last executing test programs: 10m55.55664976s ago: executing program 32 (id=150): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 9m28.892313576s ago: executing program 33 (id=725): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x3, 0x1a, "3eccd2000500"}) close_range(r0, 0xffffffffffffffff, 0x0) 9m12.704466833s ago: executing program 34 (id=824): ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 8m48.588156948s ago: executing program 35 (id=1008): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername(r1, 0x0, 0x0) 7m32.213396976s ago: executing program 36 (id=1609): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x564, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 5m25.357066821s ago: executing program 37 (id=2694): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x6}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x841, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 5m18.53825662s ago: executing program 38 (id=2695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, '\x00', 0x10, 0x2c, 0x80, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[@dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}]}}}}}, 0x0) 4m45.593800593s ago: executing program 39 (id=2945): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000780)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d302c636f6465706167653d3836322c73686f72746e616d653d6d697865642c696f636861727365743d63703737352c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c726f6469722c757466383d312c756e695f786c6174653d312c00b571a3e3bf2ce9bf5c6406ff0da9714d33dcb456c741d7aa"], 0x41, 0x282, &(0x7f00000004c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x11) getdents64(r0, 0xfffffffffffffffe, 0x29) 3m53.863506878s ago: executing program 1 (id=3305): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) 3m53.531774904s ago: executing program 1 (id=3307): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000073000040"]) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x2}) 3m53.284668711s ago: executing program 1 (id=3311): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x8000, 0x0, 0x20, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5, 0xffffffff, 0xfffffff8, 0x8], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x7, 0x5, 0x3, 0x3}, 0x40, [0x10, 0x200, 0x63, 0x6, 0x10001, 0x5, 0x9, 0xffff, 0x3b, 0x4, 0xff, 0x5f19, 0x6, 0x3, 0x3, 0x4, 0x8, 0x7, 0xfffffff4, 0x23, 0xfffffff7, 0x1, 0x3, 0x6, 0x6, 0x8, 0x10001, 0x0, 0x0, 0xb2, 0x0, 0x1, 0x6, 0x3, 0x6, 0x1, 0x8, 0x0, 0x80000001, 0x3, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x3, 0x9f, 0x1, 0x8f2, 0x9, 0x0, 0x100, 0x0, 0x6, 0x6, 0x7, 0x4, 0x8, 0x81, 0x101, 0x9ecf, 0x8, 0x9, 0x3ff], [0xd, 0x2, 0x9, 0x1, 0x4, 0x80000000, 0x87c5, 0x800, 0x9, 0xd, 0x10, 0x80000000, 0x5, 0x7, 0x10001, 0xed2f, 0x8, 0x400, 0x6002, 0x7, 0x10001, 0x2, 0xdbd, 0x401, 0x8001, 0x5f58, 0x10, 0x40200, 0x6, 0x4, 0x9b1c, 0x80, 0x101, 0x8, 0xe7b, 0x4, 0x3, 0x63, 0x0, 0x7f, 0x0, 0x0, 0x101, 0x9, 0x42a4, 0x2, 0x5, 0x5, 0x7, 0x3, 0xfffffff3, 0x81, 0x6, 0x80000000, 0x9, 0x0, 0x0, 0xff, 0x1, 0xffff, 0x36cc, 0x7, 0xa, 0x43d], [0x0, 0x80000000, 0xf, 0x400, 0x3, 0xd9, 0x7, 0x2, 0x1, 0x6586de57, 0x3c21, 0x6, 0x7, 0xec, 0x7, 0xfffffe00, 0x1, 0x5, 0x80, 0x6, 0x5, 0x80000000, 0xfffffffc, 0x80, 0x1, 0xeb9, 0x1000, 0xec5, 0x0, 0x400, 0x1, 0xb54, 0x101, 0x3f, 0x100, 0x7, 0x0, 0x2, 0x4, 0x4, 0x9, 0x4, 0x69, 0x3, 0x3c5, 0x0, 0x6, 0x9, 0x8, 0x400000, 0xe9, 0xe32, 0x40009, 0xffff0000, 0x5, 0x7ff, 0x1, 0xc, 0x400, 0x2, 0x2, 0x3, 0xf, 0xa48], [0x1, 0x1, 0x8, 0x9, 0x9, 0x5, 0x2351, 0x2, 0x6, 0xfff, 0x2, 0x6, 0x10, 0x1, 0x80000000, 0x1, 0xd, 0xa7f, 0x0, 0x100, 0x1, 0x4, 0xd0, 0x3, 0x82, 0x2b, 0x9, 0x4, 0x6, 0x7f, 0xea6b, 0x7, 0x2, 0x0, 0xffff8d95, 0xec, 0x0, 0x7f, 0xffffffff, 0x10, 0x3, 0x9, 0xb, 0x2, 0x8, 0x5, 0x7e, 0xb, 0x3ff, 0xc00, 0xe, 0x7, 0x7f, 0x6, 0x2, 0x93, 0x8, 0x6, 0x3, 0x7, 0x7, 0x7, 0x0, 0x6]}, 0x45c) 3m53.181908398s ago: executing program 1 (id=3314): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 3m53.012756721s ago: executing program 1 (id=3317): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 3m51.917298041s ago: executing program 1 (id=3322): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 3m51.491172093s ago: executing program 40 (id=3322): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 3m13.176129854s ago: executing program 8 (id=3556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m12.885732935s ago: executing program 8 (id=3560): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 3m12.658222444s ago: executing program 8 (id=3562): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0xfffffffeffffffff], 0x0, 0x0, 0x1}}, 0x40) 3m12.564357732s ago: executing program 8 (id=3563): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f00000001c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@umask={'umask', 0x3d, 0x9}}, {@anchor={'anchor', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'cp863'}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0xe3) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x22, 0x0, 0x0) 3m11.987443336s ago: executing program 8 (id=3567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000200)) 3m11.409644689s ago: executing program 8 (id=3571): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x686, &(0x7f0000001240)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x300, 0x0) 3m10.938474486s ago: executing program 41 (id=3571): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x686, &(0x7f0000001240)="$eJzs3ctvXFcdB/DvnYwnmVBSt03aFFVK1EiAiEjsWCmYTQNCKIsKVWXB2kqcxMokLY6L3ApR8952kT+gLLJjgZDYR5QNG9h162UlBJuuzGrQvXNnPPFznNfY6ecTXd9z59xzzu/85j5mPLEmwJfW5bNp3k+Ry2ffWi63V+/NdFbvzdzql5McTtJImkOtup8ml9Jb8mqSoq4othvn7sLsO599sfp5b6tZL9X+jZ3ajWalXnI6yaF6/bj6u7Jbf0d2664YzLBM2Jl+4mDcJsqzufKfu71HfvaP5wY1Q9pbtd71yAcOgKJ339xkMjlan+jl64DeXbF3zz7QVsYdAAAAADwFz69lLcs5Nu44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CCpv/+/qJdGv3w6Rf39/0WrfqzUGnO4m53a2+73n1QcAAAAAAAAAPAUnVrLWpZzrL/dLarP/F+vNo5XP7+S93Mn81nMuSxnLktZymKmk0wOddRanltaWpwetOz/z4DNLS9s2fLCLoEertftxzFrAAAAAAAAAHjm/DqX1z//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/aBIDvVW1XK8X55Mo5nkSJJWud9K8q9++SC7P+4AAAAA4BF0R9zv+bWsZTnHBu2K6j3/y9X7/iN5P7ezlIUspZP5XK1+F9B7199YvTfTWb03c6tcNvf7/f/uKdyqx/R+97D1yCerPdq5loXqkXO5kndTFFfTqFqWTvbj2TquX5UxFW/2TIwY2dV6Xc7843q9yUd7mux29vjLlMkqIxODjEzVsZXZeGHnTOzx2dk40nQag2CPbxhpwyQeyPmbI453tF6X8/n9djkfi42ZuDB09L28c86Tb/z1Tz+90bl988a1O2f3z5RGc6he964r7c2ZmBnKxCvPciY2maoycWKwfTk/yk9yNqfzdhazkJ9nLkuZz+n8sCrN1cdzMXTKb5OpSw9svb1bJK36CO09WQ/GlF1ier1qeywL+XHezdXM543q34VM5zu5mIuZHXqGT4xwpW1sc9Z3v7pl8Ge+WRfaSf5QryvXmxt2LVZ2y8TjVeb1haG8Dl9zJ6u64UfWs/TiHu5H/Sz9eedQml+rC+UYv6nX+8PGTEwPZeKlnTPxx+qycqdz++bijbn3RhvuxY/rQnke/W5f3SXK4+XF8smqth48Osq6l+q6iWpZz1er/sSl166xqe7EoK53pq5se6a26tdwm3u6UNW9smXdTFV3cqhu4+utzuD10LPw4Q/AM+vot4622v9u/7P9Sfu37Rvtt4784PB3D7/WysTfJ77XnDr09cZrxV/ySX65/v4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4eHc++PDmXKczv7ih0O12P9qm6iAX+l9n9hQHffW5ZFxTbiXZH5n/X7fbrR8p9kM8Oxe6pcPpPmTzvyUZbedmkq2qTj1E8EUeaxLGfGECnrjzS7feO3/ngw+/vXBr7vr89fnbsxcvzk7NXnxj5vy1hc78VO/nuKMEnoT1m/6IDbr75+s2AQAAAAAAAAAA4MvqUf9UIJO7/4XJ9qMfeZpTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6oy2fTvJ8i01Pnpsrt1XsznXLpl9f3bCZpJCl+kRSfJpfSWzI51F2x3Th3F2bf+eyL1c/X+2r292/s1G40K/WS00kO1evH1d+VR+6vGMywTNiZfuJg3P4fAAD//1RuAhY=") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x300, 0x0) 2m31.399927925s ago: executing program 9 (id=3789): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) pwrite64(r0, &(0x7f0000000300)="0e", 0x1, 0x10000) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x2005af9, 0xfffffff8, 0x100802, 0x2, 0x408}) 2m30.817250816s ago: executing program 9 (id=3792): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0xd, 0x6f5, &(0x7f0000001f80)="$eJzs3U9oZHcdAPDvm0ySmS1ms+12u0KhsYUqBnfzh1TjZaOIRChSVtBz6Ga7YWf/mKSS9uCmKnj14FWoh3jRkyKCICzUs96KeAmeCoKXnnZ78Mn7N5mJM8lk02Sy+vmU377fe7/3+73v+75/M0PDC+D/1vJ01B9GM5anX9/K5nd35lu7O/N3inqtFRHjEVGLqHf0Sj6IWIqixGezBVVDv+38fG3x+ocf735UzNXLUovin2ZEjPbuWB9kL7bLElMRMVJOj6FrvDefbLzxvWrSzkyWsFeqxMGwZVdd2uX7l/ZaeklHOmb6Xu/A0yMpnpsdiut/MuJcRDSqB9p20Vg7/QgPdaR70fbJxQEAAABnxvlHDyK2YmLYcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDTpHz/f1KWx1V9KpLq/f9jHe/YHxtyuP0dHFmjqjysnUYwAAAAAAAAAHCyXnoUv76ephPVfJpE7bsj5UyznL4dG7Faj7gSW7ESm7EZ6zEbEZMdA41trWxurs/Gy/ncxU/SNI1nip6x3tVzrmfPuQEDrmKK+jH2GgAAAAAAAAD+Z1xbGM+nP4rlmBh2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CmJGCkmeblY1SejVo+IRkSMZettR/y1qp8h9aN2eHgycQAAAMCZcv5RPIqtmKjm0yT/zn8p/97fiLfjbmzGWmxGK1bjRv5bQPGtv7a7M9/a3Zm/k5WIGO0e92v/2qv/buLQMPIRo/jtofeWL+drNONmrOVLrsSbcS9acSNqec/M5Sqejrg6vJfFlFwrpGmMD5KgG+U02/OfldNT0Txshck8I6NZRv4esRozWWxJkccLB2ei8+gMoGNLee5no9b+5edi/y21f4ypcn7twK0k/07TonauWpLGM986MOf5+TJ6pJ05lv2ZmOs4+y4dnPOIz//+N9+71bp7+1ayPX1qp9ETean34vF/VEeoykRhO1ZjviMTL3RnIvpn4ubGGc9EX92/NNbi+XZ9Ob4Z34npmIo3Yj3W4gexEpuxGlPxjby2Up7P2b+TB58zS11zbxwW01h5XEb2xfS588X0oJhezvtOxFp8O+7FjViN1/L/5mI2vhwLsRCLHUf4+QHutLUeV/0f+gf/yhfKSnbj++neDfAUr+5+srxe6Mjr3vU/k+f7QteSWqTlk+XZIzyPDr43VvYeWdmR+HHHNTh87Uw0ov2UqKJ7rsrAaLNXJn6Z31Y2Wndvr99aub9v3GS79/Zeje7dPzs3kux8ebZ9j+g+O7K253q2zeZtF9tttf1tv2q22w67UsfKz3D/PdJc3vZCRPyijDZry2T38Kztcke/7PNWI2/7JE3T4vMWAGfeuS+eG2v+s/mX5vvNnzRvNV9vfH38K+MvjsXon0e/Wp8ZebX2YvLbeD9+GId/QwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA618c67t1dardX1fZU0TR/0aTqRStQjupb86Y8d6+TvGouIwQfM1l6qReRL6lFWjhbYgyfbnfeeNAl/K4/JqST8gEoy8MqNvudPWbn3mXJ3Hqdpeuq7U72r7cjd09LQDsGnXKlekXWUXkO5HQGn6OrmnftXN95590trd1beWn1r9e7iwsLizOLCa/NXb661GsMODzhB+bM+/5wz7EgAAAAAAAAAAACAQQ32xznJ7ZUoltSP+FcE/s9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LiWp6P+MJKYnbkyk83v7sy3slLVs+lIvubjiKhFRDIVkXwQsRRFicmO4ZJ+29mOuP7hx7sfFXP1suTr146/F9tliaky3Kne6zV6LUwf9Bsvyce533+8ASVlGWkvWTrWePAp+U8AAAD//7ntC7U=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x8000063, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2m29.714145087s ago: executing program 9 (id=3793): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 2m29.188800057s ago: executing program 9 (id=3798): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) 2m27.588891129s ago: executing program 9 (id=3808): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="054a6cc32183aa1bad4058bdcfc20b370ee333319a1795d8f083817da0baf4ca40a288525b0645fafd403303bed02b3d346832dce32f061363ecd25ed593"], 0x1, 0x58d8, &(0x7f0000010b40)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2m25.283311829s ago: executing program 9 (id=3819): unshare(0x24020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m10.214516662s ago: executing program 42 (id=3819): unshare(0x24020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m6.671647372s ago: executing program 2 (id=3898): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x2000, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m5.073414485s ago: executing program 2 (id=3900): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/130, 0x82}, {&(0x7f0000000140)=""/44, 0x2c}], 0x2}, 0xa1}], 0x1, 0x101, 0x0) 2m4.917192152s ago: executing program 2 (id=3902): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) preadv2(r0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, 0x4, 0x8, 0xe) 2m4.43287862s ago: executing program 2 (id=3906): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000040)={[{@mb_optimize_scan}, {@nobarrier}]}, 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m3.599957071s ago: executing program 2 (id=3908): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) 2m1.776077555s ago: executing program 2 (id=3912): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0xe7}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2m1.775719696s ago: executing program 43 (id=3912): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0xe7}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1m8.410937136s ago: executing program 6 (id=3446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x3, 0x2) connect$unix(r0, 0x0, 0x0) 57.735717464s ago: executing program 6 (id=3446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x3, 0x2) connect$unix(r0, 0x0, 0x0) 45.073021448s ago: executing program 6 (id=3446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x3, 0x2) connect$unix(r0, 0x0, 0x0) 35.178881032s ago: executing program 4 (id=4397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 35.052344447s ago: executing program 4 (id=4399): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file2\x00', 0x300000a, &(0x7f0000000440)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x2}}, {@nodatasum}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@flushoncommit}, {@nodatasum}, {@enospc_debug}, {@discard}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x9, 0x10000) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc084, 0xc000, 0x0) 33.339448164s ago: executing program 4 (id=4410): syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, &(0x7f0000000380)={[], [{@euid_lt}, {@smackfshat={'smackfshat', 0x3d, '[%$}%]\\'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '/.@\\+(++\\'}}, {@flag='sync'}, {@smackfsroot={'smackfsroot', 0x3d, '{*'}}, {@smackfsroot={'smackfsroot', 0x3d, '!'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_lt}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r0, 0xa, 0x0) 32.602180023s ago: executing program 6 (id=3446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x3, 0x2) connect$unix(r0, 0x0, 0x0) 30.717099629s ago: executing program 4 (id=4414): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x142) getdents64(r0, 0x0, 0x18) 30.180438776s ago: executing program 4 (id=4420): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x100, 0x800, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000007c0)='./file2/file0\x00', &(0x7f0000000880), &(0x7f00000008c0), 0x2, 0x1) 26.01774101s ago: executing program 4 (id=4444): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x188, &(0x7f00000005c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) 25.766571522s ago: executing program 44 (id=4444): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94aac5e1fc8ef4207a283e2b34c24c030000000000000040abe763dfb52cdb0ba0cdc8c572346d0a832984b34448c4fa844e87c9be324364ceb050d40ad514a9b4da0af4b1652605421a7856b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa86865477bfbbe153ba4743605752abe43d9c2c30a094da0b8cc18c6b369f086a965446c1217f19a67a534064b00000000000000000000000000000000004fff83c4b6e1c24e71c0f4d7b6704a41bc44749e0a0a7aba4b13b3fc758fabeaec41aa66f23dd2d11e9a77fd81d3ae07261fda765b54def8eed0482aa3dde198dc55e05bfe0d9dd629e2b816846738da4da055c4f0c27e0ce87924561d50047f8a860a9bdeceaa4aa3ddaae3e756d1500a908dd743c39dcdc90131154d6e9bd30d5b40ab7f0641c08dfcd08363a2ffca967b787e9fab4304bfe716ff6da5f3adae51586335ac43dd5138f67274d9fde18f2f3342743f999ba2624f63e8b63641cb5bb389394c0c41a48f58149067b5e387ce559814b6748768c13da68d69183cea5d595e13827187822180", @ANYRES32], 0x1, 0x188, &(0x7f00000005c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) 13.260705174s ago: executing program 6 (id=3446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x3, 0x2) connect$unix(r0, 0x0, 0x0) 6.570184224s ago: executing program 5 (id=4544): syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000005c80)='./file0\x00', 0x490, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64, @ANYRESHEX=0x0], 0x9, 0x5a38, &(0x7f00000001c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000005c00)={0x8b1, 0xb, 0x2, 0x400000000002, 0x2, 0x9, 0x4, 0x3, 0x75}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5.948921492s ago: executing program 0 (id=4550): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f23, &(0x7f0000014380)="$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") move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x42440, 0x53, 0x12}, 0x18) 4.893685985s ago: executing program 0 (id=4555): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 4.637888513s ago: executing program 0 (id=4558): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) 4.56726105s ago: executing program 5 (id=4559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x6, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) 4.288024504s ago: executing program 3 (id=4562): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(r0, 0x0, 0x0) 3.665512995s ago: executing program 0 (id=4564): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x12, r0, 0x41de1000) 3.587231326s ago: executing program 5 (id=4565): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@gid}, {@umask={'umask', 0x3d, 0x3}}, {@errors_continue}, {}, {@allow_utime={'allow_utime', 0x3d, 0x400000}}]}, 0x1, 0x1524, &(0x7f0000002280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) 3.533611134s ago: executing program 7 (id=4566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, 0x0}, 0x94) 3.277541862s ago: executing program 7 (id=4567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x65, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@rr={0x7, 0x3, 0xb}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}, {"d76d44bfd4bc9ec68e8b92c46dc55cd324d69a620abc0d76267cd2a25fba44c705d946490148b246267da60bb69bb25d308de3b62f03e23c25"}}}}, 0x73) 3.274070146s ago: executing program 5 (id=4568): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x4468, &(0x7f0000010780)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 2.956045906s ago: executing program 3 (id=4569): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000b00)) 