last executing test programs: 1m55.849725586s ago: executing program 0 (id=45): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) futex(&(0x7f000000cffc)=0x840000, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4ffffef) 1m43.589243631s ago: executing program 0 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/pool_threads\x00', 0x2, 0x0) read(r0, 0x0, 0xff7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) chroot(&(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409/product\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xf, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x3, 'hub\x00'}) syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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") r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) read$FUSE(r1, 0x0, 0x0) 1m42.723938644s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x4040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x89e1, 0x0) 1m39.936187796s ago: executing program 0 (id=77): socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/77, 0x4d) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004844}, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0xfffffffffffffee3, 0x1, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r3, 0x0, 0x0, 0x8000, 0x0, 0x0) 1m38.515734313s ago: executing program 0 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000004000000000000000000000000000000000000000080000000647d68fa2f638b1bc937fe8808aea55070d58cd2dde7f33f8f70badc6d3b33dc3220e43e3847fd48b398c4f62efee143cdf38666e9f69ccb"], 0x48) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000200)='S', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) 1m36.690620485s ago: executing program 0 (id=87): socket$kcm(0x11, 0x200000000000003, 0x300) socket$kcm(0xa, 0x3, 0x3a) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) 1m20.718645722s ago: executing program 32 (id=87): socket$kcm(0x11, 0x200000000000003, 0x300) socket$kcm(0xa, 0x3, 0x3a) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) 1m10.059431273s ago: executing program 1 (id=128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x8000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 1m7.963773416s ago: executing program 1 (id=131): prctl$PR_SET_MM(0xd, 0x0, &(0x7f0000004000/0x3000)=nil) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="19ff00ff0300"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$cgroup2(0x0, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', &(0x7f0000000140), 0x2, 0x0) socket(0x10, 0x3, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m1.532410058s ago: executing program 1 (id=138): openat(0xffffffffffffff9c, 0x0, 0x0, 0x139) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl(0xffffffffffffffff, 0x3b8e, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) socket$netlink(0x10, 0x3, 0x0) 58.455067893s ago: executing program 1 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mkdir(0x0, 0x1ff) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000280)=""/242, 0xf2, 0x10000, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00', 0x1000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 55.836932098s ago: executing program 1 (id=143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$MSR(0x0, 0x6, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x6a040300) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0xffffffff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) 48.982550329s ago: executing program 1 (id=150): socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) userfaultfd(0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7) 33.194176447s ago: executing program 33 (id=150): socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) userfaultfd(0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7) 15.101204482s ago: executing program 2 (id=198): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 12.458305734s ago: executing program 2 (id=200): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{}, 0x6}}}, 0x7) 9.924612468s ago: executing program 3 (id=205): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) ftruncate(0xffffffffffffffff, 0x8008976) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9.069421051s ago: executing program 4 (id=206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000001a2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000500)={0x1, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x0, 0x38}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 7.905664986s ago: executing program 3 (id=207): syz_usb_connect(0x5, 0x78, &(0x7f0000001b80)={{0x12, 0x1, 0x201, 0xdc, 0x86, 0xb1, 0x8, 0x97b, 0x61f6, 0xd49a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0xa, 0xff, 0xb0, 0x1, "", [{{0x9, 0x4, 0x5b, 0x1, 0x1, 0xe, 0x1, 0x1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x40, 0x1f}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x9, 0x3, 0xf, 0x41}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x6, 0xa}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x5, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x1}]}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x0, 0x1, 0x6}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x0, 0x4, 0x10, 0x5e}, 0x8, &(0x7f0000002280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x0, 0x0}, {0x84, &(0x7f00000023c0)=@string={0x84, 0x3, "c5c9b2b1d0a696b468672bb1bfef3dabc1b42a39f87cb226cf8aa9efe948a9b252bcf901ff4ca4cc8e6a3158e5c90d842799057476e83b5bf4a7ae30e8599cf3a1ace36b3aaffd99068be2bc3530d381be0b145b725bd0c69fd097a34e18f9446511e0e9bb67545e47556d47a1d5216d9518b6505157f81dc753722112b29ab2e581"}}, {0xdc, &(0x7f00000024c0)=@string={0xdc, 0x3, "82805ec0b009e49e78a6f67b8c0975ee01ae8b560a190de5a7ac4c79f899fc2530a2db8bd5dfca6760febec0adeaaa142d02cf28ff44a7aeba663e9bafcf997fbaf48d2f3577697dd60633a2246f45ffd93379e4fe9204f184378b1222fcf66235087265d17bd1c9be1ed849739b31716896864726e13f334660451d55a05a52bdb555b03557e8a8c6f5f20f703675eaec58beebe9f4060518c0cf36060da486447e1037fe20f6efaab3666050bd2c24761ad314f83bd106521687ec75e9296e1aade1e82b2123516c5561cc218e41b8bba506b2c7bf4b7810d9"}}]}) 7.765763403s ago: executing program 4 (id=208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.712530588s ago: executing program 5 (id=209): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) select(0x40, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2, 0x9, 0x9, 0x9, 0x10003}, 0x0, &(0x7f00000009c0)={0x8, 0x280a, 0x6, 0x400, 0x87d0, 0x4, 0x90, 0x8}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, &(0x7f0000000300)) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000a25000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) 7.419481591s ago: executing program 2 (id=210): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x0, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e8, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x6, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0xffffc2a8, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93694, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x1ff, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="02030003130000002bbd7000fcdbdf2503000700102000000a"], 0x98}, 0x1, 0x7}, 0x4) fchdir(0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') readv(r4, &(0x7f0000000140)=[{&(0x7f0000000200)=""/213, 0xd5}, {0x0}], 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x9) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000000000b00000000000000000100000d0000000000000000030000000000000c00000009030000000000"], 0x0, 0x46, 0x0, 0xa}, 0x28) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x20, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6.685511265s ago: executing program 4 (id=211): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) msync(&(0x7f0000bc9000/0x2000)=nil, 0x2000, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x13) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="080028bd7000ffdbdf250100000000000000014100000000000000000000050000936574683a65727370616e3000"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 6.506068235s ago: executing program 5 (id=212): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) msync(&(0x7f0000bc9000/0x2000)=nil, 0x2000, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r2 = socket$netlink(0x10, 0x3, 0x13) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="080028bd7000ffdbdf250100000000000000014100000000000000000000050000936574683a65727370616e3000"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 6.404907459s ago: executing program 2 (id=213): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xffffff78, 0x1, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x5, 0xa, 0x0, 0x6, 0x20000, 0x0}) 5.963717644s ago: executing program 2 (id=214): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3c1, 0x0, 0x14a, 0xa}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xef89, 0x7fa, 0xb2, "35969809006e24a7446d8073145e6c31c267a0", 0x100, 0x200008}) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) r5 = syz_open_dev$loop(0x0, 0x0, 0x22000) ioctl$BLKTRACESETUP(r5, 0xc0481273, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r7 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.819535529s ago: executing program 5 (id=221): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f00000005c0)={[{@data_err_abort}, {@sb={'sb', 0x3d, 0x1}}], [{@uid_gt}, {@subj_type={'subj_type', 0x3d, '#)&'}}]}, 0x4, 0x52c, &(0x7f0000001240)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$assume_authority(0x10, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x43f, 0x6, 0x80c20048}) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001900010000000000000000000a0000000000c8000000000033c54c8b1b2a72182cdf1ddfff6923250ace50c94b63678389e5316b75b7dd93d877df144bf5dea4a89fe7fa93cfa166c6308ef1d29408af0f11203dbd38054129fa998e997add1e1271"], 0x1c}}, 0x0) unshare(0x2c020400) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000700)=""/183, 0xb7) 3.686014916s ago: executing program 4 (id=222): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) select(0x40, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2, 0x9, 0x9, 0x9, 0x10003}, 0x0, &(0x7f00000009c0)={0x8, 0x280a, 0x6, 0x400, 0x87d0, 0x4, 0x90, 0x8}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, &(0x7f0000000300)) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000a25000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) 1.85380023s ago: executing program 3 (id=223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="b7020000020000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000950000000000000056ac7c82c7"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xe, 0x0, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.090920034s ago: executing program 5 (id=224): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x2, &(0x7f0000000040), &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0xe, 0xb}) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000540)=0x5, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) fcntl$setstatus(r6, 