last executing test programs: 38.615138846s ago: executing program 1 (id=103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) shutdown(r1, 0x0) 38.308308907s ago: executing program 1 (id=104): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000280)={0x0, 0xa211, 0x80, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 37.78756595s ago: executing program 1 (id=106): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000193c0)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000019500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0xcee5f433653f8918, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x55) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 37.176786452s ago: executing program 1 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2125099, 0x0) unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r0, 0x208}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x10010, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x40c040, &(0x7f0000001940), 0x3e, 0x515, &(0x7f0000000700)="$eJzs3d9rY1kdAPDvvW1mOzPdaRd9WBdci7vSWbRJO3Vniw+jC+LbgrK+j7VNS2nalCbdnZbFafEPEERU8MknHxT8AwTZP0GEBX0XFUV0Vh980L2Sm6TTSRPbnUl7If184Dbn3F/fc5Kbk5x7T3MDuLJmIuJORHyUZVkrP9WZn3amSCLisL3eh4/eW2lNSWTZ239P8kWtfHe1rpvtTWJuNst9Ozkdt7F/sLlcq1V3O/lKc2un0tg/mNvYWl6vrle3FxcX7i69sfT60vxQ6jkZEfe++ucffu9nX7v36y+8+4f7f739neREubv1GIqfP06291+KiROLxyNid2jBijXWqU/p7FUnbz2Zn+lzWAAAcMG63/M/GxGvxVSM5d/mAAAAgFGSfXky/pNEZKf0mdXHcz35UvTbFwAAAFCkNB8bm6TlzjiAyUjTcrk9hveTcSOt1RvNz6/V97ZX22Nop6OUrm3UqvOdscLTUUpa+YU8/Th/pye/GBEvRMQPpq7n+fJKvbZa9MkPAAAAuCJu9vT//zXV7v8DAAAAI2a66AIAAAAAF07/HwAAAEaf/j8AAACMtK+/9VZryrr3v159Z39vs/7O3Gq1sVne2lspZ/XdnfJ6vb6e/2bf1ln7q9XrO1+M7b0HlWa10aw09g/ub9X3tpv3N564BTYAAABwiV74zPu/TyLi8EvX86nlWtGFAi7F+PGfc/jTxZYFuFxjRRcAKMx5P/qB0VMqugBA4ZIzlg8cvPOb4ZcFAAC4GLOf6n/9Pznz3MBheklFBC6I839wdbn+D1fXU1z/93+8MCJKMRY68nC1Xfz1/yz7WAUCAACGbjKfkrQckZ8HmIw0LZcjns9vC1BK1jZq1fmIuBURv5sqPdfKL+RbJmf2GQAAAAAAAAAAAAAAAAAAAAAAAACAtixLIgMAAABGWkT6l6Rz/6/ZqVcne88PXEv+PZU/RsS7P3n7Rw+Wm83dhdb8fxzPb/64M/9Oe5unuKcoAAAAMETdfnq3Hw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw/Tho/dWutNlxv3bmxEx3S/+eEzkjxNRiogb/0xi/MR2SUSMDSH+4VFEvNgvftIqVkx3StEv/vUC46cRcXMI8eEqe7/V/nyl3/svjZn8sf/7727eQj27ge1f0l1jIm/n+rU/z58zxksf/LIyMP5RxEvj/dufbvubdOLf6on/Sp/9vXnv9LxvffPgYFD87KcRs30/f5InYlWaWzuVxv7B3MbW8np1vbq9uLhwd+mNpdeX5itrG7Vq5++JJnnmOPX9T//qo4H1zx7GjQHxp3vq3/v8vzpopz3++8GDR59oJ0un4h9F3H6l//H34oD4aeez73OddGv5bDd92E6f9PIvfvvywPofRay26z9+1uvfW//b56z/a9/47h/PuSoAcAka+weby7VadbfAxFgUGb2VeKZno/W16Bwrp/E0BTss/NUZ5cTDQqNfO89hc5zIHraP0SG/9QbusMBGCQAAuBCN/aToIgAAAAAAAAAAAAAAAAAAAMCVd5m/rtd1WExVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+r/8FAAD///AvzEk=") 36.416021699s ago: executing program 1 (id=111): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8820) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 35.708556571s ago: executing program 1 (id=113): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) 34.619744141s ago: executing program 32 (id=113): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) 21.553814035s ago: executing program 3 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 21.099238961s ago: executing program 3 (id=145): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x58, 0x0, 0x0, 0x0, 0x0, 0x20044885}, 0x4004) 20.841063877s ago: executing program 3 (id=147): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a", 0x11}], 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B'], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4080, 0x61}], 0x1}, 0x2000) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 20.399015912s ago: executing program 3 (id=150): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nouid32}, {@grpid}]}, 0x3, 0x446, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000002d80)='./bus\x00', 0x182) mount(&(0x7f0000002dc0)=@loop={'/dev/loop', 0x0}, &(0x7f0000002e00)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002e40)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000002e80)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000002ec0)="d4", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) pwrite64(r0, &(0x7f0000000b40)='e', 0x1, 0x3) 19.13217049s ago: executing program 3 (id=152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20842, 0x9d) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101081, 0x20) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000180)={0x7, 0x1b, 0x3}, 0xf18ff8a3) splice(r3, 0x0, r2, 0x0, 0x20000000000002, 0xa) 18.34838767s ago: executing program 3 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 17.511309525s ago: executing program 33 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 8.617873796s ago: executing program 4 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000700)='./bus\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000007c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f00000008c0)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000031) io_submit(r1, 0x1, &(0x7f0000000900)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x600, 0x0, 0x2}]) 7.902387919s ago: executing program 4 (id=182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x87}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7.380861671s ago: executing program 4 (id=183): socket$inet_tcp(0x2, 0x1, 0x0) r0 = epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x68000005}) 6.915168148s ago: executing program 4 (id=185): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xd, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sync() syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000100)={0x40, 0x30, 0x3d, {0x3d, 0x30, "993a0a4a64147a6d4115f1bd57449ca6190959600db1916343cacc73f22d247d3df1316e9e29e4c2f419b73704108c0892232db93339a9a370afc1"}}, 0x0, &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xbc, 0x1, {0x22, 0x990}}}}, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x9, "7d88b20b113e0e6275"}, 0x0}) 6.022812209s ago: executing program 2 (id=189): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000700)={0x2, &(0x7f0000000740)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}]}) alarm(0x5) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000800)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffff6e2}, 0x1c) connect$inet6(r0, &(0x7f0000000840)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) sigaltstack(0x0, 0x0) alarm(0x13bd) 5.61768762s ago: executing program 2 (id=190): openat$binderfs(0xffffffffffffff9c, &(0x7f000001da40)='./binderfs/binder0\x00', 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000007480)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f00000074c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000007500)=[{&(0x7f0000007540)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000007580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) 4.782498125s ago: executing program 2 (id=193): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fanotify_init(0x20, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) fanotify_mark(r1, 0x201, 0x20, r3, 0x0) r4 = fanotify_init(0x20, 0x0) r5 = fcntl$dupfd(r3, 0x0, r3) fanotify_mark(r4, 0x441, 0x1002, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.582622925s ago: executing program 4 (id=194): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0xcf, 0xc000, 0x0, 0x0}, {0x2, 0xf001, 0x0, 0x0}], 0x2}) 4.198882814s ago: executing program 2 (id=196): socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x2, 0x4e20, 0x10, @dev={0xfe, 0x80, '\x00', 0xfc}, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.668867857s ago: executing program 2 (id=198): socket(0x10, 0x3, 0xfffffffd) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000003980)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0xf000, 0x10002, 0x0) listen(r0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 3.574422847s ago: executing program 0 (id=199): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x200080d0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 3.080813787s ago: executing program 0 (id=200): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001dc0)={0x1, &(0x7f0000001e00)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = timerfd_create(0x8, 0x800) timerfd_settime(r0, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x8000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000003) statx(0xffffffffffffff9c, &(0x7f0000001ec0)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000001f00)) 2.730695613s ago: executing program 0 (id=201): openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40042, 0x0) epoll_create1(0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000480)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.388957917s ago: executing program 5 (id=156): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f000000cdc0)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000ac0)="8cd0", 0x2}], 0x1}}], 0x1, 0x8000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 1.975690639s ago: executing program 5 (id=202): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) 1.555526972s ago: executing program 0 (id=203): unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000240)=[{0x1, 0x8001, 0x1000}], 0x1) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000680)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) semop(r0, &(0x7f0000000280)=[{0x1, 0xbbdd, 0x1000}, {0x0, 0x2, 0x1800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000002c0)=[0x6, 0x7fff]) unshare(0x40400) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 1.454963412s ago: executing program 4 (id=204): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf, 0x0, 0xd4}}}}}]}}]}}, 0x0) r1 = creat(0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000011c0)={'ip_vti0\x00', 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.159987912s ago: executing program 0 (id=205): socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) wait4(r2, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 882.67757ms ago: executing program 2 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='27', 0x2) umount2(0x0, 0x1) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 