last executing test programs: 1m19.080068677s ago: executing program 1 (id=186): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000900)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 1m18.79062764s ago: executing program 1 (id=190): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x8, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.49681309s ago: executing program 1 (id=194): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x200000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1m18.072727687s ago: executing program 1 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) unshare(0x26020400) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1m17.849901958s ago: executing program 1 (id=201): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m17.430341051s ago: executing program 1 (id=205): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x4e, 0xfa00, {0x4, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000300)) 1m16.661078708s ago: executing program 32 (id=205): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x4e, 0xfa00, {0x4, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000300)) 52.427627152s ago: executing program 0 (id=379): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r1, 0xbd4a9000) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x1, 0x10002, 0x0) 52.017862788s ago: executing program 0 (id=383): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x76, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) 51.673525526s ago: executing program 0 (id=387): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000009c0)={0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x4}, r2}}, 0x48) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xc28f) 50.588342221s ago: executing program 0 (id=398): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 50.290991024s ago: executing program 0 (id=402): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 49.776434319s ago: executing program 0 (id=407): connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x810) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 49.062906687s ago: executing program 33 (id=407): connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x810) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 31.434095503s ago: executing program 2 (id=513): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) recvfrom(r0, &(0x7f0000001a80)=""/4043, 0xfcb, 0x22, 0x0, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000c80)='x', 0x1}], 0x1) 31.112189027s ago: executing program 2 (id=515): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000002840)=[{&(0x7f0000000180)="b47b693fb8be1e856e", 0x9}], 0x1) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) 30.012298865s ago: executing program 2 (id=520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4084, 0xff4, 0x0, 0x0}, &(0x7f0000000000)=0x40) 29.741098066s ago: executing program 2 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b80)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="07de9ae3004865f36195c93617594bca658e0b966b6d116ecd4910edb0e65f31cb794b50544910eb6456aa609c6861b309b45ef6567d4e820a14ff961ba2f4a3713fdf8adc13aa34115d481dc607cf6ecefc260ef52c3ec19b03986055d54904fe9cd76a923407c252e18073e276f22da9f4d528729fe74609970ff0f1fd20dedc46c4c077d1907c6e56c95506ef8d787b61e0c37b0159a50a5f6be5dfa0afe9eaeed8ffd1a325b8982c80dd9e45d1aea60565aa8c0f427ebeac1f101ad7c598679e1899e7fc2462b3e55ec2b037aeec6af78d058f96bef36411fe2e5db3c4575668515aac63f8ce589f000845efd4e4321cecb196", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 28.621147647s ago: executing program 2 (id=527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000bc0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000380)=0xffffffff, 0x4) 26.359848779s ago: executing program 5 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127b, &(0x7f0000000000)={0x0, 0x1000}) write$9p(r0, &(0x7f0000000280)="64730de634af", 0x6) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)) 25.842751776s ago: executing program 2 (id=537): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40100, 0x92) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x6) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xff9c, 0x8001}) 25.841344954s ago: executing program 5 (id=538): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x4}, 0x90) 25.153015166s ago: executing program 34 (id=537): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40100, 0x92) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x6) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xff9c, 0x8001}) 24.72673157s ago: executing program 5 (id=542): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 23.387843355s ago: executing program 5 (id=550): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x2009400, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 22.993239937s ago: executing program 5 (id=551): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f00000001c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) 22.283344189s ago: executing program 5 (id=556): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 21.887075997s ago: executing program 35 (id=556): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.555095911s ago: executing program 8 (id=648): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x36}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f00000003c0)={0x23, 0xe0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.237370585s ago: executing program 8 (id=652): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000001280), r0) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001200)={0x2c, r1, 0x4f79951a91b7df8f, 0x70bd26, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x2040084) 3.891158891s ago: executing program 8 (id=654): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@deltfilter={0x141c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xa, 0xa}, {0x6, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x13e4, 0x2, [@TCA_CGROUP_POLICE={0x4b8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x4, 0x7ff, 0x2, 0x7, {0xdf, 0x2, 0x6, 0x6, 0x1, 0x1000}, {0x4, 0x2, 0x81, 0x4, 0x7, 0x10}, 0xee, 0x7ff, 0x7f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x69}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0x1, 0x0, 0x5, 0x7, 0xffff, 0xa, 0x2, 0x2, 0x1, 0x10, 0x7fff, 0xff, 0x80, 0x0, 0x6, 0x2, 0x7ff, 0x0, 0x1, 0xfffffffe, 0x9bd, 0x7f, 0xcff1, 0x200, 0xf7, 0xfffffff8, 0x100, 0x3, 0xff, 0xfffffff7, 0x0, 0x4, 0x3, 0x1, 0x7, 0x8, 0x72e, 0x3, 0x6, 0x7, 0x7, 0x73, 0xfffffffc, 0x5, 0x10001, 0x2, 0xfffffffc, 0x24, 0x0, 0x3ff, 0x7, 0x80, 0x1000, 0x5, 0x38a, 0xfffff177, 0xba9, 0xb9, 0x2c, 0x5, 0x5, 0x4, 0xda, 0x4, 0x5, 0x7, 0x8, 0x200, 0x10001, 0x2, 0xfffffffa, 0x6, 0x7, 0x6, 0xffff7e8d, 0x0, 0x4, 0x3, 0x1, 0x8, 0xffff, 0x3, 0xcb, 0x8, 0x1, 0x5, 0x9b, 0x7, 0xfffffffd, 0x401, 0x8, 0x2, 0x7fffffff, 0x1, 0x400, 0x5, 0x4, 0x5, 0x80, 0x6, 0x0, 0x8, 0x5, 0x1, 0x0, 0x7f, 0x1, 0x3, 0x0, 0xfc, 0x80, 0x703800, 0x5, 0x2000, 0x45, 0xc6b, 0x9, 0x9, 0x3, 0x0, 0x200, 0x5, 0x0, 0x0, 0x4, 0x7, 0x3, 0x1, 0xd, 0x1, 0x4, 0x1c98, 0x1, 0x403870e5, 0x9, 0xfffff645, 0x200, 0x6, 0x8, 0x4, 0x4, 0x8, 0x3de5221d, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0xa2b4, 0x8, 0x2, 0x5, 0x6, 0x6, 0xb9bc, 0x200, 0x4a9d926, 0xf3c, 0x7, 0x2, 0x7, 0xff, 0x5, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0xf58, 0xdb50, 0x88c0, 0x8, 0xdde, 0xfffffff7, 0x7, 0x8, 0x8, 0x8, 0x6, 0x1000, 0x4, 0xb6, 0x5, 0x9, 0x3, 0x2, 0x8000, 0x8, 0xf46, 0x4, 0x4, 0x1, 0x3, 0x81, 0x9, 0x101, 0x5, 0x5, 0x1000, 0x3ff, 0x4, 0x5, 0x2, 0x9f5, 0xfffffff8, 0x8, 0x2, 0x3, 0x9, 0xb, 0x10001, 0x7, 0x8, 0x3, 0x8, 0xc, 0x2, 0xf4, 0x7, 0x2764, 0x8, 0xffff5267, 0x3c9, 0x39, 0xc, 0x2, 0x4, 0x7, 0x1, 0x0, 0x9, 0x3, 0x5, 0x2, 0x3c, 0x8, 0x6, 0x7, 0x2, 0xf, 0xfffffffa, 0x4, 0x2, 0x6, 0x1, 0x4, 0x6, 0x5, 0xa4, 0x7, 0x81, 0x7fffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4000, 0x8, 0x0, 0x5, 0x9, {0xd, 0x1, 0x7fbb, 0x2, 0x8, 0x8}, {0x4, 0x1, 0x4, 0x9, 0xb, 0xfffffffb}, 0x0, 0x101, 0x7c7c}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0xf24, 0x1, [@m_csum={0x58, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8001, 0x0, 0x57, 0xbd}, 0x70}}]}, {0xd, 0x6, "0c2b96677a26c9eafa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_pedit={0xec8, 0x20, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x401, 0x3, 0x3, 0x7, 0x8}, 0x4, 0x5}, [{0x800, 0x6, 0x7, 0x0, 0x7, 0xe}, {0xe4e1, 0xc, 0x9, 0x1ff, 0x80000001, 0x1ff}, {0x10000, 0x9, 0xb6, 0x10001, 0x0, 0xc00}, {0xbf0b, 0x21a2, 0x115, 0x2, 0x5, 0x915}, {0xcfe, 0xb13b, 0x200, 0x0, 0x1, 0x4}, {0x0, 0x6, 0x101, 0x7, 0x10000000, 0x4}, {0x0, 0x3, 0x7f, 0x7, 0x4, 0x6}, {0x7ad7, 0x0, 0x2, 0x9, 0x6, 0x15e}, {0x6, 0x9e49, 0xffff0000, 0x8, 0x1, 0xffffffff}, {0x8, 0x1, 0x1, 0x15, 0x8, 0x81}, {0x6, 0x3, 0x0, 0x8, 0xa152, 0x6}, {0x5, 0x1, 0xfffffff7, 0x1, 0x5, 0x7fff}, {0x3, 0xabfd, 0x2, 0x9bb, 0x0, 0x1}, {0x1, 0x613e, 0x9, 0x6, 0x8000, 0x3}, {0xfffffffa, 0x7, 0x242cbdb3, 0x0, 0x3ecf}, {0x9, 0x6f4c, 0x7fffffff, 0x7, 0x423, 0x1}, {0xca, 0xfffffff2, 0x40, 0x9, 0x2}, {0x9, 0x7ff, 0xd1, 0x200, 0x200, 0x78}, {0x2231, 0x6, 0x401, 0xfffffff5, 0x0, 0xb937}, {0x4, 0xfffffff8, 0x9a8, 0x40, 0x6, 0xb558}, {0x5, 0x10001, 0x0, 0x3, 0x127}, {0xfffffd17, 0x0, 0x10, 0xfffffffd, 0x3, 0x4}, {0x2, 0x0, 0xe39, 0x0, 0x120000, 0xc0000}, {0x2, 0x2, 0x65, 0x4f0, 0xffffffd8, 0x101}, {0xb8d0, 0x9, 0x1, 0x2087000, 0xb2cb, 0x8}, {0xad, 0x5, 0x10, 0x8, 0x5, 0x8e6}, {0x8, 0x2, 0x8, 0x40, 0x10, 0x3ff}, {0x0, 0x1, 0x7fff, 0x747b, 0x10001, 0x4e22}, {0x2, 0xfff, 0x7, 0x2, 0x5, 0x8}, {0x4, 0xe, 0x4, 0x2, 0x0, 0xfa}, {0x7, 0x5, 0x8d, 0x3, 0x5, 0x80000000}, {0x3, 0x5, 0x200, 0x0, 0x7fff, 0x1}, {0xb3f5, 0x6, 0x4, 0x41, 0x4594, 0x436}, {0x8, 0xfffffffa, 0x1, 0x1, 0x10000, 0xb}, {0x45, 0x7, 0x40, 0x2, 0x100, 0x5}, {0x905, 0x80000000, 0xfffffffb, 0x40, 0x81, 0x5}, {0x4d, 0x401, 0xbd, 0xe428, 0x929, 0x5ce3}, {0xe, 0x6, 0xe289, 0x89, 0x1, 0x9}, {0xffff0001, 0x0, 0x3, 0xc, 0x5, 0x1}, {0x3fffc0, 0x2, 0x1, 0x2, 0x2, 0xf}, {0x0, 0x4, 0x3, 0xc, 0x7, 0xffffffff}, {0x8, 0x9b, 0x6cca, 0x2, 0x6, 0x400}, {0x7f, 0x8, 0xfffffff8, 0xfff, 0x1, 0x3}, {0x1, 0x213, 0x1, 0x3, 0x1, 0x5}, {0xb8f1, 0xda, 0x100, 0x10001, 0xbf0, 0x5}, {0x7, 0x80, 0x3, 0x9, 0x8}, {0x1ff, 0x3, 0x9, 0xf, 0x7fff, 0x774}, {0x1, 0xff, 0x9, 0x800000, 0x2, 0x8}, {0x0, 0x9, 0x1000, 0x7, 0x0, 0x5ee7}, {0xfff, 0x3, 0xfffff6db, 0x0, 0xd, 0x8}, {0x0, 0x1, 0x3, 0x4, 0x2}, {0x1, 0x9, 0x0, 0x7c, 0x2ef, 0x5}, {0x6, 0x10000, 0x3, 0x5, 0x6, 0xfffffff2}, {0x3, 0x95b, 0x2, 0xfffffc01, 0x7, 0x3}, {0x0, 0x8, 0x1, 0x634, 0x8001, 0xf}, {0x3, 0x7fff, 0x800, 0xfea3, 0x7e, 0x8db}, {0xe4, 0x2, 0x4, 0x4, 0x1ff, 0x9}, {0x6, 0x9, 0x210, 0x3, 0x6, 0xb}, {0x4, 0x6, 0x190, 0xfffffffb, 0x3, 0x8}, {0x2985, 0xffff0001, 0x6, 0x63, 0x7}, {0x0, 0x7, 0xfffffff9, 0x4, 0xd, 0x7}, {0x7, 0x161, 0x9d, 0x3, 0x2a34, 0x1}, {0x1, 0x0, 0x7, 0x9, 0x1, 0x7}, {0x6, 0xb, 0x80, 0x9, 0x6, 0xb5a4}, {0x3, 0x1, 0xb, 0x81, 0x5, 0x10000}, {0x5, 0x75f7, 0x0, 0x3, 0xe6, 0x8}, {0x8, 0xd3a, 0x3, 0x6, 0x5, 0xa}, {0x101, 0x9, 0x4, 0x822, 0x9, 0x3}, {0xd, 0x7, 0x3, 0x2, 0xc8, 0x7}, {0x6, 0x57d3, 0x6, 0x7, 0x800}, {0x4, 0x5, 0x5, 0x0, 0x9, 0x4}, {0x9, 0x3, 0x1000, 0x8, 0x2, 0xffffffff}, {0xe, 0x1, 0x6, 0x1, 0x6, 0x1000}, {0xf849, 0x7, 0x2, 0xffffffff, 0x0, 0x8}, {0x400, 0x7, 0x38000000, 0x2, 0x4, 0x3ff}, {0x9, 0x8, 0x1ff, 0xffff, 0x4, 0xc}, {0x40, 0x1, 0x5, 0x4, 0x4, 0x9}, {0x8001, 0x4, 0x100, 0x40, 0x5, 0x800}, {0x3, 0x8, 0x2, 0xa5, 0x8, 0x5}, {0x7f, 0x80000000, 0x1fffc, 0xb37, 0x4, 0x8}, {0x4, 0x7fffffff, 0x7f, 0x7f, 0x4bc, 0x3}, {0x9, 0xa6, 0x5b, 0x9, 0x0, 0x9}, {0x50, 0x5, 0x3, 0x6, 0x3, 0x7}, {0x3, 0x2, 0x4, 0x0, 0x6a, 0x5}, {0xfffffffd, 0xe9, 0x3, 0x7f, 0x4, 0x6}, {0x0, 0x3, 0x2ae6, 0x9, 0x9, 0x8001}, {0x2, 0x7, 0x101, 0x10001, 0xfff, 0x95}, {0x3c0b, 0xa3a, 0x9, 0x7fff, 0x8001, 0xf04d}, {0x8, 0x9, 0x14, 0x0, 0x8, 0x9}, {0x4, 0x2, 0x0, 0x5, 0x5, 0x1}, {0x7, 0xfffffffd, 0x478d, 0x7, 0xc, 0x5}, {0x6, 0x7, 0xda, 0x3, 0x3, 0x4}, {0x0, 0x5, 0x0, 0x0, 0x3}, {0x8, 0x2, 0x9, 0x0, 0x9, 0xf}, {0x6, 0x9, 0x70000, 0x800, 0x4, 0xb74}, {0x4c, 0x2, 0x9, 0x6, 0x101, 0x8000}, {0x1, 0x7, 0x0, 0xff, 0x4, 0x1}, {0x7, 0x0, 0x0, 0x401, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x6, 0x7, 0x400}, {0x74b6def1, 0xffffff01, 0x1, 0x6075, 0x6a, 0x9}, {0xf21f, 0x3, 0x8, 0x0, 0x2, 0x8000000}, {0x0, 