0x4, 0x400) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 1.036402747s ago: executing program 3 (id=225): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r5, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) 0s ago: executing program 4 (id=226): socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, 0x0, 0x44) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2c, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 74.814088][ T5598] cgroup: Unknown subsys name 'net' [ 74.899061][ T5598] cgroup: Unknown subsys name 'cpuset' [ 74.903111][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.386702][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.394296][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.451734][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.452129][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.453637][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.453972][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.454299][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.455148][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.456576][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.457321][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.458405][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.460088][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.460659][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.461231][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.461983][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.463161][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.463412][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.463696][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.465992][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.466193][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.467907][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.473506][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.480520][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.494086][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.494596][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.495088][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.495775][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.503779][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.516674][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.517347][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.518548][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.527875][ T5623] Bluetooth: hci5: command tx timeout [ 82.528086][ T5617] Bluetooth: hci0: command tx timeout [ 82.606334][ T5623] Bluetooth: hci1: command tx timeout [ 82.606360][ T5625] Bluetooth: hci3: command tx timeout [ 82.606488][ T5623] Bluetooth: hci2: command tx timeout [ 82.606880][ T5617] Bluetooth: hci4: command tx timeout [ 83.143587][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.143759][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.143891][ T5615] bridge_slave_0: entered allmulticast mode [ 83.148382][ T5615] bridge_slave_0: entered promiscuous mode [ 83.168143][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.168255][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.168411][ T5618] bridge_slave_0: entered allmulticast mode [ 83.170984][ T5618] bridge_slave_0: entered promiscuous mode [ 83.174530][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.174991][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.175124][ T5618] bridge_slave_1: entered allmulticast mode [ 83.177204][ T5618] bridge_slave_1: entered promiscuous mode [ 83.255334][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.255445][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.255553][ T5615] bridge_slave_1: entered allmulticast mode [ 83.257070][ T5615] bridge_slave_1: entered promiscuous mode [ 83.297379][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.297488][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.297609][ T5614] bridge_slave_0: entered allmulticast mode [ 83.299442][ T5614] bridge_slave_0: entered promiscuous mode [ 83.363062][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.363396][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.363791][ T5614] bridge_slave_1: entered allmulticast mode [ 83.366241][ T5614] bridge_slave_1: entered promiscuous mode [ 83.401317][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.431173][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.479286][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.498350][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.525893][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.526110][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.526423][ T5613] bridge_slave_0: entered allmulticast mode [ 83.527979][ T5613] bridge_slave_0: entered promiscuous mode [ 83.531388][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.531504][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.531637][ T5613] bridge_slave_1: entered allmulticast mode [ 83.533952][ T5613] bridge_slave_1: entered promiscuous mode [ 83.597479][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.597581][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.597749][ T5612] bridge_slave_0: entered allmulticast mode [ 83.599588][ T5612] bridge_slave_0: entered promiscuous mode [ 83.604471][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.625295][ T5615] team0: Port device team_slave_0 added [ 83.628612][ T5615] team0: Port device team_slave_1 added [ 83.628816][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.628945][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.629083][ T5616] bridge_slave_0: entered allmulticast mode [ 83.631589][ T5616] bridge_slave_0: entered promiscuous mode [ 83.635596][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.635731][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.636139][ T5616] bridge_slave_1: entered allmulticast mode [ 83.638252][ T5616] bridge_slave_1: entered promiscuous mode [ 83.673877][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.673995][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.674157][ T5612] bridge_slave_1: entered allmulticast mode [ 83.677679][ T5612] bridge_slave_1: entered promiscuous mode [ 83.744499][ T5618] team0: Port device team_slave_0 added [ 83.761484][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.763983][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.784251][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.788258][ T5618] team0: Port device team_slave_1 added [ 83.805933][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.806956][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.806970][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.806996][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.843961][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.880132][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.900624][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.900642][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.900668][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.921241][ T5614] team0: Port device team_slave_0 added [ 83.943169][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.943188][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.943217][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.956667][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.005865][ T5613] team0: Port device team_slave_0 added [ 84.009441][ T5614] team0: Port device team_slave_1 added [ 84.028349][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.028369][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.028404][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.050824][ T5612] team0: Port device team_slave_0 added [ 84.057763][ T5613] team0: Port device team_slave_1 added [ 84.099703][ T5616] team0: Port device team_slave_0 added [ 84.118410][ T5612] team0: Port device team_slave_1 added [ 84.144454][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.144469][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.144495][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.149882][ T5616] team0: Port device team_slave_1 added [ 84.201514][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.201528][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.201550][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.235404][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.235423][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.235449][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.290474][ T5615] hsr_slave_0: entered promiscuous mode [ 84.292339][ T5615] hsr_slave_1: entered promiscuous mode [ 84.332052][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.332073][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.332103][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.333859][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.333873][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.333899][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.363691][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.363710][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.363739][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.385101][ T5618] hsr_slave_0: entered promiscuous mode [ 84.386290][ T5618] hsr_slave_1: entered promiscuous mode [ 84.387203][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 84.387279][ T5618] Cannot create hsr debugfs directory [ 84.388780][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.388795][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.388824][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.428887][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.428908][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.428949][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.518806][ T5614] hsr_slave_0: entered promiscuous mode [ 84.519957][ T5614] hsr_slave_1: entered promiscuous mode [ 84.520759][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 84.520779][ T5614] Cannot create hsr debugfs directory [ 84.604870][ T52] Bluetooth: hci5: command tx timeout [ 84.604960][ T5617] Bluetooth: hci0: command tx timeout [ 84.684727][ T52] Bluetooth: hci1: command tx timeout [ 84.684815][ T5617] Bluetooth: hci3: command tx timeout [ 84.691112][ T5616] hsr_slave_0: entered promiscuous mode [ 84.691914][ T5616] hsr_slave_1: entered promiscuous mode [ 84.692555][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 84.692575][ T5616] Cannot create hsr debugfs directory [ 84.694768][ T52] Bluetooth: hci2: command tx timeout [ 84.694847][ T5617] Bluetooth: hci4: command tx timeout [ 84.815877][ T5612] hsr_slave_0: entered promiscuous mode [ 84.816787][ T5612] hsr_slave_1: entered promiscuous mode [ 84.817376][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 84.817403][ T5612] Cannot create hsr debugfs directory [ 84.861153][ T5613] hsr_slave_0: entered promiscuous mode [ 