848.397993ms ago: executing program 5 (id=207): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000140)='ramfs\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 0s ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. [ 79.210034][ T5776] cgroup: Unknown subsys name 'net' [ 79.367979][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.037822][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.168382][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.186552][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.195422][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.203973][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.213808][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.221461][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.288767][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.293576][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 83.302426][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.310221][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.317428][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.326587][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.340505][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.340955][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.352555][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.356483][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.367790][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.372516][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.375826][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.385989][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.397849][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.406311][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.414266][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.449965][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.459178][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.471065][ T5792] (null): rxe_set_mtu: Set mtu to 1024 [ 83.477696][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.484157][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.499770][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.507224][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.569605][ T5791] (null): rxe_set_mtu: Set mtu to 1024 [ 83.596805][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.689618][ T5797] (null): rxe_set_mtu: Set mtu to 1024 [ 83.695662][ T5797] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.799609][ T5787] infiniband rxe0: set active [ 83.804536][ T5787] infiniband rxe0: added rxe_eth0 [ 83.844572][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.942554][ T5787] RDS/IB: rxe0: added [ 83.947885][ T5787] smc: adding ib device rxe0 with port count 1 [ 83.969745][ T5787] smc: ib device rxe0 port 1 has pnetid [ 83.998290][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.030118][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.191794][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 84.279512][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 84.385543][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 84.427015][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.582172][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.592311][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.600004][ T5792] bridge_slave_0: entered allmulticast mode [ 84.607607][ T5792] bridge_slave_0: entered promiscuous mode [ 84.666691][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.674021][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.681700][ T5797] bridge_slave_0: entered allmulticast mode [ 84.689422][ T5797] bridge_slave_0: entered promiscuous mode [ 84.701093][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.708272][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.733334][ T5792] bridge_slave_1: entered allmulticast mode [ 84.750990][ T5792] bridge_slave_1: entered promiscuous mode [ 84.821904][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.829289][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.836547][ T5797] bridge_slave_1: entered allmulticast mode [ 84.845391][ T5797] bridge_slave_1: entered promiscuous mode [ 84.870983][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.880398][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.887035][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.895561][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.904022][ T5791] bridge_slave_0: entered allmulticast mode [ 84.920405][ T5791] bridge_slave_0: entered promiscuous mode [ 84.940653][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.947836][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.969155][ T5791] bridge_slave_1: entered allmulticast mode [ 84.976629][ T5791] bridge_slave_1: entered promiscuous mode [ 85.015514][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.146888][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.173787][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.193633][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.206663][ T5792] team0: Port device team_slave_0 added [ 85.221051][ T5792] team0: Port device team_slave_1 added [ 85.247940][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.290909][ T5801] Bluetooth: hci0: command tx timeout [ 85.328755][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.335878][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.361978][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.382173][ T5791] team0: Port device team_slave_0 added [ 85.391284][ T5797] team0: Port device team_slave_0 added [ 85.401032][ T5791] team0: Port device team_slave_1 added [ 85.406970][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.419801][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.426796][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.452930][ T5801] Bluetooth: hci2: command tx timeout [ 85.459290][ T5801] Bluetooth: hci1: command tx timeout [ 85.465575][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.491082][ T5797] team0: Port device team_slave_1 added [ 85.608952][ T5801] Bluetooth: hci3: command tx timeout [ 85.616184][ T5792] hsr_slave_0: entered promiscuous mode [ 85.622994][ T5792] hsr_slave_1: entered promiscuous mode [ 85.631306][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.638286][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.666999][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.687402][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.694599][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.722876][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.734720][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.741751][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.767721][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.780363][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.787342][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.813344][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.897241][ T5791] hsr_slave_0: entered promiscuous mode [ 85.904428][ T5791] hsr_slave_1: entered promiscuous mode [ 85.910932][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.918740][ T5791] Cannot create hsr debugfs directory [ 86.031633][ T5797] hsr_slave_0: entered promiscuous mode [ 86.038378][ T5797] hsr_slave_1: entered promiscuous mode [ 86.044892][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.052740][ T5797] Cannot create hsr debugfs directory [ 86.427150][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 86.448760][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.472563][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.491378][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.530441][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.592066][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.627575][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.637875][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.665136][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.672688][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.680487][ T5787] bridge_slave_0: entered allmulticast mode [ 86.687506][ T5787] bridge_slave_0: entered promiscuous mode [ 86.696170][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.703665][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.710932][ T5787] bridge_slave_1: entered allmulticast mode [ 86.718118][ T5787] bridge_slave_1: entered promiscuous mode [ 86.725395][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.807157][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.824199][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.834448][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.878599][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.893432][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.904958][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.925872][ T5787] team0: Port device team_slave_0 added [ 86.936481][ T5787] team0: Port device team_slave_1 added [ 87.039970][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.046990][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.077378][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.091452][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.098451][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.125739][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.265096][ T5787] hsr_slave_0: entered promiscuous mode [ 87.271869][ T5787] hsr_slave_1: entered promiscuous mode [ 87.278277][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.292313][ T5787] Cannot create hsr debugfs directory [ 87.369139][ T5801] Bluetooth: hci0: command tx timeout [ 87.436474][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.505326][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.530391][ T5801] Bluetooth: hci1: command tx timeout [ 87.535854][ T5801] Bluetooth: hci2: command tx timeout [ 87.590265][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.618218][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.640213][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.689151][ T5801] Bluetooth: hci3: command tx timeout [ 87.707995][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.715488][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.752936][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.760097][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.805760][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.828111][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.835315][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.851189][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.858309][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.886309][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.893471][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.907979][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.915208][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.017399][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.030793][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.045870][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.068401][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.372326][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.435775][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.474469][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.481722][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.533565][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.540803][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.682962][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.731891][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.758498][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.800964][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.946465][ T5791] veth0_vlan: entered promiscuous mode [ 88.955543][ T5792] veth0_vlan: entered promiscuous mode [ 89.001504][ T5797] veth0_vlan: entered promiscuous mode [ 89.015456][ T5792] veth1_vlan: entered promiscuous mode [ 89.035662][ T5791] veth1_vlan: entered promiscuous mode [ 89.058319][ T5797] veth1_vlan: entered promiscuous mode [ 89.128066][ T5792] veth0_macvtap: entered promiscuous mode [ 89.182595][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.197582][ T5792] veth1_macvtap: entered promiscuous mode [ 89.207740][ T5797] veth0_macvtap: entered promiscuous mode [ 89.235182][ T5791] veth0_macvtap: entered promiscuous mode [ 89.245867][ T5797] veth1_macvtap: entered promiscuous mode [ 89.275404][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.303332][ T5791] veth1_macvtap: entered promiscuous mode [ 89.315554][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.341526][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.355074][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.370112][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.380673][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.394704][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.404028][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.414030][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.431160][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.442774][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.455850][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.460990][ T5801] Bluetooth: hci0: command tx timeout [ 89.493508][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.503391][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.513488][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.522530][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.553319][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.563882][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.574486][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.585523][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.599651][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.621371][ T5801] Bluetooth: hci2: command tx timeout [ 89.626827][ T5801] Bluetooth: hci1: command tx timeout [ 89.639536][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.653251][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.664571][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.675162][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.686933][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.734746][ T5787] veth0_vlan: entered promiscuous mode [ 89.755590][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.765268][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.776872][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.780092][ T5801] Bluetooth: hci3: command tx timeout [ 89.786906][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.860903][ T5787] veth1_vlan: entered promiscuous mode [ 89.960980][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.987649][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.018881][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.026766][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.067455][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.076132][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.133317][ T5787] veth0_macvtap: entered promiscuous mode [ 90.152623][ T5787] veth1_macvtap: entered promiscuous mode [ 90.198225][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.209287][ T5797] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.234393][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.286071][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.300507][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.313602][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.326665][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.339399][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.353586][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.367062][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.379182][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.396409][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.430413][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.454600][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.465709][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.477109][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.488024][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.499663][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.530789][ T5880] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.541229][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.562184][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.574216][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.584383][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.594906][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.613843][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.636662][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.871486][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.906113][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.956115][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.989095][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.539421][ T5801] Bluetooth: hci0: command tx timeout [ 91.700500][ T5793] Bluetooth: hci2: command tx timeout [ 91.706956][ T5801] Bluetooth: hci1: command tx timeout [ 91.850522][ T5801] Bluetooth: hci3: command tx timeout [ 92.021200][ T23] cfg80211: failed to load regulatory.db [ 92.813884][ T5853] IPVS: starting estimator thread 0... [ 92.826162][ T5947] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 92.836069][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 92.919750][ T5948] IPVS: using max 20 ests per chain, 48000 per kthread [ 93.174458][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 93.910072][ T5986] tipc: Started in network mode [ 93.915269][ T5986] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 93.949540][ T5986] tipc: Enabled bearer , priority 27 [ 94.185765][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.198911][ C1] hrtimer: interrupt took 104227 ns [ 94.319665][ T5847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.393746][ T6004] TC_ACT_REPEAT abuse ? [ 94.534226][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 94.553579][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.583201][ T5847] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.602344][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.618896][ T5847] usb 1-1: Product: syz [ 94.628962][ T5847] usb 1-1: Manufacturer: syz [ 94.639736][ T5847] usb 1-1: SerialNumber: syz [ 94.662969][ T5847] usb 1-1: config 0 descriptor?? [ 94.698144][ T5847] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.722751][ T5847] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 94.808928][ T6015] syz.2.44[6015]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.841881][ T6015] loop2: detected capacity change from 0 to 8 [ 95.070690][ T5853] tipc: Node number set to 9480874 [ 95.350770][ T5847] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 95.635281][ T5853] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.784110][ T5847] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 95.807695][ T5847] em28xx 1-1:0.0: board has no eeprom [ 96.113485][ T5847] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 96.134829][ T5847] em28xx 1-1:0.0: dvb set to bulk mode. [ 96.154701][ T5851] em28xx 1-1:0.0: Binding DVB extension [ 96.280399][ T5847] usb 1-1: USB disconnect, device number 2 [ 96.288459][ T5847] em28xx 1-1:0.0: Disconnecting em28xx [ 96.402719][ T5851] em28xx 1-1:0.0: Registering input extension [ 96.429921][ T5847] em28xx 1-1:0.0: Closing input extension [ 96.515189][ T5847] em28xx 1-1:0.0: Freeing device [ 96.981311][ T6052] loop2: detected capacity change from 0 to 1024 [ 97.032137][ T6055] process 'syz.0.54' launched '/dev/fd/4' with NULL argv: empty string added [ 97.210226][ T5801] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 97.220883][ T5801] Bluetooth: hci2: Injecting HCI hardware error event [ 97.230165][ T5793] Bluetooth: hci2: hardware error 0x00 [ 97.952861][ T6072] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.301624][ T5793] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 