2.813514763s ago: executing program 7 (id=4570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x6, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffffff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0xd1, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x9, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x3ff, 0xfffffff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x1, 0x8, 0x8, 0x0, 0x405, 0x2, 0x9, 0x5, 0x9, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xb2d1, 0x1, 0x200, 0x10000000, 0xfffffff9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x401, 0x5, 0x2, 0x2, 0x3, 0x2, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f85, 0x9, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0x6], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0xe00e, 0xfffffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x404, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x4, 0x9, 0x4, 0x2, 0x2, 0xc, 0x27, 0x400, 0x70, 0x2, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x4, 0x10001, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)=0x1) 2.68616374s ago: executing program 7 (id=4571): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000280), 0x10) shutdown(r0, 0x1) ppoll(&(0x7f0000000000)=[{r0, 0x205}], 0x1, 0x0, 0x0, 0x0) 2.500388821s ago: executing program 7 (id=4572): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x7, 0x13, 0x0, [@private, @empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 2.405127037s ago: executing program 6 (id=3446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x3, 0x2) connect$unix(r0, 0x0, 0x0) 522.099987ms ago: executing program 5 (id=4573): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ab0afcd235388da8596affbe3db889f3c6fc4eaf82168b3f72c81691bc66785b6c528172", 0x24}, {&(0x7f0000000280)="9699901e28241dcaa7f5fb6ab6ab33d94c889890d748eebd0c20b7913bfdd56e32e7742876e45778c243198a4e2e688cf5aa5bbdcc7ddceabcce436e0d763d7e0854c2568840b07e9e2fe100048ae11f2e5ec2841625e5b2906ee4e4ad625c90ab6cebe2c5b2d3825e3e0be2a8a6d171c39dcbd89acb732d4bf6b4571344dfff", 0x80}, {&(0x7f0000000300)="e83bc4a556d71f44ba70f8d71d7b80b215f00b86749e87b0d2496a83379e7f0dd4e086dab0b9bede62be28608ad71c80e3ae38559c70a9f859e51181f69778776583e2059e09445900b4a1aee8e7cbd99745d0ecd482dca556f8dd7973d443a5a72eefc7bc0ae82ee1b706dcbd623fc13d0d0c961e70903cda3882005d3f66c9a4b59984524081be93e1f08358d1928aa0f0c05f3b1b37a0038c431ccf9772ee5bd561c468c91d30ec3802fb15a8b182efd737bccc62da", 0xb7}, {&(0x7f00000004c0)="cbf112190657eb676dcdd7fe41bd7ccb314b200e1482a1c4fc329f4152f84e9dd16c5173eeb43e8a1f4af860972f91b2607da26382011f5f236d755a178c91d58f26129088422edd69c8510c49be560ebab048432c44cd73afc2e3477f77f6add063962cfb18feec5606a6d2d2a79f2b05907463042de305fed3e1da822fe93d3a5474", 0x83}, {&(0x7f0000000140)="b6a25e9783f44f17a691e1417a243fd2375f0f3c877a7222b2ff66bf81ebd93664222f3027233a0d2c550003ea", 0x2d}, {&(0x7f0000000580)="097647d70e8eb61d9c0101dfcbcc94ba4ad4589bd1784bcb2faa9f159763e05858957532c85b5ada5cfe41aaba299f671c16810c0ead0ba644fdfe7c95229a8f4e260fe1e913d4190221718fa46e12b1412c8fc1af935e29a4f89a573185e21ce8a7cde5294350c22fae2eb2e2ba9f32abc6e1c7d9953cbdaffad1aab9d90c7e8c8778dc561817296b8e87ceaf8ad8aa7803b69b2fb973a2dabf3e1c1bbdec450eacba54852050b7cccd4b38b89d0583cc0e232e6112287f7b818ff092f4ef7f2e24d1089715b7b6540287963be04ee6f395d981321fe564d7900fab1711a16fc782168be279a8a62beb70e1838edc28", 0xf0}], 0x6}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)="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", 0xd06}, {0x0}], 0x2, 0x0, 0x0, 0x20044810}}], 0x2, 0x8004) 520.881056ms ago: executing program 3 (id=4574): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 519.500202ms ago: executing program 7 (id=4575): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 518.066084ms ago: executing program 0 (id=4576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 413.722342ms ago: executing program 3 (id=4577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 318.683826ms ago: executing program 5 (id=4578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x7c}, @void, @void, @val={0x5, 0x3, {0x3, 0x1b, 0x6}}, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x4}]]}, 0x64}}, 0x0) 268.284653ms ago: executing program 0 (id=4579): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x800000007}}, 0x18) chown(&(0x7f0000000040)='./file1\x00', r2, 0x0) 173.525849ms ago: executing program 3 (id=4580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14) 0s ago: executing program 3 (id=4581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) statfs(0x0, 0x0) kernel console output (not intermixed with test programs): 1024 [ 660.235249][ T9530] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 660.253312][ T9530] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 660.262356][ T9530] usb 5-1: Product: syz [ 660.267220][ T9530] usb 5-1: Manufacturer: syz [ 660.308790][ T9530] cdc_wdm 5-1:1.0: skipping garbage [ 660.314297][ T9530] cdc_wdm 5-1:1.0: skipping garbage [ 660.322456][ T9530] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 660.328609][ T9530] cdc_wdm 5-1:1.0: Unknown control protocol [ 660.484662][ T6791] hsr_slave_0: left promiscuous mode [ 660.493345][ T6791] hsr_slave_1: left promiscuous mode [ 660.500229][ T5857] Bluetooth: hci0: command tx timeout [ 660.543655][ T6791] veth1_macvtap: left promiscuous mode [ 660.556007][ T6791] veth0_macvtap: left promiscuous mode [ 660.562497][ T6791] veth1_vlan: left promiscuous mode [ 660.568140][ T6791] veth0_vlan: left promiscuous mode [ 660.592705][ T9530] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 660.763219][ T9530] usb 6-1: Using ep0 maxpacket: 16 [ 660.772493][ T9530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.791014][ T9530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.800559][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.808044][ T9530] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.821311][ T9530] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 660.830641][ T9530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.864098][ T9530] usb 6-1: config 0 descriptor?? [ 660.911130][ T5857] Bluetooth: hci3: command tx timeout [ 661.016963][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.052543][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.149057][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.287542][ T9530] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 661.296840][ T9530] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 661.490775][ T9530] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 661.501576][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.506204][ T9530] microsoft 0003:045E:07DA.003C: no inputs found [ 661.514883][ T9530] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 661.563703][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.713667][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.742101][ T9530] usb 6-1: USB disconnect, device number 23 [ 661.881115][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.586047][ T5857] Bluetooth: hci0: command tx timeout [ 662.631200][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.660668][ T9530] kernel write not supported for file /24/clear_refs (pid: 9530 comm: kworker/0:9) [ 662.664286][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.830688][ T981] usb 5-1: USB disconnect, device number 22 [ 662.883807][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.913440][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.963631][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.993264][ T5857] Bluetooth: hci3: command tx timeout [ 663.029850][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.197875][ T5932] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 663.215858][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.356055][T18076] chnl_net:caif_netlink_parms(): no params data found [ 663.367478][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 663.375654][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.410663][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.416304][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.458350][ T5932] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 663.485438][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.527000][ T5932] usb 6-1: config 0 descriptor?? [ 663.582927][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.704170][T18080] chnl_net:caif_netlink_parms(): no params data found [ 663.997728][ T5932] savu 0003:1E7D:2D5A.003D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 664.147403][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.227545][T18076] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.234791][T18076] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.259690][ T9530] usb 6-1: USB disconnect, device number 24 [ 664.267801][T18076] bridge_slave_0: entered allmulticast mode [ 664.275834][T18076] bridge_slave_0: entered promiscuous mode [ 664.297950][T18076] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.305156][T18076] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.312628][T18076] bridge_slave_1: entered allmulticast mode [ 664.321702][T18076] bridge_slave_1: entered promiscuous mode [ 664.408229][T18080] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.422568][T18080] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.435297][T18159] loop4: detected capacity change from 0 to 1024 [ 664.437763][T18080] bridge_slave_0: entered allmulticast mode [ 664.464738][T18080] bridge_slave_0: entered promiscuous mode [ 664.508930][T18159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.531763][T18080] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.560975][T18080] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.574218][T18159] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.3944: Abort forced by user [ 664.576109][T18080] bridge_slave_1: entered allmulticast mode [ 664.592961][T18080] bridge_slave_1: entered promiscuous mode [ 664.600766][T18159] EXT4-fs (loop4): Remounting filesystem read-only [ 664.615006][T18159] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 664.657948][ T5857] Bluetooth: hci0: command tx timeout [ 664.667179][ T6791] IPVS: stop unused estimator thread 0... [ 664.713442][T18080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.736251][T18076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.752673][T18076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.769679][T16108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.776227][T18080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.929739][T18076] team0: Port device team_slave_0 added [ 664.950919][T18076] team0: Port device team_slave_1 added [ 664.985425][T18170] nvme_fabrics: missing parameter 'transport=%s' [ 664.996731][T18170] nvme_fabrics: missing parameter 'nqn=%s' [ 665.006075][ T6791] bridge_slave_1: left allmulticast mode [ 665.027384][ T6791] bridge_slave_1: left promiscuous mode [ 665.033308][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.057978][ T5857] Bluetooth: hci3: command tx timeout [ 665.071921][ T6791] bridge_slave_0: left allmulticast mode [ 665.079938][ T6791] bridge_slave_0: left promiscuous mode [ 665.086117][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.111948][ T6791] bridge_slave_1: left allmulticast mode [ 665.125400][ T6791] bridge_slave_1: left promiscuous mode [ 665.133078][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.156158][ T6791] bridge_slave_0: left allmulticast mode [ 665.166041][ T6791] bridge_slave_0: left promiscuous mode [ 665.173142][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.414457][T18184] loop5: detected capacity change from 0 to 2048 [ 665.463749][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.484100][T18184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.510121][T18184] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 665.513528][T18184] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 665.513634][T18184] EXT4-fs (loop5): This should not happen!! Data will be lost [ 665.513634][T18184] [ 665.513654][T18184] EXT4-fs (loop5): Total free blocks count 0 [ 665.513671][T18184] EXT4-fs (loop5): Free/Dirty block details [ 665.513687][T18184] EXT4-fs (loop5): free_blocks=2415919104 [ 665.513705][T18184] EXT4-fs (loop5): dirty_blocks=16 [ 665.513721][T18184] EXT4-fs (loop5): Block reservation details [ 665.513736][T18184] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 665.580885][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.613325][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.631459][T17714] Allocator stuck? Waited for 30 seconds [ 665.631506][T17714] Allocator debug: [ 665.631517][T17714] capacity1536 [ 665.631528][T17714] reserved 31232 [ 665.631537][T17714] hidden 0 [ 665.631547][T17714] btree 0 [ 665.631566][T17714] data 0 [ 665.631577][T17714] cached 0 [ 665.631587][T17714] reserved 0 [ 665.631597][T17714] online_reserved 256 [ 665.631608][T17714] nr_inodes 0 [ 665.631618][T17714] [ 665.631627][T17714] freelist_wait waiting [ 665.631637][T17714] open buckets allocated1 [ 665.631647][T17714] open buckets total 1024 [ 665.631658][T17714] open_buckets_wait empty [ 665.631668][T17714] open_buckets_btree 0 [ 665.631679][T17714] open_buckets_user 0 [ 665.631690][T17714] btree reserve cache 0 [ 665.631700][T17714] [ 665.631709][T17714] Dev 0: [ 665.631718][T17714] buckets sectors fragmented [ 665.631731][T17714] free 0 0 0 [ 665.631744][T17714] sb 0 0 0 [ 665.631756][T17714] journal 0 0 0 [ 665.631768][T17714] btree 0 0 0 [ 665.631780][T17714] user 0 0 0 [ 665.631793][T17714] cached 0 0 0 [ 665.631805][T17714] parity 0 0 0 [ 665.631817][T17714] stripe 0 0 0 [ 665.631830][T17714] need_gc_gens 0 0 0 [ 665.631843][T17714] need_discard 0 0 0 [ 665.631855][T17714] unstriped 0 0 0 [ 665.631868][T17714] capacity 128 [ 665.631879][T17714] [ 665.631888][T17714] reserves: [ 665.631897][T17714] stripe 60 [ 665.631908][T17714] normal 58 [ 665.631918][T17714] copygc 56 [ 665.631929][T17714] btree 28 [ 665.631939][T17714] btree_copygc 0 [ 665.631950][T17714] reclaim 0 [ 665.631961][T17714] interior_updates 0 [ 665.631971][T17714] [ 665.631980][T17714] open buckets 0 [ 665.631991][T17714] buckets to invalidate 0 [ 665.632002][T17714] [ 665.632010][T17714] Copygc debug: [ 665.632020][T17714] running: 1 [ 665.632030][T17714] copygc_wait:0 [ 665.632040][T17714] copygc_wait_at:0 [ 665.632050][T17714] Currently waiting for:0 B [ 665.632061][T17714] Currently waiting since:640 KiB [ 665.632071][T17714] Currently calculated wait: [ 665.632082][T17714] loop9: 0 B [ 665.632092][T17714] [<0>] bch2_print_allocator_stuck+0x588/0x680 [ 665.632103][T17714] [<0>] __bch2_wait_on_allocator+0x17f/0x240 [ 665.632115][T17714] [<0>] bch2_btree_update_start+0x1906/0x1e00 [ 665.632127][T17714] [<0>] bch2_btree_node_rewrite+0x1d8/0x1240 [ 665.632139][T17714] [<0>] bch2_btree_node_rewrite_pos+0x187/0x240 [ 665.632151][T17714] [<0>] __bch2_move_data_phys+0x1147/0x1c10 [ 665.632162][T17714] [<0>] bch2_evacuate_bucket+0x228/0x3a0 [ 665.632173][T17714] [<0>] bch2_copygc+0x3c56/0x4580 [ 665.632184][T17714] [<0>] bch2_copygc_thread+0x97a/0xe00 [ 665.632196][T17714] [<0>] kthread+0x70e/0x8a0 [ 665.632206][T17714] [<0>] ret_from_fork+0x3f9/0x770 [ 665.632217][T17714] [<0>] ret_from_fork_asm+0x1a/0x30 [ 665.632228][T17714] [ 665.632237][T17714] Journal debug: [ 665.632247][T17714] flags: replay_done,running,may_skip_flush [ 665.632259][T17714] dirty journal entries: 0/32768 [ 665.632270][T17714] seq: 15 [ 665.632280][T17714] seq_ondisk: 15 [ 665.632290][T17714] last_seq: 16 [ 665.632301][T17714] last_seq_ondisk: 15 [ 665.632311][T17714] flushed_seq_ondisk: 15 [ 665.632322][T17714] watermark: stripe [ 665.632333][T17714] each entry reserved: 321 [ 665.632343][T17714] nr flush writes: 5 [ 665.632354][T17714] nr noflush writes: 0 [ 665.632364][T17714] average write size: 1.38 KiB [ 665.632375][T17714] free buf: 65536 [ 665.632386][T17714] nr direct reclaim: 0 [ 665.632396][T17714] nr background reclaim: 5 [ 665.632407][T17714] reclaim kicked: 0 [ 665.632417][T17714] reclaim runs in: 0 ms [ 665.632428][T17714] blocked: 0 [ 665.632438][T17714] current entry sectors: 256 [ 665.632449][T17714] current entry error: (No error) [ 665.632460][T17714] current entry: closed [ 665.632470][T17714] unwritten entries: [ 665.632480][T17714] last buf closed [ 665.632490][T17714] space: [ 665.632500][T17714] discarded 256:1536 [ 665.632510][T17714] clean ondisk 256:1536 [ 665.632527][T17714] clean 256:1536 [ 665.632538][T17714] total 256:2048 [ 665.632556][T17714] dev 0: [ 665.632566][T17714] durability 1: [ 665.632576][T17714] nr 8 [ 665.632587][T17714] bucket size 256 [ 665.632598][T17714] available 6:216 [ 665.632609][T17714] discard_idx 0 [ 665.632619][T17714] dirty_ondisk 0 (seq 15) [ 665.632630][T17714] dirty_idx 0 (seq 15) [ 665.632641][T17714] cur_idx 0 (seq 15) [ 665.632652][T17714] replicas want 1 need 1 [ 665.680356][T17919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.296288][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.472836][T18190] loop5: detected capacity change from 0 to 1024 [ 666.567960][T18190] hfsplus: xattr search failed [ 666.607523][T18192] loop4: detected capacity change from 0 to 4096 [ 666.692562][ T6782] hfsplus: b-tree write err: -5, ino 3 [ 