84.861995][ T5613] hsr_slave_1: entered promiscuous mode [ 84.862568][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 84.862589][ T5613] Cannot create hsr debugfs directory [ 85.475203][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.483478][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.500021][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.507658][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.508733][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.517358][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.533906][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.541988][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.585229][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.594872][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.613497][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.625502][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.626576][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.630777][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.631764][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.635701][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.736326][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.740268][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.742628][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.746916][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.776520][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.780682][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.781477][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.787562][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.922582][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.928311][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.942566][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.948767][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.951294][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.963995][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.990612][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.993029][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.998958][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.091647][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.131399][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.132520][ T10] cfg80211: failed to load regulatory.db [ 86.138688][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.165830][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.166389][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.169717][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.174143][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.223596][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.230536][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.236747][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.263676][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.270916][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.277887][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.277999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.282249][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.307793][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.313560][ T5613] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.324997][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.344957][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.345061][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.350539][ T5613] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.353328][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.354100][ T5613] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.369491][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.408785][ T5613] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.412183][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.417254][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.417357][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.502796][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.559319][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.559426][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.562836][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.562939][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.600586][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.685041][ T52] Bluetooth: hci5: command tx timeout [ 86.685139][ T5617] Bluetooth: hci0: command tx timeout [ 86.769836][ T52] Bluetooth: hci2: command tx timeout [ 86.769874][ T52] Bluetooth: hci3: command tx timeout [ 86.769900][ T52] Bluetooth: hci1: command tx timeout [ 86.770056][ T5617] Bluetooth: hci4: command tx timeout [ 86.774345][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.820094][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.820203][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.863506][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.863615][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.871486][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.974161][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.029134][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.074172][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.074313][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.123759][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.142960][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.143071][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.187084][ T640] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.187193][ T640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.212098][ T640] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.212207][ T640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.021424][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.283794][ T5615] veth0_vlan: entered promiscuous mode [ 88.308944][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.372448][ T5615] veth1_vlan: entered promiscuous mode [ 88.388497][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.620125][ T5615] veth0_macvtap: entered promiscuous mode [ 88.638769][ T5614] veth0_vlan: entered promiscuous mode [ 88.673070][ T5615] veth1_macvtap: entered promiscuous mode [ 88.696300][ T5614] veth1_vlan: entered promiscuous mode [ 88.748339][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.765397][ T5623] Bluetooth: hci5: command tx timeout [ 88.765449][ T5617] Bluetooth: hci0: command tx timeout [ 88.773116][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.817848][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.845746][ T5623] Bluetooth: hci1: command tx timeout [ 88.845783][ T5623] Bluetooth: hci3: command tx timeout [ 88.845809][ T5623] Bluetooth: hci2: command tx timeout [ 88.845876][ T5617] Bluetooth: hci4: command tx timeout [ 88.921195][ T5614] veth0_macvtap: entered promiscuous mode [ 88.945658][ T1365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.949905][ T5614] veth1_macvtap: entered promiscuous mode [ 89.056898][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.061515][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.089854][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.127673][ T5616] veth0_vlan: entered promiscuous mode [ 89.133328][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.217289][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.217345][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.262988][ T5616] veth1_vlan: entered promiscuous mode [ 89.322000][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.322026][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.475209][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.475260][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.475307][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.475349][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.475390][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.521068][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.521091][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.567415][ T5618] veth0_vlan: entered promiscuous mode [ 89.573448][ T5612] veth0_vlan: entered promiscuous mode [ 89.590630][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.590651][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.638440][ T5616] veth0_macvtap: entered promiscuous mode [ 89.646116][ T5618] veth1_vlan: entered promiscuous mode [ 89.654254][ T5612] veth1_vlan: entered promiscuous mode [ 89.662547][ T5616] veth1_macvtap: entered promiscuous mode [ 89.684705][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.760960][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.760984][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.796972][ T5850] loop0: detected capacity change from 0 to 128 [ 89.823018][ T5613] veth0_vlan: entered promiscuous mode [ 89.836064][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.885607][ T5850] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.890052][ T5850] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.952669][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.953160][ T5613] veth1_vlan: entered promiscuous mode [ 90.007690][ T5618] veth0_macvtap: entered promiscuous mode [ 90.014074][ T5612] veth0_macvtap: entered promiscuous mode [ 90.052210][ T5612] veth1_macvtap: entered promiscuous mode [ 90.089111][ T5615] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.089754][ T5618] veth1_macvtap: entered promiscuous mode [ 90.105646][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.106607][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.106651][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.106693][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.044495][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.307520][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.368358][ T5613] veth0_macvtap: entered promiscuous mode [ 91.395773][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.405599][ T640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.405670][ T640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.405733][ T640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.405799][ T640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.183287][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.183308][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.341389][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.341416][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.520420][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.545335][ T5613] veth1_macvtap: entered promiscuous mode [ 93.424682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.537737][ T5875] loop2: detected capacity change from 0 to 40427 [ 94.596943][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.596994][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.597025][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.597056][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.597637][ T5875] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 94.597663][ T5875] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.787024][ T5875] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 94.833035][ T5875] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.833132][ T5875] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.851231][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.851254][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.890257][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.891925][ T5874] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 94.928552][ T5878] loop0: detected capacity change from 0 to 2048 [ 95.190595][ T5875] syz.2.3: attempt to access beyond end of device [ 95.190595][ T5875] loop2: rw=2049, sector=45096, nr_sectors = 2048 limit=40427 [ 95.200950][ T5875] syz.2.3: attempt to access beyond end of device [ 95.200950][ T5875] loop2: rw=2049, sector=47144, nr_sectors = 2048 limit=40427 [ 95.210782][ T5875] syz.2.3: attempt to access beyond end of device [ 95.210782][ T5875] loop2: rw=2049, sector=49192, nr_sectors = 2048 limit=40427 [ 95.221010][ T5875] syz.2.3: attempt to access beyond end of device [ 95.221010][ T5875] loop2: rw=2049, sector=51240, nr_sectors = 2008 limit=40427 [ 95.222267][ T5875] syz.2.3: attempt to access beyond end of device [ 95.222267][ T5875] loop2: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 95.231443][ T5875] syz.2.3: attempt to access beyond end of device [ 95.231443][ T5875] loop2: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 95.241677][ T5875] syz.2.3: attempt to access beyond end of device [ 95.241677][ T5875] loop2: rw=2049, sector=59392, nr_sectors = 2048 limit=40427 [ 95.251818][ T5875] syz.2.3: attempt to access beyond end of device [ 95.251818][ T5875] loop2: rw=2049, sector=61440, nr_sectors = 2048 limit=40427 [ 95.262107][ T5875] syz.2.3: attempt to access beyond end of device [ 95.262107][ T5875] loop2: rw=2049, sector=63488, nr_sectors = 2048 limit=40427 [ 95.273752][ T5875] syz.2.3: attempt to access beyond end of device [ 95.273752][ T5875] loop2: rw=2049, sector=65536, nr_sectors = 2048 limit=40427 [ 95.711671][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.751301][ T5885] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.842572][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.842608][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.926182][ T5886] syz_tun: entered allmulticast mode [ 95.931142][ T31] audit: type=1800 audit(1791505725.810:2): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="bus" dev="loop0" ino=2097153 res=0 errno=0 [ 95.980651][ T5888] pimreg: entered allmulticast mode [ 96.013414][ T5878] loop0: detected capacity change from 2048 to 0 [ 96.055244][ T1340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.077555][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 96.077582][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.077594][ T5868] Call Trace: [ 96.077602][ T5868] [ 96.077610][ T5868] dump_stack_lvl+0xe8/0x150 [ 96.077643][ T5868] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 96.077678][ T5868] f2fs_write_end_bio+0x1211/0x16e0 [ 96.077703][ T5868] ? blkg_put+0x22/0x240 [ 96.077745][ T5868] __submit_merged_bio+0x258/0x6a0 [ 96.077774][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.077796][ T5868] ? rcu_is_watching+0x16/0xb0 [ 96.077825][ T5868] f2fs_submit_merged_write+0x27d/0x380 [ 96.077860][ T5868] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 96.077903][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.077932][ T5868] f2fs_sync_node_pages+0x1055/0x1210 [ 96.077961][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078000][ T5868] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 96.078058][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078088][ T5868] f2fs_write_checkpoint+0xf91/0x2710 [ 96.078140][ T5868] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 96.078161][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078229][ T5868] f2fs_gc+0x905/0x25b0 [ 96.078252][ T5868] ? check_noncircular+0xdb/0x150 [ 96.078304][ T5868] ? __pfx_f2fs_gc+0x10/0x10 [ 96.078341][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078375][ T5868] ? __pfx_f2fs_submit_all_merged_ipu_writes+0x10/0x10 [ 96.078408][ T5868] ? rcu_is_watching+0x16/0xb0 [ 96.078432][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078458][ T5868] f2fs_balance_fs+0x61c/0x810 [ 96.078477][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078507][ T5868] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 96.078529][ T5868] ? __pfx_f2fs_convert_inline_inode+0x10/0x10 [ 96.078557][ T5868] ? rcu_is_watching+0x16/0xb0 [ 96.078591][ T5868] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 96.078627][ T5868] f2fs_vm_page_mkwrite+0x61c/0x1580 [ 96.078667][ T5868] ? __pfx_f2fs_vm_page_mkwrite+0x10/0x10 [ 96.078701][ T5868] ? rcu_is_watching+0x16/0xb0 [ 96.078724][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078750][ T5868] do_page_mkwrite+0x147/0x310 [ 96.078777][ T5868] do_pte_missing+0x757/0x34b0 [ 96.078805][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078829][ T5868] ? handle_mm_fault+0xf1/0x3750 [ 96.078861][ T5868] handle_mm_fault+0x1a53/0x3750 [ 96.078889][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.078925][ T5868] ? handle_mm_fault+0xf1/0x3750 [ 96.078963][ T5868] ? __pfx_handle_mm_fault+0x10/0x10 [ 96.078989][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.079024][ T5868] ? clockevents_program_event+0x491/0x630 [ 96.079055][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.079076][ T5868] ? lock_mm_and_find_vma+0xa7/0x340 [ 96.079099][ T5868] do_user_addr_fault+0x746/0x1340 [ 96.079133][ T5868] exc_page_fault+0x6a/0xc0 [ 96.079163][ T5868] asm_exc_page_fault+0x26/0x30 [ 96.079181][ T5868] RIP: 0033:0x7f015056c908 [ 96.079199][ T5868] Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 [ 96.079214][ T5868] RSP: 002b:00007ffdc5206e88 EFLAGS: 00010246 [ 96.079231][ T5868] RAX: 00002000000000c0 RBX: 0000000000000004 RCX: 0030656c69662f2e [ 96.079244][ T5868] RDX: 0000000000000008 RSI: 0030656c69662f2e RDI: 00002000000000c0 [ 96.079256][ T5868] RBP: fffffffffffffffe R08: 0000001b32820000 R09: 0000000000000001 [ 96.079269][ T5868] R10: 7ffffffffffffff7 R11: 0000000000000009 R12: 00007ffdc5206fb0 [ 96.079282][ T5868] R13: 00007f015082609c R14: 0000000000016f3c R15: 00007f0150826090 [ 96.079311][ T5868] [ 96.094908][ T5868] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 96.176973][ T5885] NILFS (loop0): I/O error writing log (start-blocknr=53, block-count=11) in segment 3 [ 96.178246][ T5885] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=5) in segment 4 [ 96.193276][ T5885] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.196903][ T5885] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.198805][ T5885] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.200826][ T5885] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.204534][ T5885] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.264067][ T5878] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.300155][ T5884] syz_tun: left allmulticast mode [ 96.300723][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.301722][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.301767][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.304250][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.304269][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.318466][ T5878] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.422441][ T5878] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.429378][ T5878] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=15) in segment 4 [ 96.429559][ T5878] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 96.448311][ T5878] Buffer I/O error on dev loop0, logical block 1020, lost sync page write [ 96.448337][ T5878] NILFS (loop0): unable to write superblock: err=-5 [ 96.448365][ T5878] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 96.448382][ T5878] NILFS (loop0): unable to write superblock: err=-5 [ 96.663334][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.663358][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.826301][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.826324][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.914826][ T5873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.914850][ T5873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.007232][ T5740] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.056882][ T5898] tipc: Enabling of bearer rejected, failed to enable media [ 97.174650][ T5740] usb 5-1: Using ep0 maxpacket: 8 [ 97.175876][ T5740] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 97.182575][ T5740] usb 5-1: config 64 interface 0 has no altsetting 0 [ 97.207490][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.207519][ T5740] usb 5-1: Product: syz [ 97.207537][ T5740] usb 5-1: Manufacturer: syz [ 97.207554][ T5740] usb 5-1: SerialNumber: syz [ 98.955045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.170896][ T5740] snd_usb_toneport 5-1:64.0: Line 6 TonePort UX2 found [ 100.085896][ T5740] snd_usb_toneport 5-1:64.0: set_interface failed [ 100.087025][ T5740] snd_usb_toneport 5-1:64.0: Line 6 TonePort UX2 now disconnected [ 100.098612][ T5740] snd_usb_toneport 5-1:64.0: probe with driver snd_usb_toneport failed with error -71 [ 100.221561][ T5740] usb 5-1: USB disconnect, device number 2 [ 100.268198][ T13] IPVS: starting estimator thread 0... [ 100.349398][ T5917] loop5: detected capacity change from 0 to 1024 [ 100.362522][ T5916] IPVS: using max 27 ests per chain, 64800 per kthread [ 100.471685][ T5917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.821119][ T5917] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.602283][ T5932] syzkaller0: entered promiscuous mode [ 101.602313][ T5932] syzkaller0: entered allmulticast mode [ 101.674084][ T5917] Unsupported ieee802154 address type: 0 [ 101.772467][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.169446][ T5961] fuse: fd is not a fuse device [ 104.468939][ T5962] loop5: detected capacity change from 0 to 32768 [ 105.404714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.815082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 106.220281][ T5956] loop1: detected capacity change from 0 to 512 [ 106.295887][ T5962] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 106.295920][ T5962] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 106.315034][ T5956] EXT4-fs (loop1): invalid journal inode [ 106.315118][ T5956] EXT4-fs (loop1): can't get journal size [ 106.376811][ T5956] EXT4-fs (loop1): 1 truncate cleaned up [ 106.401745][ T5962] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 106.409906][ T5956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.436395][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 106.436416][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 106.520198][ T5959] nvme nvme0: failed to connect socket: -512 [ 106.608775][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 172ms [ 106.612011][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 106.612503][ T5962] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.694435][ T5972] loop4: detected capacity change from 0 to 1024 [ 106.709298][ T5972] EXT4-fs: Ignoring removed orlov option [ 106.824048][ T5972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.132289][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.245310][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.461344][ T6006] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 110.461375][ T6006] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.463194][ T6006] vhci_hcd vhci_hcd.0: Device attached [ 110.470538][ T6009] vhci_hcd: connection closed [ 110.474428][ T12] vhci_hcd vhci_hcd.5: stop threads [ 110.476132][ T12] vhci_hcd vhci_hcd.5: release socket [ 110.476163][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 110.510725][ T6011] FAULT_INJECTION: forcing a failure. [ 110.510725][ T6011] name failslab, interval 1, probability 0, space 0, times 1 [ 110.510764][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.3.43 Not tainted syzkaller #0 PREEMPT(full) [ 110.510791][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.510806][ T6011] Call Trace: [ 110.510816][ T6011] [ 110.510827][ T6011] dump_stack_lvl+0xe8/0x150 [ 110.510870][ T6011] should_fail_ex+0x410/0x560 [ 110.510910][ T6011] should_failslab+0xa8/0x100 [ 110.510954][ T6011] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 110.510991][ T6011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.511033][ T6011] ? append_filter_err+0x33c/0x460 [ 110.511073][ T6011] ? append_filter_err+0x33c/0x460 [ 110.511122][ T6011] kmemdup_nul+0x36/0xf0 [ 110.511156][ T6011] append_filter_err+0x33c/0x460 [ 110.511208][ T6011] create_filter+0x110/0x180 [ 110.511255][ T6011] apply_event_filter+0x154/0x510 [ 110.511303][ T6011] event_filter_write+0x16f/0x220 [ 110.511335][ T6011] ? __pfx_event_filter_write+0x10/0x10 [ 110.511370][ T6011] vfs_write+0x296/0xba0 [ 110.511407][ T6011] ? __pfx_vfs_write+0x10/0x10 [ 110.511436][ T6011] ? __fget_files+0x2a/0x420 [ 110.511483][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.511514][ T6011] ? __fget_files+0x3a2/0x420 [ 110.511552][ T6011] ? __fget_files+0x2a/0x420 [ 110.511596][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.511631][ T6011] ksys_write+0x150/0x270 [ 110.511661][ T6011] ? __pfx_ksys_write+0x10/0x10 [ 110.511701][ T6011] do_syscall_64+0x166/0x520 [ 110.511740][ T6011] ? trace_irq_disable+0x3b/0x140 [ 110.511768][ T6011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.511801][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.511827][ T6011] RIP: 0033:0x7f6c54d9e1d9 [ 110.511850][ T6011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.511871][ T6011] RSP: 002b:00007f6c55cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.511898][ T6011] RAX: ffffffffffffffda RBX: 00007f6c55025fa0 RCX: 00007f6c54d9e1d9 [ 110.511917][ T6011] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 110.511934][ T6011] RBP: 00007f6c54e35888 R08: 0000000000000000 R09: 0000000000000000 [ 110.511950][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.511971][ T6011] R13: 00007f6c55026038 R14: 00007f6c55025fa0 R15: 00007ffc824b7648 [ 110.512011][ T6011] [ 110.593360][ T6003] loop4: detected capacity change from 0 to 40427 [ 110.610553][ T6003] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 110.610578][ T6003] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 111.344834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.754991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.115142][ T6003] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 112.150331][ T6003] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 112.150360][ T6003] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.526257][ T6003] bio_check_eod: 1015 callbacks suppressed [ 112.526283][ T6003] syz.4.41: attempt to access beyond end of device [ 112.526283][ T6003] loop4: rw=2049, sector=45096, nr_sectors = 2048 limit=40427 [ 112.539388][ T6003] syz.4.41: attempt to access beyond end of device [ 112.539388][ T6003] loop4: rw=2049, sector=47144, nr_sectors = 2048 limit=40427 [ 112.553382][ T6003] syz.4.41: attempt to access beyond end of device [ 112.553382][ T6003] loop4: rw=2049, sector=49192, nr_sectors = 2056 limit=40427 [ 112.566867][ T6003] syz.4.41: attempt to access beyond end of device [ 112.566867][ T6003] loop4: rw=2049, sector=51248, nr_sectors = 2000 limit=40427 [ 112.568612][ T6003] syz.4.41: attempt to access beyond end of device [ 112.568612][ T6003] loop4: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 112.582752][ T6003] syz.4.41: attempt to access beyond end of device [ 112.582752][ T6003] loop4: rw=2049, sector=57344, nr_sectors = 2232 limit=40427 [ 112.596910][ T6003] syz.4.41: attempt to access beyond end of device [ 112.596910][ T6003] loop4: rw=2049, sector=59576, nr_sectors = 2072 limit=40427 [ 112.610603][ T6003] syz.4.41: attempt to access beyond end of device [ 112.610603][ T6003] loop4: rw=2049, sector=61648, nr_sectors = 2048 limit=40427 [ 112.624486][ T6003] syz.4.41: attempt to access beyond end of device [ 112.624486][ T6003] loop4: rw=2049, sector=63696, nr_sectors = 2048 limit=40427 [ 112.638419][ T6003] syz.4.41: attempt to access beyond end of device [ 112.638419][ T6003] loop4: rw=2049, sector=65744, nr_sectors = 2048 limit=40427 [ 113.029453][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.4.41 Not tainted syzkaller #0 PREEMPT(full) [ 113.029489][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.029503][ T6002] Call Trace: [ 113.029513][ T6002] [ 113.029525][ T6002] dump_stack_lvl+0xe8/0x150 [ 113.029568][ T6002] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 113.029616][ T6002] f2fs_write_end_bio+0x1211/0x16e0 [ 113.029652][ T6002] ? blkg_put+0x22/0x240 [ 113.029713][ T6002] __submit_merged_bio+0x258/0x6a0 [ 113.029752][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.029782][ T6002] ? rcu_is_watching+0x16/0xb0 [ 113.029824][ T6002] f2fs_submit_merged_write+0x27d/0x380 [ 113.029873][ T6002] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 113.029932][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.029976][ T6002] f2fs_sync_node_pages+0x1055/0x1210 [ 113.030014][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.030079][ T6002] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 113.030170][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.030213][ T6002] f2fs_write_checkpoint+0xf91/0x2710 [ 113.030294][ T6002] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 113.030405][ T6002] f2fs_gc+0x905/0x25b0 [ 113.030483][ T6002] ? down_write+0x16b/0x200 [ 113.030511][ T6002] ? __pfx_f2fs_gc+0x10/0x10 [ 113.030566][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.030617][ T6002] ? __pfx_f2fs_submit_all_merged_ipu_writes+0x10/0x10 [ 113.030665][ T6002] ? rcu_is_watching+0x16/0xb0 [ 113.030697][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.030733][ T6002] f2fs_balance_fs+0x61c/0x810 [ 113.030765][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.030803][ T6002] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 113.030831][ T6002] ? __pfx_f2fs_convert_inline_inode+0x10/0x10 [ 113.030868][ T6002] ? rcu_is_watching+0x16/0xb0 [ 113.030925][ T6002] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 113.030979][ T6002] f2fs_vm_page_mkwrite+0x61c/0x1580 [ 113.031039][ T6002] ? __pfx_f2fs_vm_page_mkwrite+0x10/0x10 [ 113.031088][ T6002] ? rcu_is_watching+0x16/0xb0 [ 113.031121][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031158][ T6002] do_page_mkwrite+0x147/0x310 [ 113.031196][ T6002] do_pte_missing+0x757/0x34b0 [ 113.031236][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031271][ T6002] ? handle_mm_fault+0xf1/0x3750 [ 113.031318][ T6002] handle_mm_fault+0x1a53/0x3750 [ 113.031357][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031402][ T6002] ? handle_mm_fault+0xf1/0x3750 [ 113.031458][ T6002] ? __pfx_handle_mm_fault+0x10/0x10 [ 113.031495][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031556][ T6002] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031586][ T6002] ? lock_mm_and_find_vma+0xa7/0x340 [ 113.031619][ T6002] do_user_addr_fault+0x746/0x1340 [ 113.031672][ T6002] exc_page_fault+0x6a/0xc0 [ 113.031712][ T6002] asm_exc_page_fault+0x26/0x30 [ 113.031738][ T6002] RIP: 0033:0x7faad6d6c908 [ 113.031761][ T6002] Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 [ 113.031782][ T6002] RSP: 002b:00007ffe5affaf38 EFLAGS: 00010206 [ 113.031805][ T6002] RAX: 0000200000000100 RBX: 0000000000000004 RCX: 0063697274656d6d [ 113.031823][ T6002] RDX: 000000000000000b RSI: 7274656d6d797361 RDI: 0000200000000100 [ 113.031841][ T6002] RBP: fffffffffffffffe R08: 0000001b32a20000 R09: 0000000000000001 [ 113.031858][ T6002] R10: 7ffffffffffffff4 R11: 0000000000000009 R12: 00007ffe5affb060 [ 113.031876][ T6002] R13: 00007faad7025fac R14: 000000000001ae97 R15: 00007faad7025fa0 [ 113.031930][ T6002] [ 113.032418][ T6002] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 115.645540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 117.586650][ T6042] loop2: detected capacity change from 0 to 4096 [ 117.645078][ T6042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.167340][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.192048][ T6057] loop5: detected capacity change from 0 to 4096 [ 118.387934][ T6057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.658005][ T6060] loop3: detected capacity change from 0 to 40427 [ 118.698972][ T6060] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 118.698999][ T6060] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 118.701309][ T6060] F2FS-fs (loop3): invalid crc value [ 118.804893][ T6060] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 118.812257][ T6060] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 118.812288][ T6060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.170162][ T6069] bio_check_eod: 1014 callbacks suppressed [ 119.170213][ T6069] syz.3.54: attempt to access beyond end of device [ 119.170213][ T6069] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 119.687903][ T6066] loop2: detected capacity change from 0 to 128 [ 119.690087][ T5614] syz-executor: attempt to access beyond end of device [ 119.690087][ T5614] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.690659][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 119.690680][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.690691][ T5614] Call Trace: [ 119.690699][ T5614] [ 119.690708][ T5614] dump_stack_lvl+0xe8/0x150 [ 119.690742][ T5614] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 119.690778][ T5614] f2fs_write_end_bio+0x1211/0x16e0 [ 119.690805][ T5614] ? blkg_put+0x22/0x240 [ 119.690850][ T5614] __submit_merged_bio+0x258/0x6a0 [ 119.690879][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.690901][ T5614] ? rcu_is_watching+0x16/0xb0 [ 119.690933][ T5614] __submit_merged_write_cond+0x3c9/0x4e0 [ 119.690978][ T5614] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 119.691023][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691054][ T5614] f2fs_write_data_pages+0x2a27/0x36f0 [ 119.691074][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691096][ T5614] ? __lock_acquire+0x747/0x2de0 [ 119.691158][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.691225][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691248][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691278][ T5614] ? __bfs+0x153/0x290 [ 119.691305][ T5614] ? __pfx_hlock_conflict+0x10/0x10 [ 119.691346][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691381][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691403][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691424][ T5614] ? __lock_acquire+0x1511/0x2de0 [ 119.691479][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.691503][ T5614] do_writepages+0x338/0x560 [ 119.691528][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691552][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691578][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691600][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 119.691633][ T5614] filemap_fdatawrite+0x1e9/0x2f0 [ 119.691660][ T5614] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 119.691722][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691746][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.691773][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 119.691806][ T5614] f2fs_sync_dirty_inodes+0x30e/0x830 [ 119.691846][ T5614] f2fs_write_checkpoint+0xa3d/0x2710 [ 119.691868][ T5614] ? __lock_acquire+0x747/0x2de0 [ 119.691922][ T5614] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 119.691945][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.692029][ T5614] kill_f2fs_super+0x2dd/0x700 [ 119.692061][ T5614] ? __pfx_kill_f2fs_super+0x10/0x10 [ 119.692097][ T5614] ? call_rcu+0x64d/0x8b0 [ 119.692121][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.692142][ T5614] ? lockdep_hardirqs_on+0x7b/0x110 [ 119.692171][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.692207][ T5614] deactivate_locked_super+0xbe/0x110 [ 119.692239][ T5614] cleanup_mnt+0x3d3/0x460 [ 119.692266][ T5614] task_work_run+0x1d9/0x270 [ 119.692292][ T5614] ? __pfx_task_work_run+0x10/0x10 [ 119.692324][ T5614] exit_to_user_mode_loop+0x204/0x770 [ 119.692344][ T5614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.692366][ T5614] ? rcu_is_watching+0x16/0xb0 [ 119.692396][ T5614] do_syscall_64+0x328/0x520 [ 119.692423][ T5614] ? trace_irq_disable+0x3b/0x140 [ 119.692449][ T5614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.692475][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.692494][ T5614] RIP: 0033:0x7f6c54d9f417 [ 119.692512][ T5614] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 119.692527][ T5614] RSP: 002b:00007ffc824b68b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 119.692546][ T5614] RAX: 0000000000000000 RBX: 00007f6c54e34ccb RCX: 00007f6c54d9f417 [ 119.692559][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc824b6970 [ 119.692571][ T5614] RBP: 00007ffc824b6970 R08: 00007ffc824b7970 R09: 00000000ffffffff [ 119.692584][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc824b7a00 [ 119.692596][ T5614] R13: 00007f6c54e34ccb R14: 000000000001d0cf R15: 00007ffc824b7a40 [ 119.692628][ T5614] [ 119.695975][ T6066] ======================================================= [ 119.695975][ T6066] WARNING: The mand mount option has been deprecated and [ 119.695975][ T6066] and is ignored by this kernel. Remove the mand [ 119.695975][ T6066] option from the mount to silence this warning. [ 119.695975][ T6066] ======================================================= [ 119.718043][ T6066] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 119.977351][ T5614] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 120.350869][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.584734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 122.625545][ T6085] jffs2: notice: (6085) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.213759][ T6107] netlink: 72 bytes leftover after parsing attributes in process `syz.4.64'. [ 124.284668][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 128.911384][ T6147] syzkaller0: entered promiscuous mode [ 128.911417][ T6147] syzkaller0: entered allmulticast mode [ 129.073804][ T6153] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 129.073804][ T6153] [ 129.073863][ T6153] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 129.074001][ T6153] CIFS: Attempting to mount //127.0.0.1/share [ 129.078003][ T6153] CIFS: VFS: Error connecting to socket. Aborting operation. [ 129.078073][ T6153] CIFS: VFS: cifs_mount failed w/return code = -111 [ 129.195661][ T6154] ecryptfs: Bad value for 'ecryptfs_key_bytes' [ 129.436047][ T6160] netlink: 72 bytes leftover after parsing attributes in process `syz.5.80'. [ 129.641127][ T6161] loop5: detected capacity change from 0 to 1024 [ 131.005503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.216670][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.216795][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.975009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.865327][ T6192] loop5: detected capacity change from 0 to 512 [ 134.873128][ T6192] EXT4-fs: Ignoring removed bh option [ 134.874177][ T6192] EXT4-fs: quotafile must be on filesystem root [ 134.978126][ T6192] loop5: detected capacity change from 0 to 512 [ 135.276844][ T6192] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.86: iget: bad i_size value: 38620345925642 [ 135.277341][ T6192] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.284625][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 135.284646][ C0] EXT4-fs (loop5): initial error at time 1791505765: ext4_orphan_get:1403: inode 15 [ 135.284682][ C0] EXT4-fs (loop5): last error at time 1791505765: ext4_orphan_get:1403: inode 15 [ 135.384676][ T6192] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.86: couldn't read orphan inode 15 (err -117) [ 135.384879][ T6192] loop5: lost filesystem error report for type 5 error -117 [ 135.447939][ T6192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.456798][ T6204] loop1: detected capacity change from 0 to 256 [ 137.464004][ T6204] vfat: Deprecated parameter 'posix' [ 137.464051][ T6204] FAT-fs: "posix" option is obsolete, not supported now [ 138.014929][ T6197] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 138.487546][ T6212] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.500305][ T6212] No such timeout policy "syz1" [ 139.395490][ T1340] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 139.395529][ T1340] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.395529][ T1340] [ 139.412474][ T1340] EXT4-fs (loop5): Total free blocks count 0 [ 139.412498][ T1340] EXT4-fs (loop5): Free/Dirty block details [ 139.412536][ T1340] EXT4-fs (loop5): free_blocks=0 [ 139.412565][ T1340] EXT4-fs (loop5): dirty_blocks=2916 [ 139.412580][ T1340] EXT4-fs (loop5): Block reservation details [ 139.412595][ T1340] EXT4-fs (loop5): i_reserved_data_blocks=2916 [ 139.644500][ T6216] loop1: detected capacity change from 0 to 128 [ 140.075756][ T1340] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 864 with error 28 [ 140.125164][ T5613] EXT4-fs warning (device loop5): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 141.186892][ T5613] EXT4-fs: 7 callbacks suppressed [ 141.186932][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.573134][ T6237] jffs2: notice: (6237) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.573728][ T6240] netlink: 72 bytes leftover after parsing attributes in process `syz.5.98'. [ 142.784214][ T6242] loop5: detected capacity change from 0 to 1024 [ 149.200667][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.213521][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.214645][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.233903][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.234811][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.462365][ T6266] netlink: 72 bytes leftover after parsing attributes in process `syz.4.112'. [ 149.774443][ T6270] netlink: 168 bytes leftover after parsing attributes in process `syz.5.114'. [ 149.920540][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 151.327284][ T5617] Bluetooth: hci6: command tx timeout [ 151.818505][ T6282] trusted_key: encrypted_key: master key parameter is missing [ 153.414844][ T5617] Bluetooth: hci6: command tx timeout [ 153.470784][ T5989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.797055][ T6295] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 153.846733][ T6295] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 154.923202][ T5989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.484923][ T5617] Bluetooth: hci6: command tx timeout [ 156.676200][ T13] IPVS: starting estimator thread 0... [ 156.700483][ T5989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.776136][ T6316] IPVS: using max 26 ests per chain, 62400 per kthread [ 157.036208][ T6320] netlink: 72 bytes leftover after parsing attributes in process `syz.4.126'. [ 157.686687][ T5617] Bluetooth: hci6: command tx timeout [ 157.928704][ T5989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.347139][ T6335] null_blk: nullb1: using native zone append [ 158.882279][ T6335] null_blk: disk nullb1 created [ 162.038901][ T6362] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.038924][ T6362] CIFS mount error: No usable UNC path provided in device string! [ 162.038924][ T6362] [ 162.039021][ T6362] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 163.381576][ T6366] LUN: removable file: (no medium) [ 163.433738][ T5989] bridge_slave_1: left allmulticast mode [ 163.433776][ T5989] bridge_slave_1: left promiscuous mode [ 163.435551][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.572651][ T5989] bridge_slave_0: left allmulticast mode [ 163.575490][ T5989] bridge_slave_0: left promiscuous mode [ 163.575664][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.144409][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.173402][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.215409][ T5989] bond0 (unregistering): Released all slaves [ 166.271671][ T6360] warning: `syz.1.