): Invalid segment/section count (24 != 1 * 1) [ 371.405004][T13401] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 371.451892][T13401] F2FS-fs (loop3): invalid crc value [ 371.773455][T13401] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 371.821450][T13401] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 371.967504][T13430] syz_tun: entered allmulticast mode [ 372.099664][T10823] syz-executor: attempt to access beyond end of device [ 372.099664][T10823] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 372.168282][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 372.168321][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.168336][T10823] Call Trace: [ 372.168346][T10823] [ 372.168356][T10823] dump_stack_lvl+0x189/0x250 [ 372.168398][T10823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.168426][T10823] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 372.168465][T10823] ? __pfx_queue_work_on+0x10/0x10 [ 372.168497][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.168525][T10823] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 372.168562][T10823] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.168600][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.168628][T10823] ? f2fs_hw_is_readonly+0x39b/0x470 [ 372.168671][T10823] f2fs_handle_critical_error+0x37c/0x540 [ 372.168717][T10823] f2fs_write_end_io+0x495/0x810 [ 372.168740][T10823] ? blkg_put+0x22/0x240 [ 372.168798][T10823] __submit_merged_bio+0x27a/0x6a0 [ 372.168843][T10823] __submit_merged_write_cond+0x255/0x530 [ 372.168887][T10823] f2fs_write_data_pages+0x261d/0x3000 [ 372.168951][T10823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 372.168991][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.169052][T10823] ? __mod_zone_page_state+0xd7/0x140 [ 372.169094][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.169121][T10823] ? folios_put_refs+0x560/0x640 [ 372.169156][T10823] ? __pfx_folios_put_refs+0x10/0x10 [ 372.169177][T10823] ? rcu_is_watching+0x15/0xb0 [ 372.169217][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.169244][T10823] ? __lock_acquire+0xab9/0xd20 [ 372.169290][T10823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 372.169316][T10823] do_writepages+0x32e/0x550 [ 372.169351][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.169390][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.169418][T10823] ? do_raw_spin_unlock+0x122/0x240 [ 372.169459][T10823] filemap_fdatawrite+0x191/0x230 [ 372.169491][T10823] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 372.169575][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.169609][T10823] ? do_raw_spin_unlock+0x122/0x240 [ 372.169650][T10823] f2fs_sync_dirty_inodes+0x31f/0x830 [ 372.169695][T10823] f2fs_write_checkpoint+0x94a/0x1de0 [ 372.169750][T10823] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 372.169841][T10823] ? kill_f2fs_super+0x298/0x6c0 [ 372.169874][T10823] kill_f2fs_super+0x2c3/0x6c0 [ 372.169908][T10823] ? __pfx_kill_f2fs_super+0x10/0x10 [ 372.169931][T10823] ? radix_tree_delete_item+0x2b6/0x400 [ 372.169978][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.170005][T10823] ? shrinker_free+0x2ce/0x3e0 [ 372.170047][T10823] deactivate_locked_super+0xbc/0x130 [ 372.170076][T10823] cleanup_mnt+0x425/0x4c0 [ 372.170100][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.170127][T10823] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.170154][T10823] task_work_run+0x1d4/0x260 [ 372.170196][T10823] ? __pfx_task_work_run+0x10/0x10 [ 372.170231][T10823] ? __x64_sys_umount+0x122/0x160 [ 372.170268][T10823] ? exit_to_user_mode_loop+0x40/0x110 [ 372.170300][T10823] exit_to_user_mode_loop+0xec/0x110 [ 372.170326][T10823] do_syscall_64+0x2bd/0x3b0 [ 372.170351][T10823] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.170374][T10823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.170396][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.170424][T10823] ? exc_page_fault+0x9f/0xf0 [ 372.170464][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.170488][T10823] RIP: 0033:0x7fcbd298fc57 [ 372.170510][T10823] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 372.170532][T10823] RSP: 002b:00007ffd344b75d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 372.170557][T10823] RAX: 0000000000000000 RBX: 00007fcbd2a10925 RCX: 00007fcbd298fc57 [ 372.170574][T10823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd344b7690 [ 372.170590][T10823] RBP: 00007ffd344b7690 R08: 0000000000000000 R09: 0000000000000000 [ 372.170605][T10823] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd344b8720 [ 372.170622][T10823] R13: 00007fcbd2a10925 R14: 000000000005acc5 R15: 00007ffd344b8760 [ 372.170661][T10823] [ 372.170670][T10823] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 372.687830][T13420] loop5: detected capacity change from 0 to 32768 [ 372.750785][T13420] (syz.5.2956,13420,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 372.798647][T13420] (syz.5.2956,13420,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 372.845222][T13420] JBD2: Ignoring recovery information on journal [ 373.006633][T13420] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 373.451555][T13442] loop6: detected capacity change from 0 to 1024 [ 373.502458][T13442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.520195][T13442] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.942364][ T5850] Bluetooth: hci2: command 0x0405 tx timeout [ 375.419032][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.434841][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.444840][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.454054][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.465523][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.590336][ T5858] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.615368][ T5858] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.633075][ T5858] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.650338][ T5858] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.658467][ T5858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.320118][T13448] chnl_net:caif_netlink_parms(): no params data found [ 376.548907][T13450] chnl_net:caif_netlink_parms(): no params data found [ 376.561471][ T9700] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.898326][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.911047][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.920859][T13448] bridge_slave_0: entered allmulticast mode [ 376.936218][T13448] bridge_slave_0: entered promiscuous mode [ 376.982580][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.997184][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.009754][T13448] bridge_slave_1: entered allmulticast mode [ 377.021553][T13448] bridge_slave_1: entered promiscuous mode [ 377.380197][T13448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.401134][T13450] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.423069][T13450] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.430962][T13450] bridge_slave_0: entered allmulticast mode [ 377.448525][T13450] bridge_slave_0: entered promiscuous mode [ 377.466054][T13448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.483343][T13450] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.491507][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.507515][T13450] bridge_slave_1: entered allmulticast mode [ 377.529910][T13450] bridge_slave_1: entered promiscuous mode [ 377.549359][ T5850] Bluetooth: hci6: command tx timeout [ 377.586093][ T7545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.652017][ T5847] ocfs2: Unmounting device (7,5) on (node local) [ 377.714535][ T5850] Bluetooth: hci7: command tx timeout [ 378.014904][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.021468][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.659521][T13450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.721448][T13471] loop6: detected capacity change from 0 to 256 [ 378.792003][T13448] team0: Port device team_slave_0 added [ 378.976472][T13450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.559934][T13448] team0: Port device team_slave_1 added [ 379.624975][ T5850] Bluetooth: hci6: command tx timeout [ 379.785373][ T5850] Bluetooth: hci7: command tx timeout [ 380.062725][T13485] loop8: detected capacity change from 0 to 2048 [ 380.151667][T13485] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 380.163106][T13485] UDF-fs: Scanning with blocksize 512 failed [ 380.254179][T13450] team0: Port device team_slave_0 added [ 380.265481][T13448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.272535][T13448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.338069][T13485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.455496][T13448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.520278][T13450] team0: Port device team_slave_1 added [ 380.726099][T13448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.733117][T13448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.926208][T13448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.252019][T13450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.290596][T13450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.414800][ T5831] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 381.464488][T13450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.658872][ T5831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.682519][ T5831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.716246][ T5850] Bluetooth: hci6: command tx timeout [ 381.752170][ T5831] usb 9-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 381.797259][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.853512][ T5831] usb 9-1: config 0 descriptor?? [ 381.894622][ T5850] Bluetooth: hci7: command tx timeout [ 382.160305][T13450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.201083][T13450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.294021][T13450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.314169][ T5831] uclogic 0003:2179:0077.0024: interface is invalid, ignoring [ 382.443424][T13498] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2980'. [ 382.546017][ T5831] usb 9-1: USB disconnect, device number 12 [ 382.642999][T13448] hsr_slave_0: entered promiscuous mode [ 382.685773][T13448] hsr_slave_1: entered promiscuous mode [ 382.713170][T13448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.764419][T13448] Cannot create hsr debugfs directory [ 383.318076][T13450] hsr_slave_0: entered promiscuous mode [ 383.367648][T13450] hsr_slave_1: entered promiscuous mode [ 383.392207][T13450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.438664][T13450] Cannot create hsr debugfs directory [ 383.446688][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2988'. [ 383.515834][ T30] audit: type=1326 audit(1751801346.981:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 383.663296][ T30] audit: type=1326 audit(1751801346.981:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 383.801016][ T5850] Bluetooth: hci6: command tx timeout [ 383.838232][ T30] audit: type=1326 audit(1751801347.031:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 383.944411][ T5850] Bluetooth: hci7: command tx timeout [ 383.992614][ T30] audit: type=1326 audit(1751801347.031:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 384.132135][T13526] loop5: detected capacity change from 0 to 4096 [ 384.140831][ T30] audit: type=1326 audit(1751801347.031:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408a18e929 code=0x7ffc0000 [ 384.253958][T13526] NILFS (loop5): invalid segment: Checksum error in segment payload [ 384.297918][T13526] NILFS (loop5): trying rollback from an earlier position [ 384.442064][T13526] NILFS (loop5): recovery complete [ 384.503999][T13532] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.541479][T13545] tmpfs: Cannot enable quota on remount [ 385.562795][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3002'. [ 385.828808][ T5831] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 385.895866][ T5831] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz0 [ 386.511552][T13560] loop5: detected capacity change from 0 to 256 [ 386.606573][T13560] FAT-fs (loop5): Directory bread(block 64) failed [ 386.627680][T13560] FAT-fs (loop5): Directory bread(block 65) failed [ 386.657753][T13560] FAT-fs (loop5): Directory bread(block 66) failed [ 386.679858][T13560] FAT-fs (loop5): Directory bread(block 67) failed [ 386.699408][T13560] FAT-fs (loop5): Directory bread(block 68) failed [ 386.720155][T13560] FAT-fs (loop5): Directory bread(block 69) failed [ 386.742739][T13560] FAT-fs (loop5): Directory bread(block 70) failed [ 386.770914][T13560] FAT-fs (loop5): Directory bread(block 71) failed [ 386.791358][T13560] FAT-fs (loop5): Directory bread(block 72) failed [ 386.814340][T13560] FAT-fs (loop5): Directory bread(block 73) failed [ 387.285126][T13569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.105244][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 388.314741][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 388.365077][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.428354][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.464938][ T24] usb 9-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 388.533996][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.593447][ T24] usb 9-1: config 0 descriptor?? [ 388.801984][T13582] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3020'. [ 388.822488][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.834400][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.860892][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.874739][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.882851][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.150884][ T24] hid_mf 0003:0079:1801.0026: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.8-1/input0 [ 389.226002][ T24] hid_mf 0003:0079:1801.0026: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 389.406377][ T24] usb 9-1: USB disconnect, device number 13 [ 390.057350][T13592] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3023'. [ 390.105591][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3023'. [ 390.174635][T13592] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3023'. [ 390.216916][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3023'. [ 390.284185][T13592] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3023'. [ 390.361993][T13581] chnl_net:caif_netlink_parms(): no params data found [ 390.511594][T13595] loop8: detected capacity change from 0 to 4096 [ 390.582125][T13595] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 390.739754][T13599] loop6: detected capacity change from 0 to 512 [ 390.865095][T13599] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.3026: iget: bad extended attribute block 1 [ 390.917971][T13599] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3026: couldn't read orphan inode 15 (err -117) [ 390.985087][ T5858] Bluetooth: hci2: command tx timeout [ 391.027459][T13599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.275355][T13581] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.282577][T13581] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.339476][ T7545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.365854][T13581] bridge_slave_0: entered allmulticast mode [ 391.412595][T13581] bridge_slave_0: entered promiscuous mode [ 391.482159][T13581] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.525168][T13581] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.532550][T13581] bridge_slave_1: entered allmulticast mode [ 391.614712][T13581] bridge_slave_1: entered promiscuous mode [ 391.691665][T13614] loop6: detected capacity change from 0 to 256 [ 391.733776][T13615] netlink: 'syz.8.3031': attribute type 25 has an invalid length. [ 391.856511][T13614] FAT-fs (loop6): Directory bread(block 64) failed [ 391.863129][T13614] FAT-fs (loop6): Directory bread(block 65) failed [ 391.917729][T13614] FAT-fs (loop6): Directory bread(block 66) failed [ 391.962232][T13614] FAT-fs (loop6): Directory bread(block 67) failed [ 391.990928][T13614] FAT-fs (loop6): Directory bread(block 68) failed [ 392.026589][T13581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.042007][T13614] FAT-fs (loop6): Directory bread(block 69) failed [ 392.088807][T13581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.105058][T13614] FAT-fs (loop6): Directory bread(block 70) failed [ 392.134699][T13614] FAT-fs (loop6): Directory bread(block 71) failed [ 392.159283][T13614] FAT-fs (loop6): Directory bread(block 72) failed [ 392.209450][T13614] FAT-fs (loop6): Directory bread(block 73) failed [ 392.490805][T13581] team0: Port device team_slave_0 added [ 392.529542][T13621] loop8: detected capacity change from 0 to 512 [ 392.567832][T13621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.640548][T13621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.687241][T13581] team0: Port device team_slave_1 added [ 392.726905][T13621] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.018841][T13581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.069250][ T9700] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.079819][ T5858] Bluetooth: hci2: command tx timeout [ 393.088752][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.234814][T13581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.335162][T13581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.342174][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.584804][T13581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.798782][ T5831] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 393.814094][T13617] loop5: detected capacity change from 0 to 32768 [ 393.919493][T13617] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 393.992542][T13617] XFS (loop5): Ending clean mount [ 394.018492][ T5831] usb 9-1: Using ep0 maxpacket: 8 [ 394.037491][ T5831] usb 9-1: unable to get BOS descriptor or descriptor too short [ 394.074850][T13581] hsr_slave_0: entered promiscuous mode [ 394.083046][T13581] hsr_slave_1: entered promiscuous mode [ 394.089602][ T5831] usb 9-1: config 71 has an invalid interface number: 182 but max is 0 [ 394.121284][ T5831] usb 9-1: config 71 has no interface number 0 [ 394.162747][ T5831] usb 9-1: config 71 interface 182 has no altsetting 0 [ 394.176689][T13581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.230390][ T5831] usb 9-1: string descriptor 0 read error: -22 [ 394.259890][T13581] Cannot create hsr debugfs directory [ 394.274445][ T5831] usb 9-1: New USB device found, idVendor=0fd9, idProduct=003f, bcdDevice=4b.bd [ 394.338717][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.365436][ T5847] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 394.464926][T13644] tipc: Enabling of bearer rejected, failed to enable media [ 394.696004][ T5831] dvb-usb: found a 'Elgato EyeTV DTT rev. 2' in warm state. [ 394.757382][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 394.845869][ T5831] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT rev. 2) [ 394.853718][ T5831] usb 9-1: media controller created [ 395.144504][ T5858] Bluetooth: hci2: command tx timeout [ 395.199917][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 395.782878][ T5831] DVB: Unable to find symbol dib7000p_attach() [ 395.824011][ T5831] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT rev. 2' [ 395.942118][T13649] xt_CT: No such helper "pptp" [ 396.295219][ T5831] rc_core: IR keymap rc-dib0700-rc5 not found [ 396.331317][ T5831] Registered IR keymap rc-empty [ 396.347135][ T5831] dvb-usb: could not initialize remote control. [ 396.381649][ T5831] dvb-usb: Elgato EyeTV DTT rev. 2 successfully initialized and connected. [ 396.464862][ T5831] usb 9-1: USB disconnect, device number 14 [ 396.658130][ T5831] dvb-usb: Elgato EyeTV DTT rev. 2 successfully deinitialized and disconnected. [ 396.939627][T13661] loop6: detected capacity change from 0 to 256 [ 397.239789][ T5858] Bluetooth: hci2: command tx timeout [ 397.345098][T13665] loop8: detected capacity change from 0 to 2048 [ 397.352510][T13665] ext4: Unknown parameter 'noacl' [ 398.007310][T13673] loop6: detected capacity change from 0 to 1024 [ 398.037301][T13673] hfsplus: Bad value for 'gid' [ 398.049671][T13675] loop8: detected capacity change from 0 to 1024 [ 398.219873][ T36] hfsplus: b-tree write err: -5, ino 4 [ 398.304011][T13677] loop6: detected capacity change from 0 to 512 [ 398.376754][T13677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.397515][T13682] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3055'. [ 398.421656][T13677] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.653954][T13684] netlink: 'syz.8.3056': attribute type 2 has an invalid length. [ 399.586146][T13686] loop8: detected capacity change from 0 to 40427 [ 399.602079][T13686] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 399.609307][T13686] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 399.671848][ T7545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.819754][T13686] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 399.836805][T13686] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 399.882812][ T30] audit: type=1800 audit(1751801363.361:121): pid=13686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3058" name="file2" dev="loop8" ino=10 res=0 errno=0 [ 399.917694][T13686] syz.8.3058: attempt to access beyond end of device [ 399.917694][T13686] loop8: rw=34817, sector=53248, nr_sectors = 88 limit=40427 [ 400.006702][ T9700] syz-executor: attempt to access beyond end of device [ 400.006702][ T9700] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 400.034357][ T9700] CPU: 1 UID: 0 PID: 9700 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 400.034398][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.034414][ T9700] Call Trace: [ 400.034424][ T9700] [ 400.034435][ T9700] dump_stack_lvl+0x189/0x250 [ 400.034488][ T9700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.034514][ T9700] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 400.034555][ T9700] ? __pfx_queue_work_on+0x10/0x10 [ 400.034589][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.034618][ T9700] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 400.034655][ T9700] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 400.034695][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.034721][ T9700] ? f2fs_hw_is_readonly+0x39b/0x470 [ 400.034768][ T9700] f2fs_handle_critical_error+0x37c/0x540 [ 400.034816][ T9700] f2fs_write_end_io+0x495/0x810 [ 400.034840][ T9700] ? blkg_put+0x22/0x240 [ 400.034896][ T9700] __submit_merged_bio+0x27a/0x6a0 [ 400.034945][ T9700] __submit_merged_write_cond+0x255/0x530 [ 400.034993][ T9700] f2fs_write_data_pages+0x261d/0x3000 [ 400.035075][ T9700] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 400.035167][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035210][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035238][ T9700] ? folios_put_refs+0x559/0x640 [ 400.035280][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035308][ T9700] ? __lock_acquire+0xab9/0xd20 [ 400.035346][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035374][ T9700] ? do_raw_spin_lock+0x121/0x290 [ 400.035419][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035452][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035480][ T9700] ? do_raw_spin_unlock+0x122/0x240 [ 400.035517][ T9700] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 400.035544][ T9700] do_writepages+0x32e/0x550 [ 400.035582][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035616][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035643][ T9700] ? do_raw_spin_unlock+0x122/0x240 [ 400.035691][ T9700] filemap_fdatawrite+0x191/0x230 [ 400.035723][ T9700] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 400.035816][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.035852][ T9700] ? do_raw_spin_unlock+0x122/0x240 [ 400.035895][ T9700] f2fs_sync_dirty_inodes+0x31f/0x830 [ 400.035945][ T9700] f2fs_write_checkpoint+0x94a/0x1de0 [ 400.036015][ T9700] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 400.036107][ T9700] ? call_rcu+0x6ff/0x9c0 [ 400.036137][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.036165][ T9700] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.036188][ T9700] ? kill_f2fs_super+0x298/0x6c0 [ 400.036225][ T9700] kill_f2fs_super+0x2c3/0x6c0 [ 400.036262][ T9700] ? __pfx_kill_f2fs_super+0x10/0x10 [ 400.036286][ T9700] ? radix_tree_delete_item+0x2b6/0x400 [ 400.036336][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.036363][ T9700] ? shrinker_free+0x2ce/0x3e0 [ 400.036407][ T9700] deactivate_locked_super+0xbc/0x130 [ 400.036438][ T9700] cleanup_mnt+0x425/0x4c0 [ 400.036463][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.036490][ T9700] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.036519][ T9700] task_work_run+0x1d4/0x260 [ 400.036563][ T9700] ? __pfx_task_work_run+0x10/0x10 [ 400.036599][ T9700] ? __x64_sys_umount+0x122/0x160 [ 400.036640][ T9700] ? exit_to_user_mode_loop+0x40/0x110 [ 400.036673][ T9700] exit_to_user_mode_loop+0xec/0x110 [ 400.036701][ T9700] do_syscall_64+0x2bd/0x3b0 [ 400.036763][ T9700] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.036786][ T9700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.036809][ T9700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.036836][ T9700] ? exc_page_fault+0x9f/0xf0 [ 400.036879][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.036903][ T9700] RIP: 0033:0x7ff3b918fc57 [ 400.036925][ T9700] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 400.036946][ T9700] RSP: 002b:00007ffc230c8a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 400.036972][ T9700] RAX: 0000000000000000 RBX: 00007ff3b9210925 RCX: 00007ff3b918fc57 [ 400.036989][ T9700] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc230c8ac0 [ 400.037010][ T9700] RBP: 00007ffc230c8ac0 R08: 0000000000000000 R09: 0000000000000000 [ 400.037025][ T9700] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc230c9b50 [ 400.037042][ T9700] R13: 00007ff3b9210925 R14: 0000000000061a37 R15: 00007ffc230c9b90 [ 400.037087][ T9700] [ 400.037097][ T9700] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 402.591734][T13710] loop6: detected capacity change from 0 to 1024 [ 404.584323][T13718] loop6: detected capacity change from 0 to 32768 [ 404.635424][T13718] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 404.689671][T13718] XFS (loop6): Ending clean mount [ 404.706612][T13718] XFS (loop6): Quotacheck needed: Please wait. [ 404.781413][T13718] XFS (loop6): Quotacheck: Done. [ 404.910405][ T7545] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 405.944008][T13728] loop6: detected capacity change from 0 to 32768 [ 405.963126][T13728] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3074 (13728) [ 405.992117][T13728] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 406.015010][T13728] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 406.031764][T13728] BTRFS info (device loop6): disk space caching is enabled [ 406.039692][T13728] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 406.121506][T13728] BTRFS info (device loop6): rebuilding free space tree [ 406.158824][T13728] BTRFS info (device loop6): disabling free space tree [ 406.169641][T13728] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 406.183660][T13728] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 406.277902][T13728] BTRFS info (device loop6): balance: start -d -m [ 406.302579][T13728] BTRFS info (device loop6): relocating block group 6881280 flags data|metadata [ 406.379259][T13728] BTRFS info (device loop6): balance: paused [ 406.489105][ T7545] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 407.661541][T13746] loop6: detected capacity change from 0 to 32768 [ 407.693911][T13746] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 407.792152][ T7545] ocfs2: Unmounting device (7,6) on (node local) [ 408.253196][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'. [ 409.866559][T13769] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 409.895401][ T5957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.476882][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.487948][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.497135][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.517128][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.526350][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.596550][ T5957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 411.354146][T13774] chnl_net:caif_netlink_parms(): no params data found [ 411.968235][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.992327][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.014560][T13774] bridge_slave_0: entered allmulticast mode [ 412.057498][T13774] bridge_slave_0: entered promiscuous mode [ 412.090746][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.128320][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.145151][T13774] bridge_slave_1: entered allmulticast mode [ 412.175074][T13774] bridge_slave_1: entered promiscuous mode [ 412.458440][T13774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.514784][T13774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.596901][ T5858] Bluetooth: hci3: command tx timeout [ 412.787740][T13774] team0: Port device team_slave_0 added [ 412.807996][T13796] loop6: detected capacity change from 0 to 32768 [ 412.829959][T13774] team0: Port device team_slave_1 added [ 413.075473][T13774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.082502][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.121973][T13774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.141558][T13774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.163954][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.202523][T13774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.587513][T13774] hsr_slave_0: entered promiscuous mode [ 