0x1, 0x3, 0x6, 0x800, 0x10000000}, {0x4, 0x385, 0x4, 0x6, 0x8000, 0x3}, {0x5, 0xffff, 0x6, 0x0, 0x3, 0x6}, {0x0, 0xb7, 0x3, 0x10001, 0x50000000, 0xffffff01}, {0x9, 0x0, 0xfff, 0x7, 0x9, 0x9}, {0x1, 0x80, 0x101, 0x800, 0x7fffffff, 0x7fffffff}, {0xe, 0x3, 0x4, 0x4c6, 0x9, 0x400}, {0x743, 0xb, 0x7fff, 0xd84, 0x1, 0x80000000}, {0xffffffff, 0xd, 0x9, 0xbef, 0x1, 0x611d4a10}, {0x5, 0x9ff, 0xfffffff8, 0x5, 0x4, 0xffff}, {0x2, 0x8000009, 0x1000, 0x5, 0x9, 0x3}, {0x0, 0x1, 0x10000, 0xadd2, 0x9e, 0x1ff}, {0x3, 0x4, 0x3, 0x6, 0x80, 0xf973}, {0x5, 0x7, 0x5, 0x5cc, 0x7, 0x80000001}, {0x20000000, 0x2, 0x4, 0x0, 0x8, 0x9}, {0x4, 0x8ba, 0x26d0, 0x5, 0x6}, {0x3, 0xfff, 0x9, 0x2, 0xb4, 0x3}, {0x7fffffff, 0x7, 0x3, 0x9, 0x9, 0x8}, {0x8, 0xfffffc00, 0x2, 0x8, 0x0, 0x4}, {0x4, 0x6, 0xfffffffa, 0xfffffffc, 0x3, 0x8}, {0x8, 0x4, 0x7, 0x2c88, 0x35b624b4, 0x9}, {0x7, 0x5, 0x7fffffff, 0x6, 0xffff, 0x1}, {0x6, 0x7ff, 0x3, 0x1, 0x0, 0x9}, {0x1, 0x5, 0x10000, 0x3, 0x200, 0x5}, {0xd8f, 0x10000000, 0x10001, 0x0, 0x1}, {0x6, 0x0, 0x8, 0x9, 0x1000, 0x4}, {0x5, 0x1ff, 0xfff, 0x1, 0x200, 0xffffffff}], [{0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x5}, {0x5}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x4, 0x1}, {0x5}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x3}, {0x3}, {0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0xac5b95ad90ae9659}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x9bf47fcd7ce07089, 0x6cad44c906a9ccb6}, {0x4}, {0x4}, {0x3}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x141c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.621857088s ago: executing program 8 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002f0009f426bd7000fddbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) 3.187993241s ago: executing program 7 (id=658): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000040)={[{@gid}, {}, {@nls={'nls', 0x3d, 'euc-jp'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$eJzs3U1rXNcZB/D/nRlLHhccJbGT1C1EpFBMTGy9mLSFQtViihbBBLrJVtRyLDx2gjQpkyyKWvxB0oW6yqKbEihdZOF1F/kCgi4LhS5FNy5z585oYsvyqNG8OP798Jl7js495zz38b1XmivBBHhhrX+QM7spsn7lvU63vb+32trfW73XryeZT1Ir/6XRrf4zqT9IFtMr+X6SopqueNo6X658cenrm53LvVatKuX+9ePGjWa3Klmrglw7xfkefuv5isERdie90Z98Fjx6tv+Mcfn6GOfmBIqn/F8sJOeSnK3uA/0TtzbZ6E7fzFyAAAAAMEYvHeQgnZyfdhwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPKk+/7+oSq1fX0zR//z/ueprqerPta+mHQAAAAAAAAAAnII3D3KQTs7324+K8nf+b5WNC+Xr9/JJdrKZ7VxNJxtpp53tLCdZ6I2pV2Pb7e3lEUauHI4szXU22u3tlQkdMAAAAAAAAAB8N/0x64e//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFlQJPXepiwX+vWF1BpJziaZ6+63m/y9X3+efTXtAAAAAGACXjrIQTo5328/Ksr3/K+V7/vP5pPcTztbaaeVzdwqnwX03vXX9vdWW/t7q/e65cl5f/nvE4VRzpjes4ejV14q97g4GLGeX+c3uZLFvJ/tbOV32Ug7m1nMjbK2kSIL1dOLhX6cR8e79o3W+8+K9Y0ykmZuZ6uM7Wp+m4/Syq3UymMo9zl+xT90s1P8ojJijm5V2yIpflAd2bjNj7TXQpmRM4OMLFW572bj5eMzccLz5PGVllMbPIO6MIacn6u2xcw96Ho8EytDZ99rx2cieaf91zfvtO7fvXN758okTqOxejwTq0OZeP2FysRclY3eXfRkd8u3yrHns5Wb+Si3spmf5N2slGW13A7n9eII11rtZNfajy5XlVeSotnbzohuXl8eyuvwnW6h7Bv+ymGWXjn9O1LjUlWpJ0VjENMseDwTy0OZePX4TPzpUfd1p3X/7vadjY9HXO/H1bb7/XB+Qt8PRzNXnb2NsvXNs6Pb9+qRfctl34VBX+2JvouDvmddqXPVz3BPzrRS9r1+ZF9v3BtDfUf9lAPAzDv39rm55r+a/2h+3nzQvNN87+yv5n86/8O5nHnY+Fv9L7U/135evJ3P8/vD9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/b+fTz+5utFqb25OszE9j0RekUstMhDFipZGZCEPlycrR94vGpG9QjNW19r2Pr+18+tk7W/c2Ptz8cPP+9aVm3r2+/LPr125vtTaXeq/TjpJxObzopx0JAAAAAAAAAAAAJzGJPyed9jECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/Fj/IGd2U2R56epSt72/t9rqln79cM9akkZ3+9+k/iBZTK9kYWi64mnrfLnyxaWvb3YuH85V6+9fP27caHarkrUqyLVTnO/ht56vGBxhd9Ib/clh2v4XAAD//3D1GxQ=") open(&(0x7f0000000180)='./file0\x00', 0x49e182, 0x2) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) 2.9585849s ago: executing program 8 (id=659): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 2.817632943s ago: executing program 4 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@dellink={0x2c, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x60000, 0x2a8f2}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) 2.655185318s ago: executing program 7 (id=661): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000900)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000440)='\n', 0x1}, {&(0x7f0000000380)="ad", 0x1}, {&(0x7f00000003c0)="d0", 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 2.068036076s ago: executing program 7 (id=665): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) readv(r1, &(0x7f0000001800)=[{&(0x7f0000000140)=""/52, 0x34}], 0x1) 1.892463372s ago: executing program 4 (id=667): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000002c0)={0x40000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa0000013}) 1.843760168s ago: executing program 6 (id=668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x25000, 0x9, 0x0, 0x8000, 0x0, [{0x17, 0x5, 0x0, '\x00', 0x8}, {0xff, 0x1, 0x10, '\x00', 0x9}, {0x93, 0x4, 0xf5, '\x00', 0x2}, {0x8, 0x0, 0x9}, {0x9, 0x1, 0x30, '\x00', 0x6}, {0x8, 0x7, 0xf, '\x00', 0x8}, {0x10, 0x6, 0x2, '\x00', 0x8}, {0x7, 0x1b, 0xa6, '\x00', 0xbb}, {0x6c, 0xf1, 0xa, '\x00', 0x9}, {0x5, 0xff, 0x7, '\x00', 0xf5}, {0x8, 0x3, 0x1, '\x00', 0x9}, {0x6, 0xeb, 0x0, '\x00', 0x1}, {0xf6, 0x1e, 0x8}, {0x8e, 0x0, 0x5, '\x00', 0x2}, {0x7, 0xff, 0x8, '\x00', 0x3}, {0x92, 0x7, 0xd8, '\x00', 0x9}, {0xa, 0x8, 0x3, '\x00', 0x3}, {0x40, 0x9, 0xee, '\x00', 0x2}, {0x1, 0x6, 0x8, '\x00', 0x9}, {0xd, 0xf, 0x5, '\x00', 0x3}, {0x9c, 0xa, 0x9c, '\x00', 0xb9}, {0x4, 0xd, 0x4, '\x00', 0x5}, {0xf, 0x9, 0x8, '\x00', 0xc}, {0x6, 0x5, 0x0, '\x00', 0x8}]}}) 1.586125257s ago: executing program 7 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c0f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a320000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x4, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.439636527s ago: executing program 3 (id=671): inotify_init1(0x80000) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) 1.428792273s ago: executing program 6 (id=672): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554cdc"], 0xc8) dup3(r1, r0, 0x0) 1.401154031s ago: executing program 4 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty=0xf00, @remote, @local}}}}}, 0x32) 1.238712494s ago: executing program 7 (id=674): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1.203237436s ago: executing program 3 (id=675): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES16=r0], 0x20}}, 0x0) 1.056514708s ago: executing program 6 (id=676): r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 1.048695625s ago: executing program 8 (id=677): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xff52) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.032343395s ago: executing program 3 (id=678): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f0000000480)={[{@noinit_itable}, {@init_itable}, {@norecovery}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@resgid}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x3, 0x5ad, &(0x7f0000001000)="$eJzs3U1rG9caAOB35I983hsHQrj3Li6GLJqSRo7tfqRQSLosbWig3afCVkywHAVLDrEbSLJoNt2UUCilgdIf0H2XoX+gf6GbQBsIJZh2kY3KSKNYkS3bkkXsWs8Do5wzc5Qz78ycM2c0YyaAgTWefuQi/hsRXyURx1qWDUe2cLxRbvXZ7Zl0SqJW++SPJJJsXrN8kv17JMv8JyJ+/iLiTG59vZXllflCqVRczPIT1YUbE5XllbPXFgpzxbni9anp6fNvTU+9+87bfYv19ct/ffvxow/Of3lq9Zsfnxx/kMTFOJota8ZxaGdV3G3NjMd4tk1G4mJbwcmd1bPnJLu9AvRkKGvnI5H2AcdiKGv1wP53JyJqwIBKtH8YUM1xQPPavvV6fhA8fb9xAbQ+/uHGbyNx8ED6eXg1eenKKL3eHetD/WkdP/3+8EE6RdvvKe3uvJwd6kP1wAC7ey8izg0Pr+//kqz/6925+o/Hm2uvY9DOP7CbHqXjnzc2Gv/kmuOf+mf7+OfIBm23F1u3/9yTtiJJP+81pOO/9zYc/77ousaGsty/6mO+keTqtVLxXET8OyJOx8iBNL/Z/Zzzq49rnZa1jv/SKa2/ORbM1uPJ8IGXvzNbqBZ2EnOrp/ci/rc2/k1iXf9/sD7Wbd//6fa4vM06ThYf/r/Tsq3jb3Vn+4FtU+2HiNc23P9rR1my+f3JifrxMNE8Ktb78/7JXzrV3138/ff0XuNA3yT+saT1fm2l+zq+P/i82GlZr8f/aPJpPT3amPW8VqhWFycjRpOPWufHrXT+1Np3m/lbWfn0+D99avP+b6Pj/1BEfLbN+O+fuN+xaLf7f4f3p9dJ45/tav93n3j84eff9R5/uv/frKdOZ3O20/9tdwV3su0AAAAAAABgr8lFxNFIcvkX6Vwun28833EiDudK5Ur1zNXy0vXZqP+t7FiM5Jp3uo+1PA8xmT0P28xPteWnI+J4RHw9dKiez8+US7O7HTwAAAAAAAAAAAAAAAAAAADsEUc6/P1/6jdvmIL9zyu/YXA12v9o5wL9eNMTsCd1OP/3/21bwJ5j/A+DS/uHwVVv/x1f0QnsZ87/MLh6aP8eDYB9wvkfBtdw3N3tVQAAAAAAAAAAAAAAAAAAAAAAAAAAAID95PKlS+lUW312eybNz95cXpov3zw7W6zM5xeWZvIz5cUb+blyea5UzM+UF7b6/0rl8o3JqVi6NVEtVqoTleWVKwvlpevVK9cWCnPFK8WRVxIVAAAAAAAAAAAAAAAAAAAA/LNUllfmC6VScbGrxK/Ry7fWErkd1f6qExdiT6xGz4lkq+18IdsdPVUxvPsBSnSXGMr296aFd6lDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAN/B0AAP//UaowBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x10, 0x37ec, 0x683) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 851.521953ms ago: executing program 4 (id=679): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 851.343129ms ago: executing program 6 (id=680): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 851.192336ms ago: executing program 7 (id=681): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x300, 0xcb, 0x62, 0xe0, 0x20, 0x403, 0xfd4b, 0x56a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xcb, 0x1, 0x40, 0x7, "", [{{0x9, 0x4, 0xb6, 0x2, 0x0, 0x24, 0x5e, 0x45, 0x40}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x300, 0x8, 0xfd, 0x6, 0x10, 0x58}, 0x10, &(0x7f0000000d80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x3d, 0x2, 0x7}]}, 0x7, [{0x0, 0x0}, {0x41, &(0x7f0000000e00)=@string={0x41, 0x3, "6aba14893902575d5032a7cdf6e0d797029dfacb1af46e0309ad0d6138446b6f3064fa767dc78e36f07915fafd08ce9eed5f8dc0e9bc0831e9352677b2b9fa"}}, {0x84, &(0x7f0000000e80)=@string={0x84, 0x3, "a82daf0d6e283928efec9bfde3adb6a73fa70d4d2aa6134f26697539269283fcb04125e1f2eb2c645556039f2a92986be206d6dc620d1d03e15b432dffc650e6b7593bf8d83391d00ba2bcbe1213caae64e2a38bad291c0143897b353b209281636b018324f3175003c1fc7bdaaca58894c67df1f770efa297c8e2db371ec9ad200c"}}, {0x19, &(0x7f0000000f40)=@string={0x19, 0x3, "2bd2aecaba8b4dd23efc5cca2b127ee6eefb9a8c5a5c71"}}, {0xe, &(0x7f0000000f80)=@string={0xe, 0x3, "53e794782db67f712aadf508"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x180a}}]}) 693.053841ms ago: executing program 3 (id=682): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@local, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 643.255786ms ago: executing program 4 (id=683): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f60eb8dc258ded60aee45b04a15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000026c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="332d1470a2c1e867fa", 0x9}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1}, 0xffffff80}], 0x1, 0x20, 0x0) 423.505301ms ago: executing program 4 (id=684): unshare(0x6020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cgroup.events\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) 316.364666ms ago: executing program 3 (id=685): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xffffffffffffbffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f000034f000/0x4000)=nil, 0x4000, 0x10}) 289.028002ms ago: executing program 6 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESOCT=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) read$eventfd(r0, &(0x7f0000000000), 0x8) 162.957613ms ago: executing program 6 (id=687): r0 = socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'rose0\x00', {0x2, 0x0, @loopback}}) 0s ago: executing program 3 (id=688): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4004401) r0 = getpid() move_pages(r0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) kernel console output (not intermixed with test programs): arding state [ 94.249597][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.260176][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.276342][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.287667][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.308674][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.318760][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.338873][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.380906][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.381160][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.427626][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.429338][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.449231][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.527070][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.566435][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.566578][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.629846][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.631274][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.738415][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.854014][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.908287][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.908556][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.955037][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.955378][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.037702][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.151240][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.201793][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.202028][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.246861][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.247010][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.324401][ T52] Bluetooth: hci3: command tx timeout [ 95.404291][ T52] Bluetooth: hci0: command tx timeout [ 95.404343][ T52] Bluetooth: hci1: command tx timeout [ 95.417440][ T5621] Bluetooth: hci4: command tx timeout [ 95.417476][ T5621] Bluetooth: hci2: command tx timeout [ 95.651574][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.927260][ T5614] veth0_vlan: entered promiscuous mode [ 95.958022][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.013032][ T5614] veth1_vlan: entered promiscuous mode [ 96.228929][ T5614] veth0_macvtap: entered promiscuous mode [ 96.263479][ T5616] veth0_vlan: entered promiscuous mode [ 96.292349][ T5614] veth1_macvtap: entered promiscuous mode [ 96.335681][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.347037][ T5616] veth1_vlan: entered promiscuous mode [ 96.409552][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.462343][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.536619][ T1154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.556610][ T1154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.557755][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.629128][ T5616] veth0_macvtap: entered promiscuous mode [ 96.644536][ T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.703028][ T5616] veth1_macvtap: entered promiscuous mode [ 96.761466][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.840217][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.887117][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.917607][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.917670][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.954892][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.021100][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.031654][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.103238][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.123062][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.123133][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.123254][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.161125][ T5615] veth0_vlan: entered promiscuous mode [ 97.203159][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.232136][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.232179][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.270498][ T5615] veth1_vlan: entered promiscuous mode [ 97.305603][ T5613] veth0_vlan: entered promiscuous mode [ 97.373130][ T5811] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.398811][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.398867][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.413564][ T52] Bluetooth: hci3: command tx timeout [ 97.441281][ T5613] veth1_vlan: entered promiscuous mode [ 97.466637][ T5619] veth0_vlan: entered promiscuous mode [ 97.482865][ T5621] Bluetooth: hci4: command tx timeout [ 97.482915][ T5621] Bluetooth: hci1: command tx timeout [ 97.482955][ T5621] Bluetooth: hci0: command tx timeout [ 97.483136][ T52] Bluetooth: hci2: command tx timeout [ 97.535461][ T5619] veth1_vlan: entered promiscuous mode [ 97.565466][ T5615] veth0_macvtap: entered promiscuous mode [ 97.592701][ T5615] veth1_macvtap: entered promiscuous mode [ 97.692127][ T5613] veth0_macvtap: entered promiscuous mode [ 97.720887][ T5613] veth1_macvtap: entered promiscuous mode [ 97.775154][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.805267][ T5619] veth0_macvtap: entered promiscuous mode [ 97.832333][ T5619] veth1_macvtap: entered promiscuous mode [ 97.850318][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.892636][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.927508][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.960479][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.004927][ T1174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.005254][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.030145][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.043619][ T138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.044924][ T138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.044982][ T138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.045031][ T138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.045077][ T138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.045124][ T138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.265027][ T1154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.274937][ T1174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.279414][ T1174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.411996][ T5824] bridge0: entered allmulticast mode [ 98.423223][ T1154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.478714][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.479507][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.551044][ T5826] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.637835][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.637880][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.723928][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.723978][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.859636][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.859685][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.997858][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.998289][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.082176][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.092752][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.243151][ T5835] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 99.346502][ T5837] loop1: detected capacity change from 0 to 1024 [ 99.365020][ T5837] EXT4-fs: Ignoring removed bh option [ 99.451813][ T5837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.479811][ T5837] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.697076][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.820238][ T5850] loop3: detected capacity change from 0 to 128 [ 99.832189][ T5850] EXT4-fs: Ignoring removed nobh option [ 99.840794][ T5847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.876236][ T13] IPVS: starting estimator thread 0... [ 99.887940][ T5847] bond0: entered promiscuous mode [ 99.895553][ T5854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.913158][ T5847] bond_slave_0: entered promiscuous mode [ 99.919831][ T5847] bond_slave_1: entered promiscuous mode [ 99.945252][ T5850] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.964541][ T5850] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.973426][ T5853] IPVS: using max 26 ests per chain, 62400 per kthread [ 99.982104][ T5847] gretap0: entered promiscuous mode [ 100.020577][ T5847] hsr1: entered promiscuous mode [ 100.115695][ T5854] Zero length message leads to an empty skb [ 100.308993][ T5619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.767881][ T5871] loop3: detected capacity change from 0 to 4096 [ 101.173507][ T5882] loop4: detected capacity change from 0 to 64 [ 101.245286][ T5738] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.408266][ T5738] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 101.437937][ T5738] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.453729][ T5738] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.463793][ T5738] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.481399][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 101.490908][ T5738] usb 3-1: Product: syz [ 101.495302][ T5738] usb 3-1: Manufacturer: syz [ 101.500030][ T5738] usb 3-1: SerialNumber: syz [ 101.822173][ T5738] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.869136][ T5890] loop4: detected capacity change from 0 to 1024 [ 102.037242][ T5890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.074597][ T5738] usb 3-1: USB disconnect, device number 2 [ 102.146251][ T5738] usblp0: removed [ 102.340777][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.884077][ T5913] loop0: detected capacity change from 0 to 1024 [ 102.885116][ T5913] ======================================================= [ 102.885116][ T5913] WARNING: The mand mount option has been deprecated and [ 102.885116][ T5913] and is ignored by this kernel. Remove the mand [ 102.885116][ T5913] option from the mount to silence this warning. [ 102.885116][ T5913] ======================================================= [ 102.942799][ T5913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.942942][ T5913] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.986024][ T5906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.986132][ T5906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.003112][ T5909] loop3: detected capacity change from 0 to 40427 [ 103.007040][ T5738] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.054281][ T5909] F2FS-fs (loop3): build fault injection rate: 174 [ 103.054307][ T5909] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 103.070017][ T5909] F2FS-fs (loop3): invalid crc value [ 103.085078][ T5917] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.42: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.190632][ T5906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.205440][ T5906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.212289][ T5906] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.230300][ T5913] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.42: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.242088][ T5909] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.248959][ T31] audit: type=1800 audit(1786398811.371:2): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 103.279450][ T5909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.293515][ T5906] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.302959][ T5913] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.42: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.322094][ T5913] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.42: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.350007][ T5913] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.42: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.370449][ T5906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.378904][ T5906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.381597][ T5738] usb 2-1: Using ep0 maxpacket: 16 [ 103.390607][ T5738] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.412272][ T5738] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.412328][ T5738] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.434445][ T5906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.440152][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.440226][ T5738] usb 2-1: Product: syz [ 103.440268][ T5738] usb 2-1: Manufacturer: syz [ 103.440357][ T5738] usb 2-1: SerialNumber: syz [ 103.498996][ T5906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.509954][ T5906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.561658][ T5909] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 103.575527][ T5909] F2FS-fs (loop3): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 103.575584][ T5909] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 103.605758][ T5909] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 103.623044][ T5909] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 103.640554][ T5909] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 103.661269][ T5909] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 103.678596][ T5909] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 103.697261][ T5909] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 103.716645][ T5909] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 103.736069][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) [ 103.736108][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.736132][ T5909] Call Trace: [ 103.736142][ T5909] [ 103.736155][ T5909] dump_stack_lvl+0xe8/0x150 [ 103.736204][ T5909] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 103.736243][ T5909] ? f2fs_map_blocks+0x3d81/0x4c20 [ 103.736279][ T5909] f2fs_balance_fs+0x349/0x810 [ 103.736320][ T5909] ? f2fs_map_blocks+0x3d81/0x4c20 [ 103.736355][ T5909] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 103.736388][ T5909] ? rcu_is_watching+0x15/0xb0 [ 103.736419][ T5909] ? __up_read+0x29c/0x930 [ 103.736459][ T5909] ? __pfx___up_read+0x10/0x10 [ 103.736494][ T5909] ? trace_lock_elapsed_time_end+0xf1/0xbc0 [ 103.736529][ T5909] ? restore_priority+0x1af/0x450 [ 103.736562][ T5909] f2fs_map_blocks+0x3d81/0x4c20 [ 103.736604][ T5909] ? is_bpf_text_address+0x292/0x2b0 [ 103.736660][ T5909] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 103.736695][ T5909] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 103.736734][ T5909] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.736769][ T5909] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 103.736793][ T5909] ? seqcount_lockdep_reader_access+0xea/0x100 [ 103.736832][ T5909] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 103.736867][ T5909] ? current_time+0x22f/0x380 [ 103.736901][ T5909] ? down_write+0x16d/0x200 [ 103.736933][ T5909] ? fault_in_iov_iter_readable+0x1d5/0x310 [ 103.736964][ T5909] f2fs_file_write_iter+0x17a8/0x28e0 [ 103.737029][ T5909] ? rcu_is_watching+0x15/0xb0 [ 103.737056][ T5909] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 103.737105][ T5909] ? __asan_memset+0x22/0x50 [ 103.737141][ T5909] iter_file_splice_write+0xa31/0x1240 [ 103.737208][ T5909] ? __pfx_iter_file_splice_write+0x10/0x10 [ 103.737261][ T5909] ? __pfx_iter_file_splice_write+0x10/0x10 [ 103.737291][ T5909] direct_splice_actor+0x101/0x160 [ 103.737325][ T5909] splice_direct_to_actor+0x57b/0xcb0 [ 103.737378][ T5909] ? __pfx_direct_splice_actor+0x10/0x10 [ 103.737406][ T5909] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 103.737448][ T5909] do_splice_direct+0x195/0x290 [ 103.737479][ T5909] ? __pfx_do_splice_direct+0x10/0x10 [ 103.737509][ T5909] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 103.737545][ T5909] ? rw_verify_area+0x203/0x4c0 [ 103.737576][ T5909] do_sendfile+0x52e/0x7c0 [ 103.737623][ T5909] ? __pfx_do_sendfile+0x10/0x10 [ 103.737666][ T5909] ? __se_sys_futex+0x3a8/0x450 [ 103.737702][ T5909] __se_sys_sendfile64+0x144/0x1a0 [ 103.737738][ T5909] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 103.737797][ T5909] do_syscall_64+0x166/0x510 [ 103.737834][ T5909] ? trace_irq_disable+0x3b/0x140 [ 103.737855][ T5909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.737881][ T5909] ? clear_bhb_loop+0x70/0xc0 [ 103.737914][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.737940][ T5909] RIP: 0033:0x7f822379e0d9 [ 103.737973][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.737994][ T5909] RSP: 002b:00007f822472c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 103.738028][ T5909] RAX: ffffffffffffffda RBX: 00007f8223a25fa0 RCX: 00007f822379e0d9 [ 103.738048][ T5909] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 103.738063][ T5909] RBP: 00007f8223835024 R08: 0000000000000000 R09: 0000000000000000 [ 103.738079][ T5909] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000 [ 103.738095][ T5909] R13: 00007f8223a26038 R14: 00007f8223a25fa0 R15: 00007ffd0ec8a5e8 [ 103.738138][ T5909] [ 103.738191][ T5909] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 104.139482][ T5906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.159441][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.170818][ T5906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.184653][ T5906] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.206607][ T5738] usb 2-1: 0:2 : does not exist [ 104.226023][ T5906] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.239049][ T5928] mmap: syz.2.45 (5928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.276428][ T5738] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 104.329766][ T5930] loop2: detected capacity change from 0 to 8 [ 104.435318][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 104.435408][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 104.705689][ T5738] usb 2-1: USB disconnect, device number 2 [ 105.084062][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.153523][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.243990][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.397372][ T5951] ip6erspan0: entered allmulticast mode [ 105.404566][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.421177][ T5949] loop4: detected capacity change from 0 to 1764 [ 105.549059][ T5949] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 105.564702][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.645595][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 105.710641][ T5958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 105.834908][ T5949] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 106.202643][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.642670][ T1221] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.802567][ T1221] usb 5-1: Using ep0 maxpacket: 8 [ 106.809427][ T1221] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.820144][ T1221] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 106.828646][ T1221] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.838819][ T1221] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.849122][ T1221] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 106.859748][ T1221] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.863109][ T5737] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.881968][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.993679][ T5978] loop0: detected capacity change from 0 to 40427 [ 107.014905][ T5978] F2FS-fs (loop0): invalid crc value [ 107.032582][ T5737] usb 3-1: Using ep0 maxpacket: 8 [ 107.033848][ T5737] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.037296][ T5737] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 107.037451][ T5737] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.037515][ T5737] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.037596][ T5737] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.037676][ T5737] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.037804][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.114368][ T1221] usb 5-1: usb_control_msg returned -32 [ 107.114471][ T1221] usbtmc 5-1:16.0: can't read capabilities [ 107.163400][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.327579][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.354167][ T5831] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.369135][ T5978] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.398701][ T5737] usb 3-1: usb_control_msg returned -32 [ 107.398792][ T5737] usbtmc 3-1:16.0: can't read capabilities [ 107.430443][ T5978] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.454631][ T5831] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.492490][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.597887][ T6002] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 107.612295][ T1221] usb 5-1: USB disconnect, device number 2 [ 107.642720][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.660358][ T5737] usb 3-1: USB disconnect, device number 3 [ 108.020616][ T6008] loop1: detected capacity change from 0 to 4096 [ 108.030078][ T6008] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.089978][ T6008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.149121][ T6008] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 108.213628][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.282668][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.349259][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 108.417505][ T6015] netlink: 27 bytes leftover after parsing attributes in process `syz.1.82'. [ 109.246720][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.407855][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.563116][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.652073][ T6043] netlink: 'syz.1.91': attribute type 3 has an invalid length. [ 109.660228][ T6043] netlink: 'syz.1.91': attribute type 6 has an invalid length. [ 109.669150][ T6043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.91'. [ 109.722754][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.221629][ T6066] loop4: detected capacity change from 0 to 512 [ 110.330684][ T6066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.349741][ T6066] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.362723][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.435137][ T6066] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 110.457624][ T6066] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 110.466762][ T6066] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 110.498033][ T6074] loop0: detected capacity change from 0 to 64 [ 110.644288][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.771714][ T6076] loop3: detected capacity change from 0 to 1024 [ 110.785086][ T6076] EXT4-fs: Ignoring removed bh option [ 110.791002][ T6076] EXT4-fs: Ignoring removed orlov option [ 110.855643][ T6076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.945195][ T6076] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.3.104: path /16/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 110.996106][ T6076] EXT4-fs (loop3): Remounting filesystem read-only [ 111.115040][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.246892][ T6073] loop2: detected capacity change from 0 to 40427 [ 111.326467][ T6073] F2FS-fs (loop2): invalid crc value [ 111.645603][ T6073] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 111.673971][ T6073] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 111.686606][ T6073] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 111.698713][ T6073] F2FS-fs (loop2): Start checkpoint disabled! [ 111.730029][ T6073] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 111.740705][ T6073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 111.896524][ T138] kworker/u8:6: attempt to access beyond end of device [ 111.896524][ T138] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.926623][ T138] CPU: 0 UID: 0 PID: 138 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 111.926660][ T138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.926676][ T138] Workqueue: writeback wb_workfn (flush-7:2) [ 111.926723][ T138] Call Trace: [ 111.926733][ T138] [ 111.926744][ T138] dump_stack_lvl+0xe8/0x150 [ 111.926783][ T138] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 111.926832][ T138] f2fs_write_end_bio+0x1211/0x16e0 [ 111.926875][ T138] ? blkg_put+0x22/0x240 [ 111.926928][ T138] __submit_merged_bio+0x258/0x6a0 [ 111.926960][ T138] ? rcu_is_watching+0x15/0xb0 [ 111.926995][ T138] __submit_merged_write_cond+0x3c9/0x4e0 [ 111.927039][ T138] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 111.927101][ T138] f2fs_write_data_pages+0x2a27/0x36f0 [ 111.927183][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.927237][ T138] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 111.927306][ T138] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 111.927357][ T138] ? __lock_acquire+0x6df/0x2e50 [ 111.927393][ T138] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 111.927422][ T138] ? f2fs_update_inode+0x146f/0x25c0 [ 111.927451][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.927489][ T138] do_writepages+0x338/0x560 [ 111.927530][ T138] ? reacquire_held_locks+0x117/0x1a0 [ 111.927559][ T138] ? writeback_sb_inodes+0x450/0x1b00 [ 111.927603][ T138] __writeback_single_inode+0x136/0x1220 [ 111.927650][ T138] ? do_raw_spin_unlock+0xf5/0x200 [ 111.927690][ T138] writeback_sb_inodes+0x9de/0x1b00 [ 111.927726][ T138] ? __lock_acquire+0x6df/0x2e50 [ 111.927769][ T138] ? lock_acquire+0x115/0x350 [ 111.927801][ T138] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 111.927910][ T138] ? rcu_is_watching+0x15/0xb0 [ 111.927940][ T138] ? queue_io+0x2d3/0x470 [ 111.927982][ T138] wb_writeback+0x41c/0xad0 [ 111.928023][ T138] ? queue_io+0x291/0x470 [ 111.928068][ T138] ? __pfx_wb_writeback+0x10/0x10 [ 111.928103][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.928156][ T138] wb_workfn+0x431/0x10f0 [ 111.928212][ T138] ? __pfx_wb_workfn+0x10/0x10 [ 111.928248][ T138] ? timerqueue_linked_add+0x287/0x2e0 [ 111.928287][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.928331][ T138] ? lock_acquire+0x115/0x350 [ 111.928367][ T138] ? rcu_is_watching+0x15/0xb0 [ 111.928397][ T138] ? process_scheduled_works+0x97e/0x1630 [ 111.928430][ T138] process_scheduled_works+0xc4e/0x1630 [ 111.928530][ T138] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.928572][ T138] ? assign_work+0x3cf/0x5d0 [ 111.928610][ T138] worker_thread+0xa47/0xfb0 [ 111.928670][ T138] ? __kthread_parkme+0x71/0x1f0 [ 111.928719][ T138] kthread+0x388/0x470 [ 111.928744][ T138] ? __pfx_worker_thread+0x10/0x10 [ 111.928774][ T138] ? __pfx_kthread+0x10/0x10 [ 111.928800][ T138] ret_from_fork+0x514/0xb70 [ 111.928850][ T138] ? __pfx_ret_from_fork+0x10/0x10 [ 111.928889][ T138] ? __switch_to+0xc89/0x1420 [ 111.928926][ T138] ? __pfx_kthread+0x10/0x10 [ 111.928952][ T138] ret_from_fork_asm+0x1a/0x30 [ 111.929011][ T138] [ 111.948872][ T138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 112.409064][ T6060] loop1: detected capacity change from 0 to 40427 [ 112.422091][ T6060] F2FS-fs (loop1): build fault injection rate: 174 [ 112.428937][ T6060] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 112.455731][ T6060] F2FS-fs (loop1): invalid crc value [ 112.694265][ T31] audit: type=1326 audit(1786398820.901:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f822379e0d9 code=0x0 [ 112.801174][ T6060] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 112.852938][ T6060] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.882724][ T6126] syz.0.122 (6126) used greatest stack depth: 18088 bytes left [ 113.942692][ T6130] netlink: 52 bytes leftover after parsing attributes in process `syz.1.118'. [ 113.977873][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.978795][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.164448][ T5737] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 114.346091][ T5737] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 114.356108][ T5737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.356190][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 114.356301][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 114.356398][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 114.356467][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 114.418071][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 114.418132][ T5737] usb 3-1: Product: syz [ 114.418151][ T5737] usb 3-1: Manufacturer: syz [ 114.418169][ T5737] usb 3-1: SerialNumber: syz [ 114.470068][ T5737] usb 3-1: config 0 descriptor?? [ 114.475465][ T5751] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 114.640985][ T5751] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 3.00 [ 114.652943][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.664296][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.676515][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.690919][ T5751] usb 2-1: config 0 descriptor?? [ 114.716991][ T5737] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 114.717815][ T5737] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 115.744792][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.750159][ T5737] usb 3-1: USB disconnect, device number 4 [ 115.759151][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.771953][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.780465][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.795493][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.795567][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.795600][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.795630][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.795660][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.795689][ T5751] lenovo 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 115.803002][ T6156] loop3: detected capacity change from 0 to 131072 [ 115.805887][ T6156] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 115.805957][ T6156] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.808303][ T6156] F2FS-fs (loop3): invalid crc value [ 115.932003][ T6156] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 115.945157][ T5751] lenovo 0003:17EF:60EE.0002: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 115.959042][ T6156] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.959112][ T6156] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 116.192623][ T5751] lenovo 0003:17EF:60EE.0002: Sensitivity setting failed: -71 [ 116.252793][ T5751] usb 2-1: USB disconnect, device number 3 [ 116.343626][ T5724] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.398201][ T6174] fido_id[6174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 116.506028][ T5724] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 116.515834][ T5724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.515947][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.651407][ T5724] snd-ua101 1-1:1.0: probe with driver snd-ua101 failed with error -2 [ 116.787530][ T5724] usb 1-1: USB disconnect, device number 2 [ 116.794113][ T30] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 116.953514][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 116.953582][ T30] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 116.972899][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.984635][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.996489][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.009224][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.021292][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.043750][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.056230][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.070623][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.081311][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.093430][ T30] usb 3-1: config 0 descriptor?? [ 117.113935][ T30] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 117.338955][ T5724] usb 3-1: USB disconnect, device number 5 [ 117.576268][ T31] audit: type=1326 audit(1786398825.791:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.605432][ T31] audit: type=1326 audit(1786398825.821:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.632508][ T31] audit: type=1326 audit(1786398825.851:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.658647][ T31] audit: type=1326 audit(1786398825.791:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.686937][ T31] audit: type=1326 audit(1786398825.901:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.714670][ T6186] netlink: 'syz.3.139': attribute type 12 has an invalid length. [ 117.723701][ T6186] netlink: 'syz.3.139': attribute type 29 has an invalid length. [ 117.731722][ T6186] netlink: 148 bytes leftover after parsing attributes in process `syz.3.139'. [ 117.731770][ T6186] netlink: 'syz.3.139': attribute type 3 has an invalid length. [ 117.731785][ T6186] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 117.731798][ T6186] netlink: 'syz.3.139': attribute type 3 has an invalid length. [ 117.731812][ T6186] netlink: 3 bytes leftover after parsing attributes in process `syz.3.139'. [ 117.734829][ T31] audit: type=1326 audit(1786398825.931:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.735020][ T31] audit: type=1326 audit(1786398825.931:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.750508][ T31] audit: type=1326 audit(1786398825.961:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.751561][ T31] audit: type=1326 audit(1786398825.961:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.758671][ T31] audit: type=1326 audit(1786398825.961:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.801012][ T31] audit: type=1326 audit(1786398825.991:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707f9e0d9 code=0x7ffc0000 [ 117.806426][ T31] audit: type=1326 audit(1786398826.021:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4707f5e90e code=0x7ffc0000 [ 117.808483][ T31] audit: type=1326 audit(1786398826.021:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4707f5e90e code=0x7ffc0000 [ 117.810047][ T31] audit: type=1326 audit(1786398826.021:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4707f5e90e code=0x7ffc0000 [ 117.813721][ T31] audit: type=1326 audit(1786398826.021:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.142" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4707f5e90e code=0x7ffc0000 [ 117.834355][ T5724] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 118.017281][ T5724] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 118.021412][ T5724] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 118.021501][ T5724] usb 3-1: config 4 has no interface number 0 [ 118.021620][ T5724] usb 3-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 118.021700][ T5724] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64 [ 118.021740][ T5724] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.097113][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.097215][ T5724] usb 3-1: Product: syz [ 118.097262][ T5724] usb 3-1: Manufacturer: syz [ 118.097302][ T5724] usb 3-1: SerialNumber: syz [ 118.421306][ T6193] sctp: [Deprecated]: syz.3.146 (pid 6193) Use of int in max_burst socket option. [ 118.421306][ T6193] Use struct sctp_assoc_value instead [ 118.589002][ T5724] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 118.678674][ T5724] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 118.690672][ T5724] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 118.690792][ T5724] usb 3-1: media controller created [ 118.707901][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.776249][ T6201] loop0: detected capacity change from 0 to 128 [ 118.805580][ T6201] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 118.834491][ T6201] hpfs: filesystem error: improperly stopped [ 118.834591][ T6201] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 118.834610][ T6201] hpfs: You really don't want any checks? You are crazy... [ 118.834668][ T6201] hpfs: Code page index out of array [ 118.834692][ T6201] hpfs: code page support is disabled [ 118.878278][ T6201] hpfs: hpfs_map_4sectors(): unaligned read [ 118.879210][ T6201] hpfs: hpfs_map_4sectors(): unaligned read [ 118.879244][ T6201] hpfs: filesystem error: unable to find root dir [ 119.042393][ T5724] DVB: Unable to find symbol dib7000p_attach() [ 119.042427][ T5724] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 119.132569][ T5724] rc_core: IR keymap rc-dib0700-rc5 not found [ 119.132617][ T5724] Registered IR keymap rc-empty [ 119.137831][ T5724] dvb-usb: could not initialize remote control. [ 119.137872][ T5724] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 119.211783][ T5724] dib0700: There's no endpoint for remote controller [ 119.382158][ T5724] usb 3-1: USB disconnect, device number 6 [ 119.484504][ T6219] capability: warning: `syz.4.157' uses 32-bit capabilities (legacy support in use) [ 119.525816][ T5724] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 119.632797][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.792939][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 119.799045][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 119.809442][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.819875][ T30] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 119.831068][ T30] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 58144, setting to 1024 [ 119.842770][ T30] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 119.856049][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.862857][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.874839][ T30] usb 2-1: config 0 descriptor?? [ 120.394681][ T30] logitech 