99.333171][ T6088] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 99.362760][ T6088] CIFS: Attempting to mount //127.0.0.1/share [ 99.388317][ T6088] CIFS: VFS: Error connecting to socket. Aborting operation. [ 99.400367][ T6088] CIFS: VFS: cifs_mount failed w/return code = -111 [ 100.759692][ T6103] batman_adv: batadv0: Adding interface: dummy0 [ 100.798939][ T6103] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.893688][ T6103] batman_adv: batadv0: Interface activated: dummy0 [ 101.521798][ T6123] binder: 6121:6123 ioctl c0306201 200000000200 returned -14 [ 101.994694][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 102.213201][ T6139] loop2: detected capacity change from 0 to 512 [ 102.323344][ T6139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.337971][ T6139] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.697550][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.108463][ T6155] ======================================================= [ 103.108463][ T6155] WARNING: The mand mount option has been deprecated and [ 103.108463][ T6155] and is ignored by this kernel. Remove the mand [ 103.108463][ T6155] option from the mount to silence this warning. [ 103.108463][ T6155] ======================================================= [ 103.262471][ T6155] loop3: detected capacity change from 0 to 2048 [ 103.362197][ T6155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.439259][ T6155] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.611378][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.210175][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.433784][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.486985][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 105.551683][ T8] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 105.586900][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.623350][ T8] usb 2-1: Product: syz [ 105.627591][ T8] usb 2-1: Manufacturer: syz [ 105.661409][ T8] usb 2-1: SerialNumber: syz [ 105.968573][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.022196][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.891471][ T8] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 106.995999][ T8] usb 2-1: USB disconnect, device number 2 [ 107.096211][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.385743][ T6224] loop0: detected capacity change from 0 to 2048 [ 107.750969][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 107.817169][ T6224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.919587][ T6224] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.311314][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.526079][ T6242] loop1: detected capacity change from 0 to 512 [ 108.645859][ T6242] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 108.677877][ T6242] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.728256][ T6242] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 109.148761][ T6250] syz.3.107 (6250): drop_caches: 2 [ 109.874103][ T3500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.889493][ T6259] FAULT_INJECTION: forcing a failure. [ 109.889493][ T6259] name failslab, interval 1, probability 0, space 0, times 1 [ 109.904374][ T6259] CPU: 1 PID: 6259 Comm: syz.3.115 Not tainted syzkaller #0 [ 109.911722][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 109.921849][ T6259] Call Trace: [ 109.925166][ T6259] [ 109.928127][ T6259] dump_stack_lvl+0x18c/0x250 [ 109.932882][ T6259] ? show_regs_print_info+0x20/0x20 [ 109.938135][ T6259] ? load_image+0x420/0x420 [ 109.942696][ T6259] ? __might_sleep+0xe0/0xe0 [ 109.947335][ T6259] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.952421][ T6259] should_fail_ex+0x394/0x4c0 [ 109.957165][ T6259] should_failslab+0x9/0x20 [ 109.961723][ T6259] slab_pre_alloc_hook+0x59/0x300 [ 109.966803][ T6259] kmem_cache_alloc_node+0x5e/0x320 [ 109.972065][ T6259] ? __alloc_skb+0x103/0x2c0 [ 109.976689][ T6259] __alloc_skb+0x103/0x2c0 [ 109.981134][ T6259] ctrl_getfamily+0x3d1/0x5b0 [ 109.985856][ T6259] ? nla_put_string+0x30/0x30 [ 109.990575][ T6259] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 109.996942][ T6259] genl_family_rcv_msg_doit+0x21a/0x310 [ 110.002522][ T6259] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 110.008464][ T6259] genl_rcv_msg+0x611/0x7a0 [ 110.013011][ T6259] ? genl_bind+0x360/0x360 [ 110.017455][ T6259] ? nla_put_string+0x30/0x30 [ 110.022162][ T6259] ? ref_tracker_free+0x686/0x830 [ 110.027232][ T6259] netlink_rcv_skb+0x235/0x4c0 [ 110.032051][ T6259] ? genl_bind+0x360/0x360 [ 110.036514][ T6259] ? netlink_ack+0x1160/0x1160 [ 110.041341][ T6259] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.046415][ T6259] ? down_read+0x1ac/0x2e0 [ 110.050858][ T6259] genl_rcv+0x28/0x40 [ 110.054867][ T6259] netlink_unicast+0x856/0x9e0 [ 110.059681][ T6259] netlink_sendmsg+0x8d0/0xbf0 [ 110.064469][ T6259] ? netlink_getsockopt+0x590/0x590 [ 110.069696][ T6259] ? apparmor_socket_sendmsg+0x8e/0x330 [ 110.075277][ T6259] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 110.080599][ T6259] ? security_socket_sendmsg+0x80/0xa0 [ 110.086120][ T6259] __sys_sendto+0x4a9/0x6b0 [ 110.090682][ T6259] ? __ia32_sys_getpeername+0x90/0x90 [ 110.096135][ T6259] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 110.102164][ T6259] ? lock_chain_count+0x20/0x20 [ 110.107060][ T6259] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 110.113086][ T6259] __x64_sys_sendto+0xde/0xf0 [ 110.117818][ T6259] do_syscall_64+0x55/0xb0 [ 110.122272][ T6259] ? clear_bhb_loop+0x40/0x90 [ 110.126990][ T6259] ? clear_bhb_loop+0x40/0x90 [ 110.131704][ T6259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.137664][ T6259] RIP: 0033:0x7fd70ff6974e [ 110.142137][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.161791][ T6259] RSP: 002b:00007fd710f4ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 110.170238][ T6259] RAX: ffffffffffffffda RBX: 00007fd710f4c6c0 RCX: 00007fd70ff6974e [ 110.178244][ T6259] RDX: 0000000000000020 RSI: 00007fd710f4b000 RDI: 0000000000000003 [ 110.186247][ T6259] RBP: 0000000000000000 R08: 00007fd710f4af04 R09: 000000000000000c [ 110.194249][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 110.202250][ T6259] R13: 00007fd710f4af58 R14: 00007fd710f4b000 R15: 0000000000000000 [ 110.210270][ T6259] [ 110.470520][ T3500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.924814][ T3500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.114431][ T3500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.266204][ T6269] FAULT_INJECTION: forcing a failure. [ 111.266204][ T6269] name failslab, interval 1, probability 0, space 0, times 0 [ 111.389243][ T6269] CPU: 0 PID: 6269 Comm: syz.2.117 Not tainted syzkaller #0 [ 111.396634][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 111.406738][ T6269] Call Trace: [ 111.410054][ T6269] [ 111.413026][ T6269] dump_stack_lvl+0x18c/0x250 [ 111.417778][ T6269] ? show_regs_print_info+0x20/0x20 [ 111.423033][ T6269] ? load_image+0x420/0x420 [ 111.427587][ T6269] ? __might_sleep+0xe0/0xe0 [ 111.432235][ T6269] ? __lock_acquire+0x7eb0/0x7eb0 [ 111.437324][ T6269] should_fail_ex+0x394/0x4c0 [ 111.442065][ T6269] should_failslab+0x9/0x20 [ 111.446642][ T6269] slab_pre_alloc_hook+0x59/0x300 [ 111.451743][ T6269] kmem_cache_alloc+0x5a/0x2d0 [ 111.456576][ T6269] ? mas_alloc_nodes+0x2f8/0x8c0 [ 111.461575][ T6269] mas_alloc_nodes+0x2f8/0x8c0 [ 111.466401][ T6269] mas_preallocate+0xa1f/0x1170 [ 111.471319][ T6269] ? mas_destroy+0x20a0/0x20a0 [ 111.476140][ T6269] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 111.481914][ T6269] ? vma_iter_config+0xe6/0x270 [ 111.486815][ T6269] vma_link+0x10d/0x530 [ 111.491036][ T6269] ? insert_vm_struct+0x400/0x400 [ 111.496130][ T6269] ? __vm_enough_memory+0x11a/0x370 [ 111.501388][ T6269] insert_vm_struct+0x2f1/0x400 [ 111.506323][ T6269] ? exit_mmap+0xb90/0xb90 [ 111.510803][ T6269] ? __raw_spin_lock_init+0x45/0x100 [ 111.516140][ T6269] ? __init_rwsem+0x122/0x160 [ 111.520867][ T6269] alloc_bprm+0x4ee/0x9a0 [ 111.525261][ T6269] do_execveat_common+0x18a/0x6b0 [ 111.530381][ T6269] __x64_sys_execveat+0xc4/0xe0 [ 111.535324][ T6269] do_syscall_64+0x55/0xb0 [ 111.539790][ T6269] ? clear_bhb_loop+0x40/0x90 [ 111.544514][ T6269] ? clear_bhb_loop+0x40/0x90 [ 111.549240][ T6269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.555183][ T6269] RIP: 0033:0x7fadfdda8f19 [ 111.559643][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.579293][ T6269] RSP: 002b:00007fadfebf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 111.587767][ T6269] RAX: ffffffffffffffda RBX: 00007fadfe025fa0 RCX: 00007fadfdda8f19 [ 111.595789][ T6269] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000004 [ 111.603821][ T6269] RBP: 00007fadfde37f6d R08: 0000000000001000 R09: 0000000000000000 [ 111.611838][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.619874][ T6269] R13: 00007fadfe026038 R14: 00007fadfe025fa0 R15: 00007ffff1632fd8 [ 111.627914][ T6269] [ 112.245480][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.279801][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.299175][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.313697][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.324023][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.340049][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.179630][ T6274] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.445960][ T6287] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 114.420661][ T5801] Bluetooth: hci0: command tx timeout [ 115.406924][ T6274] chnl_net:caif_netlink_parms(): no params data found [ 115.485720][ T6314] netlink: 'syz.0.127': attribute type 4 has an invalid length. [ 116.488999][ T5801] Bluetooth: hci0: command tx timeout [ 116.797080][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.810588][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.863733][ T6274] bridge_slave_0: entered allmulticast mode [ 116.910538][ T6274] bridge_slave_0: entered promiscuous mode [ 116.957582][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.039757][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.047057][ T6274] bridge_slave_1: entered allmulticast mode [ 117.101956][ T6274] bridge_slave_1: entered promiscuous mode [ 117.274348][ T3500] hsr_slave_0: left promiscuous mode [ 117.283625][ T3500] hsr_slave_1: left promiscuous mode [ 117.363804][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.399272][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.431553][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.449256][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.473014][ T3500] bridge_slave_1: left allmulticast mode [ 117.478967][ T5851] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.539006][ T3500] bridge_slave_1: left promiscuous mode [ 117.547137][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.661111][ T5851] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 117.678905][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.699134][ T3500] bridge_slave_0: left allmulticast mode [ 117.705570][ T3500] bridge_slave_0: left promiscuous mode [ 117.748300][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.756417][ T5851] usb 1-1: config 0 descriptor?? [ 117.817419][ T5851] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 117.977483][ T3500] veth1_macvtap: left promiscuous mode [ 117.989392][ T3500] veth0_macvtap: left promiscuous mode [ 117.996175][ T3500] veth1_vlan: left promiscuous mode [ 118.029374][ T3500] veth0_vlan: left promiscuous mode [ 118.582689][ T5801] Bluetooth: hci0: command tx timeout [ 119.256297][ T5851] usb 1-1: USB disconnect, device number 3 [ 120.381429][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.400988][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.406497][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.423687][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.438967][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.444456][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.451481][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.456954][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.469030][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.474826][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.500120][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.528337][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.544553][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.556288][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.580203][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.585698][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.613057][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.618551][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.644879][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.659260][ T5801] Bluetooth: hci0: command tx timeout [ 120.669214][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.674700][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.730491][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.736003][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.777447][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.820290][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.825792][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.869133][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.874639][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.919087][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.924583][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.936434][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.979010][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 120.984511][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.020097][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.025644][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.031719][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.037196][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.092170][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.113536][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.133382][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.140557][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.146894][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.153518][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.159953][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.166270][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.174896][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.205705][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.220807][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.245441][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.277838][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.290109][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.327043][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.346928][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.364979][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.374508][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.381105][ T6348] iou-wrk-6347 (6348): drop_caches: 2 [ 121.618492][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 121.761525][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 121.935070][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.085504][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.096896][ T3500] bond0 (unregistering): Released all slaves [ 123.385307][ T6274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.434215][ T6274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.656262][ T6274] team0: Port device team_slave_0 added [ 123.686068][ T6274] team0: Port device team_slave_1 added [ 123.859798][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.866815][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.009887][ T6274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.061245][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.068285][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.136309][ T6274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.396729][ T6274] hsr_slave_0: entered promiscuous mode [ 124.421551][ T6274] hsr_slave_1: entered promiscuous mode [ 124.439324][ T6274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.446960][ T6274] Cannot create hsr debugfs directory [ 124.753071][ T6397] netlink: 15143 bytes leftover after parsing attributes in process `syz.3.147'. [ 125.106579][ T6411] loop3: detected capacity change from 0 to 512 [ 125.226205][ T6274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.288725][ T6411] EXT4-fs (loop3): 1 truncate cleaned up [ 125.306195][ T6274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.343580][ T6411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.428478][ T6274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.514864][ T6274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.540350][ T5853] libceph: connect (1)[c::]:6789 error -97 [ 125.547517][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 125.569412][ T5853] libceph: connect (1)[c::]:6789 error -97 [ 125.585193][ T6413] ceph: No mds server is up or the cluster is laggy [ 125.599356][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 125.617354][ T6422] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5974: Out of memory [ 125.705967][ T6422] EXT4-fs error (device loop3): ext4_dirty_inode:6188: inode #15: comm syz.3.150: mark_inode_dirty error [ 125.845146][ T6422] EXT4-fs error (device loop3): ext4_get_max_inline_size:116: inode #15: comm syz.3.150: can't get inode location 15 [ 125.937816][ T6274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.048971][ T6274] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.144192][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.151426][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.186348][ T5797] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 126.240899][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.248241][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.436763][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.465376][ T6274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.609685][ T6426] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 127.101398][ T150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.392095][ T150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.592950][ T150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.808293][ T150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.936455][ T6274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.120409][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.141717][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.164608][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.178592][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.189576][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.201785][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.582708][ T6464] rxe_eth0 speed is unknown, defaulting to 1000 [ 129.867361][ T6274] veth0_vlan: entered promiscuous mode [ 129.943706][ T6274] veth1_vlan: entered promiscuous mode [ 130.111015][ T6476] capability: warning: `syz.0.163' uses deprecated v2 capabilities in a way that may be insecure [ 130.888005][ T6274] veth0_macvtap: entered promiscuous mode [ 130.966630][ T6274] veth1_macvtap: entered promiscuous mode [ 131.120965][ T6492] FAULT_INJECTION: forcing a failure. [ 131.120965][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 131.174151][ T6492] CPU: 0 PID: 6492 Comm: syz.0.165 Not tainted syzkaller #0 [ 131.181522][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.191616][ T6492] Call Trace: [ 131.195023][ T6492] [ 131.197994][ T6492] dump_stack_lvl+0x18c/0x250 [ 131.202736][ T6492] ? show_regs_print_info+0x20/0x20 [ 131.207987][ T6492] ? load_image+0x420/0x420 [ 131.212542][ T6492] ? __might_sleep+0xe0/0xe0 [ 131.217183][ T6492] ? __lock_acquire+0x7eb0/0x7eb0 [ 131.222260][ T6492] should_fail_ex+0x394/0x4c0 [ 131.226997][ T6492] should_failslab+0x9/0x20 [ 131.231542][ T6492] slab_pre_alloc_hook+0x59/0x300 [ 131.236615][ T6492] ? smb3_fs_context_fullpath+0xa9/0x2d0 [ 131.242302][ T6492] ? smb3_fs_context_fullpath+0xa9/0x2d0 [ 131.247987][ T6492] __kmem_cache_alloc_node+0x53/0x260 [ 131.253411][ T6492] ? smb3_fs_context_fullpath+0xa9/0x2d0 [ 131.259088][ T6492] __kmalloc+0xa7/0x240 [ 131.263302][ T6492] ? kstrdup+0x65/0x80 [ 131.267422][ T6492] smb3_fs_context_fullpath+0xa9/0x2d0 [ 131.272928][ T6492] ? smb3_fs_context_parse_param+0x5095/0x7970 [ 131.279150][ T6492] smb3_fs_context_parse_param+0x50a2/0x7970 [ 131.285184][ T6492] ? __lock_acquire+0x7eb0/0x7eb0 [ 131.290262][ T6492] ? smb3_fs_context_free+0x60/0x60 [ 131.295511][ T6492] ? __virt_addr_valid+0x10c/0x380 [ 131.300675][ T6492] ? __might_fault+0xaa/0x120 [ 131.305404][ T6492] ? security_fs_context_parse_param+0xb5/0xe0 [ 131.311612][ T6492] vfs_parse_fs_param+0x1a0/0x420 [ 131.316699][ T6492] __se_sys_fsconfig+0x70a/0x850 [ 131.321702][ T6492] ? __x64_sys_fsconfig+0xc0/0xc0 [ 131.326793][ T6492] ? lockdep_hardirqs_on+0x98/0x150 [ 131.332043][ T6492] ? __x64_sys_fsconfig+0x20/0xc0 [ 131.337141][ T6492] do_syscall_64+0x55/0xb0 [ 131.339354][ T5793] Bluetooth: hci3: command tx timeout [ 131.341594][ T6492] ? clear_bhb_loop+0x40/0x90 [ 131.341654][ T6492] ? clear_bhb_loop+0x40/0x90 [ 131.341688][ T6492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.341718][ T6492] RIP: 0033:0x7efc457a8f19 [ 131.341739][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.341757][ T6492] RSP: 002b:00007efc46588028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 131.341782][ T6492] RAX: ffffffffffffffda RBX: 00007efc45a25fa0 RCX: 00007efc457a8f19 [ 131.341799][ T6492] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000005 [ 131.341813][ T6492] RBP: 00007efc45837f6d R08: 0000000000000000 R09: 0000000000000000 [ 131.341827][ T6492] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 131.341842][ T6492] R13: 00007efc45a26038 R14: 00007efc45a25fa0 R15: 00007ffc4c793268 [ 131.341877][ T6492] [ 131.499973][ T6492] CIFS: VFS: OOM when copying UNC string [ 131.947459][ T150] hsr_slave_0: left promiscuous mode [ 131.994165][ T150] hsr_slave_1: left promiscuous mode [ 132.033231][ T150] batman_adv: batadv0: Interface deactivated: dummy0 [ 132.059156][ T150] batman_adv: batadv0: Removing interface: dummy0 [ 132.070758][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.099140][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.119432][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.151515][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.181369][ T150] bridge_slave_1: left allmulticast mode [ 132.210285][ T150] bridge_slave_1: left promiscuous mode [ 132.216779][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.241424][ T150] bridge_slave_0: left allmulticast mode [ 132.249432][ T150] bridge_slave_0: left promiscuous mode [ 132.257024][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.334571][ T150] veth1_macvtap: left promiscuous mode [ 132.349487][ T150] veth0_macvtap: left promiscuous mode [ 132.356465][ T150] veth1_vlan: left promiscuous mode [ 132.369100][ T150] veth0_vlan: left promiscuous mode [ 132.995681][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.004321][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.369115][ T5793] Bluetooth: hci3: command tx timeout [ 133.491459][ T150] team0 (unregistering): Port device team_slave_1 removed [ 133.560735][ T150] team0 (unregistering): Port device team_slave_0 removed [ 133.627988][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.693776][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.229974][ T150] bond0 (unregistering): Released all slaves [ 134.403590][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.438916][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.455894][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.468020][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.482258][ T6274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.512383][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.539130][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.558868][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.578885][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.602501][ T6274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.654497][ T6274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.708892][ T6274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.729538][ T6274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.759372][ T6274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.828733][ T6464] chnl_net:caif_netlink_parms(): no params data found [ 135.199420][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.218003][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.235116][ T6464] bridge_slave_0: entered allmulticast mode [ 135.244964][ T6464] bridge_slave_0: entered promiscuous mode [ 135.290130][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.329414][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.337828][ T6464] bridge_slave_1: entered allmulticast mode [ 135.348124][ T6464] bridge_slave_1: entered promiscuous mode [ 135.459152][ T5793] Bluetooth: hci3: command tx timeout [ 135.528084][ T6464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.603545][ T6464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.806424][ T6464] team0: Port device team_slave_0 added [ 135.829319][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.837518][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.892535][ T6464] team0: Port device team_slave_1 added [ 135.993915][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.017166][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.092746][ T6464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.144340][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.178984][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.242612][ T6464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.300980][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.334865][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.456734][ T6464] hsr_slave_0: entered promiscuous mode [ 136.504628][ T6464] hsr_slave_1: entered promiscuous mode [ 136.551599][ T6464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.581178][ T6464] Cannot create hsr debugfs directory [ 137.461330][ T6464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.502803][ T6464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.529142][ T5793] Bluetooth: hci3: command tx timeout [ 137.557639][ T6464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.602757][ T6464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.015443][ T6464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.088165][ T6464] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.153329][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.160574][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.216773][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.224060][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.949184][ T5847] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.977067][ T6595] netlink: 136 bytes leftover after parsing attributes in process `syz.2.187'. [ 138.999888][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 139.109372][ T6598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.148976][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 139.158113][ T5847] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.179053][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.198966][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 139.212939][ T5847] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 139.243169][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.287009][ T5847] usb 5-1: config 0 descriptor?? [ 139.602921][ T6464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.088576][ T5847] usbhid 5-1:0.0: can't add hid device: -71 [ 140.119091][ T5847] usbhid: probe of 5-1:0.0 failed with error -71 [ 140.165873][ T5847] usb 5-1: USB disconnect, device number 2 [ 140.402780][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 140.506255][ T6620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.644585][ T6624] macvlan2: entered promiscuous mode [ 140.765237][ T6624] macvlan2: entered allmulticast mode [ 140.790712][ T6624] bond2: (slave macvlan2): Error -22 calling dev_set_mtu [ 141.021720][ T6464] veth0_vlan: entered promiscuous mode [ 141.066538][ T6464] veth1_vlan: entered promiscuous mode [ 141.200606][ T6464] veth0_macvtap: entered promiscuous mode [ 141.209484][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.227772][ T6464] veth1_macvtap: entered promiscuous mode [ 141.275620][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.293006][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.313248][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.338986][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.379605][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.420043][ T56] IPVS: starting estimator thread 0... [ 141.426443][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.438946][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 141.448982][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.471465][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.479378][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.504428][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.519262][ T6641] IPVS: using max 19 ests per chain, 45600 per kthread [ 141.527544][ T5875] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 141.542463][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.578562][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.581359][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.627895][ T5875] usb 5-1: config 0 descriptor?? [ 141.654401][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.707769][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.749060][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.790975][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.827562][ T6464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.888996][ T6464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.897808][ T6464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.919009][ T6464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.080909][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 142.162577][ T5875] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 142.189102][ T5875] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 142.326654][ T5875] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 142.387349][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.424529][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.439108][ T28] audit: type=1326 audit(1794410976.805:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 142.527638][ T5875] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 142.555816][ T28] audit: type=1326 audit(1794410976.805:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 142.591078][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.630172][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.638384][ T28] audit: type=1326 audit(1794410976.825:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 142.707549][ T28] audit: type=1326 audit(1794410976.825:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 142.756076][ T5875] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 142.788549][ T28] audit: type=1326 audit(1794410976.