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 166.540501][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 169.417632][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.418329][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.418498][ T6262] bridge_slave_0: entered allmulticast mode [ 169.420447][ T6262] bridge_slave_0: entered promiscuous mode [ 169.461333][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.461444][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.470710][ T6262] bridge_slave_1: entered allmulticast mode [ 169.493711][ T6262] bridge_slave_1: entered promiscuous mode [ 169.828214][ T6412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.851467][ T6412] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 171.595640][ T6412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.764767][ T6416] bond1: (slave geneve2): making interface the new active one [ 171.773608][ T6416] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 171.869303][ T6262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.909949][ T6262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.068377][ T5989] hsr_slave_0: left promiscuous mode [ 172.071489][ T5989] hsr_slave_1: left promiscuous mode [ 172.072543][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.072577][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.111314][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.111344][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.209527][ T5989] veth1_macvtap: left promiscuous mode [ 172.209585][ T5989] veth0_macvtap: left promiscuous mode [ 172.209736][ T5989] veth1_vlan: left promiscuous mode [ 172.209823][ T5989] veth0_vlan: left promiscuous mode [ 174.092071][ T6426] loop3: detected capacity change from 0 to 1024 [ 174.108336][ T6426] hfsplus: Unknown parameter 'dewompose' [ 174.895780][ T6426] jffs2: notice: (6426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 175.065864][ T6444] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.102318][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 177.326994][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 178.325165][ T6468] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 178.418382][ T6470] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 178.776575][ T6429] tipc: Started in network mode [ 178.776600][ T6429] tipc: Node identity 4, cluster identity 4711 [ 178.776610][ T6429] tipc: Node number set to 4 [ 178.898168][ T6262] team0: Port device team_slave_0 added [ 178.911551][ T6262] team0: Port device team_slave_1 added [ 179.252594][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.252616][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.252646][ T6262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.367314][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.367336][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.367368][ T6262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.140285][ T6484] tipc: Started in network mode [ 181.140310][ T6484] tipc: Node identity 4, cluster identity 4711 [ 181.140324][ T6484] tipc: Node number set to 4 [ 181.392194][ T6262] hsr_slave_0: entered promiscuous mode [ 181.402714][ T6262] hsr_slave_1: entered promiscuous mode [ 181.731015][ T6494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.756058][ T6494] serio: Serial port ttyS3 [ 181.930118][ T5989] IPVS: stop unused estimator thread 0... [ 182.418179][ T6262] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.466333][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.467608][ T6262] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.531124][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.550368][ T6262] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.586070][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.597831][ T6262] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.642731][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.896992][ T6516] capability: warning: `syz.4.156' uses deprecated v2 capabilities in a way that may be insecure [ 183.957045][ T6262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.068194][ T6522] Cannot find del_set index 4 as target [ 184.083655][ T6522] netlink: 'syz.5.158': attribute type 1 has an invalid length. [ 184.135137][ T6522] loop5: detected capacity change from 0 to 512 [ 184.148388][ T6522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 184.148453][ T6522] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.315150][ T6522] EXT4-fs (loop5): 1 truncate cleaned up [ 184.351856][ T6522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.386259][ T6262] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.442407][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 185.472232][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.553429][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.553546][ T6534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.581023][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.581157][ T6534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.950533][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.950601][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.590107][ T6591] misc userio: Invalid payload size [ 194.601867][ T6591] misc userio: Invalid payload size [ 194.753900][ T31] audit: type=1326 audit(1791505824.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faad6d9e1d9 code=0x0 [ 196.115384][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 196.520509][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.533882][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.547263][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.553661][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.574592][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.444467][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 197.698645][ T6262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.946021][ T6633] loop5: detected capacity change from 0 to 2048 [ 198.190811][ T6633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.647461][ T5617] Bluetooth: hci3: command tx timeout [ 199.838396][ T6643] loop5: detected capacity change from 0 to 32768 [ 199.843973][ T6643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.176 (6643) [ 199.907535][ T6643] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.907570][ T6643] BTRFS info (device loop5): using crc32c checksum algorithm [ 200.037985][ T6643] BTRFS info (device loop5): enabling ssd optimizations [ 200.038018][ T6643] BTRFS info (device loop5): turning on flush-on-commit [ 200.038037][ T6643] BTRFS info (device loop5): turning on async discard [ 200.038056][ T6643] BTRFS info (device loop5): enabling free space tree [ 200.038077][ T6643] BTRFS info (device loop5): use zlib compression, level 3 [ 200.038097][ T6643] BTRFS info (device loop5): max_inline set to 7 [ 200.137237][ T6643] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 200.189537][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.5.176'. [ 200.189691][ T6646] Zero length message leads to an empty skb [ 200.581179][ T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.686371][ T5617] Bluetooth: hci3: command tx timeout [ 200.796747][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 201.117679][ T5613] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.275077][ T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.415455][ T6698] syz.5.178 uses obsolete (PF_INET,SOCK_PACKET) [ 202.611218][ T6699] netlink: 'syz.4.180': attribute type 4 has an invalid length. [ 202.635256][ T38] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.770035][ T5617] Bluetooth: hci3: command tx timeout [ 202.960155][ T6702] netlink: 'syz.4.180': attribute type 4 has an invalid length. [ 203.755408][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 204.017652][ T38] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.844650][ T4926] Bluetooth: hci3: command tx timeout [ 205.170178][ T6262] veth0_vlan: entered promiscuous mode [ 205.346256][ T6262] veth1_vlan: entered promiscuous mode [ 205.506041][ T6262] veth0_macvtap: entered promiscuous mode [ 205.544614][ T5747] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 205.651713][ T6262] veth1_macvtap: entered promiscuous mode [ 205.697743][ T5747] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 205.699093][ T5747] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.699141][ T5747] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.701422][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.701448][ T5747] usb 4-1: Product: syz [ 205.701465][ T5747] usb 4-1: Manufacturer: syz [ 205.701482][ T5747] usb 4-1: SerialNumber: syz [ 205.790604][ T5747] usb 4-1: NFC: intf ffff88801eeee000 id ffffffff8f85c640 [ 205.978810][ T4926] Bluetooth: hci2: command 0x0406 tx timeout [ 205.978856][ T4926] Bluetooth: hci5: command 0x0406 tx timeout [ 205.978890][ T4926] Bluetooth: hci1: command 0x0406 tx timeout [ 205.978919][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 206.028790][ T5747] usb 4-1: USB disconnect, device number 2 [ 206.427430][ T38] bridge_slave_1: left allmulticast mode [ 206.427463][ T38] bridge_slave_1: left promiscuous mode [ 206.427673][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.458292][ T38] bridge_slave_0: left allmulticast mode [ 206.458322][ T38] bridge_slave_0: left promiscuous mode [ 206.462768][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.425302][ T6751] fuse: Bad value for 'fd' [ 209.578659][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.608695][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.623747][ T38] bond0 (unregistering): Released all slaves [ 209.693403][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.744882][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.748824][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.750604][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.751793][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.953946][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.970980][ T38] tipc: Left network mode [ 210.616870][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.617069][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.617198][ T6608] bridge_slave_0: entered allmulticast mode [ 210.619221][ T6608] bridge_slave_0: entered promiscuous mode [ 210.621954][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.622060][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.623491][ T6608] bridge_slave_1: entered allmulticast mode [ 210.625532][ T6608] bridge_slave_1: entered promiscuous mode [ 210.986993][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.000549][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.223122][ T6770] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 211.333267][ T6771] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 211.899618][ T5625] Bluetooth: hci0: command tx timeout [ 212.450375][ T6608] team0: Port device team_slave_0 added [ 212.476003][ T6608] team0: Port device team_slave_1 added [ 212.878037][ T38] hsr_slave_0: left promiscuous mode [ 212.881755][ T38] hsr_slave_1: left promiscuous mode [ 212.882675][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.882697][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.912700][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.912724][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.150831][ T6798] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.178465][ T6798] loop3: detected capacity change from 0 to 128 [ 213.572963][ T38] veth1_macvtap: left promiscuous mode [ 213.574481][ T38] veth0_macvtap: left promiscuous mode [ 213.593158][ T38] veth1_vlan: left promiscuous mode [ 213.593237][ T38] veth0_vlan: left promiscuous mode [ 213.969134][ T5625] Bluetooth: hci0: command tx timeout [ 216.044961][ T5625] Bluetooth: hci0: command tx timeout [ 216.276201][ T6827] loop3: detected capacity change from 0 to 2048 [ 216.546087][ T6827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.500848][ T6828] netlink: 'syz.5.202': attribute type 4 has an invalid length. [ 217.898159][ T38] team0 (unregistering): Port device team_slave_1 removed [ 217.931338][ T38] team0 (unregistering): Port device team_slave_0 removed [ 218.127763][ T5625] Bluetooth: hci0: command tx timeout [ 218.535891][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.535921][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.535951][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.538150][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.538165][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.538213][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.665798][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 218.950288][ T5625] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 218.958842][ T6608] hsr_slave_0: entered promiscuous mode [ 218.972841][ T6608] hsr_slave_1: entered promiscuous mode [ 218.973636][ T6608] debugfs: 'hsr0' already exists in 'hsr' [ 218.973656][ T6608] Cannot create hsr debugfs directory [ 220.545030][ T5754] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 220.634634][ T6859] netlink: 'syz.5.209': attribute type 4 has an invalid length. [ 220.737677][ T6860] netlink: 'syz.5.209': attribute type 4 has an invalid length. [ 220.848156][ T5754] usb 4-1: Using ep0 maxpacket: 8 [ 221.013673][ T5754] usb 4-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 221.101762][ T5754] usb 4-1: config 10 has an invalid interface number: 91 but max is 0 [ 221.101787][ T5754] usb 4-1: config 10 has no interface number 0 [ 221.101879][ T5754] usb 4-1: config 10 interface 91 has no altsetting 0 [ 221.156587][ T5754] usb 4-1: string descriptor 0 read error: -22 [ 221.156709][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.199042][ T5754] uvcvideo 4-1:10.91: Found Unit with invalid ID 0 [ 221.199271][ T5754] uvcvideo 4-1:10.91: Found UVC 0.40 device (097b:61f6) [ 221.199390][ T5754] uvcvideo 4-1:10.91: Entity type for entity Output 32771 was not initialized! [ 221.200050][ T5754] uvcvideo 4-1:10.91: Entity type for entity Media 2 was not initialized! [ 221.457577][ T5787] usb 4-1: USB disconnect, device number 3 [ 223.265404][ T5625] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 223.265483][ T5625] Bluetooth: hci4: Injecting HCI hardware error event [ 223.267729][ T5623] Bluetooth: hci4: hardware error 0x00 [ 224.231626][ T6904] loop5: detected capacity change from 0 to 512 [ 224.568656][ T6904] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 224.568732][ T6904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 224.569569][ T6904] System zones: 0-1, 15-15, 18-18, 34-34 [ 224.605310][ T6904] EXT4-fs (loop5): orphan cleanup on readonly fs [ 224.605409][ T6904] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 224.605489][ T6904] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 224.605518][ T6904] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 224.606950][ T6904] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.221: bad orphan inode 16 [ 224.606978][ T6904] loop5: lost filesystem error report for type 5 error -117 [ 224.614589][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 224.614612][ C0] EXT4-fs (loop5): initial error at time 1791505854: ext4_orphan_get:1429 [ 224.614639][ C0] EXT4-fs (loop5): last error at time 1791505854: ext4_orphan_get:1429 [ 224.634198][ T6904] ext4_test_bit(bit=15, block=18) = 1 [ 224.634221][ T6904] is_bad_inode(inode)=0 [ 224.634231][ T6904] NEXT_ORPHAN(inode)=0 [ 224.634240][ T6904] max_ino=32 [ 224.634250][ T6904] i_nlink=2 [ 225.233939][ T6904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.592195][ T5623] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 225.894459][ T6917] netlink: 'syz.4.222': attribute type 4 has an invalid length. [ 225.944803][ T6918] netlink: 'syz.4.222': attribute type 4 has an invalid length. [ 226.361778][ T6922] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 226.794370][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.922063][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 227.956689][ T6928] ------------[ cut here ]------------ [ 227.956705][ T6928] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 227.956718][ T6928] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: syz.5.224/6928 [ 227.982350][ T6928] Modules linked in: [ 227.986597][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.5.224 Not tainted syzkaller #0 PREEMPT(full) [ 227.995988][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.006106][ T6928] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 228.012016][ T6928] Code: 18 8c 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 228.031727][ T6928] RSP: 0018:ffffc90005197cf0 EFLAGS: 00010206 [ 228.037860][ T6928] RAX: 1ffffd1ffff80ebd RBX: 0000607edaf41500 RCX: dffffc0000000000 [ 228.045986][ T6928] RDX: 0000000000000001 RSI: ffffffff8e41727c RDI: 00000000ffffffff [ 228.053962][ T6928] RBP: ffffe8ffffc07500 R08: ffffffff907a667f R09: 1ffffffff20f4ccf [ 228.061993][ T6928] R10: dffffc0000000000 R11: fffffbfff20f4cd0 R12: ffff888025990000 [ 228.070133][ T6928] R13: 0000000000000000 R14: ffffe8ffffc075e8 R15: 1ffffffff1cdd5de [ 228.078148][ T6928] FS: 00007f53bc3916c0(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 228.087589][ T6928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.094177][ T6928] CR2: 00007fff03603708 CR3: 0000000071fbb000 CR4: 0000000000350ef0 [ 228.102495][ T6928] Call Trace: [ 228.105840][ T6928] [ 228.108782][ T6928] blk_mq_free_tag_set+0x617/0x790 [ 228.113925][ T6928] loop_remove+0x4e/0xc0 [ 228.118302][ T6928] loop_control_ioctl+0x4a6/0x5a0 [ 228.123387][ T6928] ? __pfx_loop_control_ioctl+0x10/0x10 [ 228.129022][ T6928] ? __fget_files+0x2a/0x420 [ 228.133640][ T6928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.139352][ T6928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.145088][ T6928] ? __pfx_loop_control_ioctl+0x10/0x10 [ 228.150659][ T6928] __se_sys_ioctl+0xfc/0x170 [ 228.155300][ T6928] do_syscall_64+0x166/0x520 [ 228.159909][ T6928] ? trace_irq_disable+0x3b/0x140 [ 228.164978][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.171042][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.176952][ T6928] RIP: 0033:0x7f53be59e1d9 [ 228.181359][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.201463][ T6928] RSP: 002b:00007f53bc391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.210180][ T6928] RAX: ffffffffffffffda RBX: 00007f53be826270 RCX: 00007f53be59e1d9 [ 228.218204][ T6928] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 228.226969][ T6928] RBP: 00007f53be635888 R08: 0000000000000000 R09: 0000000000000000 [ 228.234986][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.243050][ T6928] R13: 00007f53be826308 R14: 00007f53be826270 R15: 00007ffead6dc408 [ 228.251086][ T6928] [ 228.254147][ T6928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.261427][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.5.224 Not tainted syzkaller #0 PREEMPT(full) [ 228.270695][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.280738][ T6928] Call Trace: [ 228.284025][ T6928] [ 228.286941][ T6928] vpanic+0x56d/0xa60 [ 228.290930][ T6928] ? __pfx__printk+0x10/0x10 [ 228.295507][ T6928] ? __pfx_vpanic+0x10/0x10 [ 228.300003][ T6928] ? is_bpf_text_address+0x292/0x2b0 [ 228.305373][ T6928] ? is_bpf_text_address+0x26/0x2b0 [ 228.310597][ T6928] panic+0xc5/0xd0 [ 228.314314][ T6928] ? __pfx_panic+0x10/0x10 [ 228.318761][ T6928] __warn+0x315/0x4c0 [ 228.322738][ T6928] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 228.328043][ T6928] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 228.333314][ T6928] __report_bug+0x276/0x570 [ 228.337839][ T6928] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 228.343131][ T6928] ? __pfx___report_bug+0x10/0x10 [ 228.348150][ T6928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.353770][ T6928] ? do_raw_spin_lock+0x12b/0x2f0 [ 228.358788][ T6928] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.364184][ T6928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.369836][ T6928] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 228.375125][ T6928] report_bug+0x16b/0x220 [ 228.379451][ T6928] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 228.384720][ T6928] ? cleanup_srcu_struct+0x3d8/0x8b0 [ 228.390001][ T6928] handle_bug+0x9c/0x200 [ 228.394237][ T6928] exc_invalid_op+0x1a/0x50 [ 228.398734][ T6928] asm_exc_invalid_op+0x1a/0x20 [ 228.403591][ T6928] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 228.409497][ T6928] Code: 18 8c 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 228.429095][ T6928] RSP: 0018:ffffc90005197cf0 EFLAGS: 00010206 [ 228.435171][ T6928] RAX: 1ffffd1ffff80ebd RBX: 0000607edaf41500 RCX: dffffc0000000000 [ 228.443141][ T6928] RDX: 0000000000000001 RSI: ffffffff8e41727c RDI: 00000000ffffffff [ 228.451116][ T6928] RBP: ffffe8ffffc07500 R08: ffffffff907a667f R09: 1ffffffff20f4ccf [ 228.459074][ T6928] R10: dffffc0000000000 R11: fffffbfff20f4cd0 R12: ffff888025990000 [ 228.467030][ T6928] R13: 0000000000000000 R14: ffffe8ffffc075e8 R15: 1ffffffff1cdd5de [ 228.475012][ T6928] blk_mq_free_tag_set+0x617/0x790 [ 228.480145][ T6928] loop_remove+0x4e/0xc0 [ 228.484429][ T6928] loop_control_ioctl+0x4a6/0x5a0 [ 228.489457][ T6928] ? __pfx_loop_control_ioctl+0x10/0x10 [ 228.495018][ T6928] ? __fget_files+0x2a/0x420 [ 228.499606][ T6928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.505225][ T6928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.510849][ T6928] ? __pfx_loop_control_ioctl+0x10/0x10 [ 228.516389][ T6928] __se_sys_ioctl+0xfc/0x170 [ 228.520979][ T6928] do_syscall_64+0x166/0x520 [ 228.525593][ T6928] ? trace_irq_disable+0x3b/0x140 [ 228.530606][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.536835][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.542737][ T6928] RIP: 0033:0x7f53be59e1d9 [ 228.547137][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.566755][ T6928] RSP: 002b:00007f53bc391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.575166][ T6928] RAX: ffffffffffffffda RBX: 00007f53be826270 RCX: 00007f53be59e1d9 [ 228.583155][ T6928] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 228.591286][ T6928] RBP: 00007f53be635888 R08: 0000000000000000 R09: 0000000000000000 [ 228.599256][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.607295][ T6928] R13: 00007f53be826308 R14: 00007f53be826270 R15: 00007ffead6dc408 [ 228.615273][ T6928] [ 228.618517][ T6928] Kernel Offset: disabled [ 228.622828][ T6928] Rebooting in 86400 seconds..