666.701256][T18194] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 666.729058][ T30] audit: type=1800 audit(1752757533.915:913): pid=18192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3956" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 666.753351][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.776883][ T5857] Bluetooth: hci0: command tx timeout [ 666.914877][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.964194][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.063850][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.144401][ T5857] Bluetooth: hci3: command tx timeout [ 667.368078][T18200] Bluetooth: MGMT ver 1.23 [ 667.584982][ T6791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.597867][ T6791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.611262][ T6791] bond0 (unregistering): Released all slaves [ 668.213678][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.381563][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.929508][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.015977][ T6791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.033629][ T6791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.044292][ T6791] bond0 (unregistering): Released all slaves [ 669.165366][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.226803][T18080] team0: Port device team_slave_0 added [ 669.264780][T18080] team0: Port device team_slave_1 added [ 669.368378][T18076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.375396][T18076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.401388][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.422965][T18076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.549277][T18076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.556316][T18076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.582303][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.598645][T18076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.641035][T18080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.648423][T18080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.709341][T18080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.736099][T18080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.755748][T18080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.781730][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.825387][T18080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.943425][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 670.044152][T18076] hsr_slave_0: entered promiscuous mode [ 670.053958][T18076] hsr_slave_1: entered promiscuous mode [ 670.060492][T18076] debugfs: 'hsr0' already exists in 'hsr' [ 670.078099][T18076] Cannot create hsr debugfs directory [ 670.217491][ T983] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 670.320658][T18080] hsr_slave_0: entered promiscuous mode [ 670.342041][T18080] hsr_slave_1: entered promiscuous mode [ 670.349379][T18080] debugfs: 'hsr0' already exists in 'hsr' [ 670.355174][T18080] Cannot create hsr debugfs directory [ 670.377828][ T983] usb 5-1: Using ep0 maxpacket: 16 [ 670.400492][ T983] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.423700][ T983] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.443081][ T983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 670.450880][ T983] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 670.466212][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.493633][ T983] usb 5-1: config 0 descriptor?? [ 670.663857][ T6791] hsr_slave_0: left promiscuous mode [ 670.670550][ T6791] hsr_slave_1: left promiscuous mode [ 670.682676][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.692116][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.704357][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.713416][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.757434][ T5981] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 670.766322][ T6791] hsr_slave_0: left promiscuous mode [ 670.773937][ T6791] hsr_slave_1: left promiscuous mode [ 670.781253][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.789025][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.799023][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.806581][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.844173][T18278] kvm: apic: phys broadcast and lowest prio [ 670.875789][ T6791] veth1_macvtap: left promiscuous mode [ 670.881897][ T6791] veth0_macvtap: left promiscuous mode [ 670.887842][ T6791] veth1_vlan: left promiscuous mode [ 670.894348][ T6791] veth0_vlan: left promiscuous mode [ 670.906923][ T6791] veth1_macvtap: left promiscuous mode [ 670.912822][ T6791] veth0_macvtap: left promiscuous mode [ 670.918835][ T6791] veth1_vlan: left promiscuous mode [ 670.920571][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 670.924261][ T6791] veth0_vlan: left promiscuous mode [ 670.943559][ T983] mcp2200 0003:04D8:00DF.003E: reserved main item tag 0xd [ 670.949375][ T5981] usb 6-1: config 6 has an invalid interface number: 200 but max is 0 [ 670.952469][ T983] mcp2200 0003:04D8:00DF.003E: item fetching failed at offset 6/7 [ 670.970110][ T983] mcp2200 0003:04D8:00DF.003E: can't parse reports [ 670.975350][ T5981] usb 6-1: config 6 has no interface number 0 [ 670.976769][ T983] mcp2200 0003:04D8:00DF.003E: probe with driver mcp2200 failed with error -22 [ 670.995512][ T5981] usb 6-1: config 6 interface 200 has no altsetting 0 [ 671.007230][ T5981] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 671.023838][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.037201][ T5981] usb 6-1: Product: syz [ 671.045941][ T5981] usb 6-1: Manufacturer: syz [ 671.057532][ T5981] usb 6-1: SerialNumber: syz [ 671.180280][ T983] usb 5-1: USB disconnect, device number 23 [ 671.672539][ T5981] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 671.716452][ T5981] dvb-usb: bulk message failed: -71 (3/0) [ 671.731108][ T5981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 671.773012][ T5981] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 671.786444][ T5981] usb 6-1: media controller created [ 671.815969][ T5981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.973875][ T5981] dvb-usb: bulk message failed: -71 (6/0) [ 671.993025][ T5981] dvb-usb: bulk message failed: -71 (6/0) [ 672.006679][ T5981] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 672.027586][ T5981] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 672.048806][ T5981] dvb-usb: schedule remote query interval to 150 msecs. [ 672.055956][ T5981] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 672.097971][ T5981] usb 6-1: USB disconnect, device number 25 [ 672.258402][ T5981] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 673.540456][ T6791] team0 (unregistering): Port device team_slave_1 removed [ 673.599340][T18309] loop5: detected capacity change from 0 to 131072 [ 673.607959][T18309] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 673.616117][T18309] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 673.626815][T18309] F2FS-fs (loop5): invalid crc value [ 673.698704][T18309] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 673.715206][T18309] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 673.722617][T18309] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 673.731015][ T6791] team0 (unregistering): Port device team_slave_0 removed [ 674.673383][T18327] netlink: 'syz.5.4014': attribute type 7 has an invalid length. [ 675.931258][ T6791] team0 (unregistering): Port device team_slave_1 removed [ 676.030724][ T6791] team0 (unregistering): Port device team_slave_0 removed [ 678.307678][ T6791] IPVS: stop unused estimator thread 0... [ 678.617786][T18365] loop5: detected capacity change from 0 to 128 [ 678.677941][T18080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.704023][T18365] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 678.719784][T18076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.752898][T18365] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 678.762499][T18349] loop4: detected capacity change from 0 to 40427 [ 678.771448][T18080] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.797749][T18349] F2FS-fs (loop4): invalid crc value [ 678.819250][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.826459][ T8654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.890980][T17919] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.918901][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.926133][ T8654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.984991][T18349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 679.002762][T18076] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.026157][T18349] F2FS-fs (loop4): Start checkpoint disabled! [ 679.036104][T18349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 679.039773][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.050993][ T6791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.142833][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.150084][ T6791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.292986][T18349] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 679.472194][T18076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 679.595168][ T8653] kworker/u8:27: attempt to access beyond end of device [ 679.595168][ T8653] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 679.656755][ T8653] CPU: 0 UID: 0 PID: 8653 Comm: kworker/u8:27 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 679.656787][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.656801][ T8653] Workqueue: writeback wb_workfn (flush-7:4) [ 679.656836][ T8653] Call Trace: [ 679.656846][ T8653] [ 679.656856][ T8653] dump_stack_lvl+0x189/0x250 [ 679.656889][ T8653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.656915][ T8653] ? __pfx_queue_work_on+0x10/0x10 [ 679.656935][ T8653] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 679.656961][ T8653] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 679.657001][ T8653] f2fs_handle_critical_error+0x37c/0x540 [ 679.657040][ T8653] f2fs_write_end_io+0x886/0xb60 [ 679.657097][ T8653] __submit_merged_bio+0x27a/0x6a0 [ 679.657136][ T8653] __submit_merged_write_cond+0x255/0x530 [ 679.657175][ T8653] f2fs_write_data_pages+0x261d/0x3000 [ 679.657253][ T8653] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 679.657394][ T8653] ? f2fs_write_meta_pages+0x357/0x450 [ 679.657440][ T8653] ? __lock_acquire+0xab9/0xd20 [ 679.657478][ T8653] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 679.657512][ T8653] do_writepages+0x32e/0x550 [ 679.657546][ T8653] ? reacquire_held_locks+0x127/0x1d0 [ 679.657580][ T8653] ? writeback_sb_inodes+0x384/0x1010 [ 679.657619][ T8653] __writeback_single_inode+0x145/0xff0 [ 679.657647][ T8653] ? do_raw_spin_unlock+0x122/0x240 [ 679.657681][ T8653] writeback_sb_inodes+0x6c7/0x1010 [ 679.657742][ T8653] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 679.657836][ T8653] ? rcu_is_watching+0x15/0xb0 [ 679.657871][ T8653] wb_writeback+0x43b/0xaf0 [ 679.657906][ T8653] ? queue_io+0x341/0x590 [ 679.657935][ T8653] ? __pfx_wb_writeback+0x10/0x10 [ 679.657971][ T8653] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.658003][ T8653] wb_workfn+0x409/0xef0 [ 679.658045][ T8653] ? __pfx_wb_workfn+0x10/0x10 [ 679.658075][ T8653] ? __lock_acquire+0xab9/0xd20 [ 679.658122][ T8653] ? process_scheduled_works+0x9ef/0x17b0 [ 679.658165][ T8653] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.658189][ T8653] ? process_scheduled_works+0x9ef/0x17b0 [ 679.658221][ T8653] ? process_scheduled_works+0x9ef/0x17b0 [ 679.658256][ T8653] process_scheduled_works+0xae1/0x17b0 [ 679.658331][ T8653] ? __pfx_process_scheduled_works+0x10/0x10 [ 679.658405][ T8653] worker_thread+0x8a0/0xda0 [ 679.658463][ T8653] kthread+0x70e/0x8a0 [ 679.658495][ T8653] ? __pfx_worker_thread+0x10/0x10 [ 679.658516][ T8653] ? __pfx_kthread+0x10/0x10 [ 679.658546][ T8653] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.658570][ T8653] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.658595][ T8653] ? __pfx_kthread+0x10/0x10 [ 679.658623][ T8653] ret_from_fork+0x3f9/0x770 [ 679.658649][ T8653] ? __pfx_ret_from_fork+0x10/0x10 [ 679.658681][ T8653] ? __switch_to_asm+0x39/0x70 [ 679.658706][ T8653] ? __switch_to_asm+0x33/0x70 [ 679.658731][ T8653] ? __pfx_kthread+0x10/0x10 [ 679.658759][ T8653] ret_from_fork_asm+0x1a/0x30 [ 679.658820][ T8653] [ 679.955106][ T8653] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 680.351604][T18076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.441586][T18080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.189992][T18076] veth0_vlan: entered promiscuous mode [ 681.228540][T18076] veth1_vlan: entered promiscuous mode [ 681.244841][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 681.271217][T18418] dummy0: entered promiscuous mode [ 681.278700][T18418] macsec1: entered promiscuous mode [ 681.284222][T18418] macsec1: entered allmulticast mode [ 681.290025][T18418] dummy0: entered allmulticast mode [ 681.352308][T18080] veth0_vlan: entered promiscuous mode [ 681.367359][T18076] veth0_macvtap: entered promiscuous mode [ 681.394432][T18076] veth1_macvtap: entered promiscuous mode [ 681.405506][T18080] veth1_vlan: entered promiscuous mode [ 681.481516][T18076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.500216][T18080] veth0_macvtap: entered promiscuous mode [ 681.510957][T18422] loop4: detected capacity change from 0 to 2048 [ 681.524031][T18076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.545150][T18080] veth1_macvtap: entered promiscuous mode [ 681.568877][T18422] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.640564][T18080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.681400][T18080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.903457][ T8653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.927968][ T8653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.297689][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.333059][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.545685][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.582254][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.666110][ T6791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.683405][ T6791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.531928][ T6791] bridge_slave_1: left allmulticast mode [ 683.561148][ T6791] bridge_slave_1: left promiscuous mode [ 683.567026][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.718971][ T6791] bridge_slave_0: left allmulticast mode [ 683.724692][ T6791] bridge_slave_0: left promiscuous mode [ 683.791300][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.074100][ C1] hrtimer: interrupt took 18266 ns [ 684.924998][T18433] loop4: detected capacity change from 0 to 32768 [ 684.943546][T18433] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 685.174985][T18433] XFS (loop4): Ending clean mount [ 685.214017][T18433] XFS (loop4): Quotacheck needed: Please wait. [ 685.316991][T18433] XFS (loop4): Quotacheck: Done. [ 685.666475][T16108] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 686.160856][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.167652][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.393151][ T6791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.406143][ T6791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.419009][ T6791] bond0 (unregistering): Released all slaves [ 686.690318][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.706007][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.745128][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.774448][T18455] loop5: detected capacity change from 0 to 32768 [ 686.781555][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.799706][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 686.812917][T18455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4049 (18455) [ 686.840482][T18464] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.857832][T18464] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.916290][T18455] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 686.937631][T18455] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 686.955616][T18455] BTRFS info (device loop5): using free-space-tree [ 686.967861][T18465] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 686.992034][T18465] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 687.537969][ T6791] hsr_slave_0: left promiscuous mode [ 687.553519][T17919] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 687.576330][ T6791] hsr_slave_1: left promiscuous mode [ 687.625623][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.640947][T18461] loop4: detected capacity change from 0 to 40427 [ 687.647460][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.657789][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.696201][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.703609][T18461] F2FS-fs (loop4): build fault injection rate: 771 [ 687.709123][T18461] F2FS-fs (loop4): invalid crc value [ 687.808044][T18474] loop3: detected capacity change from 0 to 32768 [ 687.878720][ T6791] veth1_macvtap: left promiscuous mode [ 687.893120][T18461] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 687.923126][ T6791] veth0_macvtap: left promiscuous mode [ 687.930058][ T6791] veth1_vlan: left promiscuous mode [ 687.935484][ T6791] veth0_vlan: left promiscuous mode [ 687.937865][T18474] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 687.955838][T18461] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 688.157768][T18474] XFS (loop3): Ending clean mount [ 688.167687][ T30] audit: type=1804 audit(1752757555.345:914): pid=18461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4048" name="/newroot/204/file1/bus" dev="loop4" ino=10 res=1 errno=0 [ 688.475829][T16108] syz-executor: attempt to access beyond end of device [ 688.475829][T16108] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 688.486493][T18080] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 688.567969][T16108] CPU: 0 UID: 0 PID: 16108 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 688.568003][T16108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.568017][T16108] Call Trace: [ 688.568026][T16108] [ 688.568036][T16108] dump_stack_lvl+0x189/0x250 [ 688.568072][T16108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.568098][T16108] ? __pfx_queue_work_on+0x10/0x10 [ 688.568118][T16108] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 688.568146][T16108] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 688.568195][T16108] f2fs_handle_critical_error+0x37c/0x540 [ 688.568234][T16108] f2fs_write_end_io+0x886/0xb60 [ 688.568288][T16108] __submit_merged_bio+0x27a/0x6a0 [ 688.568324][T16108] __submit_merged_write_cond+0x255/0x530 [ 688.568360][T16108] f2fs_write_data_pages+0x261d/0x3000 [ 688.568436][T16108] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 688.568525][T16108] ? __mod_zone_page_state+0xd7/0x140 [ 688.568563][T16108] ? folios_put_refs+0x560/0x640 [ 688.568596][T16108] ? __pfx_folios_put_refs+0x10/0x10 [ 688.568614][T16108] ? rcu_is_watching+0x15/0xb0 [ 688.568647][T16108] ? __lock_acquire+0xab9/0xd20 [ 688.568699][T16108] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 688.568731][T16108] do_writepages+0x32e/0x550 [ 688.568774][T16108] ? do_raw_spin_unlock+0x122/0x240 [ 688.568808][T16108] filemap_fdatawrite+0x199/0x240 [ 688.568837][T16108] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 688.568930][T16108] ? do_raw_spin_unlock+0x122/0x240 [ 688.568964][T16108] f2fs_sync_dirty_inodes+0x31f/0x830 [ 688.569008][T16108] f2fs_write_checkpoint+0x95a/0x1df0 [ 688.569063][T16108] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 688.569132][T16108] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 688.569150][T16108] ? kfree+0x18e/0x440 [ 688.569180][T16108] ? kill_f2fs_super+0x298/0x6c0 [ 688.569205][T16108] kill_f2fs_super+0x2c3/0x6c0 [ 688.569231][T16108] ? __pfx_kill_f2fs_super+0x10/0x10 [ 688.569247][T16108] ? radix_tree_delete_item+0x2b6/0x400 [ 688.569279][T16108] ? shrinker_free+0x2ce/0x3e0 [ 688.569301][T16108] deactivate_locked_super+0xbc/0x130 [ 688.569327][T16108] cleanup_mnt+0x425/0x4c0 [ 688.569348][T16108] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.569377][T16108] task_work_run+0x1d1/0x260 [ 688.569408][T16108] ? __pfx_task_work_run+0x10/0x10 [ 688.569431][T16108] ? __x64_sys_umount+0x122/0x160 [ 688.569465][T16108] ? exit_to_user_mode_loop+0x40/0x110 [ 688.569502][T16108] exit_to_user_mode_loop+0xec/0x110 [ 688.569535][T16108] do_syscall_64+0x2bd/0x3b0 [ 688.569562][T16108] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.569588][T16108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.569608][T16108] ? clear_bhb_loop+0x60/0xb0 [ 688.569634][T16108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.569655][T16108] RIP: 0033:0x7f01b0d8fc57 [ 688.569676][T16108] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 688.569693][T16108] RSP: 002b:00007ffc952898a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 688.569715][T16108] RAX: 0000000000000000 RBX: 00007f01b0e10a8d RCX: 00007f01b0d8fc57 [ 688.569730][T16108] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc95289960 [ 688.569742][T16108] RBP: 00007ffc95289960 R08: 0000000000000000 R09: 0000000000000000 [ 688.569756][T16108] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9528a9f0 [ 688.569770][T16108] R13: 00007f01b0e10a8d R14: 00000000000a80cf R15: 00007ffc9528aa30 [ 688.569810][T16108] [ 688.569819][T16108] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 688.907727][ T5857] Bluetooth: hci0: command tx timeout [ 689.388206][T18520] 9pnet: p9_errstr2errno: server reported unknown error ےے [ 689.543730][ T30] audit: type=1326 audit(1752757556.735:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 689.573337][ T30] audit: type=1326 audit(1752757556.735:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 689.631167][ T30] audit: type=1326 audit(1752757556.735:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 689.685009][ T30] audit: type=1326 audit(1752757556.735:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 689.729566][ T30] audit: type=1326 audit(1752757556.735:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 689.773810][ T30] audit: type=1326 audit(1752757556.735:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 689.800278][ T30] audit: type=1326 audit(1752757556.735:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 689.823043][ T30] audit: type=1326 audit(1752757556.735:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 689.847654][ T30] audit: type=1326 audit(1752757556.735:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18525 comm="syz.3.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 690.415572][ T6791] team0 (unregistering): Port device team_slave_1 removed [ 690.509551][ T6791] team0 (unregistering): Port device team_slave_0 removed [ 690.986389][ T5857] Bluetooth: hci0: command tx timeout [ 691.650220][T18524] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4067'. [ 692.082025][T18458] chnl_net:caif_netlink_parms(): no params data found [ 692.424834][T18553] loop5: detected capacity change from 0 to 128 [ 692.770146][T18564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.797707][T18458] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.804937][T18458] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.848130][T18458] bridge_slave_0: entered allmulticast mode [ 692.871477][T18458] bridge_slave_0: entered promiscuous mode [ 692.883422][T18458] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.912147][T18458] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.932651][T18458] bridge_slave_1: entered allmulticast mode [ 692.956671][T18458] bridge_slave_1: entered promiscuous mode [ 693.055882][T18458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.067593][ T5852] Bluetooth: hci0: command tx timeout [ 693.081300][T18458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.179042][ T5932] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 693.261125][T18458] team0: Port device team_slave_0 added [ 693.297799][T18458] team0: Port device team_slave_1 added [ 693.303525][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 693.357875][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 693.374485][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 693.403225][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 693.442254][T18458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.466466][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 693.489637][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.529333][T18458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.542414][T18458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.549673][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 693.570542][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 693.578723][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.592249][ T5932] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 693.637398][T18458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.642597][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.682464][ T5932] usb 6-1: Product: syz [ 693.686976][ T5932] usb 6-1: Manufacturer: syz [ 693.707359][ T5932] usb 6-1: SerialNumber: syz [ 693.731177][ T5932] usb 6-1: config 0 descriptor?? [ 693.737173][T18568] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 693.762589][ T5932] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input54 [ 693.784302][ T5201] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 693.848712][ T5201] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 693.873897][ T5201] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 693.927957][ T5201] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 694.047723][T18568] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 694.112370][ T5932] usb 6-1: USB disconnect, device number 26 [ 694.162159][T18458] hsr_slave_0: entered promiscuous mode [ 694.180928][T18458] hsr_slave_1: entered promiscuous mode [ 694.208432][T18458] debugfs: 'hsr0' already exists in 'hsr' [ 694.227381][T18458] Cannot create hsr debugfs directory [ 694.320579][ T5961] IPVS: starting estimator thread 0... [ 694.336027][T18588] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 694.411109][T18582] loop4: detected capacity change from 0 to 32768 [ 694.418990][T18590] IPVS: using max 27 ests per chain, 64800 per kthread [ 694.451321][T18582] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 694.599871][T18582] XFS (loop4): Ending clean mount [ 694.629500][T18458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.652514][T18582] XFS (loop4): Quotacheck needed: Please wait. [ 694.695721][T18458] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.768105][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.775321][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.804914][T18582] XFS (loop4): Quotacheck: Done. [ 694.819140][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.826350][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.924814][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 694.924833][ T30] audit: type=1804 audit(1752757562.115:928): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4089" name="/newroot/210/file0/file1" dev="loop4" ino=9286 res=1 errno=0 [ 695.035624][T16108] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 695.138147][ T5857] Bluetooth: hci0: command tx timeout [ 695.299526][T18458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.584992][T18624] loop5: detected capacity change from 0 to 32768 [ 695.653003][T18624] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 695.721531][T18624] XFS (loop5): Ending clean mount [ 695.786752][ T30] audit: type=1800 audit(1752757562.975:929): pid=18624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4100" name="file1" dev="loop5" ino=5766 res=0 errno=0 [ 695.811304][T18624] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8 [ 695.823565][T18624] XFS (loop5): Unmount and run xfs_repair [ 695.829450][T18624] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 695.836865][T18624] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 695.845793][T18624] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 695.854746][T18624] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 695.863781][T18624] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 695.872735][T18624] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 695.883749][T18624] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 695.892690][T18624] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 695.901647][T18624] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 695.910602][T18624] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 74 [ 695.939669][T18642] loop4: detected capacity change from 0 to 2048 [ 696.003971][T17919] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 696.016226][T18642] NILFS (loop4): invalid segment: Magic number mismatch [ 696.055625][T18642] NILFS (loop4): trying rollback from an earlier position [ 696.063827][T17919] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 696.288806][T18642] NILFS (loop4): recovery complete [ 696.318188][T18458] veth0_vlan: entered promiscuous mode [ 696.345369][T18650] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 696.354733][T18458] veth1_vlan: entered promiscuous mode [ 696.482394][T18458] veth0_macvtap: entered promiscuous mode [ 696.523784][T18458] veth1_macvtap: entered promiscuous mode [ 696.603241][T18458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.686569][T18458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.921608][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4108'. [ 696.935432][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.966403][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.006395][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4108'. [ 697.059549][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.068211][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4108'. [ 697.077337][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.239996][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4108'. [ 697.265507][T18667] syz.4.4109: attempt to access beyond end of device [ 697.265507][T18667] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 697.328821][T18667] exFAT-fs (loop4): unable to read boot sector [ 697.345447][T18667] exFAT-fs (loop4): failed to read boot sector [ 697.355698][T18667] exFAT-fs (loop4): failed to recognize exfat type [ 697.386179][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4108'. [ 697.622447][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4108'. [ 697.690692][ T6793] bridge_slave_1: left allmulticast mode [ 697.711383][ T6793] bridge_slave_1: left promiscuous mode [ 697.747673][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.789447][ T6793] bridge_slave_0: left allmulticast mode [ 697.807033][ T6793] bridge_slave_0: left promiscuous mode [ 697.817588][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.030375][T18671] loop4: detected capacity change from 0 to 32768 [ 698.039206][T18671] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4109 (18671) [ 698.081157][T18671] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 698.092681][T18671] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 698.107006][T18671] BTRFS info (device loop4): disk space caching is enabled [ 698.114857][T18671] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 698.231775][T18671] BTRFS info (device loop4): rebuilding free space tree [ 698.292887][T18671] BTRFS info (device loop4): disabling free space tree [ 698.300190][T18671] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 698.324936][T18671] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 698.463601][T18667] BTRFS info (device loop4): balance: start -d -m [ 698.486026][T18667] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 698.683723][T18667] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 698.954494][ T6793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.972944][T18667] BTRFS info (device loop4): balance: canceled [ 698.973611][ T6793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.998958][ T6793] bond0 (unregistering): Released all slaves [ 699.113869][T16108] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 700.004595][T18711] loop4: detected capacity change from 0 to 4096 [ 700.046129][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 700.086482][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 700.110065][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 700.131074][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 700.169467][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 700.231810][T18697] loop5: detected capacity change from 0 to 32768 [ 700.255456][ T6793] hsr_slave_0: left promiscuous mode [ 700.291237][ T6793] hsr_slave_1: left promiscuous mode [ 700.314107][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.347609][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.365273][T18697] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 700.888665][T17919] ocfs2: Unmounting device (7,5) on (node local) [ 701.329425][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.336869][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.489195][ T6793] veth1_macvtap: left promiscuous mode [ 701.494834][ T6793] veth0_macvtap: left promiscuous mode [ 701.549325][ T6793] veth1_vlan: left promiscuous mode [ 701.584039][ T6793] veth0_vlan: left promiscuous mode [ 702.054762][T18733] loop4: detected capacity change from 0 to 32768 [ 702.079272][T18733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4126 (18733) [ 702.145263][T18733] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 702.167482][T18733] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 702.191992][T18733] BTRFS info (device loop4): disk space caching is enabled [ 702.237424][T18733] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 702.257688][ T5857] Bluetooth: hci0: command tx timeout [ 702.380633][T18735] loop5: detected capacity change from 0 to 32768 [ 702.624552][T18735] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 702.632374][T18733] BTRFS info (device loop4): rebuilding free space tree [ 702.669151][T18733] BTRFS info (device loop4): disabling free space tree [ 702.679976][T18735] XFS (loop5): Ending clean mount [ 702.683177][T18733] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 702.720733][T18733] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 702.866348][T17919] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 702.925585][T16108] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 703.703156][T18768] netlink: 'syz.5.4132': attribute type 21 has an invalid length. [ 703.716185][T18768] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4132'. [ 703.813455][T18770] netlink: 'syz.5.4132': attribute type 21 has an invalid length. [ 703.821574][T18770] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4132'. [ 704.010620][ T6793] team0 (unregistering): Port device team_slave_1 removed [ 704.113542][ T6793] team0 (unregistering): Port device team_slave_0 removed [ 704.349765][ T5857] Bluetooth: hci0: command tx timeout [ 704.673052][T18772] loop4: detected capacity change from 0 to 512 [ 704.688069][T18772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 704.733462][T18772] EXT4-fs (loop4): 1 truncate cleaned up [ 704.742348][T18772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.822280][T16108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.454275][T18768] netlink: 'syz.5.4132': attribute type 5 has an invalid length. [ 705.463192][T18737] smc: net device bond0 applied user defined pnetid SYZ2 [ 705.467668][T18768] netlink: 'syz.5.4132': attribute type 6 has an invalid length. [ 705.478509][T18738] smc: net device bond0 erased user defined pnetid SYZ2 [ 705.484475][T18768] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4132'. [ 705.495804][T18770] netlink: 'syz.5.4132': attribute type 5 has an invalid length. [ 705.525003][T18770] netlink: 'syz.5.4132': attribute type 6 has an invalid length. [ 705.544014][T18770] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4132'. [ 706.103211][ T30] audit: type=1326 audit(1752757573.295:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18782 comm="syz.4.