413.615067][T13774] hsr_slave_1: entered promiscuous mode [ 413.644649][T13774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.652305][T13774] Cannot create hsr debugfs directory [ 414.665435][ T5858] Bluetooth: hci3: command tx timeout [ 415.711464][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.729204][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.740631][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.750232][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.758377][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.229739][T13802] chnl_net:caif_netlink_parms(): no params data found [ 416.596476][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.603899][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.614260][T13802] bridge_slave_0: entered allmulticast mode [ 416.632636][T13802] bridge_slave_0: entered promiscuous mode [ 416.644131][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.664115][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.678256][T13802] bridge_slave_1: entered allmulticast mode [ 416.703088][T13802] bridge_slave_1: entered promiscuous mode [ 416.745025][ T5850] Bluetooth: hci3: command tx timeout [ 416.906260][T13802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.934718][T13802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.111918][T13802] team0: Port device team_slave_0 added [ 417.131448][T13802] team0: Port device team_slave_1 added [ 417.502094][T13802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.525209][T13802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.616316][T13802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.676390][T13802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.704875][T13802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.783414][T13802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.804600][ T5850] Bluetooth: hci4: command tx timeout [ 417.960401][T13817] loop6: detected capacity change from 0 to 64 [ 418.133441][T13802] hsr_slave_0: entered promiscuous mode [ 418.158783][T13802] hsr_slave_1: entered promiscuous mode [ 418.185297][T13802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.224416][T13802] Cannot create hsr debugfs directory [ 418.825497][ T5850] Bluetooth: hci3: command tx timeout [ 419.876557][ T5850] Bluetooth: hci4: command tx timeout [ 421.944806][ T5850] Bluetooth: hci4: command tx timeout [ 424.036421][ T5850] Bluetooth: hci4: command tx timeout [ 426.377419][ T1130] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.834888][T13832] loop6: detected capacity change from 0 to 4096 [ 426.852517][T13832] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 426.918475][T13832] ntfs3(loop6): ino=1e, "file1" fallocate(0x10) is not supported [ 428.969038][T13841] loop6: detected capacity change from 0 to 32768 [ 429.716091][T13847] loop6: detected capacity change from 0 to 2048 [ 429.766833][T13848] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 434.269640][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 435.482419][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 435.495254][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 435.508994][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 435.524446][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 435.546536][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 436.262384][T13855] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 436.274779][T13855] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 436.284435][T13855] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 436.295912][T13855] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 436.303917][T13855] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 436.586091][T13853] chnl_net:caif_netlink_parms(): no params data found [ 437.175886][T13853] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.186427][T13853] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.193819][T13853] bridge_slave_0: entered allmulticast mode [ 437.212775][T13853] bridge_slave_0: entered promiscuous mode [ 437.224822][T13853] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.232010][T13853] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.262873][T13853] bridge_slave_1: entered allmulticast mode [ 437.280892][T13853] bridge_slave_1: entered promiscuous mode [ 437.498593][T13858] chnl_net:caif_netlink_parms(): no params data found [ 437.626242][T13855] Bluetooth: hci8: command tx timeout [ 437.666054][T13853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.689160][T13853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.126053][T13853] team0: Port device team_slave_0 added [ 438.161578][T13853] team0: Port device team_slave_1 added [ 438.345362][T13855] Bluetooth: hci9: command tx timeout [ 438.552035][T13858] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.567277][T13858] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.583812][T13858] bridge_slave_0: entered allmulticast mode [ 438.600162][T13858] bridge_slave_0: entered promiscuous mode [ 438.621487][T13853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.640990][T13853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.688217][T13853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.796018][T13858] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.803311][T13858] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.821544][T13858] bridge_slave_1: entered allmulticast mode [ 438.837360][T13858] bridge_slave_1: entered promiscuous mode [ 438.965030][T13853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.972055][T13853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.022899][T13853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.279232][T13858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.380616][T13858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.410436][T13853] hsr_slave_0: entered promiscuous mode [ 439.424766][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.431123][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.459506][T13853] hsr_slave_1: entered promiscuous mode [ 439.476175][T13853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.483774][T13853] Cannot create hsr debugfs directory [ 439.706239][T13855] Bluetooth: hci8: command tx timeout [ 439.810717][T13858] team0: Port device team_slave_0 added [ 440.073731][T13858] team0: Port device team_slave_1 added [ 440.313897][T13858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.333637][T13858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.383168][T13858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.425649][T13855] Bluetooth: hci9: command tx timeout [ 440.455599][T13858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.462616][T13858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.512909][T13858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.969268][T13858] hsr_slave_0: entered promiscuous mode [ 440.988861][T13858] hsr_slave_1: entered promiscuous mode [ 441.005454][T13858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.013086][T13858] Cannot create hsr debugfs directory [ 441.784654][T13855] Bluetooth: hci8: command tx timeout [ 442.505260][T13855] Bluetooth: hci9: command tx timeout [ 443.865218][T13855] Bluetooth: hci8: command tx timeout [ 444.584716][T13855] Bluetooth: hci9: command tx timeout [ 446.028206][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 446.046669][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 446.058708][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 446.071588][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 446.081373][ T5850] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 446.696189][T13876] chnl_net:caif_netlink_parms(): no params data found [ 447.087986][T13876] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.104911][T13876] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.112342][T13876] bridge_slave_0: entered allmulticast mode [ 447.135747][T13876] bridge_slave_0: entered promiscuous mode [ 447.155097][T13876] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.162381][T13876] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.186319][T13876] bridge_slave_1: entered allmulticast mode [ 447.208649][T13876] bridge_slave_1: entered promiscuous mode [ 447.428253][T13876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.457930][T13876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.831738][T13876] team0: Port device team_slave_0 added [ 447.871799][T13876] team0: Port device team_slave_1 added [ 448.105394][ T5850] Bluetooth: hci10: command tx timeout [ 448.156431][T13876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.163503][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.270515][T13876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.309896][T13876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.345865][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.434387][T13876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.656494][T13855] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 448.667609][T13855] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 448.676179][T13855] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 448.684385][T13855] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 448.716215][T13855] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 448.849402][T13876] hsr_slave_0: entered promiscuous mode [ 448.866167][T13876] hsr_slave_1: entered promiscuous mode [ 448.882214][T13876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.894609][T13876] Cannot create hsr debugfs directory [ 449.909845][T13885] chnl_net:caif_netlink_parms(): no params data found [ 450.185533][T13855] Bluetooth: hci10: command tx timeout [ 450.367156][T13885] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.384560][T13885] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.391966][T13885] bridge_slave_0: entered allmulticast mode [ 450.415640][T13885] bridge_slave_0: entered promiscuous mode [ 