last executing test programs: 29.188209381s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x80000, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000001040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r1 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, 0x0, 0x7, 0x8, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d16c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9bbdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00000000000000e500", "f2837a00e6d6020000edff000000000000000100", [0x4, 0x7]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r1, &(0x7f0000001240)={0x2020}, 0x2020) 27.787270586s ago: executing program 3 (id=6): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000001100)='./file0/file2\x00', 0x200, 0x0) 24.73204104s ago: executing program 3 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711805000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r0, 0x1) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0xfa, 0xfffffffffffffffa, 0x40, 0x7efc, 0xf6, 0xfffffffffffffffe, 0x71e7, 0x4000000000000004}, 0x0, 0x0, 0x0) 24.343878779s ago: executing program 32 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711805000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r0, 0x1) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0xfa, 0xfffffffffffffffa, 0x40, 0x7efc, 0xf6, 0xfffffffffffffffe, 0x71e7, 0x4000000000000004}, 0x0, 0x0, 0x0) 4.340234344s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x80}}, 0x0) 4.10601458s ago: executing program 1 (id=81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 3.638924732s ago: executing program 1 (id=84): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0xd9, 0x0) 3.343774999s ago: executing program 1 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000002880)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="74a446", 0x3}], 0x1}}, {{&(0x7f00000014c0)=@nl=@unspec, 0x80, &(0x7f0000002540)=[{&(0x7f0000001540)="b3", 0x1}], 0x1}}], 0x2, 0x8040) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='force', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='1', 0x1) write$cgroup_type(r6, &(0x7f0000000240), 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='10', 0x2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000005c0), 0x12) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200200000000000000000008500000078070000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/24, 0x18}, {0x0, 0x12}], 0x2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r0], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.182978882s ago: executing program 1 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x24, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lseek(r0, 0x0, 0x2) syz_usb_connect$uac2(0x5, 0x7b, 0x0, 0x0) 3.029425276s ago: executing program 2 (id=91): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES8], 0x1, 0x1537, &(0x7f0000001140)="$eJzs3AuYTlXbOPD7XmvtMaTxNMlhsta6N09yWCZJcgjJIUkqSZJTQtIkryQkhpCkIQnJYUhiCMlhYpLz+XxKSJImSUJyStb/mpi/t6/e8/u9vuud+3ddz2Xdz9pr7Xs/93NYe19mf9d1aO0mdWo0IiL4l+DFf5IBIBYABgJAPgAIAKB8fPn4rP7cEpP/tZ2wf6+H0q50BuxK4vrnbFz/nI3rn7Nx/XM2rn/OxvXP2bj+ORvXn7GcbPO0wtfwI+c++Pp/Tsa///9FMsuM/Wptmeu6AcT8vUO4/jkb1/+/VpDdiP0rG3H9czauf071174VWE7Bn/+cINdf7OH652xcf8Zysit9/flKPyDyf+w1OJr7YmH+U8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9B5zxlykAyG5f6bwYY4wxxhhjjDH27+NzXekMGGOMMcYYY4wx9r8PQYAEBQHEQC6IhdyQBwQAXA1xkA8icA3Ew7WQH66DAlAQCkFhSIDroQhoMGCBIISiUAyicAMUhxuhBJSEUlAaHJSBRLgJysLNUA5ugfJwK1SA26AiVILKUAVuh6pQDarDHVAD7oSaUAtqQx24C+rC3VAP7oH6cC80gPvgfngAGsKD0AgegsbwMDSBR6ApPArNoDm0gJbQ6p8a/wL0hBehF/SGZOgDfeEl6Af9YQC8DAPhFRgEr8JgeA1SYAgMhddhGLwBw+FNGAEjYRS8BaPhbRgDY2EcjIdUmAAT4R2YBO/CZHgPpsBUSINpMB3ehxkwE2bBBzAbPoQ5MBfmwXxIh49gASyEDPgYFsEnsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EH7IRPYRd8BrthD+yFz2EffPEPjj/9P8Z3Q0BAgQIVKozBGIzFWMyDeTAv5sU4jMMIRjAe4zE/5scCWAALYSFMwAQsgkXQoEFCwqJYFKMYxeJYHEtgCSyFpdChw0RMxLJ4M5bDclgey2MFrIAVsRJWwipYBatiVayO1bEG1sCaWBNrY228C+/CPlgP62F9rI8NsEH25SlshI2wMTbGJtgEm2JTbIbNsAW2wFbYCltja2yDbbAdtsP22B47YAdMwiTsiB2xE3bCztgZu2AX7IpdsRt2x+6ZL+QCfBFfxN5YU/TBvtgX+2FKrgH4Mr6Mr+AgfBVfxdcwBYfgUHwdX8c3cDiewhE4EkfhKKwq3sYxOBZJjMdUTMWJOBEn4STMSvQ9nIppOA2n43ScgTNxJn6As/FD/BDn4lycj+mYjgtwIWZgBi7C07gYl+BSXIbLcQUux1W4GgCScR2uxQ24ATfhJtyCW3AbbsMduAM/RQWAn+Ee3IMpuA/34X7cjwfwAB7Eg5iJmXgID+FhPIxH8AgexaN4DI/jCTyOJ/EknsLTeAbP4Dk8h+fxuYRvGn9ack0KiCxKKBEjYkSsiBV5RB6RV+QVcSJORERExIt4kV/kFwVEAVFIFBIJIkEUEUWEEUaQCGMAQERFVBQXxUUJUUKUEqWEE04kikRRVpQV5UQ5UV7cKiqI20RFUUm0dVVEFVFVtHPVxR2ihqghaopaoraoI+qIuqKuqCfqifqivmggGoj7xQOioeiDA/AhkVWZJmIINhVDsZloLuSlb7DWYji2EW1FO/GEGIkjsINo7ZLE06KjGIOdxJ/EWHxWdBHjsat4XnQT3UUP8YLoKdq4XqK3mIx9RF8xFfuJ/mKAeFnMwFriA5ydu7Z4TaSIIWKoeF3MxzfEcPGmGCFGilHiLTFavC3GiLFinBgvUsUEMVG8IyaJd8Vk8Z6YIqaKNDFNTBfvixlippglPhCzxYdijpgr5on5Il18JBaIhSJDfCwWiU/EYrFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGaxRWwVsbBd7BA7xadil/hM7BZ7xF7xudgnvhD7xZfigPhKHBRfi0zxjTgkvhWHxXfiiPheHBU/iGPiuDghfhQnxU/ilDgtzoiz4pz4WZwXv4gLwguQKIWUUslAxshcMlbmlnnkVTKvDC69utfIeHmtzC+vkwVkQVlIFpYJ8npZRGpppJUkQ1lUFpNReYMsLm+UJWRJWUqWlk6WkYnyJllW3izLyVtkeXmrrCBvkxVlJVlZVpG3y6qymoTIxX3UlLVkbVlH3iWT4W5ZT94j68t7ZQN5n7xfPiAbygdlI/mQbCwflk3kI7KpfFQ2k81lC9lStpKPydbycdlGtpXt5BOyvXxSdpBPyST5tOwo/aW3yLOyi3xOdpXPy26yu+whf5EXpJe9ZG8JfUD2lS/JfrK/HBALAPIVOUi+KgfL12SKHCKHytflMPmGHC7flCPkSDlKviVHy7flGDlWjpPjZaqcICfKd+Qk+a6cLN+TU+RUmSanyQFy4K8zzZLyr4+3zwD8wfjBv+59k9wst8itcpvcLnfInfJTuUvukrvlbrlX7pX75D65X+6XB+QBeVAelJkyUx6Sh+RheVgekUfkUXlUHpPH5Vn5ozwpf5Kn5Gl5Wp6V5+Q5ef7SawAKlVBSKRWoGJVLxarcKo+6SuVVV6s4lU9F1DUqXl2r8qvrVAFVUBVShVWCul4VUVoZZRWpUBVVxVRU3YCX3jCqlCqtnCqjEtVN/8h4VVzdqEqokr8Zn51f8l/Ir5VqpVqr1qqNaqPaqXaqvWqvOqgOKkklqY6qo+qkOqnOqrPqorqorqpr1vtB9VA9VE/VU/VSvVSySlZ91Uuqn+qvBqiX1UD1ihqkBqnBarBKUSlqqBqqhqlhargarkbkAjVKjVKj1Wg1Ro1R49Q4lapS1UQ1UU1Sk9RkNVlNUVNUmkpT09V0NUPNULPULDVbzVZz1Bw1T81T6SpdLVALVIbKUIvUIrVYLVFL1DK1TK1QK9QqtUqtUWvUOrVObVAbVG7YrDarrWqr2q62q51qp9qldqndYrfaq/aqfWqf2q/2qwPqgDqoDqpMlakOqUPqsDqsjqgj6qg6qo6pY+qEOqFOqpPqlDqlzqgz6pw6p86r8+qCupC17AtEIAIVqCAmiAlig9ggT5AnyBvkDeKCuCASRIL4ID7IH0yLKxAUDAoFhYOE4PqgSKADE9hAXCp6NLghKB7cGJQISgalgtKBC8oEicFNQdng5qBccEtQPrg1qBDcFlQMKgWVgyrB7UHVoFpQPbgjqBHcGdQMagW1gzrBXUHd4O6gXnBPUD+4N2gQ3BfcHzwQNAweDBoFDwWNg4eDJsEjQdPg0aBZ0DxoEbQMWv1b5/f+VMHHXS/dWyfrPrqvfkn30/31AP2yHqhf0YP0q3qwfk2n6CF6qH5dD9Nv6OH6TT1Cj9Sj9Ft6tH5bj9Fj9Tg9XqfqCXqifkdP0u/qyfo9PUVP1Wl6mp6u39cz9Ew9S3+gZ+sP9Rw9V8/T83W6/kgv0At1hv5YL9Kf6MV6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1bv0Z3q33qP36s/1Pv2F3q+/1Af0V/qg/lpn6m/0If2tPqy/00f09/qo/kEf08f1Cf2jPql/0qf0aX1Gn9Xn9M/6vP5FX9A+a3Gf9fNulFEmxsSYWBNr8pg8Jq/Ja+JMnImYiIk38Sa/yW8KmAKmkClkEkyCKWKKmCxkyBQ1RU3URE1xU9yUMCVMKVPKOONMokk0ZU1ZU86UM+VNeVPBVDAVTUVT2VQ2t5vbTTVTzdxh7jB3mjtNLVPL1DF1TF1T19Qz9Ux9U980MA3M/eZ+09A0NI1MI9PYNDZNTBPT1DQ1zUwz08K0MK1MK9PatDZtTBvTzrQz7U1708F0MEkmyXQ0HU0n08l0Np1NF9PFdDVdTTfTzfQwPUxP09P0Mr1Mskk2fU1f08/0MwPMADPQDDSDzCAz2Aw2KSbFDDVDzTAzzAw3w80IM9KMylqomrfNGDPWjDPjTapJNRPNRDPJTDKTzWQzxUwxaSbNTDfTzQwzw8wys8xsM9vMMXPMPDPPpJt0s8AsMBkmwywyi8xis9gsNUvNcrPcrDQrzWqz2qw1a816WG82mo1ms9lstpqtZrvZbnaanWaX2WV2m91mr9lr9pl9Zr/Zbw6YA+agOWgyTaY5ZA6Zw+awOWKOmKPmqDlmjpkT5oQ5aU6aU+aUOWPOmHOm4KXfS29ibW6bx15l89qrbZzNZ/9nXMgWtgn2elvEalvAFvxNbKy1JWxJW8qWts6WsYn2pt/FFW0lW9lWsbfbqraarf67uK6929az99j69l5bx971m7iBvc9mrU4aIgLY5raxbWmb2EdsU/uobWab2xa2pW1vn7Qd7FM2yT5tO9pnfhcvsAvtarvGrrXr7G67x56xZ+1h+509Z3+2vWxvO9C+YgfZV+1g+5pNsUN+F4+yb9nR9m07xo614+z438VT7FSbZqfZ6fZ9O8PO/F2cbj+ys22GnWPn2nl2/q9xVk4Z9mO7yH5iF9sAltpldrldYVfaVdm5+nx2g91oN9ld9jO71W6z2+0OuzN7IWz32L32c7vPfmEP2W/tAfuVPWiP2Ez7za9x1vEdsd/bo/YHe8wetyfsj/ak/Ullj8469h/tL/aC9RYICUiSooBiKBfFUm7KQ1dRXrqa4igfRegaiqdrKT9dRwWoIBWiwpRA11MR0mTIElFIRakYRekGyk6vFJUmR2UokW6isnQzlaNbqDzdShXoNqpIlagyVaHbqSpVo+p0B9WgO6km1aLaVIfuorp0N9Wje6g+3UsN6D66nx6ghvQgNaKHqDE9TE3oEWpKj1Izak4tqCW1oseoNT1ObagttaMnqD09SR3oKUqip6kjPUOd6E/UmZ6lLvQcdaXnqRt1px70AvWkF6kX9aZk6kN96SXqR/1pAL1MA+kVGkSv0mB6jVJoCA2l12kYvUHD6U0aQSNpFL1Fo+ltGkNjaRyNp1SaQBPpHZpE79Jkeo+m0FRKo2k0nd6nGTSTZtEHNJs+pDk0l+bRfEqnj2gBLaQM+pgW0Se0mJbQUlpGy2kFraRVtJrW0FpaR+tpA22kTbSZttBW2kbbaQftpE9pF31Gu2kP7aXPaR99QUhf0gH6ig7S15RJ39Ah+pYO03d0hL73vekHOkbH6QT9SCfpJzpFp+kMnaVz9DOdp1/oAnmCEEMRylCFQRgT5gpjw9xhnvCqMG94dRgX5gsj4TVhfHhtmD+8LiwQFgwLhYXDhPD6sEioQxPakMIwLBoWC6PhDWHx8MawRFgyLBWWDl1YJkwMbwrLhjeH5cJbwvLhrWGF8LawYlgpfOTeKuHtYdWwWlg9vCOsEd4Z1gxrhbXDOuFdYd3w7rBeeE9YP7w3LBfeF94fPhA2DB8MG4UPhY3Dh8Mm4SNh0/DRsFnYPGwRtgxbhY+FrcPHwzZh27Bd+ETYPnwy7BA+FSaFT4cdw2d+7b9v4V/uTw77hH3Dl8KXQu/vkfOi86Pp0Y+iC6ILoxnRj6OLop9EF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0W9r5MLHDrhpFMucDEul4t1uV0ed5XL6652cS6fi7hrXLy71uV317kCrqAr5Aq7hGq5XBGnnXHWkQtdUVfMRd0Nrri70ZVwJV0pV9o5V8YlupaulWvlWrvHXRvX1rVzT7gn3JPuSfeUe8o97Tq6Z1wn9yfX2T3rurjn3HPuedfNdXc93Auup5sQd/Ezmez6ur6un+vnBrgBbqAb6Aa5QW6wG+xSXIob6oa6YW6YG+6GuxFuhBvlRrnRbrQb48a4cW6cS3WpbqKb6Ca5SW6ym+ymuCkuzaW56W66m+FmuKozL+5ljpvj5rl5Lt2luwUua82Y4Ra5RW6xW+yWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+3wXJ3X73H633x1wB9xB97XLdN+4Q+5bd9h95464791R94M75o67E+5Hd9L95E650+6MO+vOuZ/defeLu+C8S41MiEyMvBOZFHk3MjnyXtaskbTItMj0yPuRGZGZkVmRDyKzIx9G5kTmRuZF5kfSIx9FFkQWRjIiH0cWRT6JLI4siSyNLIssj6yIeH/91tAX9cV81N/gi/sbfQlf0pfypb3zZXyiv8mX9Tf7cv4WX97f6iv423xFX8lX9o/6Zr65b+Fb+lb+Md/aP+7b+La+nX/Ct/dP+g7+KZ/kn/Yd/TO+k/+T7+yf9V38c76rf9538919D/+C7+lf9L18b5/s+/i+/iXfz/f3A/zLfqB/xQ/yr/rB/jWf4of4of51P8y/4Yf7N/0IP9KPinnLj84+RYbxPtVP8BP9O36Sf9dP9u/5KX6qT/PT/HT/vp/hZ/pZ/gM/23/o5/i5fp6f79P9R36BX+gz/Md+kf/EL/ZLsi8q+5V+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/id/lO/y3/md/s9fq//3O/zX/j9/kt/wH/lD/qvfab/xh/y3/rD/jt/xH/vj/of/DF/3J/wP/qT/id/yp/2Z/xZf87/7M/7X/wF/ps1xhhjjLG/y4TLTfHbnouX8/v8wRjxZxv3BYCrtxXO/PP+rBXl+gIX2/1FQvsIADzdu+tD2Y+aNZOTky9tu1hCUGxu1robLt19ACAGsmOAJdAOnoQkaAtl/zD//qL7Ofob80dvBcjzZ2Ni4XJ8ef4vATD5D+Z/7IlRCyqEZ+L/yvxzAUoUuzwmN1yOl0C7X6+vtIVyfyH/gq3/Rv65v0oFaPNnY/LC5fhy/onwODwDSb/ZkjHGGGOMMcYYu6i/qNw5+/wz+398/tH5eYK6PCYXXI7/1vk5Y4wxxhhjjDHGrrxnu/d46rGkpLad//FG9b+9jfr7Joz5o66m8M8mxo1/quE9wP8vHAD8ixMCZDXkf/IotvxH9pVy6aOT/Uz2HTSXn/UB/N8o5b+jcQW/lBhjjDHGGGP/Ky4v+n/7vLpSCTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYznQv3qPN/g77tJ3pY+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+XwAAAP//iNb1Mw==") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) chmod(&(0x7f0000000000)='./file1\x00', 