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b0d8e929 code=0x7fc00000 [ 706.197913][T18715] chnl_net:caif_netlink_parms(): no params data found [ 706.417904][ T5857] Bluetooth: hci0: command tx timeout [ 706.643962][T18715] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.651752][T18715] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.667614][T18715] bridge_slave_0: entered allmulticast mode [ 706.684417][T18715] bridge_slave_0: entered promiscuous mode [ 706.705263][T18715] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.722828][T18715] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.737941][T18715] bridge_slave_1: entered allmulticast mode [ 706.757766][T18715] bridge_slave_1: entered promiscuous mode [ 706.872916][T18715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.913181][T18715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.927762][ T1212] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 707.043510][T18715] team0: Port device team_slave_0 added [ 707.079040][T18715] team0: Port device team_slave_1 added [ 707.097596][ T1212] usb 6-1: Using ep0 maxpacket: 8 [ 707.138612][ T1212] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 707.159399][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.189824][ T1212] usb 6-1: Product: syz [ 707.194078][ T1212] usb 6-1: Manufacturer: syz [ 707.219238][ T1212] usb 6-1: SerialNumber: syz [ 707.228488][T18715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.235491][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.261492][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.270222][ T1212] usb 6-1: config 0 descriptor?? [ 707.275459][T18715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.293304][T18715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.301720][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.327658][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.351734][T18715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.435167][T18820] loop4: detected capacity change from 0 to 40427 [ 707.444604][T18820] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 707.477140][T18820] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 707.497735][ T1212] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 707.530415][T18715] hsr_slave_0: entered promiscuous mode [ 707.554714][T18715] hsr_slave_1: entered promiscuous mode [ 707.568756][T18715] debugfs: 'hsr0' already exists in 'hsr' [ 707.574901][T18715] Cannot create hsr debugfs directory [ 707.702041][T18820] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 707.732383][T18820] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 707.761435][T18820] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 707.807583][T18834] sp0: Synchronizing with TNC [ 707.828285][T18832] [U] è [ 708.183759][T18848] fuse: Bad value for 'fd' [ 708.300439][ T1212] usb write operation failed. (-71) [ 708.322350][ T1212] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 708.353998][ T1212] dvbdev: DVB: registering new adapter (Terratec H7) [ 708.373090][T18715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.386557][ T1212] usb 6-1: media controller created [ 708.392965][ T1212] usb read operation failed. (-71) [ 708.430355][ T1212] usb write operation failed. (-71) [ 708.440210][T18715] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.459669][ T1212] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 708.485386][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.492675][ T8654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.502274][ T5857] Bluetooth: hci0: command tx timeout [ 708.512366][ T1212] usb 6-1: USB disconnect, device number 27 [ 708.548448][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.555687][ T8654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.200521][T18715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.058749][T18715] veth0_vlan: entered promiscuous mode [ 710.077551][ T5857] Bluetooth: Wrong link type (-71) [ 710.082685][T18874] loop5: detected capacity change from 0 to 32768 [ 710.092999][T18715] veth1_vlan: entered promiscuous mode [ 710.131311][T18715] veth0_macvtap: entered promiscuous mode [ 710.162222][T18715] veth1_macvtap: entered promiscuous mode [ 710.184875][T18715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.198182][T18715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.234533][T18874] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc [ 710.234568][T18874] allowing incompatible features above 0.0: (unknown version) [ 710.234584][T18874] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 710.258206][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.334276][T18874] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 710.344334][T18874] bcachefs (loop5): invalid journal entry, version=1.7: mi_btree_bitmap type=usage in superblock: invalid journal entry usage: bad size, fixing [ 710.363162][T18874] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 710.371762][T18874] bcachefs (loop5): Version upgrade required: [ 710.371762][T18874] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 710.371762][T18874] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 710.371762][T18874] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 710.572070][T18874] bcachefs (loop5): dropping and reconstructing all alloc info [ 710.611560][T18874] bcachefs (loop5): accounting_read... done [ 710.637478][T18874] bcachefs (loop5): alloc_read... done [ 710.648469][T18874] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 710.668372][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.676344][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.774715][ T8654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.802513][T18874] bcachefs (loop5): inode 536870912:4294967295 has wrong backpointer: [ 710.802574][T18874] got 4330382808765833931:0 [ 710.802595][T18874] should be 4096:4330382808765833931, fixing [ 710.815013][ T8654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.155639][ T6782] bridge_slave_1: left allmulticast mode [ 711.170022][ T6782] bridge_slave_1: left promiscuous mode [ 711.194215][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.225425][ T6782] bridge_slave_0: left allmulticast mode [ 711.254632][ T6782] bridge_slave_0: left promiscuous mode [ 711.268056][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.310544][ T6782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.321785][ T6782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.334005][ T6782] bond0 (unregistering): Released all slaves [ 712.790788][ T6782] hsr_slave_0: left promiscuous mode [ 712.820466][ T6782] hsr_slave_1: left promiscuous mode [ 712.848757][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.861928][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.884486][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.917583][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.026914][ T6782] veth1_macvtap: left promiscuous mode [ 713.051413][ T6782] veth0_macvtap: left promiscuous mode [ 713.057197][ T6782] veth1_vlan: left promiscuous mode [ 713.062737][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4184'. [ 713.072687][ T6782] veth0_vlan: left promiscuous mode [ 713.080079][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4184'. [ 713.251019][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.275346][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 713.288203][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.301010][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.315618][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.795188][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 714.613681][ T6782] team0 (unregistering): Port device team_slave_1 removed [ 714.731328][ T6782] team0 (unregistering): Port device team_slave_0 removed [ 715.377977][ T5852] Bluetooth: hci0: command tx timeout [ 716.987185][T18919] chnl_net:caif_netlink_parms(): no params data found [ 717.101922][T18964] loop4: detected capacity change from 0 to 256 [ 717.180769][T18964] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 717.459814][ T5852] Bluetooth: hci0: command tx timeout [ 717.473553][T18919] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.507208][T18919] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.512814][T18955] loop5: detected capacity change from 0 to 32768 [ 717.522831][T18919] bridge_slave_0: entered allmulticast mode [ 717.532181][T18919] bridge_slave_0: entered promiscuous mode [ 717.541731][T18919] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.549399][T18919] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.556880][T18919] bridge_slave_1: entered allmulticast mode [ 717.559049][T18977] loop4: detected capacity change from 0 to 512 [ 717.565255][T18919] bridge_slave_1: entered promiscuous mode [ 717.600289][T18977] EXT4-fs: Ignoring removed orlov option [ 717.625459][T18977] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 717.727534][T18977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 717.751159][T18977] EXT4-fs error (device loop4): ext4_iget_extra_inode:5103: inode #15: comm syz.4.4206: corrupted in-inode xattr: e_value size too large [ 717.793044][T18919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.814294][T18977] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4206: couldn't read orphan inode 15 (err -117) [ 717.883202][T18919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.905001][T18977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.042638][T18919] team0: Port device team_slave_0 added [ 718.073536][T18919] team0: Port device team_slave_1 added [ 718.132063][T16108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.150819][T18986] netlink: 'syz.0.4211': attribute type 4 has an invalid length. [ 718.321990][T18919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.344009][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.386442][T18919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.462317][T18919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.482311][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.597419][T18919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.831663][T18919] hsr_slave_0: entered promiscuous mode [ 718.848860][T18919] hsr_slave_1: entered promiscuous mode [ 718.855411][T18919] debugfs: 'hsr0' already exists in 'hsr' [ 718.907353][T18919] Cannot create hsr debugfs directory [ 719.157803][T18996] loop5: detected capacity change from 0 to 32768 [ 719.227649][ T30] audit: type=1800 audit(1752757586.415:931): pid=18996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4210" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 719.538499][ T5852] Bluetooth: hci0: command tx timeout [ 719.661776][T18919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.733166][T18919] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.762267][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.769542][ T6793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.820114][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.827394][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.066016][T19028] loop4: detected capacity change from 0 to 1024 [ 720.156216][T19028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.329800][T18919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.426393][T16108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.912011][T19062] loop4: detected capacity change from 0 to 512 [ 720.972694][T19062] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4237: bad orphan inode 11862016 [ 721.011761][T18919] veth0_vlan: entered promiscuous mode [ 721.030344][T19062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 721.036480][T18919] veth1_vlan: entered promiscuous mode [ 721.067612][T19062] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.096779][T18919] veth0_macvtap: entered promiscuous mode [ 721.110407][T18919] veth1_macvtap: entered promiscuous mode [ 721.136478][T18919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.151676][T19070] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4238'. [ 721.169911][T19062] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 721.210265][T18919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.326396][T16108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 721.481624][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.501195][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.540719][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.549769][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.577685][ T1212] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 721.617697][ T5852] Bluetooth: hci0: command tx timeout [ 721.790097][ T1212] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 721.800049][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.815558][ T1212] usb 6-1: config 0 descriptor?? [ 721.840820][ T1212] usb 6-1: bad CDC descriptors [ 721.879535][ T6793] bridge_slave_1: left allmulticast mode [ 721.895380][ T6793] bridge_slave_1: left promiscuous mode [ 721.905354][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.934975][ T6793] bridge_slave_0: left allmulticast mode [ 721.956345][ T6793] bridge_slave_0: left promiscuous mode [ 721.962461][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.010173][T19079] loop4: detected capacity change from 0 to 32768 [ 722.019764][T19079] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4242 (19079) [ 722.040735][T19079] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 722.071515][T19079] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 722.077879][ T5910] usb 6-1: USB disconnect, device number 28 [ 722.104030][T19079] BTRFS info (device loop4): disk space caching is enabled [ 722.115960][T19079] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 722.285740][T19079] BTRFS info (device loop4): rebuilding free space tree [ 722.358527][T19079] BTRFS info (device loop4): disabling free space tree [ 722.365513][T19079] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 722.375944][T19079] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 722.682578][T16108] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 722.687061][ T8654] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 723.425659][ T6793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.453051][ T6793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.519310][ T6793] bond0 (unregistering): Released all slaves [ 723.795166][T19110] geneve2: entered promiscuous mode [ 723.834880][T19110] geneve2: entered allmulticast mode [ 724.213802][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 724.224959][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 724.234193][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 724.240434][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 724.241206][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 724.530405][ T6793] hsr_slave_0: left promiscuous mode [ 724.547734][ T6793] hsr_slave_1: left promiscuous mode [ 724.556559][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.570799][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.615502][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.633378][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.742501][ T6793] veth1_macvtap: left promiscuous mode [ 724.762919][ T6793] veth0_macvtap: left promiscuous mode [ 724.777587][ T6793] veth1_vlan: left promiscuous mode [ 724.783161][ T6793] veth0_vlan: left promiscuous mode [ 724.834698][T19138] loop4: detected capacity change from 0 to 2048 [ 