450.437148][T13885] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.455032][T13885] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.462489][T13885] bridge_slave_1: entered allmulticast mode [ 450.489168][T13885] bridge_slave_1: entered promiscuous mode [ 450.693278][T13885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.728232][T13885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.756625][T13855] Bluetooth: hci11: command tx timeout [ 450.977250][T13885] team0: Port device team_slave_0 added [ 451.078382][T13885] team0: Port device team_slave_1 added [ 451.260043][T13885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.289722][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.328895][T13885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.361723][T13885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.384564][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.424034][T13885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.726080][T13885] hsr_slave_0: entered promiscuous mode [ 451.746240][T13885] hsr_slave_1: entered promiscuous mode [ 451.755245][T13885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.773565][T13885] Cannot create hsr debugfs directory [ 452.265213][T13855] Bluetooth: hci10: command tx timeout [ 452.825343][T13855] Bluetooth: hci11: command tx timeout [ 454.345103][ T5850] Bluetooth: hci10: command tx timeout [ 454.908257][ T5850] Bluetooth: hci11: command tx timeout [ 456.985367][ T5850] Bluetooth: hci11: command tx timeout [ 471.072620][T13855] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 471.087360][T13855] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 471.098243][T13855] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 471.108942][T13855] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 471.118691][T13855] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 472.095889][T13894] chnl_net:caif_netlink_parms(): no params data found [ 472.874997][T13894] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.882326][T13894] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.900460][T13894] bridge_slave_0: entered allmulticast mode [ 472.927199][T13894] bridge_slave_0: entered promiscuous mode [ 472.948623][T13894] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.965075][T13894] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.972789][T13894] bridge_slave_1: entered allmulticast mode [ 473.001150][T13894] bridge_slave_1: entered promiscuous mode [ 473.145013][T13855] Bluetooth: hci12: command tx timeout [ 473.232710][T13894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.277301][T13894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.038594][T13894] team0: Port device team_slave_0 added [ 474.059431][T13894] team0: Port device team_slave_1 added [ 474.303731][T13894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.324384][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.372473][T13894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.404458][T13894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.428718][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.464295][T13894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.747366][T13894] hsr_slave_0: entered promiscuous mode [ 474.765213][T13894] hsr_slave_1: entered promiscuous mode [ 474.771758][T13894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.794435][T13894] Cannot create hsr debugfs directory [ 475.233035][T13855] Bluetooth: hci12: command tx timeout [ 476.056407][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.070689][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.079356][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.087852][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.098128][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.708603][T13903] chnl_net:caif_netlink_parms(): no params data found [ 477.186499][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.193813][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.216304][T13903] bridge_slave_0: entered allmulticast mode [ 477.225637][T13903] bridge_slave_0: entered promiscuous mode [ 477.256835][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.264091][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.290097][T13903] bridge_slave_1: entered allmulticast mode [ 477.304658][ T5850] Bluetooth: hci12: command tx timeout [ 477.320373][T13903] bridge_slave_1: entered promiscuous mode [ 477.599729][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.628283][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.889255][T13903] team0: Port device team_slave_0 added [ 477.929077][T13903] team0: Port device team_slave_1 added [ 478.118443][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.138656][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.180716][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.192651][ T5850] Bluetooth: hci0: command tx timeout [ 478.223343][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.239806][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.284980][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.637530][T13903] hsr_slave_0: entered promiscuous mode [ 478.650879][T13903] hsr_slave_1: entered promiscuous mode [ 478.666317][T13903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.674078][T13903] Cannot create hsr debugfs directory [ 479.384841][ T5850] Bluetooth: hci12: command tx timeout [ 480.264708][ T5850] Bluetooth: hci0: command tx timeout [ 482.345642][ T5850] Bluetooth: hci0: command tx timeout [ 484.425315][ T5850] Bluetooth: hci0: command tx timeout [ 497.006096][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.016706][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.025780][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.034088][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.045017][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.123869][ T5858] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 497.142937][ T5858] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 497.157034][ T5858] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 497.166271][ T5858] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 497.174189][ T5858] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 497.785024][ T5858] Bluetooth: hci7: command 0x0406 tx timeout [ 497.791172][ T5858] Bluetooth: hci6: command 0x0406 tx timeout [ 498.180194][T13916] chnl_net:caif_netlink_parms(): no params data found [ 498.230926][T13913] chnl_net:caif_netlink_parms(): no params data found [ 499.065073][T13855] Bluetooth: hci1: command tx timeout [ 499.075005][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.082166][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.110761][T13913] bridge_slave_0: entered allmulticast mode [ 499.134993][T13913] bridge_slave_0: entered promiscuous mode [ 499.156307][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.163472][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.184976][T13913] bridge_slave_1: entered allmulticast mode [ 499.206918][T13913] bridge_slave_1: entered promiscuous mode [ 499.224915][T13855] Bluetooth: hci13: command tx timeout [ 499.237203][T13916] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.244684][T13916] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.252438][T13916] bridge_slave_0: entered allmulticast mode [ 499.275002][T13916] bridge_slave_0: entered promiscuous mode [ 499.295649][T13916] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.302879][T13916] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.323741][T13916] bridge_slave_1: entered allmulticast mode [ 499.356671][T13916] bridge_slave_1: entered promiscuous mode [ 499.753776][T13916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.778102][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.818843][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.851930][T13916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.325391][T13916] team0: Port device team_slave_0 added [ 500.500894][T13913] team0: Port device team_slave_0 added [ 500.523852][T13913] team0: Port device team_slave_1 added [ 500.550425][T13916] team0: Port device team_slave_1 added [ 500.861320][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.868963][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.962473][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.974277][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.022610][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.070629][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.084454][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.131778][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.157761][T13855] Bluetooth: hci1: command tx timeout [ 501.175488][T13916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.182599][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.226340][T13916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.285924][T13916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.292967][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.334980][T13855] Bluetooth: hci13: command tx timeout [ 501.363470][T13916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.726307][T13913] hsr_slave_0: entered promiscuous mode [ 501.744495][T13913] hsr_slave_1: entered promiscuous mode [ 501.761071][T13913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.788183][T13913] Cannot create hsr debugfs directory [ 501.915830][T13916] hsr_slave_0: entered promiscuous mode [ 501.939865][T13916] hsr_slave_1: entered promiscuous mode [ 501.965968][T13916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.973599][T13916] Cannot create hsr debugfs directory [ 503.225074][T13855] Bluetooth: hci1: command tx timeout [ 503.385415][T13855] Bluetooth: hci13: command tx timeout [ 505.307381][T13855] Bluetooth: hci1: command tx timeout [ 505.466831][T13855] Bluetooth: hci13: command tx timeout [ 506.548661][ T5160] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 506.570385][ T5160] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 506.580617][ T5160] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 506.591350][ T5160] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 506.602727][ T5160] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 507.232591][T13934] chnl_net:caif_netlink_parms(): no params data found [ 507.661867][T13934] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.684736][T13934] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.705173][T13934] bridge_slave_0: entered allmulticast mode [ 507.725003][T13934] bridge_slave_0: entered promiscuous mode [ 507.747861][T13934] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.766509][T13934] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.773978][T13934] bridge_slave_1: entered allmulticast mode [ 507.815249][T13934] bridge_slave_1: entered promiscuous mode [ 508.048019][T13934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.079036][T13934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.512712][T13934] team0: Port device team_slave_0 added [ 508.562384][T13934] team0: Port device team_slave_1 added [ 508.666264][ T5160] Bluetooth: hci14: command tx timeout [ 508.832712][T13934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.864253][T13934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.965087][T13934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.011487][T13934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.055811][T13934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.146094][T13934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.282222][T13855] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 509.293465][T13855] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 509.304079][T13855] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 509.316124][T13855] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 509.323999][T13855] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 510.745118][T13855] Bluetooth: hci14: command tx timeout [ 511.385535][T13855] Bluetooth: hci15: command tx timeout [ 511.658141][T13934] hsr_slave_0: entered promiscuous mode [ 511.676195][T13934] hsr_slave_1: entered promiscuous mode [ 511.696077][T13934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.703717][T13934] Cannot create hsr debugfs directory [ 512.651811][T13944] chnl_net:caif_netlink_parms(): no params data found [ 512.825609][T13855] Bluetooth: hci14: command tx timeout [ 513.107156][T13944] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.124840][T13944] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.132361][T13944] bridge_slave_0: entered allmulticast mode [ 513.151008][T13855] Bluetooth: hci2: command 0x0406 tx timeout [ 513.173537][T13944] bridge_slave_0: entered promiscuous mode [ 513.197413][T13944] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.215237][T13944] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.234629][T13944] bridge_slave_1: entered allmulticast mode [ 513.254589][T13944] bridge_slave_1: entered promiscuous mode [ 513.465594][ T5160] Bluetooth: hci15: command tx timeout [ 513.478527][T13944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.508641][T13944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.828155][T13944] team0: Port device team_slave_0 added [ 513.857069][T13944] team0: Port device team_slave_1 added [ 514.086674][T13944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.093692][T13944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.165868][T13944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.205036][T13944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.212055][T13944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.284771][T13944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.596777][T13944] hsr_slave_0: entered promiscuous mode [ 514.615109][T13944] hsr_slave_1: entered promiscuous mode [ 514.625778][T13944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.633415][T13944] Cannot create hsr debugfs directory [ 514.905569][ T5160] Bluetooth: hci14: command tx timeout [ 515.546152][T13855] Bluetooth: hci15: command tx timeout [ 517.625665][T13855] Bluetooth: hci15: command tx timeout [ 531.791340][ T5160] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 531.804761][ T5160] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 531.814027][ T5160] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 531.822962][ T5160] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 531.832947][ T5160] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 532.488600][T13954] chnl_net:caif_netlink_parms(): no params data found [ 532.926147][T13954] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.933481][T13954] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.955305][T13954] bridge_slave_0: entered allmulticast mode [ 532.965915][T13954] bridge_slave_0: entered promiscuous mode [ 533.006698][T13954] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.013924][T13954] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.035671][T13954] bridge_slave_1: entered allmulticast mode [ 533.056200][T13954] bridge_slave_1: entered promiscuous mode [ 533.283177][T13954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.326945][T13954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.623996][T13954] team0: Port device team_slave_0 added [ 533.636370][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 533.666943][T13954] team0: Port device team_slave_1 added [ 533.896085][T13954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.914613][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.954979][T13855] Bluetooth: hci16: command tx timeout [ 533.981648][T13954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.024467][T13954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.031518][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.096160][T13954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.340274][T13954] hsr_slave_0: entered promiscuous mode [ 534.360572][T13954] hsr_slave_1: entered promiscuous mode [ 534.375904][T13954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.383489][T13954] Cannot create hsr debugfs directory [ 536.025755][T13855] Bluetooth: hci16: command tx timeout [ 536.032429][ T31] INFO: task syz-executor:13450 blocked for more than 143 seconds. [ 536.055526][ T31] Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 [ 536.063254][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 536.115444][ T31] task:syz-executor state:D stack:22536 pid:13450 tgid:13450 ppid:1 task_flags:0x400140 flags:0x00004004 [ 536.185701][ T31] Call Trace: [ 536.189078][ T31] [ 536.192036][ T31] __schedule+0x16f5/0x4d00 [ 536.234352][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.240096][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 536.354518][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.359504][ T31] ? schedule+0x165/0x360 [ 536.451277][ T31] ? __pfx___schedule+0x10/0x10 [ 536.496658][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.502405][ T31] ? schedule+0x91/0x360 [ 536.549592][ T31] schedule+0x165/0x360 [ 536.553864][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.586252][ T31] __mutex_lock+0x724/0xe80 [ 536.590860][ T31] ? __mutex_lock+0x51b/0xe80 [ 536.624991][ T31] ? del_device_store+0xd1/0x360 [ 536.630043][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.644809][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.649777][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 536.705477][ T31] del_device_store+0xd1/0x360 [ 536.710357][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 536.735534][ T31] ? __pfx_del_device_store+0x10/0x10 [ 536.741023][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 536.769673][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.804886][ T31] ? sysfs_kf_write+0x166/0x260 [ 536.809861][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.826883][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 536.832209][ T31] kernfs_fop_write_iter+0x378/0x4f0 [ 536.844695][ T31] vfs_write+0x54b/0xa90 [ 536.849044][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 536.881048][ T31] ? __pfx_vfs_write+0x10/0x10 [ 536.887909][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.893621][ T31] ? kmem_cache_free+0x18f/0x400 [ 536.914687][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.920432][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.934530][ T31] ksys_write+0x145/0x250 [ 536.938946][ T31] ? __pfx_ksys_write+0x10/0x10 [ 536.943846][ T31] ? rcu_is_watching+0x15/0xb0 [ 536.964804][ T31] ? do_syscall_64+0xbe/0x3b0 [ 536.969596][ T31] do_syscall_64+0xfa/0x3b0 [ 536.974150][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.004827][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.011007][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.034542][ T31] ? exc_page_fault+0x9f/0xf0 [ 537.039354][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.054745][ T31] RIP: 0033:0x7f320cf8d3df [ 537.060671][ T31] RSP: 002b:00007ffcd51c9e40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 537.084854][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f320cf8d3df [ 537.092960][ T31] RDX: 0000000000000001 RSI: 00007ffcd51c9e90 RDI: 0000000000000005 [ 537.124873][ T31] RBP: 00007f320d011d8d R08: 0000000000000000 R09: 00007ffcd51c9c97 [ 537.133011][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 537.156205][ T31] R13: 00007ffcd51c9e90 R14: 00007f320dce4620 R15: 0000000000000003 [ 537.174797][ T31] [ 537.181926][ T31] [ 537.181926][ T31] Showing all locks held in the system: [ 537.207588][ T31] 3 locks held by kworker/u8:0/12: [ 537.212787][ T31] 1 lock held by khungtaskd/31: [ 537.229263][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 537.274705][ T31] 6 locks held by kworker/u8:6/1130: [ 537.280071][ T31] #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 537.317226][ T31] #1: ffffc90003c8fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 537.345108][ T31] #2: ffffffff8f510590 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 537.364968][ T31] #3: ffff88807c8e80e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 537.387481][ T31] #4: ffff88807c8e9250 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 537.414573][ T31] #5: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 537.440795][ T31] 2 locks held by getty/5597: [ 537.454447][ T31] #0: ffff88803535a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 537.472971][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 537.514847][ T31] 3 locks held by kworker/u9:5/5858: [ 537.520221][ T31] #0: ffff88805e047148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 537.576330][ T31] #1: ffffc900041efbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 537.604577][ T31] #2: ffff888023448dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 537.624922][ T31] 2 locks held by kworker/0:4/5921: [ 537.630244][ T31] 1 lock held by syz-executor/9700: [ 537.646760][ T31] #0: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 537.675107][ T31] 7 locks held by syz-executor/13448: [ 537.680580][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 537.705379][ T31] #1: ffff888054236488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 537.724812][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 537.757026][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 537.786638][ T31] #4: ffff88805e6e00e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 537.804876][ T31] #5: ffff88805e6e1250 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 537.825206][ T31] #6: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 537.844825][ T31] 4 locks held by syz-executor/13450: [ 537.850263][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 537.884994][ T31] #1: ffff888053667888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 537.904997][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 537.924856][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 537.954632][ T31] 2 locks held by kworker/0:9/13475: [ 537.960013][ T31] 4 locks held by syz-executor/13581: [ 537.988164][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.004266][ T31] #1: ffff888053bd9488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 538.014150][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 538.053399][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 538.074318][ T31] 1 lock held by syz.5.3041/13652: [ 538.079513][ T31] #0: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 538.114581][T13855] Bluetooth: hci16: command tx timeout [ 538.134928][ T31] 4 locks held by syz-executor/13774: [ 538.140383][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.164602][ T31] #1: ffff88804fba0c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 538.185420][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 538.218267][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 538.245098][ T31] 4 locks held by syz-executor/13802: [ 538.250597][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.274942][ T31] #1: ffff888052ed8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 538.294279][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 538.324287][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 538.352131][ T31] 2 locks held by kworker/0:11/13826: [ 538.364540][ T31] 1 lock held by syz.6.3117/13850: [ 538.369720][ T31] #0: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 538.395164][ T31] 4 locks held by syz-executor/13853: [ 538.400620][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.434980][ T31] #1: ffff888052ff8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 538.460049][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 538.482526][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 538.503714][ T31] 4 locks held by syz-executor/13858: [ 538.522236][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.544981][ T31] #1: ffff88814c008888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 538.564842][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 538.586389][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 538.615721][ T31] 4 locks held by syz-executor/13876: [ 538.621166][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.647058][ T31] #1: ffff8880495ce888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 538.669424][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 538.694426][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 538.714333][ T31] 4 locks held by syz-executor/13885: [ 538.734451][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.743542][ T31] #1: ffff88803cab8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 538.757208][T13855] Bluetooth: hci4: command 0x0406 tx timeout [ 538.794281][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 538.814322][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 538.844983][ T31] 4 locks held by syz-executor/13894: [ 538.850489][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.877470][ T31] #1: ffff88808b0e9088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 538.904769][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 538.922892][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 538.945440][ T31] 4 locks held by syz-executor/13903: [ 538.950971][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 538.974481][ T31] #1: ffff88808c770888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 539.005122][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 539.034506][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 539.054737][ T31] 4 locks held by syz-executor/13913: [ 539.060191][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 539.085243][ T31] #1: ffff8880679cac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 539.114475][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 539.144168][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 539.165028][ T31] 4 locks held by syz-executor/13916: [ 539.170484][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 539.194596][ T31] #1: ffff8880679c8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 539.218307][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 539.254905][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 539.274753][ T31] 4 locks held by syz-executor/13934: [ 539.280247][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 539.305152][ T31] #1: ffff888091bd0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 539.332187][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 539.355087][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 539.374841][ T31] 4 locks held by syz-executor/13944: [ 539.380289][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 539.412568][ T31] #1: ffff888089959488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 539.455148][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 539.475231][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 539.504766][ T31] 4 locks held by syz-executor/13954: [ 539.510221][ T31] #0: ffff8880315b2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 539.532954][ T31] #1: ffff88807aefcc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 539.561712][ T31] #2: ffff8880272ee3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 539.585054][ T31] #3: ffffffff8edaaf28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 539.609842][ T31] [ 539.612251][ T31] ============================================= [ 539.612251][ T31] [ 539.647320][ T31] NMI backtrace for cpu 1 [ 539.647347][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 539.647377][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.647393][ T31] Call Trace: [ 539.647403][ T31] [ 539.647415][ T31] dump_stack_lvl+0x189/0x250 [ 539.647452][ T31] ? __wake_up_klogd+0xd9/0x110 [ 539.647489][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.647522][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.647552][ T31] ? __pfx__printk+0x10/0x10 [ 539.647601][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 539.647641][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 539.647673][ T31] ? _printk+0xcf/0x120 [ 539.647711][ T31] ? __pfx__printk+0x10/0x10 [ 539.647748][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 539.647777][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 539.647815][ T31] watchdog+0xfee/0x1030 [ 539.647843][ T31] ? watchdog+0x1de/0x1030 [ 539.647877][ T31] kthread+0x711/0x8a0 [ 539.647919][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.647943][ T31] ? __pfx_kthread+0x10/0x10 [ 539.647975][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.648014][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.648051][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.648079][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.648100][ T31] ? __pfx_kthread+0x10/0x10 [ 539.648137][ T31] ret_from_fork+0x3fc/0x770 [ 539.648169][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 539.648202][ T31] ? __switch_to_asm+0x39/0x70 [ 539.648234][ T31] ? __switch_to_asm+0x33/0x70 [ 539.648265][ T31] ? __pfx_kthread+0x10/0x10 [ 539.648301][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.648352][ T31] [ 539.648362][ T31] Sending NMI from CPU 1 to CPUs 0: [ 539.836089][ C0] NMI backtrace for cpu 0 [ 539.836111][ C0] CPU: 0 UID: 0 PID: 5921 Comm: kworker/0:4 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 539.836139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.836156][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 539.836192][ C0] RIP: 0010:lock_acquire+0x58/0x360 [ 539.836218][ C0] Code: 8b 05 4c 0e 02 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 4f 0e 02 11 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 f8 b6 03 0e <73> 16 e8 41 f1 08 00 84 c0 75 0d f6 05 aa 9a ed 0d 01 0f 84 d7 01 [ 539.836238][ C0] RSP: 0018:ffffc90000006798 EFLAGS: 00000293 [ 539.836262][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 539.836276][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13ee20 [ 539.836291][ C0] RBP: ffffffff81729af5 R08: 0000000000000000 R09: 0000000000000000 [ 539.836306][ C0] R10: dffffc0000000000 R11: ffffffff81acf6c0 R12: 0000000000000002 [ 