0003:046D:C294.0003: hidraw0: USB HID v0.01 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 120.409035][ T30] logitech 0003:046D:C294.0003: no inputs found [ 120.912529][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.083919][ T30] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 121.094990][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.095065][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.126788][ T30] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 121.140492][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 121.152626][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 121.169078][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 121.177242][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 121.198318][ T30] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 121.218555][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 121.227022][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 121.252882][ T30] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 121.302470][ T5738] usb 2-1: USB disconnect, device number 4 [ 121.737375][ T5738] usb 5-1: USB disconnect, device number 3 [ 121.789744][ T5738] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 121.850167][ T5738] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 121.877827][ T5738] keyspan 5-1:1.0: device disconnected [ 122.120550][ T6281] loop0: detected capacity change from 0 to 128 [ 122.146732][ T6281] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 122.163063][ T6281] FAT-fs (loop0): data area starts beyond volume (36 > 6) [ 122.172169][ T6281] FAT-fs (loop0): Can't find a valid FAT filesystem [ 122.197603][ T6281] loop0: detected capacity change from 0 to 256 [ 122.252547][ T6281] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 122.938206][ T6307] loop0: detected capacity change from 0 to 164 [ 122.971603][ T6307] rock: directory entry would overflow storage [ 122.983643][ T6307] rock: sig=0x66, size=4, remaining=3 [ 123.126389][ T6309] input: syz0 as /devices/virtual/input/input6 [ 123.872341][ T6328] loop4: detected capacity change from 0 to 128 [ 123.898101][ T6328] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 123.911505][ T6328] hpfs: filesystem error: improperly stopped [ 123.917879][ T6328] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 123.926987][ T6328] hpfs: You really don't want any checks? You are crazy... [ 123.934461][ T6328] hpfs: Code page index out of array [ 123.939963][ T6328] hpfs: code page support is disabled [ 123.945647][ T6328] hpfs: hpfs_map_4sectors(): unaligned read [ 123.951853][ T6328] hpfs: hpfs_map_4sectors(): unaligned read [ 123.959206][ T6328] hpfs: filesystem error: unable to find root dir [ 124.387527][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.688916][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.795132][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.957744][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.031736][ T6347] loop2: detected capacity change from 0 to 128 [ 125.490986][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.508559][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.509991][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.532080][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.540468][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.799902][ T12] bridge_slave_1: left allmulticast mode [ 125.799970][ T12] bridge_slave_1: left promiscuous mode [ 125.802811][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.851284][ T12] bridge_slave_0: left allmulticast mode [ 125.851343][ T12] bridge_slave_0: left promiscuous mode [ 125.851734][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.937090][ T12] bridge0: left allmulticast mode [ 126.488373][ T6385] sg_write: data in/out 486848/136 bytes for SCSI command 0x0-- guessing data in; [ 126.488373][ T6385] program syz.0.224 not setting count and/or reply_len properly [ 126.512283][ T6386] netlink: 43 bytes leftover after parsing attributes in process `syz.3.223'. [ 126.595740][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.619292][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.637160][ T12] bond0 (unregistering): Released all slaves [ 126.679785][ T6368] ip6erspan0: entered allmulticast mode [ 127.328845][ T6399] xt_CT: No such helper "snmp_trap" [ 127.643185][ T5627] Bluetooth: hci0: command tx timeout [ 128.106678][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 128.321113][ T12] hsr_slave_0: left promiscuous mode [ 128.339973][ T12] hsr_slave_1: left promiscuous mode [ 128.346975][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.354710][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.365945][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.374129][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.426549][ T12] veth1_macvtap: left promiscuous mode [ 128.432249][ T12] veth0_macvtap: left promiscuous mode [ 128.439556][ T12] veth1_vlan: left promiscuous mode [ 128.447888][ T12] veth0_vlan: left promiscuous mode [ 128.715406][ T6422] loop4: detected capacity change from 0 to 32768 [ 128.725311][ T6422] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 128.756304][ T6422] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.235 (6422) [ 128.824161][ T6422] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.857319][ T6422] BTRFS info (device loop4): using crc32c checksum algorithm [ 129.050077][ T6422] BTRFS info (device loop4): rebuilding free space tree [ 129.186260][ T6422] BTRFS info (device loop4): disabling free space tree [ 129.194150][ T6422] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.205862][ T6422] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.245001][ T6422] BTRFS info (device loop4): setting nodatasum [ 129.251442][ T6422] BTRFS info (device loop4): enabling ssd optimizations [ 129.259726][ T6422] BTRFS info (device loop4): turning off barriers [ 129.266947][ T6422] BTRFS info (device loop4): turning on flush-on-commit [ 129.274250][ T6422] BTRFS info (device loop4): force clearing of disk cache [ 129.456857][ T12] team0 (unregistering): Port device team_slave_1 removed [ 129.495639][ T12] team0 (unregistering): Port device team_slave_0 removed [ 129.555409][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.712502][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 129.718499][ T30] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.729913][ T5627] Bluetooth: hci0: command tx timeout [ 129.740672][ T30] usb 5-1: config 0 has no interfaces? [ 129.754108][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.762866][ T30] usb 5-1: Product: syz [ 129.767159][ T30] usb 5-1: Manufacturer: syz [ 129.772004][ T30] usb 5-1: SerialNumber: syz [ 129.787560][ T30] usb 5-1: config 0 descriptor?? [ 130.270510][ T6422] BTRFS info (device loop4): scrub: started on devid 1 [ 130.294334][ T6422] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 130.304267][ T6422] BTRFS info (device loop4): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 130.304350][ T6422] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 130.304416][ T6422] BTRFS info (device loop4): global_block_rsv: size 1048576 reserved 1048576 [ 130.304448][ T6422] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 130.304476][ T6422] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 130.304505][ T6422] BTRFS info (device loop4): remap_block_rsv: size 0 reserved 0 [ 130.304534][ T6422] BTRFS info (device loop4): delayed_block_rsv: size 98304 reserved 98304 [ 130.304563][ T6422] BTRFS info (device loop4): delayed_refs_rsv: size 393216 reserved 393216 [ 130.455572][ T6422] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 130.500730][ T5738] usb 5-1: USB disconnect, device number 4 [ 130.979404][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 130.979460][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 131.461965][ T5613] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.672837][ T1221] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.720683][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 131.726456][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.727384][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.727585][ T6358] bridge_slave_0: entered allmulticast mode [ 131.775444][ T6358] bridge_slave_0: entered promiscuous mode [ 131.780157][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.780273][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.784067][ T6358] bridge_slave_1: entered allmulticast mode [ 131.805131][ T5627] Bluetooth: hci0: command tx timeout [ 131.811979][ T6358] bridge_slave_1: entered promiscuous mode [ 131.845835][ T1221] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 131.859806][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.874725][ T1221] usb 1-1: config 0 descriptor?? [ 131.884100][ T1221] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 132.034544][ T6358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.058624][ T6358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.178267][ T6358] team0: Port device team_slave_0 added [ 132.192194][ T6358] team0: Port device team_slave_1 added [ 132.304547][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.311912][ T1221] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 132.319419][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.346334][ T6358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.360680][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.368808][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.395207][ T6358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.577046][ T6358] hsr_slave_0: entered promiscuous mode [ 132.583647][ T6358] hsr_slave_1: entered promiscuous mode [ 132.722198][ T1221] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 132.929333][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929458][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.975245][ T5738] usb 1-1: USB disconnect, device number 3 [ 133.726078][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 133.727520][ T6522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.257'. [ 133.727661][ T6522] netlink: 35 bytes leftover after parsing attributes in process `syz.4.257'. [ 133.727713][ T6522] netlink: 'syz.4.257': attribute type 5 has an invalid length. [ 133.727755][ T6522] netlink: 'syz.4.257': attribute type 6 has an invalid length. [ 133.727794][ T6522] netlink: 35 bytes leftover after parsing attributes in process `syz.4.257'. [ 133.882781][ T5627] Bluetooth: hci0: command tx timeout [ 133.942217][ T6358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.049295][ T6358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.057324][ T6358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.108008][ T6358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.122235][ T6358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.141574][ T6358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.142639][ T6358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.161481][ T6358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.660245][ T6358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.698812][ T6571] gadgetfs: bound to dummy_udc driver [ 134.717867][ T6358] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.745966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.746326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.774845][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.774992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.134396][ T6583] syz.3.273 uses obsolete (PF_INET,SOCK_PACKET) [ 135.272818][ T6590] loop2: detected capacity change from 0 to 64 [ 135.564416][ T5615] hfs: node 4:3 still has 1 user(s)! [ 136.300298][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 136.329024][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.343864][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 137.237393][ T31] kauditd_printk_skb: 62 callbacks suppressed [ 137.237438][ T31] audit: type=1326 audit(1786398845.451:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f822379e0d9 code=0x0 [ 137.397172][ T6653] loop2: detected capacity change from 0 to 40427 [ 137.408135][ T6653] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 