724.875531][T19138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.922922][T19118] loop5: detected capacity change from 0 to 32768 [ 725.000030][T19118] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 725.043816][T19118] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 725.102807][T19152] loop4: detected capacity change from 0 to 256 [ 725.201271][T19118] XFS (loop5): Ending clean mount [ 725.272105][T19118] XFS (loop5): Quotacheck needed: Please wait. [ 725.381260][T19118] XFS (loop5): Quotacheck: Done. [ 725.393394][ T30] audit: type=1800 audit(1752757592.585:932): pid=19154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4267" name="file1" dev="tmpfs" ino=395 res=0 errno=0 [ 725.504487][T17919] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 725.586231][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.799619][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.934301][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.344569][ T5858] Bluetooth: hci0: command tx timeout [ 726.449097][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.501780][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.551132][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.603320][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.732561][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.921170][ T6793] team0 (unregistering): Port device team_slave_1 removed [ 727.036870][ T6793] team0 (unregistering): Port device team_slave_0 removed [ 727.286017][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.426941][ T5858] Bluetooth: hci0: command tx timeout [ 728.467707][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.663339][T19203] loop4: detected capacity change from 0 to 40427 [ 728.720933][T19203] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 728.734005][T19203] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 728.801334][T19203] F2FS-fs (loop4): invalid crc value [ 729.120082][T19203] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 729.156427][T19203] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 729.168385][T19203] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 729.515898][T19224] netlink: 'syz.5.4295': attribute type 21 has an invalid length. [ 729.546786][T19224] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4295'. [ 729.639729][T19229] input: syz0 as /devices/virtual/input/input55 [ 729.697111][T19121] chnl_net:caif_netlink_parms(): no params data found [ 730.102973][T19121] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.135450][T19121] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.157600][T19121] bridge_slave_0: entered allmulticast mode [ 730.181039][T19121] bridge_slave_0: entered promiscuous mode [ 730.203555][T19121] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.219662][T19121] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.227057][T19121] bridge_slave_1: entered allmulticast mode [ 730.240458][T19121] bridge_slave_1: entered promiscuous mode [ 730.361264][T19245] loop5: detected capacity change from 0 to 1024 [ 730.361693][T19121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.402641][T19121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.503373][ T5858] Bluetooth: hci0: command tx timeout [ 730.580442][T17919] hfsplus: node 4:3 still has 2 user(s)! [ 730.650109][T19121] team0: Port device team_slave_0 added [ 730.713232][T19121] team0: Port device team_slave_1 added [ 730.890508][T19121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.912176][T19258] netlink: 428 bytes leftover after parsing attributes in process `syz.0.4309'. [ 730.921000][T19121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.970756][T19121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.985356][T19258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4309'. [ 730.987645][T19121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.010558][T19121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.073182][T19121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.253487][T19121] hsr_slave_0: entered promiscuous mode [ 731.270881][T19121] hsr_slave_1: entered promiscuous mode [ 731.290127][T19121] debugfs: 'hsr0' already exists in 'hsr' [ 731.296507][T19121] Cannot create hsr debugfs directory [ 731.376254][T19269] loop5: detected capacity change from 0 to 256 [ 731.911250][T19121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.982812][T19121] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.012811][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.020127][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.096723][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.103995][ T8653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.354320][T19274] loop5: detected capacity change from 0 to 32768 [ 732.408897][T19274] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 732.546281][T19274] XFS (loop5): Ending clean mount [ 732.563406][T19274] XFS (loop5): Quotacheck needed: Please wait. [ 732.576224][T19286] loop4: detected capacity change from 0 to 32768 [ 732.577802][ T5858] Bluetooth: hci0: command tx timeout [ 732.697675][T19274] XFS (loop5): Quotacheck: Done. [ 732.703332][T19121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.904292][T17919] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 732.913158][T19286] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 732.913188][T19286] allowing incompatible features above 0.0: (unknown version) [ 732.913200][T19286] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 732.967432][T19286] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 732.997141][T19286] bcachefs (loop4): initializing new filesystem [ 733.041677][T19286] bcachefs (loop4): going read-write [ 733.559031][T19121] veth0_vlan: entered promiscuous mode [ 733.578501][T19121] veth1_vlan: entered promiscuous mode [ 733.640068][T19121] veth0_macvtap: entered promiscuous mode [ 733.651146][T19121] veth1_macvtap: entered promiscuous mode [ 733.738113][T19286] bcachefs (loop4): initializing freespace [ 733.739701][T19121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.791744][T19121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.876433][T19334] loop5: detected capacity change from 0 to 4096 [ 733.904528][T19334] NILFS (loop5): invalid segment: Checksum error in segment payload [ 733.932412][T19334] NILFS (loop5): trying rollback from an earlier position [ 733.988905][T19334] NILFS (loop5): recovery complete [ 734.006293][T19335] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 734.082094][ T8647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.098959][ T8647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.138242][T19338] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚0x0000000000000003 [ 734.146806][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.155306][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.234555][T16108] bcachefs (loop4): clean shutdown complete, journal seq 26 [ 734.576879][ T8647] bridge_slave_1: left allmulticast mode [ 734.600455][ T8647] bridge_slave_1: left promiscuous mode [ 734.606346][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.628962][ T8647] bridge_slave_0: left allmulticast mode [ 734.644952][ T8647] bridge_slave_0: left promiscuous mode [ 734.674575][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.785914][T19344] loop5: detected capacity change from 0 to 128 [ 735.483372][T19346] loop4: detected capacity change from 0 to 40427 [ 735.490938][T19346] f2fs: Bad value for 'alloc_mode' [ 736.000489][ T8647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.011512][ T8647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.025616][ T8647] bond0 (unregistering): Released all slaves [ 737.527392][ T8647] hsr_slave_0: left promiscuous mode [ 737.577246][ T8647] hsr_slave_1: left promiscuous mode [ 737.591282][ T8647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.621275][ T8647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.678356][ T8647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.703995][ T8647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.733670][T19326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 737.752426][T19326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.774703][T19326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.783072][T19326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.793458][T19326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 737.850358][ T8647] veth1_macvtap: left promiscuous mode [ 737.871187][ T8647] veth0_macvtap: left promiscuous mode [ 737.877665][ T8647] veth1_vlan: left promiscuous mode [ 737.883257][ T8647] veth0_vlan: left promiscuous mode [ 737.896246][T19376] input: syz0 as /devices/virtual/input/input56 [ 737.906723][T19376] input: failed to attach handler leds to device input56, error: -6 [ 738.514474][T19390] input: syz0 as /devices/virtual/input/input57 [ 739.311623][ T8647] team0 (unregistering): Port device team_slave_1 removed [ 739.355707][T19399] vcan0: tx drop: invalid sa for name 0x0000000000100000 [ 739.451795][ T8647] team0 (unregistering): Port device team_slave_0 removed [ 739.877431][T19326] Bluetooth: hci0: command tx timeout [ 741.184942][T19429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.192077][T19371] chnl_net:caif_netlink_parms(): no params data found [ 741.388033][ T981] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 741.524240][T19440] use of bytesused == 0 is deprecated and will be removed in the future, [ 741.533941][T19440] use the actual size instead. [ 741.577406][ T981] usb 6-1: Using ep0 maxpacket: 32 [ 741.589655][ T981] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 741.605145][ T981] usb 6-1: config 0 has no interface number 0 [ 741.611709][ T981] usb 6-1: config 0 interface 184 has no altsetting 0 [ 741.622542][ T981] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 741.635213][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.649114][ T981] usb 6-1: Product: syz [ 741.658647][ T981] usb 6-1: Manufacturer: syz [ 741.663433][ T981] usb 6-1: SerialNumber: syz [ 741.672620][ T981] usb 6-1: config 0 descriptor?? [ 741.691407][ T981] smsc75xx v1.0.0 [ 741.792500][T19371] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.833492][T19371] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.855240][T19371] bridge_slave_0: entered allmulticast mode [ 741.939185][T19326] Bluetooth: hci0: command tx timeout [ 742.013147][T19371] bridge_slave_0: entered promiscuous mode [ 742.060090][T19371] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.095834][T19371] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.143186][T19371] bridge_slave_1: entered allmulticast mode [ 742.191668][T19371] bridge_slave_1: entered promiscuous mode [ 742.370623][ T981] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 742.393940][ T981] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 742.633574][ T981] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 742.664873][ T981] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 742.722629][ T981] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 742.726118][T19457] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.775999][ T981] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 742.795594][ T981] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 742.836784][T19371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.868020][ T981] usb 6-1: USB disconnect, device number 29 [ 742.888791][T19371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.989425][T19371] team0: Port device team_slave_0 added [ 743.011301][T19371] team0: Port device team_slave_1 added [ 743.068722][T19371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.075882][T19371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.107757][T19371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.120736][T19371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.128419][T19371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.154920][T19371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.273429][T19371] hsr_slave_0: entered promiscuous mode [ 743.280947][T19371] hsr_slave_1: entered promiscuous mode [ 743.302315][T19371] debugfs: 'hsr0' already exists in 'hsr' [ 743.321683][T19371] Cannot create hsr debugfs directory [ 743.354033][T19468] loop5: detected capacity change from 0 to 64 [ 743.392771][ T30] audit: type=1800 audit(1752757610.585:933): pid=19468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4383" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 743.414725][T19468] syz.5.4383: attempt to access beyond end of device [ 743.414725][T19468] loop5: rw=34817, sector=14, nr_sectors = 65 limit=64 [ 743.843059][T19371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.028565][T19326] Bluetooth: hci0: command tx timeout [ 744.036663][T19371] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.065997][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.073301][ T8647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.136151][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.143504][ T8647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.735976][ T30] audit: type=1326 audit(1752757611.925:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 744.810573][ T30] audit: type=1326 audit(1752757611.925:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 744.869134][T19371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.908488][ T30] audit: type=1326 audit(1752757611.925:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 744.978235][ T30] audit: type=1326 audit(1752757611.925:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 745.047510][ T30] audit: type=1326 audit(1752757611.925:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 745.127657][ T30] audit: type=1326 audit(1752757611.955:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 745.204782][ T30] audit: type=1326 audit(1752757611.955:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 745.306731][ T30] audit: type=1326 audit(1752757611.955:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 745.399775][ T30] audit: type=1326 audit(1752757611.965:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f628fd8e929 code=0x7ffc0000 [ 745.519841][T19514] loop4: detected capacity change from 0 to 32768 [ 745.558818][T19514] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4399 (19514) [ 745.592713][T19514] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 745.606697][T19514] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 745.637766][T19514] BTRFS info (device loop4): using free-space-tree [ 745.778140][T19514] BTRFS info (device loop4): rebuilding free space tree [ 745.786571][T19371] veth0_vlan: entered promiscuous mode [ 745.817570][T19531] loop5: detected capacity change from 0 to 32768 [ 745.853422][T19371] veth1_vlan: entered promiscuous mode [ 745.867983][T19531] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 745.893486][T19371] veth0_macvtap: entered promiscuous mode [ 745.920216][T19371] veth1_macvtap: entered promiscuous mode [ 745.984809][T19371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.001388][T19371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.097467][T19326] Bluetooth: hci0: command tx timeout [ 746.169648][T19531] XFS (loop5): Ending clean mount [ 746.325845][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.344349][T16108] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 746.345719][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.403168][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.436487][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.506134][T17919] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 746.970254][T19566] loop4: detected capacity change from 0 to 512 [ 746.979205][T19566] ext2: Unknown parameter 'euid<00000000000000000000' [ 747.061165][ T8647] bridge_slave_1: left allmulticast mode [ 747.066883][ T8647] bridge_slave_1: left promiscuous mode [ 747.093155][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.160465][ T8647] bridge_slave_0: left allmulticast mode [ 747.166186][ T8647] bridge_slave_0: left promiscuous mode [ 747.177108][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.545752][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.552260][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.196440][ T8647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.212087][ T8647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.222771][ T8647] bond0 (unregistering): Released all slaves [ 748.561339][ T8647] hsr_slave_0: left promiscuous mode [ 748.567638][ T8647] hsr_slave_1: left promiscuous mode [ 748.573598][ T8647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.581349][ T8647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.590931][ T8647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.598960][ T8647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.624770][ T8647] veth1_macvtap: left promiscuous mode [ 748.633519][ T8647] veth0_macvtap: left promiscuous mode [ 748.639348][ T8647] veth1_vlan: left promiscuous mode [ 748.644649][ T8647] veth0_vlan: left promiscuous mode [ 748.955441][T19577] loop4: detected capacity change from 0 to 1024 [ 748.996359][T19577] EXT4-fs: Ignoring removed orlov option [ 749.112159][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4416'. [ 