0x20) 2.710479984s ago: executing program 0 (id=93): r0 = socket$tipc(0x1e, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 2.709667754s ago: executing program 2 (id=94): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x141a82, 0xc4) pwritev(r0, &(0x7f00000043c0)=[{&(0x7f0000000140)="1c8e60af528ce619df643d6ca59ef6d2f7", 0x11}], 0x1, 0x1, 0x8da) 2.567424978s ago: executing program 2 (id=95): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22401, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000400)=ANY=[], 0x55, 0x1) fallocate(r3, 0x3, 0x460e, 0x2) umount2(&(0x7f0000000340)='./file0\x00', 0x1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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") 2.515923689s ago: executing program 0 (id=96): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000002880)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="74a446", 0x3}], 0x1}}, {{&(0x7f00000014c0)=@nl=@unspec, 0x80, &(0x7f0000002540)=[{&(0x7f0000001540)="b3", 0x1}], 0x1}}], 0x2, 0x8040) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='force', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='1', 0x1) write$cgroup_type(r6, &(0x7f0000000240), 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='10', 0x2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000005c0), 0x12) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200200000000000000000008500000078070000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/24, 0x18}, {0x0, 0x12}], 0x2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r0], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.515776939s ago: executing program 4 (id=97): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x804010, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x4482c, 0x0, 0x3, 0x0, &(0x7f0000000680)) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2.349894863s ago: executing program 1 (id=98): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000040ffffffff400001020301090224000101ff5c01"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x10000, 0x0, 0x1}) 2.294627464s ago: executing program 0 (id=99): unshare(0x400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x8, 0x3, 0x0, 0x0) 2.04800482s ago: executing program 0 (id=100): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0xc0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 2.04791169s ago: executing program 4 (id=101): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 1.753930117s ago: executing program 0 (id=102): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000380), 0x10) connect$can_bcm(r0, &(0x7f0000001cc0), 0x10) close(0x3) 1.544064163s ago: executing program 0 (id=103): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000380)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r2, &(0x7f00000001c0)="68dd01e5520bdf1bcd609957cf6a6cb41db5189df41e62f7ef36416bb67464461bb03364ab42bf1ea2b65e7ef98f740ffa16e2319d751b09a54245733a9034f7fcbd521ffe95be07097b35519fd6b6ac411de99b90e7b35f9ad14d13a3bff1ffba70", 0x62, 0x4000004, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.23200736s ago: executing program 4 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567812345678}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8765432187654321}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x68, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "000102030405060708090a0b0c0d0e0f"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bf6e3d7de774fc79872f0b8fa15bf788c9914c00"}}]}]}, 0x68}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) 746.121432ms ago: executing program 2 (id=105): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 650.626044ms ago: executing program 4 (id=106): socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0x556}) open(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 263.854183ms ago: executing program 4 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000002880)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="74a446", 0x3}], 0x1}}, {{&(0x7f00000014c0)=@nl=@unspec, 0x80, &(0x7f0000002540)=[{&(0x7f0000001540)="b3", 0x1}], 0x1}}], 0x2, 0x8040) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='force', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='1', 0x1) write$cgroup_type(r6, &(0x7f0000000240), 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='10', 0x2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000005c0), 0x12) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200200000000000000000008500000078070000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/24, 0x18}, {0x0, 0x12}], 0x2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r0], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 178.319116ms ago: executing program 2 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = io_uring_setup(0x1684, &(0x7f00000000c0)={0x0, 0x3a2b, 0x2, 0x20005, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001480)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 65.448368ms ago: executing program 4 (id=109): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x497, &(0x7f0000000280)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 0s ago: executing program 2 (id=110): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0xc0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 73.541782][ T5761] cgroup: Unknown subsys name 'net' [ 73.679446][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.091972][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.363931][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.393032][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.400929][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.408983][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.416758][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.424704][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.464828][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.473944][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.481769][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.490161][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.498230][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.508032][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.549939][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.571311][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.579226][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.587894][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.595888][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.603310][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.665471][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.687923][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.696755][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.706869][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.714548][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.721878][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.951181][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 77.018171][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.101518][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.159555][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.168187][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.175692][ T5779] bridge_slave_0: entered allmulticast mode [ 77.182595][ T5779] bridge_slave_0: entered promiscuous mode [ 77.195450][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.202602][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.210234][ T5773] bridge_slave_0: entered allmulticast mode [ 77.216998][ T5773] bridge_slave_0: entered promiscuous mode [ 77.237373][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.244839][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.251985][ T5779] bridge_slave_1: entered allmulticast mode [ 77.259023][ T5779] bridge_slave_1: entered promiscuous mode [ 77.270551][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.277762][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.285085][ T5773] bridge_slave_1: entered allmulticast mode [ 77.291858][ T5773] bridge_slave_1: entered promiscuous mode [ 77.353690][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.361035][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.368287][ T5776] bridge_slave_0: entered allmulticast mode [ 77.375858][ T5776] bridge_slave_0: entered promiscuous mode [ 77.399888][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.417798][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.425754][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.433084][ T5776] bridge_slave_1: entered allmulticast mode [ 77.439918][ T5776] bridge_slave_1: entered promiscuous mode [ 77.459273][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.471975][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.485564][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.525473][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 77.537492][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.574779][ T5773] team0: Port device team_slave_0 added [ 77.582789][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.597454][ T5779] team0: Port device team_slave_0 added [ 77.614315][ T5779] team0: Port device team_slave_1 added [ 77.632776][ T5773] team0: Port device team_slave_1 added [ 77.701489][ T5776] team0: Port device team_slave_0 added [ 77.710286][ T5776] team0: Port device team_slave_1 added [ 77.721335][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.728430][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.754535][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.767837][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.776146][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.802950][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.830670][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.837693][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.864164][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.876852][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.883898][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.912036][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.970868][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.977911][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.003883][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.025878][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.033798][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.041009][ T5782] bridge_slave_0: entered allmulticast mode [ 78.047959][ T5782] bridge_slave_0: entered promiscuous mode [ 78.056118][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.063296][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.070467][ T5782] bridge_slave_1: entered allmulticast mode [ 78.077726][ T5782] bridge_slave_1: entered promiscuous mode [ 78.092211][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.099334][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.127829][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.165061][ T5773] hsr_slave_0: entered promiscuous mode [ 78.171645][ T5773] hsr_slave_1: entered promiscuous mode [ 78.227161][ T5779] hsr_slave_0: entered promiscuous mode [ 78.234498][ T5779] hsr_slave_1: entered promiscuous mode [ 78.240852][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.248969][ T5779] Cannot create hsr debugfs directory [ 78.282185][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.311850][ T5776] hsr_slave_0: entered promiscuous mode [ 78.318531][ T5776] hsr_slave_1: entered promiscuous mode [ 78.325540][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.333397][ T5776] Cannot create hsr debugfs directory [ 78.346085][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.377039][ T5782] team0: Port device team_slave_0 added [ 78.412652][ T5782] team0: Port device team_slave_1 added [ 78.512274][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.520244][ T5780] Bluetooth: hci0: command tx timeout [ 78.526205][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.552320][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.565120][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.572145][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.598384][ T5780] Bluetooth: hci1: command tx timeout [ 78.605676][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.667729][ T5782] hsr_slave_0: entered promiscuous mode [ 78.673110][ T5780] Bluetooth: hci2: command tx timeout [ 78.679514][ T5782] hsr_slave_1: entered promiscuous mode [ 78.685905][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.694748][ T5782] Cannot create hsr debugfs directory [ 78.753840][ T5780] Bluetooth: hci3: command tx timeout [ 78.863320][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.875864][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.897629][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.907256][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.011442][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.029252][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.041260][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.055721][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.132814][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.143906][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.156894][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.167280][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.260003][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.271661][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.290247][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.299222][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.308589][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.377079][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.421566][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.428944][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.449488][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.456653][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.508833][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.547274][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.577779][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.598213][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.605454][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.615443][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.622743][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.640642][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.669098][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.692456][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.726317][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.733605][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.787858][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.795056][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.809863][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.817056][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.861519][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.868661][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.144359][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.259423][ T5773] veth0_vlan: entered promiscuous mode [ 80.320070][ T5773] veth1_vlan: entered promiscuous mode [ 80.331077][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.389872][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.439138][ T5773] veth0_macvtap: entered promiscuous mode [ 80.456699][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.466325][ T5773] veth1_macvtap: entered promiscuous mode [ 80.498168][ T5779] veth0_vlan: entered promiscuous mode [ 80.535895][ T5779] veth1_vlan: entered promiscuous mode [ 80.549895][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.580143][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.593593][ T5780] Bluetooth: hci0: command tx timeout [ 80.626060][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.637366][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.647890][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.656854][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.668496][ T5782] veth0_vlan: entered promiscuous mode [ 80.673553][ T5780] Bluetooth: hci1: command tx timeout [ 80.684415][ T5776] veth0_vlan: entered promiscuous mode [ 80.702731][ T5782] veth1_vlan: entered promiscuous mode [ 80.716765][ T5779] veth0_macvtap: entered promiscuous mode [ 80.729135][ T5779] veth1_macvtap: entered promiscuous mode [ 80.753883][ T5780] Bluetooth: hci2: command tx timeout [ 80.758583][ T5776] veth1_vlan: entered promiscuous mode [ 80.806294][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.817502][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.829625][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.833385][ T5780] Bluetooth: hci3: command tx timeout [ 80.847847][ T5776] veth0_macvtap: entered promiscuous mode [ 80.882704][ T5782] veth0_macvtap: entered promiscuous mode [ 80.897720][ T5782] veth1_macvtap: entered promiscuous mode [ 80.906222][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.918688][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.930595][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.938889][ T5776] veth1_macvtap: entered promiscuous mode [ 80.979057][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.982244][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.997672][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.999347][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.013910][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.022675][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.071373][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.082364][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.093455][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.104382][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.116611][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.128672][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.139717][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.151848][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.170680][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.184213][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.193136][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.204295][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.214291][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.224992][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.235834][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.246427][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.258014][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.269356][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.277528][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.291204][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.301799][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.310686][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.320285][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.378701][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.391265][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.404159][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.414938][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.424934][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.435813][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.447675][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.495439][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.504679][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.514451][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.524524][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.562582][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.585099][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.619004][ T5835] syz.0.1[5835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.655402][ T5835] loop0: detected capacity change from 0 to 512 [ 81.668794][ T5835] EXT4-fs: Ignoring removed nobh option [ 81.687853][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.701837][ T5835] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.708654][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.730879][ T5835] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1: EA inode hash validation failed [ 81.773270][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.781126][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.787946][ T5835] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.801988][ T5835] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.1: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 81.827372][ T5835] EXT4-fs (loop0): Remounting filesystem read-only [ 81.839039][ T5835] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.1: ea_inode dec ref err=-117 [ 81.863209][ T5835] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -5) [ 81.869952][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.883194][ T5835] EXT4-fs (loop0): 1 orphan inode deleted [ 81.890301][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.925234][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.055097][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.081728][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.106987][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.127232][ T5839] loop3: detected capacity change from 0 to 128 [ 82.214621][ T5839] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.255530][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.279938][ T5839] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.294676][ T5843] loop2: detected capacity change from 0 to 2048 [ 82.332354][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.497196][ T5843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.505198][ T5839] loop3: detected capacity change from 128 to 64 [ 82.583289][ T5850] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Out of memory [ 82.625800][ T5848] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 82.663657][ T5850] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #12: comm syz.3.4: mark_inode_dirty error [ 82.675670][ T5780] Bluetooth: hci0: command tx timeout [ 82.739131][ T5843] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 82.773053][ T5850] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Out of memory [ 82.793607][ T5780] Bluetooth: hci1: command tx timeout [ 82.801176][ T5843] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.801176][ T5843] [ 82.815532][ T5850] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #12: comm syz.3.4: mark_inode_dirty error [ 82.828929][ T5850] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Out of memory [ 82.839149][ T5780] Bluetooth: hci2: command tx timeout [ 82.853538][ T5850] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #12: comm syz.3.4: mark_inode_dirty error [ 82.870056][ T5850] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Out of memory [ 82.881475][ T5850] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #12: comm syz.3.4: mark_inode_dirty error [ 82.933187][ T5843] EXT4-fs (loop2): Total free blocks count 0 [ 82.937043][ T5780] Bluetooth: hci3: command tx timeout [ 82.947805][ T5843] EXT4-fs (loop2): Free/Dirty block details [ 82.957079][ T5843] EXT4-fs (loop2): free_blocks=2415919504 [ 82.966486][ T5843] EXT4-fs (loop2): dirty_blocks=32 [ 82.971644][ T5843] EXT4-fs (loop2): Block reservation details [ 82.981510][ T5843] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 83.461315][ T5779] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Out of memory [ 83.978874][ T5779] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz-executor: mark_inode_dirty error [ 84.051225][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.191866][ T5854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.692851][ C0] sched: RT throttling activated [ 84.804203][ T5780] Bluetooth: hci0: command tx timeout [ 84.833045][ T5780] Bluetooth: hci1: command tx timeout [ 84.913907][ T5780] Bluetooth: hci2: command tx timeout [ 84.951917][ T5859] tipc: Started in network mode [ 84.960563][ T5859] tipc: Node identity 1000001, cluster identity 4711 [ 84.983119][ T5859] tipc: Node number set to 16777217 [ 84.999959][ T5780] Bluetooth: hci3: command tx timeout [ 85.114851][ T5859] tipc: Enabled bearer , priority 1 [ 85.133735][ T5858] tipc: Resetting bearer [ 85.239774][ T5858] tipc: Disabling bearer [ 85.269326][ T5867] loop0: detected capacity change from 0 to 256 [ 85.855999][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.912633][ T11] kworker/u4:0: attempt to access beyond end of device [ 85.912633][ T11] loop3: rw=1, sector=98, nr_sectors = 16 limit=64 [ 86.177894][ T11] EXT4-fs warning (device loop3): ext4_end_bio:357: I/O error 10 writing to inode 12 starting block 49) [ 86.189378][ T11] Buffer I/O error on device loop3, logical block 49 [ 86.196366][ T11] Buffer I/O error on device loop3, logical block 50 [ 86.203062][ T11] Buffer I/O error on device loop3, logical block 51 [ 86.209759][ T11] Buffer I/O error on device loop3, logical block 52 [ 86.229477][ T11] Buffer I/O error on device loop3, logical block 53 [ 86.236755][ T11] Buffer I/O error on device loop3, logical block 54 [ 86.243631][ T11] Buffer I/O error on device loop3, logical block 55 [ 86.250337][ T11] Buffer I/O error on device loop3, logical block 56 [ 86.294336][ T2943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.355700][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.489941][ T2943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.660564][ T2943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.778399][ T2943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.079108][ T5885] loop2: detected capacity change from 0 to 2048 [ 87.144712][ T5885] loop2: p1 < > p4 [ 87.144712][ T5885] p4: [ 87.178060][ T5885] loop2: p4 size 722688 extends beyond EOD, truncated [ 88.091865][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.109597][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 88.654659][ T5906] loop1: detected capacity change from 0 to 512 [ 88.670531][ T5906] EXT4-fs: Ignoring removed bh option [ 88.785367][ T5906] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.21: corrupted in-inode xattr: e_value size too large [ 88.809053][ T5906] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.21: couldn't read orphan inode 15 (err -117) [ 88.833351][ T5906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.523656][ T5897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.563181][ T5897] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.000210][ T5893] loop2: detected capacity change from 0 to 40427 [ 90.042316][ T5893] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 90.086991][ T5893] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 90.119056][ T5897] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.178369][ T5893] F2FS-fs (loop2): invalid crc value [ 90.219478][ T5893] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.368341][ T5893] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 90.386155][ T5893] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.432993][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.459711][ T5897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.473194][ T5897] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.478742][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.564345][ T5897] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.597758][ T5897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.630613][ T5897] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.630639][ T5893] F2FS-fs (loop2): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 90.661999][ T5897] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.733013][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.745096][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.780112][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.803971][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.812128][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.820246][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.870398][ T5782] syz-executor: attempt to access beyond end of device [ 90.870398][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.887437][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 91.433036][ T5938] netlink: 64 bytes leftover after parsing attributes in process `syz.0.27'. [ 91.597738][ T5935] syzkaller1: entered promiscuous mode [ 91.623087][ T5935] syzkaller1: entered allmulticast mode [ 91.755445][ T5922] loop1: detected capacity change from 0 to 40427 [ 91.783229][ T5922] F2FS-fs (loop1): invalid crc value [ 91.791390][ T5922] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.796235][ T5947] loop2: detected capacity change from 0 to 256 [ 91.857675][ T5947] FAT-fs (loop2): Directory bread(block 64) failed [ 91.867889][ T5947] FAT-fs (loop2): Directory bread(block 65) failed [ 91.880944][ T5947] FAT-fs (loop2): Directory bread(block 66) failed [ 91.887988][ T5947] FAT-fs (loop2): Directory bread(block 67) failed [ 91.908162][ T5947] FAT-fs (loop2): Directory bread(block 68) failed [ 91.942774][ T5947] FAT-fs (loop2): Directory bread(block 69) failed [ 91.956217][ T5947] FAT-fs (loop2): Directory bread(block 70) failed [ 91.973332][ T5947] FAT-fs (loop2): Directory bread(block 71) failed [ 91.984164][ T5947] FAT-fs (loop2): Directory bread(block 72) failed [ 92.009293][ T5947] FAT-fs (loop2): Directory bread(block 73) failed [ 92.037679][ T5922] F2FS-fs (loop1): Start checkpoint disabled! [ 92.104918][ T5945] syz.2.25: attempt to access beyond end of device [ 92.104918][ T5945] loop2: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 92.129642][ T5922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 92.154230][ T23] cfg80211: failed to load regulatory.db [ 92.185203][ T5922] FAULT_INJECTION: forcing a failure. [ 92.185203][ T5922] name failslab, interval 1, probability 10, space 0, times 1 [ 92.186236][ T5953] FAULT_INJECTION: forcing a failure. [ 92.186236][ T5953] name failslab, interval 1, probability 10, space 0, times 1 [ 92.199920][ T5950] FAULT_INJECTION: forcing a failure. [ 92.199920][ T5950] name failslab, interval 1, probability 10, space 0, times 1 [ 92.241989][ T5922] CPU: 0 PID: 5922 Comm: syz.1.24 Not tainted syzkaller #0 [ 92.249265][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.259407][ T5922] Call Trace: [ 92.262719][ T5922] [ 92.265666][ T5922] dump_stack_lvl+0x18c/0x250 [ 92.270374][ T5922] ? show_regs_print_info+0x20/0x20 [ 92.275595][ T5922] ? load_image+0x420/0x420 [ 92.280128][ T5922] ? __might_sleep+0xe0/0xe0 [ 92.284828][ T5922] ? __lock_acquire+0x7d80/0x7d80 [ 92.289876][ T5922] should_fail_ex+0x394/0x4c0 [ 92.294583][ T5922] should_failslab+0x9/0x20 [ 92.299102][ T5922] slab_pre_alloc_hook+0x59/0x300 [ 92.304147][ T5922] ? prepend_path+0x8a7/0x950 [ 92.308833][ T5922] ? tomoyo_encode+0x2ad/0x570 [ 92.313608][ T5922] ? tomoyo_encode+0x2ad/0x570 [ 92.318381][ T5922] __kmem_cache_alloc_node+0x53/0x250 [ 92.323773][ T5922] ? tomoyo_encode+0x2ad/0x570 [ 92.328548][ T5922] __kmalloc+0xa7/0x240 [ 92.332720][ T5922] tomoyo_encode+0x2ad/0x570 [ 92.337327][ T5922] tomoyo_realpath_from_path+0x57c/0x5c0 [ 92.342982][ T5922] tomoyo_check_open_permission+0x224/0x460 [ 92.348885][ T5922] ? tomoyo_check_open_permission+0x1cf/0x460 [ 92.354973][ T5922] ? tomoyo_check_path_number_acl+0x280/0x280 [ 92.361081][ T5922] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 92.367079][ T5922] ? __asan_memset+0x22/0x40 [ 92.371787][ T5922] ? __rwlock_init+0x150/0x150 [ 92.376577][ T5922] ? tomoyo_file_open+0xed/0x180 [ 92.381545][ T5922] security_file_open+0x62/0xa0 [ 92.386413][ T5922] do_dentry_open+0x32b/0x14b0 [ 92.391193][ T5922] ? __asan_memcpy+0x40/0x70 [ 92.395847][ T5922] path_openat+0x284f/0x3270 [ 92.400485][ T5922] ? do_sys_openat2+0xda/0x1d0 [ 92.405271][ T5922] ? __x64_sys_openat+0x139/0x160 [ 92.410317][ T5922] ? verify_lock_unused+0x140/0x140 [ 92.415531][ T5922] ? do_filp_open+0x430/0x430 [ 92.420246][ T5922] do_filp_open+0x1f2/0x430 [ 92.424774][ T5922] ? vfs_tmpfile+0x620/0x620 [ 92.429403][ T5922] ? _raw_spin_unlock+0x28/0x40 [ 92.434274][ T5922] ? alloc_fd+0x590/0x640 [ 92.438637][ T5922] do_sys_openat2+0x134/0x1d0 [ 92.443767][ T5922] ? do_sys_open+0xe0/0xe0 [ 92.448213][ T5922] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 92.454206][ T5922] ? lock_chain_count+0x20/0x20 [ 92.459157][ T5922] __x64_sys_openat+0x139/0x160 [ 92.464027][ T5922] do_syscall_64+0x55/0xb0 [ 92.468640][ T5922] ? clear_bhb_loop+0x40/0x90 [ 92.473337][ T5922] ? clear_bhb_loop+0x40/0x90 [ 92.478030][ T5922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.483944][ T5922] RIP: 0033:0x7f7ad2b5e6ce [ 92.488382][ T5922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.508009][ T5922] RSP: 002b:00007f7ad3a32da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.516445][ T5922] RAX: ffffffffffffffda RBX: 00007f7ad3a336c0 RCX: 00007f7ad2b5e6ce [ 92.524427][ T5922] RDX: 0000000000010000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 92.532408][ T5922] RBP: 0000200000000140 R08: 0000000000000000 R09: 0000000000000000 [ 92.540397][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 92.548381][ T5922] R13: 00007f7ad3a32ea0 R14: 0000000000005524 R15: 0000200000000380 [ 92.553626][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.556390][ T5922] [ 92.563590][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.583988][ T5950] CPU: 0 PID: 5950 Comm: syz.0.28 Not tainted syzkaller #0 [ 92.591351][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.601433][ T5950] Call Trace: [ 92.604734][ T5950] [ 92.607767][ T5950] dump_stack_lvl+0x18c/0x250 [ 92.612488][ T5950] ? show_regs_print_info+0x20/0x20 [ 92.617752][ T5950] ? load_image+0x420/0x420 [ 92.622396][ T5950] ? __might_sleep+0xe0/0xe0 [ 92.627019][ T5950] ? __lock_acquire+0x7d80/0x7d80 [ 92.632077][ T5950] should_fail_ex+0x394/0x4c0 [ 92.636788][ T5950] should_failslab+0x9/0x20 [ 92.641336][ T5950] slab_pre_alloc_hook+0x59/0x300 [ 92.646489][ T5950] ? kvmalloc_node+0x70/0x180 [ 92.651205][ T5950] ? kvmalloc_node+0x70/0x180 [ 92.655916][ T5950] __kmem_cache_alloc_node+0x53/0x250 [ 92.661328][ T5950] ? kvmalloc_node+0x70/0x180 [ 92.666035][ T5950] __kmalloc_node+0xa6/0x240 [ 92.670657][ T5950] ? bpf_lsm_capable+0x9/0x10 [ 92.672943][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.675344][ T5950] ? security_capable+0x89/0xb0 [ 92.675374][ T5950] kvmalloc_node+0x70/0x180 [ 92.683413][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 92.686221][ T5950] bpf_check+0xaec/0xec30 [ 92.686262][ T5950] ? mark_lock+0x94/0x320 [ 92.695187][ T5922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.699795][ T5950] ? __lock_acquire+0x1336/0x7d80 [ 92.720216][ T5950] ? bpf_get_btf_vmlinux+0x20/0x20 [ 92.725374][ T5950] ? __lock_acquire+0x1262/0x7d80 [ 92.730443][ T5950] ? mark_lock+0x94/0x320 [ 92.734810][ T5950] ? __lock_acquire+0x1336/0x7d80 [ 92.739895][ T5950] ? verify_lock_unused+0x140/0x140 [ 92.745128][ T5950] ? verify_lock_unused+0x140/0x140 [ 92.750358][ T5950] ? verify_lock_unused+0x140/0x140 [ 92.755906][ T5950] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 92.762208][ T5950] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 92.768225][ T5950] ? __lock_acquire+0x7d80/0x7d80 [ 92.773299][ T5950] ? lock_chain_count+0x20/0x20 [ 92.778179][ T5950] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 92.784454][ T5950] ? lockdep_hardirqs_on+0x98/0x150 [ 92.789720][ T5950] ? ktime_get_with_offset+0x103/0x330 [ 92.795213][ T5950] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 92.801485][ T5950] ? ktime_get_real_ts64+0x440/0x440 [ 92.806810][ T5950] ? do_raw_spin_unlock+0x121/0x230 [ 92.812050][ T5950] ? bpf_obj_name_cpy+0x194/0x1e0 [ 92.817105][ T5950] bpf_prog_load+0x10fa/0x1610 [ 92.821917][ T5950] ? map_freeze+0x420/0x420 [ 92.826551][ T5950] ? __might_fault+0xaa/0x120 [ 92.831242][ T5950] ? __might_fault+0xc6/0x120 [ 92.835935][ T5950] ? __might_fault+0xaa/0x120 [ 92.840628][ T5950] ? bpf_lsm_bpf+0x9/0x10 [ 92.844966][ T5950] ? security_bpf+0x7e/0xa0 [ 92.849486][ T5950] __sys_bpf+0x5ba/0x890 [ 92.853766][ T5950] ? bpf_link_show_fdinfo+0x390/0x390 [ 92.859185][ T5950] ? lock_chain_count+0x20/0x20 [ 92.864068][ T5950] __x64_sys_bpf+0x7c/0x90 [ 92.868536][ T5950] do_syscall_64+0x55/0xb0 [ 92.872969][ T5950] ? clear_bhb_loop+0x40/0x90 [ 92.877665][ T5950] ? clear_bhb_loop+0x40/0x90 [ 92.882360][ T5950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.888271][ T5950] RIP: 0033:0x7f3c5fd9de99 [ 92.892707][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.912349][ T5950] RSP: 002b:00007f3c60c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.920884][ T5950] RAX: ffffffffffffffda RBX: 00007f3c60025fa0 RCX: 00007f3c5fd9de99 [ 92.928886][ T5950] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 92.936872][ T5950] RBP: 00007f3c5fe33eaf R08: 0000000000000000 R09: 0000000000000000 [ 92.944850][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.952827][ T5950] R13: 00007f3c60026038 R14: 00007f3c60025fa0 R15: 00007fffb1ac7ef8 [ 92.960915][ T5950] [ 92.963935][ T5953] CPU: 1 PID: 5953 Comm: modprobe Not tainted syzkaller #0 [ 92.971428][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.981508][ T5953] Call Trace: [ 92.984784][ T5953] [ 92.987714][ T5953] dump_stack_lvl+0x18c/0x250 [ 92.993177][ T5953] ? show_regs_print_info+0x20/0x20 [ 92.998414][ T5953] ? load_image+0x420/0x420 [ 93.002943][ T5953] ? __might_sleep+0xe0/0xe0 [ 93.007542][ T5953] ? __lock_acquire+0x7d80/0x7d80 [ 93.012585][ T5953] ? do_mprotect_pkey+0x7c3/0xcc0 [ 93.017615][ T5953] ? do_syscall_64+0x55/0xb0 [ 93.022297][ T5953] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.028371][ T5953] should_fail_ex+0x394/0x4c0 [ 93.033064][ T5953] should_failslab+0x9/0x20 [ 93.037575][ T5953] slab_pre_alloc_hook+0x59/0x300 [ 93.042635][ T5953] kmem_cache_alloc+0x5a/0x2c0 [ 93.047397][ T5953] ? mas_alloc_nodes+0x2f8/0x8c0 [ 93.052334][ T5953] mas_alloc_nodes+0x2f8/0x8c0 [ 93.057111][ T5953] mas_preallocate+0xa1f/0x1170 [ 93.061988][ T5953] ? lockdep_softirqs_off+0x440/0x440 [ 93.067376][ T5953] ? mas_destroy+0x20a0/0x20a0 [ 93.072150][ T5953] ? vma_iter_config+0xe6/0x270 [ 93.077005][ T5953] __split_vma+0x2dd/0xc20 [ 93.081429][ T5953] ? mmap_write_unlock+0x160/0x160 [ 93.086545][ T5953] ? split_vma+0x8f/0x110 [ 93.090877][ T5953] mprotect_fixup+0xade/0xcd0 [ 93.095560][ T5953] ? change_protection+0x31e0/0x31e0 [ 93.100847][ T5953] ? common_file_perm+0x198/0x1f0 [ 93.105872][ T5953] ? bpf_lsm_file_mprotect+0x9/0x10 [ 93.111067][ T5953] do_mprotect_pkey+0x7c3/0xcc0 [ 93.115924][ T5953] ? prot_none_test+0x10/0x10 [ 93.120612][ T5953] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 93.126600][ T5953] __x64_sys_mprotect+0x80/0x90 [ 93.131458][ T5953] do_syscall_64+0x55/0xb0 [ 93.136393][ T5953] ? clear_bhb_loop+0x40/0x90 [ 93.141067][ T5953] ? clear_bhb_loop+0x40/0x90 [ 93.145749][ T5953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.151648][ T5953] RIP: 0033:0x7ff4bd1642c7 [ 93.156083][ T5953] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 93.175693][ T5953] RSP: 002b:00007ffc0dad2d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 93.184107][ T5953] RAX: ffffffffffffffda RBX: 00007ff4bd141050 RCX: 00007ff4bd1642c7 [ 93.192100][ T5953] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007ff4bce8b000 [ 93.200093][ T5953] RBP: 00007ffc0dad2fe0 R08: 0000000000000000 R09: 00007ff4bcedd870 [ 93.208091][ T5953] R10: 00007ff4bd141050 R11: 0000000000000206 R12: 0000000000000010 [ 93.216176][ T5953] R13: 000000345f57bc60 R14: 0000000000000000 R15: 00007ff4bd178310 [ 93.224169][ T5953] [ 93.235201][ T2943] hsr_slave_0: left promiscuous mode [ 93.245267][ T5780] Bluetooth: hci2: command tx timeout [ 93.285860][ T2943] hsr_slave_1: left promiscuous mode [ 93.327419][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.383005][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.475300][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.482767][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.529225][ T11] kworker/u4:0: attempt to access beyond end of device [ 93.529225][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 93.530886][ T5970] loop2: detected capacity change from 0 to 512 [ 93.545879][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 93.579067][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 93.594455][ T2943] bridge_slave_1: left allmulticast mode [ 93.600182][ T2943] bridge_slave_1: left promiscuous mode [ 93.645742][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.697863][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.733973][ T2943] bridge_slave_0: left allmulticast mode [ 93.740420][ T2943] bridge_slave_0: left promiscuous mode [ 93.746459][ T5970] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.773327][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.882306][ T2943] veth1_macvtap: left promiscuous mode [ 93.898795][ T2943] veth0_macvtap: left promiscuous mode [ 93.916149][ T2943] veth1_vlan: left promiscuous mode [ 93.921772][ T2943] veth0_vlan: left promiscuous mode [ 94.018903][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.067992][ T5982] loop0: detected capacity change from 0 to 256 [ 94.165563][ T5982] FAT-fs (loop0): Directory bread(block 64) failed [ 94.172162][ T5982] FAT-fs (loop0): Directory bread(block 65) failed [ 94.207764][ T5982] FAT-fs (loop0): Directory bread(block 66) failed [ 94.238651][ T5982] FAT-fs (loop0): Directory bread(block 67) failed [ 94.267300][ T5982] FAT-fs (loop0): Directory bread(block 68) failed [ 94.306236][ T5982] FAT-fs (loop0): Directory bread(block 69) failed [ 94.326814][ T5982] FAT-fs (loop0): Directory bread(block 70) failed [ 94.338417][ T5982] FAT-fs (loop0): Directory bread(block 71) failed [ 94.343688][ T5988] loop1: detected capacity change from 0 to 256 [ 94.348501][ T5982] FAT-fs (loop0): Directory bread(block 72) failed [ 94.369627][ T5982] FAT-fs (loop0): Directory bread(block 73) failed [ 94.377617][ T5988] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.461511][ T5988] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.463681][ T5981] syz.0.36: attempt to access beyond end of device [ 94.463681][ T5981] loop0: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 94.595502][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.595679][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.762921][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.101551][ T6000] loop1: detected capacity change from 0 to 128 [ 95.251605][ T6000] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.266233][ T6000] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.354325][ T51] Bluetooth: hci2: command tx timeout [ 96.333503][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.382548][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 96.441153][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 96.508543][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.553050][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 96.568967][ T5810] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 96.592760][ T5810] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 96.608953][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 96.619215][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 96.629856][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.635287][ T5810] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 96.647770][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.655926][ T5810] usb 1-1: Product: syz [ 96.660379][ T5810] usb 1-1: Manufacturer: syz [ 96.665127][ T5810] usb 1-1: SerialNumber: syz [ 96.685916][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.694787][ T5810] usb 1-1: config 0 descriptor?? [ 96.718175][ T5810] hub 1-1:0.0: bad descriptor, ignoring hub [ 96.727803][ T5810] hub: probe of 1-1:0.0 failed with error -5 [ 96.833152][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.961127][ T2943] bond0 (unregistering): Released all slaves [ 97.041487][ T5986] netlink: 64 bytes leftover after parsing attributes in process `syz.2.35'. [ 97.052033][ T5989] syzkaller1: entered promiscuous mode [ 97.058272][ T5810] usb 1-1: USB disconnect, device number 2 [ 97.061747][ T5989] syzkaller1: entered allmulticast mode [ 97.091879][ T5999] bridge1: entered promiscuous mode [ 97.097221][ T5999] bridge1: entered allmulticast mode [ 97.198795][ T5898] chnl_net:caif_netlink_parms(): no params data found [ 97.211333][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.393011][ T51] Bluetooth: hci2: command tx timeout [ 97.593839][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.621528][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.624030][ T6019] loop2: detected capacity change from 0 to 128 [ 97.638950][ T5898] bridge_slave_0: entered allmulticast mode [ 97.655313][ T5898] bridge_slave_0: entered promiscuous mode [ 97.694624][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.749243][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.796879][ T5898] bridge_slave_1: entered allmulticast mode [ 97.823992][ T5898] bridge_slave_1: entered promiscuous mode [ 98.369933][ T6033] ======================================================= [ 98.369933][ T6033] WARNING: The mand mount option has been deprecated and [ 98.369933][ T6033] and is ignored by this kernel. Remove the mand [ 98.369933][ T6033] option from the mount to silence this warning. [ 98.369933][ T6033] ======================================================= [ 98.606350][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.687694][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.706221][ T6036] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.740326][ T6033] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.798696][ T5898] team0: Port device team_slave_0 added [ 98.811398][ T5898] team0: Port device team_slave_1 added [ 98.844532][ T6039] netlink: 64 bytes leftover after parsing attributes in process `syz.2.49'. [ 98.911418][ T6039] syzkaller1: entered promiscuous mode [ 98.932359][ T6039] syzkaller1: entered allmulticast mode [ 98.997256][ T6048] loop0: detected capacity change from 0 to 512 [ 99.026643][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.041205][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.068921][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.082038][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.103257][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.110732][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.137003][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.161843][ T6048] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.50: bg 0: block 67: padding at end of block bitmap is not set [ 99.213731][ T6048] EXT4-fs (loop0): Remounting filesystem read-only [ 99.245059][ T5898] hsr_slave_0: entered promiscuous mode [ 99.283469][ T5898] hsr_slave_1: entered promiscuous mode [ 99.323231][ T5898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.330848][ T5898] Cannot create hsr debugfs directory [ 99.404660][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.475820][ T51] Bluetooth: hci2: command tx timeout [ 99.572290][ T6066] loop0: detected capacity change from 0 to 16 [ 99.632410][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.711008][ T5808] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 99.900927][ T5898] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.924874][ T5808] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.944558][ T5898] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.972055][ T5808] usb 2-1: config 0 has no interface number 0 [ 99.981738][ T5808] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.019182][ T5808] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.033613][ T5898] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.042605][ T6077] loop0: detected capacity change from 0 to 256 [ 100.049085][ T5808] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.063891][ T6077] exfat: Deprecated parameter 'namecase' [ 100.069604][ T5898] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.069622][ T6077] exfat: Deprecated parameter 'utf8' [ 100.086929][ T5808] usb 2-1: config 0 interface 1 has no altsetting 0 [ 100.112564][ T5808] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 100.127950][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.169036][ T6077] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 100.196499][ T5808] usb 2-1: config 0 descriptor?? [ 100.383249][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.435217][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.468605][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.475809][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.520187][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.527379][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.813499][ T6092] netlink: 64 bytes leftover after parsing attributes in process `syz.0.60'. [ 100.843055][ T5808] uclogic 0003:145F:0212.0001: pen parameters not found [ 100.850336][ T5808] uclogic 0003:145F:0212.0001: interface is invalid, ignoring [ 100.882023][ T6092] syzkaller1: entered promiscuous mode [ 100.909425][ T6092] syzkaller1: entered allmulticast mode [ 100.916609][ T5808] usb 2-1: USB disconnect, device number 2 [ 100.929831][ T6072] loop2: detected capacity change from 0 to 40427 [ 100.978018][ T6072] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 100.995091][ T6072] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 101.012722][ T6072] F2FS-fs (loop2): invalid crc value [ 101.204181][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.288983][ T6105] loop0: detected capacity change from 0 to 512 [ 101.396288][ T6105] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.0.61: corrupted xattr block 95: invalid header [ 101.415612][ T6072] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 101.446973][ T6105] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 101.460031][ T6072] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.469723][ T6105] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.61: bg 0: block 7: invalid block bitmap [ 101.502544][ T6105] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 101.546370][ T6105] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #11: comm syz.0.61: corrupted xattr block 95: invalid header [ 101.613117][ T6105] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 101.633734][ T6105] EXT4-fs (loop0): 1 orphan inode deleted [ 101.649717][ T5782] syz-executor: attempt to access beyond end of device [ 101.649717][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.675707][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.704428][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 101.815459][ T6105] raw_sendmsg: syz.0.61 forgot to set AF_INET. Fix it! [ 101.917599][ T6125] loop1: detected capacity change from 0 to 512 [ 101.927493][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.043950][ T6125] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #12: comm syz.1.64: corrupted in-inode xattr: invalid ea_ino [ 102.076501][ T6125] EXT4-fs (loop1): Remounting filesystem read-only [ 102.117502][ T6125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.139955][ T5898] veth0_vlan: entered promiscuous mode [ 102.170901][ T5898] veth1_vlan: entered promiscuous mode [ 102.310805][ T5898] veth0_macvtap: entered promiscuous mode [ 102.463336][ T5898] veth1_macvtap: entered promiscuous mode [ 102.471977][ T6125] can: request_module (can-proto-0) failed. [ 102.935062][ T6140] Bluetooth: MGMT ver 1.22 [ 103.271263][ T5898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.281823][ T5898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.292121][ T5898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.313291][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.322545][ T5898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.342151][ T5898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.379039][ T5898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.413535][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.437817][ T5898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.470009][ T5898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.483732][ T5898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.498761][ T6146] loop1: detected capacity change from 0 to 256 [ 103.500890][ T5898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.535471][ T5898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.548493][ T6146] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 103.557172][ T5898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.610417][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.671327][ T5898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.703807][ T5898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.717487][ T5898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.726330][ T5898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.903691][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.911573][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.975033][ T6156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.69'. [ 104.029430][ T6159] syzkaller1: entered promiscuous mode [ 104.039326][ T6159] syzkaller1: entered allmulticast mode [ 104.116370][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.143551][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.620758][ T6177] loop4: detected capacity change from 0 to 1024 [ 104.640409][ T6177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.725673][ T6177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.756453][ T6177] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.145399][ T6175] loop2: detected capacity change from 0 to 40427 [ 106.181641][ T6175] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 106.196139][ T6175] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.339400][ T6175] F2FS-fs (loop2): invalid crc value [ 106.392031][ T6175] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.568077][ T6175] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.593089][ T6175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.779436][ T28] audit: type=1804 audit(1785186936.755:2): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.73" name="/newroot/20/file0/file1" dev="loop2" ino=10 res=1 errno=0 [ 106.862233][ T5898] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.967614][ T6210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.78'. [ 106.981762][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'. [ 107.000512][ T6210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 107.273523][ T6222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.82'. [ 107.309075][ T6221] loop0: detected capacity change from 0 to 1024 [ 107.338233][ T6221] EXT4-fs: Ignoring removed bh option [ 107.397658][ T6221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.814698][ T6236] netlink: 64 bytes leftover after parsing attributes in process `syz.2.79'. [ 107.878814][ T6236] syzkaller1: entered promiscuous mode [ 107.903156][ T6236] syzkaller1: entered allmulticast mode [ 108.237941][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.263316][ T6253] loop2: detected capacity change from 0 to 256 [ 108.335587][ T6253] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 108.442659][ T28] audit: type=1800 audit(1785186938.415:3): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.91" name="file1" dev="loop2" ino=1048602 res=0 errno=0 [ 108.780780][ T6274] loop4: detected capacity change from 0 to 512 [ 108.810735][ T6274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.961255][ T6279] loop2: detected capacity change from 0 to 512 [ 109.024511][ T6279] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 109.063235][ T6279] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 109.085954][ T6279] System zones: 1-12 [ 109.094175][ T6279] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.121071][ T6279] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.95: invalid indirect mapped block 12 (level 1) [ 109.157797][ T6279] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.95: invalid indirect mapped block 2 (level 2) [ 109.190413][ T5898] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.206957][ T6279] EXT4-fs (loop2): 1 truncate cleaned up [ 109.225105][ T6279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 109.288518][ T6279] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 110.073736][ T6300] tipc: Started in network mode [ 110.091798][ T6300] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 110.750163][ T6310] capability: warning: `syz.4.106' uses deprecated v2 capabilities in a way that may be insecure [ 110.984672][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.210916][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.226350][ T6319] loop4: detected capacity change from 0 to 512 [ 111.237030][ T27] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 111.252232][ T6319] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.257966][ T27] usb 2-1: string descriptor 0 read error: -22 [ 111.278811][ T27] usb 2-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 111.298169][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.334225][ T6319] ------------[ cut here ]------------ [ 111.339836][ T6319] EA inode 11 i_nlink=0 [ 111.340094][ T6319] WARNING: CPU: 