539.836322][ C0] R13: ffffffff8e13ee20 R14: 0000000000000000 R15: 0000000000000000 [ 539.836339][ C0] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 539.836358][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.836373][ C0] CR2: 000000110c3568de CR3: 0000000033ab5000 CR4: 0000000000350ef0 [ 539.836391][ C0] Call Trace: [ 539.836399][ C0] [ 539.836413][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.836443][ C0] ? unwind_next_frame+0xa5/0x2390 [ 539.836470][ C0] ? nf_conntrack_in+0xa24/0x1600 [ 539.836503][ C0] ? unwind_next_frame+0xa5/0x2390 [ 539.836529][ C0] unwind_next_frame+0xc2/0x2390 [ 539.836553][ C0] ? unwind_next_frame+0xa5/0x2390 [ 539.836583][ C0] ? unwind_next_frame+0xa5/0x2390 [ 539.836609][ C0] ? nf_conntrack_free+0x2e8/0x380 [ 539.836642][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 539.836677][ C0] arch_stack_walk+0x11c/0x150 [ 539.836710][ C0] ? nf_conntrack_in+0xa24/0x1600 [ 539.836744][ C0] stack_trace_save+0x9c/0xe0 [ 539.836775][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 539.836804][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 539.836841][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.836866][ C0] ? __lock_acquire+0xab9/0xd20 [ 539.836889][ C0] kasan_save_track+0x3e/0x80 [ 539.836914][ C0] ? kasan_save_track+0x3e/0x80 [ 539.836938][ C0] ? kasan_save_free_info+0x46/0x50 [ 539.837012][ C0] ? __kasan_slab_free+0x62/0x70 [ 539.837037][ C0] ? kfree+0x18e/0x440 [ 539.837060][ C0] ? nf_conntrack_free+0x2e8/0x380 [ 539.837089][ C0] ? nf_conntrack_in+0xa24/0x1600 [ 539.837151][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.837179][ C0] kasan_save_free_info+0x46/0x50 [ 539.837199][ C0] __kasan_slab_free+0x62/0x70 [ 539.837225][ C0] ? nf_conntrack_free+0x2e8/0x380 [ 539.837258][ C0] kfree+0x18e/0x440 [ 539.837281][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 539.837310][ C0] nf_conntrack_free+0x2e8/0x380 [ 539.837342][ C0] nf_conntrack_in+0xa24/0x1600 [ 539.837389][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 539.837428][ C0] ? ipt_do_table+0x2a3/0x1640 [ 539.837460][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.837488][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.837514][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.837539][ C0] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 539.837560][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.837586][ C0] ? ipv4_conntrack_local+0x126/0x210 [ 539.837613][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 539.837643][ C0] nf_hook_slow+0xc5/0x220 [ 539.837674][ C0] nf_hook+0x217/0x380 [ 539.837709][ C0] ? nf_hook+0x9d/0x380 [ 539.837740][ C0] ? __pfx_nf_hook+0x10/0x10 [ 539.837773][ C0] ? __pfx_dst_output+0x10/0x10 [ 539.837808][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.837834][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.837859][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 539.837888][ C0] __ip_local_out+0x4db/0x600 [ 539.837918][ C0] ? __pfx_dst_output+0x10/0x10 [ 539.837952][ C0] ip_local_out+0x26/0x70 [ 539.837985][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 539.838028][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 539.838056][ C0] ? nft_jhash_init+0x438/0x660 [ 539.838085][ C0] ? synproxy_pernet+0x45/0x270 [ 539.838118][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.838147][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 539.838186][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 539.838222][ C0] ? nf_ip_checksum+0x13c/0x510 [ 539.838260][ C0] nft_synproxy_do_eval+0x345/0x570 [ 539.838299][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 539.838333][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 539.838359][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.838389][ C0] nft_do_chain+0x40c/0x1920 [ 539.838425][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.838456][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 539.838493][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 539.838529][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 539.838554][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 539.838582][ C0] nft_do_chain_inet+0x25d/0x340 [ 539.838615][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 539.838652][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.838677][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 539.838705][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 539.838738][ C0] nf_hook_slow+0xc5/0x220 [ 539.838768][ C0] NF_HOOK+0x206/0x3a0 [ 539.838794][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.838822][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 539.838849][ C0] ? NF_HOOK+0x9a/0x3a0 [ 539.838875][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 539.838900][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 539.838929][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 539.838958][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.838984][ C0] ? skb_dst+0x4f/0xd0 [ 539.839010][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.839035][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 539.839065][ C0] NF_HOOK+0x30c/0x3a0 [ 539.839092][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 539.839119][ C0] ? NF_HOOK+0x9a/0x3a0 [ 539.839144][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 539.839169][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 539.839196][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 539.839230][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 539.839259][ C0] __netif_receive_skb+0x143/0x380 [ 539.839285][ C0] ? process_backlog+0x2d5/0x14f0 [ 539.839312][ C0] process_backlog+0x60e/0x14f0 [ 539.839336][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.839361][ C0] ? __lock_acquire+0xab9/0xd20 [ 539.839393][ C0] ? __pfx_process_backlog+0x10/0x10 [ 539.839425][ C0] __napi_poll+0xc7/0x480 [ 539.839446][ C0] ? net_rx_action+0x46d/0xe30 [ 539.839474][ C0] net_rx_action+0x707/0xe30 [ 539.839498][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.839535][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.839569][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 539.839618][ C0] handle_softirqs+0x286/0x870 [ 539.839647][ C0] ? do_softirq+0xec/0x180 [ 539.839675][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 539.839705][ C0] ? neigh_periodic_work+0xb41/0xd60 [ 539.839732][ C0] do_softirq+0xec/0x180 [ 539.839755][ C0] [ 539.839763][ C0] [ 539.839772][ C0] ? __pfx_do_softirq+0x10/0x10 [ 539.839803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.839829][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 539.839852][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 539.839877][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 539.839904][ C0] ? neigh_periodic_work+0xb41/0xd60 [ 539.839930][ C0] ? neigh_periodic_work+0xb41/0xd60 [ 539.839957][ C0] neigh_periodic_work+0xb41/0xd60 [ 539.839987][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 539.840016][ C0] process_scheduled_works+0xae1/0x17b0 [ 539.840061][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.840092][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.840124][ C0] worker_thread+0x8a0/0xda0 [ 539.840152][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 539.840191][ C0] ? __kthread_parkme+0x7b/0x200 [ 539.840226][ C0] kthread+0x711/0x8a0 [ 539.840265][ C0] ? __pfx_worker_thread+0x10/0x10 [ 539.840291][ C0] ? __pfx_kthread+0x10/0x10 [ 539.840320][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.840348][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.840379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.840405][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.840424][ C0] ? __pfx_kthread+0x10/0x10 [ 539.840456][ C0] ret_from_fork+0x3fc/0x770 [ 539.840482][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 539.840509][ C0] ? __switch_to_asm+0x39/0x70 [ 539.840539][ C0] ? __switch_to_asm+0x33/0x70 [ 539.840567][ C0] ? __pfx_kthread+0x10/0x10 [ 539.840599][ C0] ret_from_fork_asm+0x1a/0x30 [ 539.840639][ C0] [ 540.196506][ T5858] Bluetooth: hci16: command tx timeout [ 540.244858][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 540.244886][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 540.244918][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.244936][ T31] Call Trace: [ 540.244947][ T31] [ 540.244962][ T31] dump_stack_lvl+0x99/0x250 [ 540.245014][ T31] ? __asan_memcpy+0x40/0x70 [ 540.245041][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.245073][ T31] ? __pfx__printk+0x10/0x10 [ 540.245118][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.245154][ T31] panic+0x2db/0x790 [ 540.245183][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.245220][ T31] ? __pfx_panic+0x10/0x10 [ 540.245248][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.245277][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 540.245313][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.245342][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 540.245370][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 540.245410][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.245445][ T31] watchdog+0x102d/0x1030 [ 540.245476][ T31] ? watchdog+0x1de/0x1030 [ 540.245511][ T31] kthread+0x711/0x8a0 [ 540.245552][ T31] ? __pfx_watchdog+0x10/0x10 [ 540.245578][ T31] ? __pfx_kthread+0x10/0x10 [ 540.245611][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.245644][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 540.245684][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.245713][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.245735][ T31] ? __pfx_kthread+0x10/0x10 [ 540.245773][ T31] ret_from_fork+0x3fc/0x770 [ 540.245805][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 540.245841][ T31] ? __switch_to_asm+0x39/0x70 [ 540.245874][ T31] ? __switch_to_asm+0x33/0x70 [ 540.245907][ T31] ? __pfx_kthread+0x10/0x10 [ 540.245946][ T31] ret_from_fork_asm+0x1a/0x30 [ 540.246007][ T31] [ 540.246287][ T31] Kernel Offset: disabled