749.123332][T19577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.626947][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.707087][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.717115][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.735173][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.754392][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.857177][T16108] EXT4-fs error (device loop4): ext4_iget_extra_inode:5103: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 749.926153][T16108] EXT4-fs error (device loop4): ext4_iget_extra_inode:5103: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 750.957320][T19604] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 751.221262][ T8647] team0 (unregistering): Port device team_slave_1 removed [ 751.394945][T19618] loop5: detected capacity change from 0 to 64 [ 751.435768][ T8647] team0 (unregistering): Port device team_slave_0 removed [ 751.887567][ T5857] Bluetooth: hci0: command tx timeout [ 752.804918][T19632] loop5: detected capacity change from 0 to 128 [ 752.838540][T19632] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 752.851374][T19632] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 752.981354][T19632] EXT4-fs error (device loop5): dx_make_map:1296: inode #2: block 18: comm syz.5.4439: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 753.024338][T19632] EXT4-fs error (device loop5) in do_split:2029: Corrupt filesystem [ 753.122523][T17919] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 753.413953][T16108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.733126][T19644] vlan2: entered allmulticast mode [ 753.763087][T19644] erspan0: entered allmulticast mode [ 753.937545][ T5857] Bluetooth: hci0: command tx timeout [ 754.379620][T19589] chnl_net:caif_netlink_parms(): no params data found [ 754.413198][ T8647] bridge_slave_1: left allmulticast mode [ 754.422242][ T8647] bridge_slave_1: left promiscuous mode [ 754.441054][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.498595][ T8647] bridge_slave_0: left allmulticast mode [ 754.504369][ T8647] bridge_slave_0: left promiscuous mode [ 754.510924][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.688811][T19326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 754.733491][T19326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 754.750265][T19326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 754.762278][T19326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 754.775074][T19326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 755.030412][T19663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4451'. [ 755.830938][ T8647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.850249][ T8647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.864039][T19669] loop5: detected capacity change from 0 to 1024 [ 755.874253][ T8647] bond0 (unregistering): Released all slaves [ 755.891213][T19669] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 756.025688][ T5857] Bluetooth: hci0: command tx timeout [ 756.040172][ T8647] tipc: Disabling bearer [ 756.050449][ T8647] tipc: Left network mode [ 756.246967][T19680] loop5: detected capacity change from 0 to 4096 [ 756.301260][T19680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.319382][T19589] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.327859][T19589] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.335649][T19589] bridge_slave_0: entered allmulticast mode [ 756.345120][T19680] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #12: block 80: comm syz.5.4454: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 756.346279][T19589] bridge_slave_0: entered promiscuous mode [ 756.459423][T19680] EXT4-fs (loop5): Remounting filesystem read-only [ 756.478419][T19680] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #12: comm syz.5.4454: directory missing '..' [ 756.520877][T19589] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.529115][T19589] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.536574][T19589] bridge_slave_1: entered allmulticast mode [ 756.551546][T19589] bridge_slave_1: entered promiscuous mode [ 756.556107][T17919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.715164][T19589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.755201][ T8647] hsr_slave_0: left promiscuous mode [ 756.766822][ T8647] hsr_slave_1: left promiscuous mode [ 756.782802][ T8647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.794210][ T8647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.805517][ T8647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.815517][ T8647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.846421][ T8647] dummy0: left allmulticast mode [ 756.852876][ T8647] veth1_macvtap: left promiscuous mode [ 756.858777][ T8647] veth0_macvtap: left promiscuous mode [ 756.864586][ T8647] veth1_vlan: left promiscuous mode [ 756.877930][ T8647] veth0_vlan: left promiscuous mode [ 756.897647][ T5857] Bluetooth: hci2: command tx timeout [ 757.907920][ T981] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 758.097593][ T5857] Bluetooth: hci0: command tx timeout [ 758.103002][ T981] usb 6-1: Using ep0 maxpacket: 32 [ 758.110093][ T981] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 758.119672][ T981] usb 6-1: config 0 has no interface number 0 [ 758.120444][ T8647] team0 (unregistering): Port device team_slave_1 removed [ 758.125814][ T981] usb 6-1: config 0 interface 2 has no altsetting 0 [ 758.165843][ T981] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 758.175217][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.183329][ T981] usb 6-1: Product: syz [ 758.187884][ T981] usb 6-1: Manufacturer: syz [ 758.192623][ T981] usb 6-1: SerialNumber: syz [ 758.220767][ T981] usb 6-1: config 0 descriptor?? [ 758.251594][ T8647] team0 (unregistering): Port device team_slave_0 removed [ 758.434846][ T981] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.716072][ T981] usb 6-1: USB disconnect, device number 30 [ 758.991843][ T5857] Bluetooth: hci2: command tx timeout [ 759.253358][T19710] loop5: detected capacity change from 0 to 128 [ 759.273815][T19710] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 759.286488][T19710] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 759.381006][T17919] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 759.419805][T19589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.617092][T19589] team0: Port device team_slave_0 added [ 759.648745][T19589] team0: Port device team_slave_1 added [ 759.865307][T19589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.877303][T19589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.906625][T19589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.920675][T19589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.947157][T19589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.974257][T19589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.291160][T19657] chnl_net:caif_netlink_parms(): no params data found [ 760.305454][ T8647] IPVS: stop unused estimator thread 0... [ 760.324237][T19589] hsr_slave_0: entered promiscuous mode [ 760.332855][T19589] hsr_slave_1: entered promiscuous mode [ 761.077956][ T5857] Bluetooth: hci2: command tx timeout [ 761.086485][T19657] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.100916][T19657] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.123395][T19657] bridge_slave_0: entered allmulticast mode [ 761.132744][T19657] bridge_slave_0: entered promiscuous mode [ 761.161696][T19657] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.169125][T19657] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.177043][T19657] bridge_slave_1: entered allmulticast mode [ 761.185155][T19657] bridge_slave_1: entered promiscuous mode [ 761.296320][T19759] sctp: [Deprecated]: syz.3.4484 (pid 19759) Use of int in max_burst socket option deprecated. [ 761.296320][T19759] Use struct sctp_assoc_value instead [ 761.503565][T19657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.538144][T19657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.723827][T19657] team0: Port device team_slave_0 added [ 761.740544][T19657] team0: Port device team_slave_1 added [ 761.992912][T19657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.008450][T19657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.079286][T19657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.123933][T19657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.147586][T19657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.191762][T19657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.304115][T19657] hsr_slave_0: entered promiscuous mode [ 762.311987][T19657] hsr_slave_1: entered promiscuous mode [ 762.327571][T19657] debugfs: 'hsr0' already exists in 'hsr' [ 762.333793][T19657] Cannot create hsr debugfs directory [ 762.670270][T19589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.714954][T19589] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.754737][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.762206][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.805037][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.812279][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.870030][T19657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.953404][T19657] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.998144][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.005409][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.074444][T19795] loop5: detected capacity change from 0 to 32768 [ 763.092414][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.099727][ T6791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.137837][ T5857] Bluetooth: hci2: command tx timeout [ 763.394887][T19795] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 763.394921][T19795] allowing incompatible features above 0.0: (unknown version) [ 763.394936][T19795] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 763.495518][T19795] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 763.532156][T19795] bcachefs (loop5): initializing new filesystem [ 763.654826][T19795] bcachefs (loop5): going read-write [ 763.741749][T19589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.806783][T19827] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4501'. [ 763.956109][T19795] bcachefs (loop5): initializing freespace [ 764.209062][T19657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.466398][T17919] bcachefs (loop5): clean shutdown complete, journal seq 8 [ 764.810628][T19589] veth0_vlan: entered promiscuous mode [ 764.856891][T19589] veth1_vlan: entered promiscuous mode [ 764.963362][T19589] veth0_macvtap: entered promiscuous mode [ 765.078641][T19589] veth1_macvtap: entered promiscuous mode [ 765.134192][T19589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.185334][T19589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.240751][T19657] veth0_vlan: entered promiscuous mode [ 765.304206][T19657] veth1_vlan: entered promiscuous mode [ 765.318542][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 765.318564][ T30] audit: type=1326 audit(1752757632.515:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.3.4513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f628fd8e929 code=0x0 [ 765.550498][T19657] veth0_macvtap: entered promiscuous mode [ 765.580169][T19871] vivid-001: disconnect [ 765.593662][T19657] veth1_macvtap: entered promiscuous mode [ 765.606863][T19867] vivid-001: reconnect [ 765.709191][T19657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.750266][T19657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.772073][ T8647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.793486][ T8647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.965132][ T8647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.988822][ T8647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.067055][ T6791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.078897][ T6791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.359182][ T8647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.367191][ T8647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.415095][ T6791] bridge_slave_1: left allmulticast mode [ 766.427621][ T6791] bridge_slave_1: left promiscuous mode [ 766.445616][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.477850][ T6791] bridge_slave_0: left allmulticast mode [ 766.483724][ T6791] bridge_slave_0: left promiscuous mode [ 766.494093][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.556987][ T6791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.569749][ T6791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.581536][ T6791] bond0 (unregistering): Released all slaves [ 767.980269][ T6791] hsr_slave_0: left promiscuous mode [ 767.986499][ T6791] hsr_slave_1: left promiscuous mode [ 767.993202][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.001021][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.009653][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.017071][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.045223][ T6791] veth1_macvtap: left promiscuous mode [ 768.051116][ T6791] veth0_macvtap: left promiscuous mode [ 768.056754][ T6791] veth1_vlan: left promiscuous mode [ 768.062330][ T6791] veth0_vlan: left promiscuous mode [ 768.408265][T19891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.871576][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 768.934602][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 768.947188][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 768.972396][ T5932] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 769.005320][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 769.013647][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 769.155339][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 769.187423][ T5932] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 769.214155][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.261843][ T5932] usb 6-1: config 0 descriptor?? [ 769.482069][ T5932] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 769.492653][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 769.504453][ T5932] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 769.511873][ T5932] usb 6-1: media controller created [ 769.530740][ T6791] team0 (unregistering): Port device team_slave_1 removed [ 769.542580][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.648686][ T6791] team0 (unregistering): Port device team_slave_0 removed [ 769.706231][ T5932] az6027: usb out operation failed. (-71) [ 769.718145][ T5932] az6027: usb out operation failed. (-71) [ 769.723941][ T5932] stb0899_attach: Driver disabled by Kconfig [ 769.734269][ T5932] az6027: no front-end attached [ 769.734269][ T5932] [ 769.743422][ T5932] az6027: usb out operation failed. (-71) [ 769.766138][ T5932] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 769.792775][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input58 [ 769.806152][ T5932] dvb-usb: schedule remote query interval to 400 msecs. [ 769.815273][ T5932] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 769.826319][ T5932] usb 6-1: USB disconnect, device number 31 [ 769.903502][ T5932] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 770.759022][T19905] loop5: detected capacity change from 0 to 32768 [ 770.839065][T19905] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 770.875957][T19905] XFS (loop5): Ending clean mount [ 770.896547][T19905] XFS (loop5): Quotacheck needed: Please wait. [ 771.088057][T19905] XFS (loop5): Quotacheck: Done. [ 771.148837][ T5857] Bluetooth: hci0: command tx timeout [ 771.506754][T17919] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 771.517443][ T981] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 771.697913][ T981] usb 8-1: Using ep0 maxpacket: 16 [ 771.705164][ T981] usb 8-1: config 1 has an invalid interface number: 230 but max is 0 [ 771.713703][ T981] usb 8-1: config 1 has no interface number 0 [ 771.723898][ T981] usb 8-1: config 1 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 771.777508][ T981] usb 8-1: config 1 interface 230 has no altsetting 0 [ 771.819954][ T981] usb 8-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=55.d0 [ 771.831576][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.850493][ T981] usb 8-1: Product: syz [ 771.872888][T19902] chnl_net:caif_netlink_parms(): no params data found [ 771.874539][ T981] usb 8-1: Manufacturer: syz [ 771.885951][T19924] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4532'. [ 771.894634][ T981] usb 8-1: SerialNumber: syz [ 771.942217][T19919] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 771.954086][ T981] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 772.231867][T19902] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.239414][T19902] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.246857][T19902] bridge_slave_0: entered allmulticast mode [ 772.264145][T19902] bridge_slave_0: entered promiscuous mode [ 772.278278][T19902] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.285675][T19902] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.297585][T19902] bridge_slave_1: entered allmulticast mode [ 772.311983][T19902] bridge_slave_1: entered promiscuous mode [ 