0 PID: 6319 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 111.355500][ T6319] Modules linked in: [ 111.359448][ T6319] CPU: 0 PID: 6319 Comm: syz.4.109 Not tainted syzkaller #0 [ 111.367097][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.377659][ T6319] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 111.384399][ T6319] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 c1 f5 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 7e 42 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 c8 d7 45 08 [ 111.404301][ T6319] RSP: 0018:ffffc9000336f360 EFLAGS: 00010246 [ 111.410425][ T6319] RAX: 7240b3f1df9aba00 RBX: ffff88805bd384a8 RCX: 0000000000080000 [ 111.418929][ T6319] RDX: ffffc900187d2000 RSI: 00000000000165a2 RDI: 00000000000165a3 [ 111.427208][ T6319] RBP: ffffc9000336f450 R08: ffffc9000336ef67 R09: 1ffff9200066ddec [ 111.435464][ T6319] R10: dffffc0000000000 R11: fffff5200066dded R12: ffff88805bd38300 [ 111.443566][ T6319] R13: ffffc9000336f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 111.451571][ T6319] FS: 00007f68584ae6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 111.461380][ T6319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.468392][ T6319] CR2: 00007ff0c2025fac CR3: 000000007915b000 CR4: 00000000003506f0 [ 111.476993][ T6319] Call Trace: [ 111.480307][ T6319] [ 111.483309][ T6319] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 111.488989][ T6319] ? __ext4_journal_ensure_credits+0x30/0x450 [ 111.495169][ T6319] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 111.501207][ T6319] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 111.507033][ T6319] ? __ext4_journal_ensure_credits+0x450/0x450 [ 111.513302][ T6319] ext4_xattr_delete_inode+0xb3b/0xd00 [ 111.518813][ T6319] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 111.524989][ T6319] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 111.530672][ T6319] ext4_evict_inode+0xa88/0xe70 [ 111.535615][ T6319] ? evict+0x482/0x8a0 [ 111.539727][ T6319] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 111.545718][ T6319] ? do_raw_spin_unlock+0x121/0x230 [ 111.550953][ T6319] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 111.556965][ T6319] evict+0x4b7/0x8a0 [ 111.561686][ T6319] ? __lock_acquire+0x7d80/0x7d80 [ 111.566935][ T6319] ? proc_nr_inodes+0x230/0x230 [ 111.571824][ T6319] ? do_raw_spin_unlock+0x121/0x230 [ 111.577122][ T6319] ? _raw_spin_unlock+0x28/0x40 [ 111.582019][ T6319] ext4_orphan_cleanup+0xc33/0x1470 [ 111.587300][ T6319] ? ext4_orphan_del+0xc90/0xc90 [ 111.592271][ T6319] ? ext4_register_li_request+0x182/0x930 [ 111.598116][ T6319] ? errseq_check_and_advance+0x66/0x120 [ 111.603917][ T6319] ext4_fill_super+0x5fb5/0x6870 [ 111.608924][ T6319] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 111.615280][ T6319] ? __might_sleep+0xe0/0xe0 [ 111.619911][ T6319] ? read_lock_is_recursive+0x20/0x20 [ 111.625387][ T6319] ? snprintf+0xe9/0x140 [ 111.629688][ T6319] ? down_read_killable+0x340/0x340 [ 111.635541][ T6319] ? setup_bdev_super+0x56b/0x660 [ 111.640611][ T6319] get_tree_bdev+0x3e5/0x520 [ 111.645442][ T6319] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 111.651733][ T6319] ? setup_bdev_super+0x660/0x660 [ 111.656932][ T6319] ? apparmor_capable+0x137/0x1a0 [ 111.662775][ T6319] ? bpf_lsm_capable+0x9/0x10 [ 111.667667][ T6319] ? security_capable+0x89/0xb0 [ 111.672586][ T6319] vfs_get_tree+0x8c/0x280 [ 111.677106][ T6319] do_new_mount+0x24a/0xa40 [ 111.681649][ T6319] __se_sys_mount+0x2e7/0x3d0 [ 111.686436][ T6319] ? __x64_sys_mount+0xc0/0xc0 [ 111.691235][ T6319] ? lockdep_hardirqs_on+0x98/0x150 [ 111.696508][ T6319] ? __x64_sys_mount+0x20/0xc0 [ 111.701303][ T6319] do_syscall_64+0x55/0xb0 [ 111.705784][ T6319] ? clear_bhb_loop+0x40/0x90 [ 111.710489][ T6319] ? clear_bhb_loop+0x40/0x90 [ 111.715262][ T6319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.721197][ T6319] RIP: 0033:0x7f685759f10a [ 111.725693][ T6319] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.745433][ T6319] RSP: 002b:00007f68584ade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.753959][ T6319] RAX: ffffffffffffffda RBX: 00007f68584adee0 RCX: 00007f685759f10a [ 111.762591][ T6319] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f68584adea0 [ 111.771059][ T6319] RBP: 0000200000000180 R08: 00007f68584adee0 R09: 0000000000000000 [ 111.779165][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 111.787323][ T6319] R13: 00007f68584adea0 R14: 0000000000000497 R15: 00002000000001c0 [ 111.795659][ T6319] [ 111.798708][ T6319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.806002][ T6319] CPU: 0 PID: 6319 Comm: syz.4.109 Not tainted syzkaller #0 [ 111.813338][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.823422][ T6319] Call Trace: [ 111.826763][ T6319] [ 111.829710][ T6319] dump_stack_lvl+0x18c/0x250 [ 111.834416][ T6319] ? show_regs_print_info+0x20/0x20 [ 111.839644][ T6319] ? load_image+0x420/0x420 [ 111.844190][ T6319] panic+0x2ca/0x720 [ 111.848116][ T6319] ? bpf_jit_dump+0xd0/0xd0 [ 111.852672][ T6319] __warn+0x2e0/0x470 [ 111.856689][ T6319] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 111.862705][ T6319] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 111.868722][ T6319] report_bug+0x2be/0x4f0 [ 111.873077][ T6319] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 111.879087][ T6319] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 111.885101][ T6319] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 111.891114][ T6319] handle_bug+0xcf/0x120 [ 111.895378][ T6319] exc_invalid_op+0x1a/0x50 [ 111.899906][ T6319] asm_exc_invalid_op+0x1a/0x20 [ 111.904780][ T6319] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 111.911429][ T6319] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 c1 f5 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 7e 42 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 c8 d7 45 08 [ 111.931062][ T6319] RSP: 0018:ffffc9000336f360 EFLAGS: 00010246 [ 111.937160][ T6319] RAX: 7240b3f1df9aba00 RBX: ffff88805bd384a8 RCX: 0000000000080000 [ 111.945147][ T6319] RDX: ffffc900187d2000 RSI: 00000000000165a2 RDI: 00000000000165a3 [ 111.953135][ T6319] RBP: ffffc9000336f450 R08: ffffc9000336ef67 R09: 1ffff9200066ddec [ 111.961162][ T6319] R10: dffffc0000000000 R11: fffff5200066dded R12: ffff88805bd38300 [ 111.969163][ T6319] R13: ffffc9000336f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 111.977194][ T6319] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 111.982864][ T6319] ? __ext4_journal_ensure_credits+0x30/0x450 [ 111.988968][ T6319] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 111.994994][ T6319] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 112.000656][ T6319] ? __ext4_journal_ensure_credits+0x450/0x450 [ 112.006849][ T6319] ext4_xattr_delete_inode+0xb3b/0xd00 [ 112.012350][ T6319] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 112.018444][ T6319] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 112.024116][ T6319] ext4_evict_inode+0xa88/0xe70 [ 112.029001][ T6319] ? evict+0x482/0x8a0 [ 112.033108][ T6319] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 112.039036][ T6319] ? do_raw_spin_unlock+0x121/0x230 [ 112.044269][ T6319] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 112.050194][ T6319] evict+0x4b7/0x8a0 [ 112.054115][ T6319] ? __lock_acquire+0x7d80/0x7d80 [ 112.059164][ T6319] ? proc_nr_inodes+0x230/0x230 [ 112.064037][ T6319] ? do_raw_spin_unlock+0x121/0x230 [ 112.069272][ T6319] ? _raw_spin_unlock+0x28/0x40 [ 112.074161][ T6319] ext4_orphan_cleanup+0xc33/0x1470 [ 112.079506][ T6319] ? ext4_orphan_del+0xc90/0xc90 [ 112.084487][ T6319] ? ext4_register_li_request+0x182/0x930 [ 112.090332][ T6319] ? errseq_check_and_advance+0x66/0x120 [ 112.095998][ T6319] ext4_fill_super+0x5fb5/0x6870 [ 112.100995][ T6319] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 112.107264][ T6319] ? __might_sleep+0xe0/0xe0 [ 112.111879][ T6319] ? read_lock_is_recursive+0x20/0x20 [ 112.117364][ T6319] ? snprintf+0xe9/0x140 [ 112.121646][ T6319] ? down_read_killable+0x340/0x340 [ 112.126891][ T6319] ? setup_bdev_super+0x56b/0x660 [ 112.132041][ T6319] get_tree_bdev+0x3e5/0x520 [ 112.136689][ T6319] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 112.142971][ T6319] ? setup_bdev_super+0x660/0x660 [ 112.148028][ T6319] ? apparmor_capable+0x137/0x1a0 [ 112.153093][ T6319] ? bpf_lsm_capable+0x9/0x10 [ 112.157810][ T6319] ? security_capable+0x89/0xb0 [ 112.162690][ T6319] vfs_get_tree+0x8c/0x280 [ 112.167169][ T6319] do_new_mount+0x24a/0xa40 [ 112.171706][ T6319] __se_sys_mount+0x2e7/0x3d0 [ 112.176418][ T6319] ? __x64_sys_mount+0xc0/0xc0 [ 112.181211][ T6319] ? lockdep_hardirqs_on+0x98/0x150 [ 112.186438][ T6319] ? __x64_sys_mount+0x20/0xc0 [ 112.191241][ T6319] do_syscall_64+0x55/0xb0 [ 112.195735][ T6319] ? clear_bhb_loop+0x40/0x90 [ 112.200435][ T6319] ? clear_bhb_loop+0x40/0x90 [ 112.205133][ T6319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.211054][ T6319] RIP: 0033:0x7f685759f10a [ 112.215510][ T6319] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.235585][ T6319] RSP: 002b:00007f68584ade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.244123][ T6319] RAX: ffffffffffffffda RBX: 00007f68584adee0 RCX: 00007f685759f10a [ 112.252227][ T6319] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f68584adea0 [ 112.260315][ T6319] RBP: 0000200000000180 R08: 00007f68584adee0 R09: 0000000000000000 [ 112.268299][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 112.276292][ T6319] R13: 00007f68584adea0 R14: 0000000000000497 R15: 00002000000001c0 [ 112.284444][ T6319] [ 112.287907][ T6319] Kernel Offset: disabled [ 112.292361][ T6319] Rebooting in 86400 seconds..