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 142.884853][ T28] audit: type=1326 audit(1794410976.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 142.998452][ T28] audit: type=1326 audit(1794410976.845:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 143.068925][ T28] audit: type=1326 audit(1794410976.845:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 143.132817][ T6631] i2c i2c-1: adapter quirk: comb msg only to same addr (addr 0x00cf, size 0, write) [ 143.145537][ T28] audit: type=1326 audit(1794410976.845:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 143.176306][ T5875] usb 5-1: USB disconnect, device number 3 [ 143.263321][ T28] audit: type=1326 audit(1794410976.845:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc457a8f19 code=0x7ffc0000 [ 144.329894][ T5875] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.522117][ T5875] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 144.577991][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.599014][ T5875] usb 5-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 144.633039][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.684959][ T5875] usb 5-1: config 0 descriptor?? [ 144.724013][ T6688] FAULT_INJECTION: forcing a failure. [ 144.724013][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 144.807843][ T6688] CPU: 0 PID: 6688 Comm: syz.2.206 Not tainted syzkaller #0 [ 144.815216][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 144.825313][ T6688] Call Trace: [ 144.828636][ T6688] [ 144.831606][ T6688] dump_stack_lvl+0x18c/0x250 [ 144.836355][ T6688] ? show_regs_print_info+0x20/0x20 [ 144.841634][ T6688] ? load_image+0x420/0x420 [ 144.846195][ T6688] ? __might_sleep+0xe0/0xe0 [ 144.850836][ T6688] ? __lock_acquire+0x7eb0/0x7eb0 [ 144.856007][ T6688] should_fail_ex+0x394/0x4c0 [ 144.860769][ T6688] should_failslab+0x9/0x20 [ 144.865324][ T6688] slab_pre_alloc_hook+0x59/0x300 [ 144.870394][ T6688] ? __lock_acquire+0x7eb0/0x7eb0 [ 144.875478][ T6688] kmem_cache_alloc+0x5a/0x2d0 [ 144.880291][ T6688] ? security_file_alloc+0x34/0x120 [ 144.885554][ T6688] security_file_alloc+0x34/0x120 [ 144.890652][ T6688] init_file+0x94/0x1f0 [ 144.894866][ T6688] alloc_empty_file+0xb7/0x1d0 [ 144.899690][ T6688] alloc_file+0x5b/0x600 [ 144.903990][ T6688] alloc_file_clone+0x2a/0xb0 [ 144.908752][ T6688] do_shmat+0x676/0xbd0 [ 144.912966][ T6688] ? do_shmat+0x2b7/0xbd0 [ 144.917354][ T6688] ? __ia32_compat_sys_old_shmctl+0xa0/0xa0 [ 144.923304][ T6688] ? lock_chain_count+0x20/0x20 [ 144.928211][ T6688] __x64_sys_shmat+0x9d/0xf0 [ 144.932892][ T6688] do_syscall_64+0x55/0xb0 [ 144.937358][ T6688] ? clear_bhb_loop+0x40/0x90 [ 144.942088][ T6688] ? clear_bhb_loop+0x40/0x90 [ 144.946822][ T6688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.952768][ T6688] RIP: 0033:0x7fadfdda8f19 [ 144.957231][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.976890][ T6688] RSP: 002b:00007fadfebf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 144.985358][ T6688] RAX: ffffffffffffffda RBX: 00007fadfe025fa0 RCX: 00007fadfdda8f19 [ 144.993395][ T6688] RDX: bbdccba4532b703b RSI: 0000200000000000 RDI: 0000000000000000 [ 145.001419][ T6688] RBP: 00007fadfde37f6d R08: 0000000000000000 R09: 0000000000000000 [ 145.009439][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.017449][ T6688] R13: 00007fadfe026038 R14: 00007fadfe025fa0 R15: 00007ffff1632fd8 [ 145.025485][ T6688] [ 145.065225][ T6689] loop5: detected capacity change from 0 to 512 [ 145.084192][ T6689] EXT4-fs: Ignoring removed nobh option [ 145.202859][ T6689] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 145.322516][ T6689] EXT4-fs error (device loop5): ext4_do_update_inode:5294: inode #3: comm syz.5.207: corrupted inode contents [ 145.348678][ T6689] EXT4-fs (loop5): Remounting filesystem read-only [ 145.382182][ T5875] sony 0003:054C:1000.0002: missing HID_OUTPUT_REPORT 0 [ 145.400771][ T6689] EXT4-fs (loop5): 1 truncate cleaned up [ 145.430207][ T5875] sony 0003:054C:1000.0002: hidraw0: USB HID v0.05 Joystick [HID 054c:1000] on usb-dummy_hcd.4-1/input0 [ 145.443870][ T6689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.466615][ T150] ------------[ cut here ]------------ [ 145.473304][ T150] WARNING: CPU: 1 PID: 150 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.485696][ T150] Modules linked in: [ 145.490469][ T150] CPU: 1 PID: 150 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 145.498942][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 145.509954][ T150] Workqueue: phy4 ieee80211_csa_finalize_work [ 145.516643][ T150] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.525038][ T150] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 145.547378][ T150] RSP: 0018:ffffc90002ef79b8 EFLAGS: 00010293 [ 145.554218][ T150] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801c760000 [ 145.563444][ T150] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 145.573760][ C1] ------------[ cut here ]------------ [ 145.573803][ C1] WARNING: CPU: 1 PID: 150 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 145.573863][ C1] Modules linked in: [ 145.573939][ C1] CPU: 1 PID: 150 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 145.573963][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 145.573996][ C1] Workqueue: phy4 ieee80211_csa_finalize_work [ 145.574042][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 145.574087][ C1] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 145.574107][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 145.574148][ C1] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88801c760000 [ 145.574186][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.574202][ C1] RBP: 0000000000000000 R08: ffff88801c760000 R09: 0000000000000003 [ 145.574220][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d2c2420 [ 145.574252][ C1] R13: ffff88805dda6824 R14: ffff88805d2c2910 R15: ffff88805dda6800 [ 145.574287][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 145.574307][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.574342][ C1] CR2: 00007fadfdd64030 CR3: 00000000615a4000 CR4: 00000000003506e0 [ 145.574363][ C1] Call Trace: [ 145.574390][ C1] [ 145.574401][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 145.574458][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 145.574504][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 145.574559][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 145.574613][ C1] __iterate_interfaces+0x225/0x4c0 [ 145.574662][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 145.574717][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 145.574768][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 145.574814][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 145.574867][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 145.574918][ C1] ? hw_scan_work+0xf10/0xf10 [ 145.574962][ C1] __hrtimer_run_queues+0x525/0xc10 [ 145.575047][ C1] ? hrtimer_interrupt+0x980/0x980 [ 145.575090][ C1] ? read_tsc+0x9/0x20 [ 145.575144][ C1] hrtimer_run_softirq+0x177/0x290 [ 145.575196][ C1] handle_softirqs+0x27d/0x820 [ 145.575220][ C1] ? read_tsc+0x9/0x20 [ 145.575262][ C1] ? ktime_get+0x24b/0x280 [ 145.575321][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 145.575368][ C1] ? do_softirq+0x1a0/0x1a0 [ 145.575414][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 145.575464][ C1] __irq_exit_rcu+0xd3/0x190 [ 145.575506][ C1] ? irq_exit_rcu+0x20/0x20 [ 145.575557][ C1] irq_exit_rcu+0x9/0x20 [ 145.575596][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 145.575655][ C1] [ 145.575664][ C1] [ 145.575692][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.575742][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 145.575773][ C1] Code: ed 01 00 00 e8 be 90 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 90 1b 00 eb 06 e8 a8 90 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 145.575809][ C1] RSP: 0018:ffffc90002ef7360 EFLAGS: 00000293 [ 145.575849][ C1] RAX: ffffffff816c4df8 RBX: ffffc90002ef74df RCX: ffff88801c760000 [ 145.575874][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.575907][ C1] RBP: ffffc90002ef74b0 R08: ffffffff92223507 R09: 1ffffffff24446a0 [ 145.575925][ C1] R10: dffffc0000000000 R11: fffffbfff24446a1 R12: ffffffff8e8c2440 [ 145.575959][ C1] R13: 1ffffffff1bf975c R14: ffffffff8e8c2498 R15: dffffc0000000000 [ 145.576002][ C1] ? console_flush_all+0x878/0xcf0 [ 145.576062][ C1] ? console_flush_all+0x10b/0xcf0 [ 145.576120][ C1] ? is_console_locked+0x20/0x20 [ 145.576167][ C1] ? lock_chain_count+0x20/0x20 [ 145.576215][ C1] ? __down_trylock_console_sem+0xf6/0x1f0 [ 145.576266][ C1] console_unlock+0xad/0x350 [ 145.576315][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 145.576358][ C1] ? vprintk_emit+0x53d/0x610 [ 145.576411][ C1] ? irq_work_queue+0xc3/0x140 [ 145.576459][ C1] vprintk_emit+0x497/0x610 [ 145.576509][ C1] ? printk_sprint+0x460/0x460 [ 145.576555][ C1] ? _printk+0xde/0x130 [ 145.576611][ C1] _printk+0xde/0x130 [ 145.576653][ C1] ? copy_from_kernel_nofault+0x194/0x2f0 [ 145.576714][ C1] ? load_image+0x420/0x420 [ 145.576754][ C1] ? show_opcodes+0x146/0x170 [ 145.576813][ C1] __show_regs+0x159/0x600 [ 145.576906][ C1] ? dump_stack_print_info+0xf5/0x150 [ 145.576958][ C1] show_regs+0x44/0x90 [ 145.577007][ C1] __warn+0x160/0x470 [ 145.577029][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.577103][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.577202][ C1] report_bug+0x2be/0x4f0 [ 145.577251][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.577305][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.577357][ C1] ? ieee80211_vif_use_reserved_switch+0x1133/0x2950 [ 145.577410][ C1] handle_bug+0xcf/0x120 [ 145.577460][ C1] exc_invalid_op+0x1a/0x50 [ 145.577509][ C1] asm_exc_invalid_op+0x1a/0x20 [ 145.577557][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.577611][ C1] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 145.577630][ C1] RSP: 0018:ffffc90002ef79b8 EFLAGS: 00010293 [ 145.577672][ C1] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801c760000 [ 145.577715][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 145.577730][ C1] RBP: dffffc0000000000 R08: ffff88805d2c160f R09: 1ffff1100ba582c1 [ 145.577766][ C1] R10: dffffc0000000000 R11: ffffed100ba582c2 R12: 0000000000000001 [ 145.577783][ C1] R13: ffff88802482acd0 R14: ffff88802482ad48 R15: ffff88814d437a30 [ 145.577827][ C1] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 145.577913][ C1] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 145.577980][ C1] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 145.578073][ C1] ieee80211_csa_finalize+0x571/0xeb0 [ 145.578114][ C1] ? mutex_lock_nested+0x20/0x20 [ 145.578151][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 145.578175][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 145.578212][ C1] ? read_lock_is_recursive+0x20/0x20 [ 145.578259][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 145.578279][ C1] ? process_scheduled_works+0x975/0x1600 [ 145.578325][ C1] process_scheduled_works+0xa60/0x1600 [ 145.578410][ C1] ? worker_attach_to_pool+0x370/0x370 [ 145.578459][ C1] ? assign_work+0x3cc/0x5d0 [ 145.578506][ C1] worker_thread+0xa5e/0xfe0 [ 145.578560][ C1] ? _raw_spin_unlock+0x40/0x40 [ 145.578580][ C1] ? __kthread_parkme+0x71/0x1c0 [ 145.578625][ C1] kthread+0x2fa/0x390 [ 145.578661][ C1] ? pr_cont_work+0x550/0x550 [ 145.578687][ C1] ? kthread_blkcg+0xd0/0xd0 [ 145.578724][ C1] ret_from_fork+0x48/0x80 [ 145.578762][ C1] ? kthread_blkcg+0xd0/0xd0 [ 145.578783][ C1] ret_from_fork_asm+0x11/0x20 [ 145.578906][ C1] [ 145.578916][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.578926][ C1] CPU: 1 PID: 150 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 145.578946][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 145.578957][ C1] Workqueue: phy4 ieee80211_csa_finalize_work [ 145.578979][ C1] Call Trace: [ 145.578986][ C1] [ 145.578993][ C1] dump_stack_lvl+0x18c/0x250 [ 145.579022][ C1] ? show_regs_print_info+0x20/0x20 [ 145.579045][ C1] ? load_image+0x420/0x420 [ 145.579077][ C1] panic+0x2ca/0x720 [ 145.579101][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 145.579125][ C1] ? ret_from_fork_asm+0x11/0x20 [ 145.579153][ C1] __warn+0x2e0/0x470 [ 145.579168][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 145.579188][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 145.579205][ C1] report_bug+0x2be/0x4f0 [ 145.579228][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 145.579246][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 145.579264][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 145.579281][ C1] handle_bug+0xcf/0x120 [ 145.579305][ C1] exc_invalid_op+0x1a/0x50 [ 145.579329][ C1] asm_exc_invalid_op+0x1a/0x20 [ 145.579352][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 145.579371][ C1] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 145.579387][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 145.579403][ C1] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88801c760000 [ 145.579416][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.579427][ C1] RBP: 0000000000000000 R08: ffff88801c760000 R09: 0000000000000003 [ 145.579438][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d2c2420 [ 145.579450][ C1] R13: ffff88805dda6824 R14: ffff88805d2c2910 R15: ffff88805dda6800 [ 145.579470][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 145.579494][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 145.579511][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 145.579539][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 145.579560][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 145.579589][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 145.579617][ C1] __iterate_interfaces+0x225/0x4c0 [ 145.579640][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 145.579661][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 145.579685][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 145.579719][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 145.579746][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 145.579764][ C1] ? hw_scan_work+0xf10/0xf10 [ 145.579783][ C1] __hrtimer_run_queues+0x525/0xc10 [ 145.579822][ C1] ? hrtimer_interrupt+0x980/0x980 [ 145.579840][ C1] ? read_tsc+0x9/0x20 [ 145.579878][ C1] hrtimer_run_softirq+0x177/0x290 [ 145.579905][ C1] handle_softirqs+0x27d/0x820 [ 145.579922][ C1] ? read_tsc+0x9/0x20 [ 145.579958][ C1] ? ktime_get+0x24b/0x280 [ 145.579983][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 145.580007][ C1] ? do_softirq+0x1a0/0x1a0 [ 145.580031][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 145.580059][ C1] __irq_exit_rcu+0xd3/0x190 [ 145.580078][ C1] ? irq_exit_rcu+0x20/0x20 [ 145.580106][ C1] irq_exit_rcu+0x9/0x20 [ 145.580123][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 145.580152][ C1] [ 145.580157][ C1] [ 145.580165][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.580190][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 145.580215][ C1] Code: ed 01 00 00 e8 be 90 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 90 1b 00 eb 06 e8 a8 90 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 145.580230][ C1] RSP: 0018:ffffc90002ef7360 EFLAGS: 00000293 [ 145.580246][ C1] RAX: ffffffff816c4df8 RBX: ffffc90002ef74df RCX: ffff88801c760000 [ 145.580260][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.580271][ C1] RBP: ffffc90002ef74b0 R08: ffffffff92223507 R09: 1ffffffff24446a0 [ 145.580296][ C1] R10: dffffc0000000000 R11: fffffbfff24446a1 R12: ffffffff8e8c2440 [ 145.580309][ C1] R13: 1ffffffff1bf975c R14: ffffffff8e8c2498 R15: dffffc0000000000 [ 145.580329][ C1] ? console_flush_all+0x878/0xcf0 [ 145.580362][ C1] ? console_flush_all+0x10b/0xcf0 [ 145.580413][ C1] ? is_console_locked+0x20/0x20 [ 145.580436][ C1] ? lock_chain_count+0x20/0x20 [ 145.580461][ C1] ? __down_trylock_console_sem+0xf6/0x1f0 [ 145.580489][ C1] console_unlock+0xad/0x350 [ 145.580515][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 145.580535][ C1] ? vprintk_emit+0x53d/0x610 [ 145.580563][ C1] ? irq_work_queue+0xc3/0x140 [ 145.580589][ C1] vprintk_emit+0x497/0x610 [ 145.580614][ C1] ? printk_sprint+0x460/0x460 [ 145.580638][ C1] ? _printk+0xde/0x130 [ 145.580670][ C1] _printk+0xde/0x130 [ 145.580701][ C1] ? copy_from_kernel_nofault+0x194/0x2f0 [ 145.580731][ C1] ? load_image+0x420/0x420 [ 145.580748][ C1] ? show_opcodes+0x146/0x170 [ 145.580781][ C1] __show_regs+0x159/0x600 [ 145.580800][ C1] ? dump_stack_print_info+0xf5/0x150 [ 145.580827][ C1] show_regs+0x44/0x90 [ 145.580850][ C1] __warn+0x160/0x470 [ 145.580865][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.580903][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.580930][ C1] report_bug+0x2be/0x4f0 [ 145.580953][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.580981][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.581007][ C1] ? ieee80211_vif_use_reserved_switch+0x1133/0x2950 [ 145.581034][ C1] handle_bug+0xcf/0x120 [ 145.581058][ C1] exc_invalid_op+0x1a/0x50 [ 145.581081][ C1] asm_exc_invalid_op+0x1a/0x20 [ 145.581103][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 145.581131][ C1] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 145.581145][ C1] RSP: 0018:ffffc90002ef79b8 EFLAGS: 00010293 [ 145.581161][ C1] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801c760000 [ 145.581173][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 145.581184][ C1] RBP: dffffc0000000000 R08: ffff88805d2c160f R09: 1ffff1100ba582c1 [ 145.581196][ C1] R10: dffffc0000000000 R11: ffffed100ba582c2 R12: 0000000000000001 [ 145.581208][ C1] R13: ffff88802482acd0 R14: ffff88802482ad48 R15: ffff88814d437a30 [ 145.581228][ C1] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 145.581261][ C1] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 145.581300][ C1] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 145.581332][ C1] ieee80211_csa_finalize+0x571/0xeb0 [ 145.581352][ C1] ? mutex_lock_nested+0x20/0x20 [ 145.581370][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 145.581392][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 145.581411][ C1] ? read_lock_is_recursive+0x20/0x20 [ 145.581440][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 145.581458][ C1] ? process_scheduled_works+0x975/0x1600 [ 145.581483][ C1] process_scheduled_works+0xa60/0x1600 [ 145.581532][ C1] ? worker_attach_to_pool+0x370/0x370 [ 145.581561][ C1] ? assign_work+0x3cc/0x5d0 [ 145.581590][ C1] worker_thread+0xa5e/0xfe0 [ 145.581624][ C1] ? _raw_spin_unlock+0x40/0x40 [ 145.581642][ C1] ? __kthread_parkme+0x71/0x1c0 [ 145.581669][ C1] kthread+0x2fa/0x390 [ 145.581686][ C1] ? pr_cont_work+0x550/0x550 [ 145.581715][ C1] ? kthread_blkcg+0xd0/0xd0 [ 145.581734][ C1] ret_from_fork+0x48/0x80 [ 145.581754][ C1] ? kthread_blkcg+0xd0/0xd0 [ 145.581772][ C1] ret_from_fork_asm+0x11/0x20 [ 145.581809][ C1] [ 145.582387][ C1] Kernel Offset: disabled