772.440618][T19902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.463875][T19902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.607937][T19902] team0: Port device team_slave_0 added [ 772.632602][T19902] team0: Port device team_slave_1 added [ 772.726791][T19902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.747610][T19902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.797009][ T981] input: gspca_pac7302 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input59 [ 772.828834][T19902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.874250][T19902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.893913][T19902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.930222][T19902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.946583][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4543'. [ 772.956813][T19950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4543'. [ 773.019390][T19950] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 773.046507][ T981] usb 8-1: USB disconnect, device number 20 [ 773.217573][T19326] Bluetooth: hci0: command tx timeout [ 773.419299][T19902] hsr_slave_0: entered promiscuous mode [ 773.426695][T19902] hsr_slave_1: entered promiscuous mode [ 773.679616][T19955] loop5: detected capacity change from 0 to 32768 [ 773.893094][T19955] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 773.893124][T19955] allowing incompatible features above 0.0: (unknown version) [ 773.893140][T19955] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 774.040625][T19955] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 774.087212][T19955] bcachefs (loop5): initializing new filesystem [ 774.139102][T19902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.169783][T19955] bcachefs (loop5): going read-write [ 774.201285][T19902] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.232394][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.239736][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.267860][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.275094][ T6782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.448458][T19955] bcachefs (loop5): initializing freespace [ 774.781106][T19998] raw_sendmsg: syz.0.4555 forgot to set AF_INET. Fix it! [ 774.902635][T19902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.927986][T20002] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4556'. [ 774.953685][T20002] tc_dump_action: action bad kind [ 775.076940][T17919] bcachefs (loop5): clean shutdown complete, journal seq 8 [ 775.229079][T19326] Bluetooth: hci5: command 0x0406 tx timeout [ 775.298603][ T5857] Bluetooth: hci0: command tx timeout [ 775.849640][T19902] veth0_vlan: entered promiscuous mode [ 775.907712][T19902] veth1_vlan: entered promiscuous mode [ 776.061446][T19902] veth0_macvtap: entered promiscuous mode [ 776.072455][T20026] loop5: detected capacity change from 0 to 256 [ 776.104044][T19902] veth1_macvtap: entered promiscuous mode [ 776.110930][T20026] exfat: Deprecated parameter 'namecase' [ 776.142327][T20026] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 776.180813][T19902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.220472][T19902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.454743][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.475796][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.489024][T20030] syzkaller1: entered promiscuous mode [ 776.499797][T20030] syzkaller1: entered allmulticast mode [ 776.641368][ T8654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.659617][ T8654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.143084][ T3457] bridge_slave_1: left allmulticast mode [ 777.160839][ T3457] bridge_slave_1: left promiscuous mode [ 777.197977][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.248713][ T3457] bridge_slave_0: left allmulticast mode [ 777.260851][ T3457] bridge_slave_0: left promiscuous mode [ 777.273807][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.294802][T20032] loop5: detected capacity change from 0 to 32768 [ 777.348177][T20032] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 777.511998][T17919] (syz-executor,17919,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 777.554689][T17919] ocfs2: Unmounting device (7,5) on (node local) [ 778.411181][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.423759][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.434083][ T3457] bond0 (unregistering): Released all slaves [ 778.819423][ T3457] hsr_slave_0: left promiscuous mode [ 778.825793][ T3457] hsr_slave_1: left promiscuous mode [ 778.832183][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.839728][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.850920][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.858855][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.884130][ T3457] veth1_macvtap: left promiscuous mode [ 778.889806][ T3457] veth0_macvtap: left promiscuous mode [ 778.895527][ T3457] veth1_vlan: left promiscuous mode [ 778.902090][ T3457] veth0_vlan: left promiscuous mode [ 779.537975][ T31] INFO: task syz-executor:10913 blocked for more than 143 seconds. [ 779.549086][ T31] Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 779.587310][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 779.606329][ T31] task:syz-executor state:D stack:17496 pid:10913 tgid:10913 ppid:1 task_flags:0x400140 flags:0x00004006 [ 779.635500][ T31] Call Trace: [ 779.648397][ T31] [ 779.654877][ T31] __schedule+0x16fd/0x4cf0 [ 779.664252][ T31] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 779.678529][ T31] ? schedule+0x165/0x360 [ 779.687314][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.700075][ T31] ? __pfx___schedule+0x10/0x10 [ 779.715367][ T31] ? schedule+0x91/0x360 [ 779.726574][ T31] schedule+0x165/0x360 [ 779.737643][ T31] schedule_timeout+0x9a/0x270 [ 779.751629][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 779.768271][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.795137][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.824535][ T31] ? wait_for_completion+0x267/0x5d0 [ 779.854894][ T31] wait_for_completion+0x2bf/0x5d0 [ 779.875746][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 779.917294][ T31] ? try_to_wake_up+0x7f5/0x12b0 [ 779.928044][ T31] kthread_stop+0x194/0x5f0 [ 779.957331][ T31] bch2_copygc_stop+0x4f/0x150 [ 779.962203][ T31] __bch2_fs_read_only+0x4a/0x4f0 [ 779.987507][ T31] bch2_fs_read_only+0x403/0xa40 [ 779.992541][ T31] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 780.027324][ T31] ? __pfx___might_resched+0x10/0x10 [ 780.032703][ T31] ? down_write+0x162/0x1f0 [ 780.037853][ T31] ? __pfx_down_write+0x10/0x10 [ 780.042787][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 780.057319][ T31] __bch2_fs_stop+0xc9/0x8f0 [ 780.062016][ T31] ? __pfx___bch2_fs_stop+0x10/0x10 [ 780.068139][ T31] ? evict_inodes+0x67d/0x6d0 [ 780.072959][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 780.078080][ T31] ? bch2_sync_fs+0x14f/0x2e0 [ 780.082814][ T31] ? __pfx_bch2_put_super+0x10/0x10 [ 780.088114][ T31] generic_shutdown_super+0x132/0x2c0 [ 780.093523][ T31] bch2_kill_sb+0x41/0x50 [ 780.098157][ T31] deactivate_locked_super+0xbc/0x130 [ 780.103590][ T31] cleanup_mnt+0x425/0x4c0 [ 780.108105][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.113354][ T31] task_work_run+0x1d1/0x260 [ 780.118045][ T31] ? __pfx_task_work_run+0x10/0x10 [ 780.123214][ T31] ? __x64_sys_umount+0x122/0x160 [ 780.128347][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 780.133863][ T31] exit_to_user_mode_loop+0xec/0x110 [ 780.139546][ T31] do_syscall_64+0x2bd/0x3b0 [ 780.144270][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.149570][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.157710][ T31] ? clear_bhb_loop+0x60/0xb0 [ 780.162465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.178457][ T31] RIP: 0033:0x7f09fbb8fc57 [ 780.182953][ T31] RSP: 002b:00007ffd6eb6acc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 780.207481][ T31] RAX: 0000000000000000 RBX: 00007f09fbc10a8d RCX: 00007f09fbb8fc57 [ 780.215533][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6eb6ad80 [ 780.235564][ T31] RBP: 00007ffd6eb6ad80 R08: 0000000000000000 R09: 0000000000000000 [ 780.244570][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd6eb6be10 [ 780.255939][ T31] R13: 00007f09fbc10a8d R14: 000000000009ad15 R15: 00007ffd6eb6be50 [ 780.272072][ T31] [ 780.275347][ T31] [ 780.275347][ T31] Showing all locks held in the system: [ 780.286131][ T31] 2 locks held by rcu_tasks_trace/29: [ 780.314337][ T31] 1 lock held by khungtaskd/31: [ 780.320202][ T31] #0: ffffffff8e13e2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 780.336834][ T31] 4 locks held by kworker/u8:7/3457: [ 780.342260][ T31] 2 locks held by getty/5608: [ 780.346984][ T31] #0: ffff8880339210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 780.358380][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 780.393933][ T31] 3 locks held by kworker/1:4/5918: [ 780.407673][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 780.444356][ T31] #1: ffffc90004977bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 780.467653][ T31] #2: ffffffff8e143e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 780.498203][ T31] 3 locks held by kworker/u8:11/6782: [ 780.503675][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 780.527445][ T31] #1: ffffc90003cbfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 780.555753][ T31] #2: ffffffff8f52a608 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 780.565419][ T31] 3 locks held by kworker/u8:16/6793: [ 780.570999][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 780.581430][ T31] #1: ffff8880b8724008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 780.592193][ T31] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 780.601348][ T31] 2 locks held by syz-executor/10913: [ 780.606752][ T31] #0: ffff88807b6900e0 (&type->s_umount_key#61){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 780.617162][ T31] #1: ffff88803ed00278 (&c->state_lock){++++}-{4:4}, at: __bch2_fs_stop+0xc1/0x8f0 [ 780.626769][ T31] 2 locks held by bch-copygc/loop/17714: [ 780.632444][ T31] #0: ffff88803ed043a8 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220 [ 780.643237][ T31] #1: ffff88803ed26710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x53f/0x1e00 [ 780.653549][ T31] 2 locks held by syz.7.4575/20053: [ 780.659914][ T31] #0: ffffffff8f51d810 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 780.671806][ T31] #1: ffffffff8f52a608 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 780.682592][ T31] 2 locks held by syz.5.4578/20058: [ 780.687911][ T31] #0: ffffffff8f58f730 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.696150][ T31] #1: ffffffff8f52a608 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 780.706328][ T31] 2 locks held by syz.5.4578/20061: [ 780.711903][ T31] #0: ffffffff8f58f730 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.720210][ T31] #1: ffffffff8f52a608 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 780.729604][ T31] 1 lock held by syz.0.4579/20064: [ 780.734825][ T31] #0: ffffffff8e143e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 780.745827][ T31] [ 780.748348][ T31] ============================================= [ 780.748348][ T31] [ 780.756806][ T31] NMI backtrace for cpu 0 [ 780.756831][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 780.756873][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 780.756886][ T31] Call Trace: [ 780.756896][ T31] [ 780.756907][ T31] dump_stack_lvl+0x189/0x250 [ 780.756936][ T31] ? __wake_up_klogd+0xd9/0x110 [ 780.756965][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.756988][ T31] ? __pfx__printk+0x10/0x10 [ 780.757030][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 780.757057][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 780.757077][ T31] ? _printk+0xcf/0x120 [ 780.757109][ T31] ? __pfx__printk+0x10/0x10 [ 780.757138][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 780.757173][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 780.757199][ T31] watchdog+0xfee/0x1030 [ 780.757231][ T31] ? watchdog+0x1de/0x1030 [ 780.757275][ T31] kthread+0x70e/0x8a0 [ 780.757304][ T31] ? __pfx_watchdog+0x10/0x10 [ 780.757330][ T31] ? __pfx_kthread+0x10/0x10 [ 780.757365][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 780.757389][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.757410][ T31] ? __pfx_kthread+0x10/0x10 [ 780.757431][ T31] ret_from_fork+0x3f9/0x770 [ 780.757450][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 780.757471][ T31] ? __switch_to_asm+0x39/0x70 [ 780.757491][ T31] ? __switch_to_asm+0x33/0x70 [ 780.757510][ T31] ? __pfx_kthread+0x10/0x10 [ 780.757531][ T31] ret_from_fork_asm+0x1a/0x30 [ 780.757565][ T31] [ 780.909755][ T31] Sending NMI from CPU 0 to CPUs 1: [ 780.915025][ C1] NMI backtrace for cpu 1 [ 780.915045][ C1] CPU: 1 UID: 0 PID: 8651 Comm: kworker/u8:25 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 780.915068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 780.915081][ C1] Workqueue: bat_events batadv_nc_worker [ 780.915107][ C1] RIP: 0010:mark_lock+0x9/0x190 [ 780.915126][ C1] Code: ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 <53> 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb 09 00 00 00 83 db [ 780.915143][ C1] RSP: 0018:ffffc90002df7850 EFLAGS: 00000046 [ 780.915158][ C1] RAX: 00000000ffffff05 RBX: 0000000000000002 RCX: 0000000000000002 [ 780.915170][ C1] RDX: 0000000000000008 RSI: ffff8880249e2940 RDI: ffff8880249e1e00 [ 780.915182][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b47b6aa [ 780.915193][ C1] R10: dffffc0000000000 R11: fffffbfff1f45cc7 R12: 00000000ffffff05 [ 780.915206][ C1] R13: 0000000000000001 R14: ffff8880249e2940 R15: ffff8880249e2960 [ 780.915219][ C1] FS: 0000000000000000(0000) GS:ffff888125cd9000(0000) knlGS:0000000000000000 [ 780.915233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 780.915246][ C1] CR2: 00007f6290ae7d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 780.915262][ C1] Call Trace: [ 780.915270][ C1] [ 780.915280][ C1] __lock_acquire+0x6a8/0xd20 [ 780.915310][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 780.915332][ C1] lock_acquire+0x120/0x360 [ 780.915356][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 780.915383][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 780.915404][ C1] ? __pfx_batadv_nc_sniffed_purge+0x10/0x10 [ 780.915427][ C1] batadv_nc_process_nc_paths+0xdb/0x3a0 [ 780.915448][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 780.915470][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 780.915493][ C1] batadv_nc_worker+0x52b/0x610 [ 780.915513][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 780.915542][ C1] process_scheduled_works+0xae1/0x17b0 [ 780.915582][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 780.915628][ C1] worker_thread+0x8a0/0xda0 [ 780.915646][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 780.915672][ C1] ? __kthread_parkme+0x7b/0x200 [ 780.915695][ C1] kthread+0x70e/0x8a0 [ 780.915717][ C1] ? __pfx_worker_thread+0x10/0x10 [ 780.915733][ C1] ? __pfx_kthread+0x10/0x10 [ 780.915754][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 780.915774][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.915795][ C1] ? __pfx_kthread+0x10/0x10 [ 780.915816][ C1] ret_from_fork+0x3f9/0x770 [ 780.915834][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 780.915854][ C1] ? __switch_to_asm+0x39/0x70 [ 780.915876][ C1] ? __switch_to_asm+0x33/0x70 [ 780.915897][ C1] ? __pfx_kthread+0x10/0x10 [ 780.915918][ C1] ret_from_fork_asm+0x1a/0x30 [ 780.915948][ C1] [ 780.916426][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 781.204698][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 781.215991][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 781.226061][ T31] Call Trace: [ 781.229378][ T31] [ 781.232319][ T31] dump_stack_lvl+0x99/0x250 [ 781.237010][ T31] ? __asan_memcpy+0x40/0x70 [ 781.241695][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.247006][ T31] ? __pfx__printk+0x10/0x10 [ 781.251644][ T31] vpanic+0x281/0x750 [ 781.255767][ T31] ? __pfx_vpanic+0x10/0x10 [ 781.260302][ T31] ? preempt_schedule+0xae/0xc0 [ 781.265191][ T31] ? preempt_schedule_common+0x83/0xd0 [ 781.270700][ T31] panic+0xb9/0xc0 [ 781.274453][ T31] ? __pfx_panic+0x10/0x10 [ 781.278982][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 781.284382][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 781.290569][ T31] watchdog+0x102d/0x1030 [ 781.295018][ T31] ? watchdog+0x1de/0x1030 [ 781.299457][ T31] kthread+0x70e/0x8a0 [ 781.303546][ T31] ? __pfx_watchdog+0x10/0x10 [ 781.308239][ T31] ? __pfx_kthread+0x10/0x10 [ 781.312840][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.318047][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.323269][ T31] ? __pfx_kthread+0x10/0x10 [ 781.327874][ T31] ret_from_fork+0x3f9/0x770 [ 781.332562][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 781.337778][ T31] ? __switch_to_asm+0x39/0x70 [ 781.342605][ T31] ? __switch_to_asm+0x33/0x70 [ 781.347380][ T31] ? __pfx_kthread+0x10/0x10 [ 781.351986][ T31] ret_from_fork_asm+0x1a/0x30 [ 781.356780][ T31] [ 781.360120][ T31] Kernel Offset: disabled [ 781.364644][ T31] Rebooting in 86400 seconds..