137.408187][ T6653] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.458153][ T6653] F2FS-fs (loop2): invalid crc value [ 137.535669][ T6653] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 137.551849][ T6653] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.551899][ T6653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.629983][ T6358] veth0_vlan: entered promiscuous mode [ 137.742402][ T6358] veth1_vlan: entered promiscuous mode [ 137.873531][ T6358] veth0_macvtap: entered promiscuous mode [ 137.894894][ T6358] veth1_macvtap: entered promiscuous mode [ 137.940248][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.970406][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.004023][ T34] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.123064][ T34] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.130375][ T81] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.130613][ T81] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.272005][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.272049][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.384048][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.384108][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.542497][ T5724] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.702498][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 138.708872][ T5724] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 138.723698][ T5724] usb 1-1: config 0 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.735526][ T5724] usb 1-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.746351][ T5724] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.760790][ T5724] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.760874][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.783867][ T5724] usb 1-1: config 0 descriptor?? [ 139.251446][ T5724] hid_parser_main: 510 callbacks suppressed [ 139.260546][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.267927][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.268089][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.268124][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.268153][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.268182][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.268211][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.290664][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.290707][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.290741][ T5724] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 139.353128][ T5724] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.81 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 139.625602][ T6699] input: syz1 as /devices/virtual/input/input7 [ 140.063937][ T5724] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 140.066022][ T5724] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 140.085936][ T5724] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71 [ 140.157770][ T5724] usb 1-1: USB disconnect, device number 4 [ 140.194946][ T6703] fuse: Bad value for 'fd' [ 140.390704][ T6707] netlink: 104 bytes leftover after parsing attributes in process `syz.3.310'. [ 140.778806][ T6718] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 141.365415][ T6739] loop0: detected capacity change from 0 to 128 [ 141.422935][ T6739] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 141.423016][ T6739] hpfs: filesystem error: improperly stopped [ 141.423097][ T6739] hpfs: You really don't want any checks? You are crazy... [ 141.445816][ T6739] hpfs: hpfs_map_sector(): read error [ 141.445869][ T6739] hpfs: code page support is disabled [ 141.446143][ T6739] hpfs: hpfs_map_4sectors(): unaligned read [ 141.446336][ T6739] hpfs: hpfs_map_4sectors(): unaligned read [ 141.446366][ T6739] hpfs: filesystem error: unable to find root dir [ 141.544060][ T6744] loop4: detected capacity change from 0 to 512 [ 141.581117][ T6739] hpfs: hpfs_map_4sectors(): unaligned read [ 141.978278][ T6748] input: syz0 as /devices/virtual/input/input8 [ 142.783676][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 142.850748][ T6750] loop2: detected capacity change from 0 to 32768 [ 143.340310][ T31] audit: type=1800 audit(1786398851.551:82): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.326" name="file1" dev="loop2" ino=3 res=0 errno=0 [ 144.270618][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.270996][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.271358][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.271730][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.272096][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.272696][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.273063][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.273415][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.273799][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.274136][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.274566][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.274917][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.275285][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.275630][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.275979][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.276331][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.276693][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.277052][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.277313][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.277452][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.277584][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.277922][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.278276][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.278639][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.278975][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.279342][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.279699][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.280046][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.280392][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.280778][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.281108][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.281457][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.281800][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.282162][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.282678][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.283037][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.283399][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.283766][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.284072][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.284207][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.284337][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.284708][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.285059][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.285410][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.285757][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.286117][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.286473][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.286806][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.287153][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.287527][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.287871][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.288093][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.288457][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.288827][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.289176][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.289528][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.289871][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.290226][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.290573][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.290827][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.290958][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.291098][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.291237][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.291377][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 144.973830][ T5738] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.134212][ T5738] usb 5-1: Using ep0 maxpacket: 16 [ 145.141557][ T5738] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 145.159936][ T5738] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 145.172258][ T5738] usb 5-1: config 0 has no interface number 0 [ 145.178683][ T5738] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 145.189459][ T5738] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 145.203691][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.203738][ T5738] usb 5-1: Product: syz [ 145.203760][ T5738] usb 5-1: Manufacturer: syz [ 145.203780][ T5738] usb 5-1: SerialNumber: syz [ 145.231739][ T5738] usb 5-1: config 0 descriptor?? [ 145.239480][ T6797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.239737][ T6797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.505162][ T6797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.505335][ T6797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.548269][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803207b400: rx timeout, send abort [ 145.719780][ T5738] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 146.053083][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803207b400: abort rx timeout. Force session deactivation [ 146.526331][ T5738] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 146.526870][ T5738] asix 5-1:0.34: probe with driver asix failed with error -71 [ 146.560734][ T5738] usb 5-1: USB disconnect, device number 5 [ 147.378464][ T6840] loop4: detected capacity change from 0 to 128 [ 147.393426][ T6840] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 147.393509][ T6840] hpfs: filesystem error: improperly stopped [ 147.393553][ T6840] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 147.393617][ T6840] hpfs: You really don't want any checks? You are crazy... [ 147.393659][ T6840] hpfs: Code page index out of array [ 147.393682][ T6840] hpfs: code page support is disabled [ 147.399266][ T6840] hpfs: hpfs_map_4sectors(): unaligned read [ 147.399521][ T6840] hpfs: hpfs_map_4sectors(): unaligned read [ 147.399555][ T6840] hpfs: filesystem error: unable to find root dir [ 147.529830][ T6840] hpfs: hpfs_map_4sectors(): unaligned read [ 147.550353][ T6845] overlayfs: failed to clone lowerpath [ 147.602736][ T6848] overlayfs: failed to clone upperpath [ 148.016663][ T6862] netlink: 76 bytes leftover after parsing attributes in process `syz.4.371'. [ 148.054680][ T6862] netlink: 76 bytes leftover after parsing attributes in process `syz.4.371'. [ 148.299815][ T31] audit: type=1326 audit(1786398856.501:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.325759][ T31] audit: type=1326 audit(1786398856.511:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.325844][ T31] audit: type=1326 audit(1786398856.521:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.325892][ T31] audit: type=1326 audit(1786398856.521:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.325939][ T31] audit: type=1326 audit(1786398856.521:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.325987][ T31] audit: type=1326 audit(1786398856.531:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.326036][ T31] audit: type=1326 audit(1786398856.531:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.342772][ T31] audit: type=1326 audit(1786398856.551:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.342926][ T31] audit: type=1326 audit(1786398856.551:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.352195][ T31] audit: type=1326 audit(1786398856.561:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.357547][ T31] audit: type=1326 audit(1786398856.571:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.357702][ T31] audit: type=1326 audit(1786398856.571:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.368279][ T31] audit: type=1326 audit(1786398856.581:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.392107][ T31] audit: type=1326 audit(1786398856.601:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.404771][ T31] audit: type=1326 audit(1786398856.611:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa2f175e90e code=0x7ffc0000 [ 148.404927][ T31] audit: type=1326 audit(1786398856.611:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 148.418503][ T31] audit: type=1326 audit(1786398856.631:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f179e0d9 code=0x7ffc0000 [ 151.334126][ T6954] loop2: detected capacity change from 0 to 8 [ 151.374934][ T6954] squashfs image failed sanity check [ 151.931405][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.290789][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.489243][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.578351][ T6986] netlink: 196 bytes leftover after parsing attributes in process `syz.3.410'. [ 152.578723][ T6986] netlink: 196 bytes leftover after parsing attributes in process `syz.3.410'. [ 153.047687][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.088964][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.100750][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.110507][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.124306][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.132293][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.255901][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 153.521486][ T7002] hsr_slave_1 (unregistering): left promiscuous mode [ 154.348157][ T7033] sctp: [Deprecated]: syz.4.419 (pid 7033) Use of int in max_burst socket option deprecated. [ 154.348157][ T7033] Use struct sctp_assoc_value instead [ 154.603173][ T12] bridge_slave_1: left allmulticast mode [ 154.603230][ T12] bridge_slave_1: left promiscuous mode [ 154.603905][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.658390][ T12] bridge_slave_0: left allmulticast mode [ 154.658444][ T12] bridge_slave_0: left promiscuous mode [ 154.676907][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.015985][ T7061] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.428'. [ 155.164749][ T52] Bluetooth: hci3: command tx timeout [ 155.495130][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.562312][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.601466][ T12] bond0 (unregistering): Released all slaves [ 155.646095][ T7051] netlink: 'syz.4.424': attribute type 12 has an invalid length. [ 155.654187][ T7051] netlink: 132 bytes leftover after parsing attributes in process `syz.4.424'. [ 155.670713][ T7054] netlink: 'syz.4.424': attribute type 12 has an invalid length. [ 155.679164][ T7054] netlink: 132 bytes leftover after parsing attributes in process `syz.4.424'. [ 155.905873][ T7084] capability: warning: `syz.4.435' uses deprecated v2 capabilities in a way that may be insecure [ 155.951728][ T7084] overlayfs: upper fs does not support file handles, falling back to index=off. [ 155.992036][ T7084] evm: overlay not supported [ 156.546888][ T7092] syzkaller0: entered promiscuous mode [ 156.553992][ T7092] syzkaller0: entered allmulticast mode [ 156.870949][ T7114] Bluetooth: MGMT ver 1.23 [ 156.886750][ T7114] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 157.245241][ T52] Bluetooth: hci3: command tx timeout [ 158.370515][ T7152] loop5: detected capacity change from 0 to 512 [ 158.510159][ T7152] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.456: iget: bad i_size value: 38620345925642 [ 158.510416][ T7152] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.514340][ C1] EXT4-fs (loop5): initial error at time 1786398866: ext4_orphan_get:1403: inode 15 [ 158.514458][ C1] EXT4-fs (loop5): last error at time 1786398866: ext4_orphan_get:1403: inode 15 [ 158.526646][ T7152] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.456: couldn't read orphan inode 15 (err -117) [ 158.527320][ T7152] loop5: lost filesystem error report for type 5 error -117 [ 158.604537][ T7152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.348109][ T52] Bluetooth: hci3: command tx timeout [ 159.509411][ T5926] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 159.536307][ T5926] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28 [ 159.549715][ T5926] EXT4-fs (loop5): This should not happen!! Data will be lost [ 159.549715][ T5926] [ 159.560331][ T5926] EXT4-fs (loop5): Total free blocks count 0 [ 159.567698][ T5926] EXT4-fs (loop5): Free/Dirty block details [ 159.574171][ T5926] EXT4-fs (loop5): free_blocks=0 [ 159.579491][ T5926] EXT4-fs (loop5): dirty_blocks=20 [ 159.585064][ T5926] EXT4-fs (loop5): Block reservation details [ 159.591939][ T5926] EXT4-fs (loop5): i_reserved_data_blocks=20 [ 159.656219][ T7159] loop4: detected capacity change from 0 to 131072 [ 159.658931][ T7159] xfs: Deprecated parameter 'ikeep' [ 159.658992][ T7159] XFS: ikeep mount option is deprecated. [ 159.716940][ T6358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.763392][ T7159] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 159.906972][ T7159] XFS (loop4): Starting recovery (logdev: internal) [ 159.963402][ T7159] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x18001 [ 159.963497][ T7159] XFS (loop4): Unmount and run xfs_repair [ 159.963512][ T7159] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 159.963531][ T7159] 00000000: 58 41 47 46 00 00 00 01 00 00 00 03 00 00 20 00 XAGF.......... . [ 159.963605][ T7159] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 04 00 00 01 ................ [ 159.963655][ T7159] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 159.963697][ T7159] 00000030: 00 00 00 06 00 00 1f f3 00 00 1f f3 00 00 00 00 ................ [ 159.963756][ T7159] 00000040: b9 3a 89 37 cc d4 41 a2 86 c7 66 a1 57 0a 28 46 .:.7..A...f.W.(F [ 159.963800][ T7159] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 159.963842][ T7159] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.963878][ T7159] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.964274][ T7159] XFS (loop4): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x18001 len 1 error 74 [ 159.965093][ T7159] loop4: lost filesystem error report for type 5 error -117 [ 159.971129][ T7159] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_mountfs+0x132e/0x2380 (fs/xfs/xfs_mount.c:1261). Shutting down filesystem. [ 159.971249][ T7159] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 159.971266][ T7159] loop4: lost filesystem error report for type 5 error -108 [ 160.694444][ T7180] loop4: detected capacity change from 0 to 2048 [ 161.412589][ T52] Bluetooth: hci3: command tx timeout [ 161.968151][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 161.996028][ T12] hsr_slave_0: left promiscuous mode [ 162.004857][ T12] hsr_slave_1: left promiscuous mode [ 162.005830][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.005875][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.032629][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.041703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.084409][ T12] veth1_macvtap: left promiscuous mode [ 162.084484][ T12] veth0_macvtap: left promiscuous mode [ 162.087675][ T12] veth1_vlan: left promiscuous mode [ 162.087880][ T12] veth0_vlan: left promiscuous mode [ 162.839408][ T7202] netlink: 'syz.4.471': attribute type 5 has an invalid length. [ 162.939995][ T12] team0 (unregistering): Port device team_slave_1 removed [ 163.031601][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.376440][ T7213] loop4: detected capacity change from 0 to 128 [ 163.478460][ T7213] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 163.478549][ T7213] hpfs: filesystem error: improperly stopped [ 163.478566][ T7213] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 163.478640][ T7213] hpfs: You really don't want any checks? You are crazy... [ 163.478682][ T7213] hpfs: Code page index out of array [ 163.478711][ T7213] hpfs: code page support is disabled [ 163.483160][ T7213] hpfs: hpfs_map_4sectors(): unaligned read [ 163.483366][ T7213] hpfs: hpfs_map_4sectors(): unaligned read [ 163.483405][ T7213] hpfs: filesystem error: unable to find root dir [ 163.662041][ T7211] netlink: 260 bytes leftover after parsing attributes in process `syz.3.475'. [ 164.540528][ T7235] loop2: detected capacity change from 0 to 2048 [ 164.682118][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 164.682169][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 164.821600][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 164.833494][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 164.876062][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 164.876125][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 164.952495][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.952850][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.953272][ T6998] bridge_slave_0: entered allmulticast mode [ 164.993118][ T6998] bridge_slave_0: entered promiscuous mode [ 165.016182][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.020704][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.038248][ T6998] bridge_slave_1: entered allmulticast mode [ 165.067853][ T6998] bridge_slave_1: entered promiscuous mode [ 165.120092][ T7251] loop4: detected capacity change from 0 to 1024 [ 165.135463][ T7251] EXT4-fs: Ignoring removed bh option [ 165.161172][ T7251] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 165.210995][ T7251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.243976][ T6998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.265338][ T6998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.515678][ T6998] team0: Port device team_slave_0 added [ 165.531644][ T6998] team0: Port device team_slave_1 added [ 165.623478][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.685898][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.685975][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.686023][ T6998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.754949][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.754988][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.756447][ T6998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.096347][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 166.114367][ T1221] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 166.128249][ T6998] hsr_slave_0: entered promiscuous mode [ 166.138984][ T6998] hsr_slave_1: entered promiscuous mode [ 166.146640][ T6998] debugfs: 'hsr0' already exists in 'hsr' [ 166.146698][ T6998] Cannot create hsr debugfs directory [ 166.272454][ T1221] usb 6-1: Using ep0 maxpacket: 32 [ 166.278629][ T1221] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 166.289770][ T1221] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 166.289820][ T1221] usb 6-1: config 2 has no interface number 0 [ 166.289892][ T1221] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 166.289929][ T1221] usb 6-1: config 2 interface 88 has no altsetting 0 [ 166.326765][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 166.326816][ T1221] usb 6-1: Product: syz [ 166.326853][ T1221] usb 6-1: Manufacturer: syz [ 166.326876][ T1221] usb 6-1: SerialNumber: syz [ 166.358626][ T7275] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 166.589139][ T7275] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 166.939454][ T7297] loop4: detected capacity change from 0 to 128 [ 167.018509][ T7297] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.021640][ T7297] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.245019][ T5613] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.622276][ T1221] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 167.624068][ T1221] asix 6-1:2.88: probe with driver asix failed with error -71 [ 167.657878][ T6998] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 167.688084][ T1221] usb 6-1: USB disconnect, device number 2 [ 167.757357][ T6998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.775204][ T6998] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 167.834392][ T6998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.845511][ T6998] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.866704][ T6998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.877151][ T6998] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.941718][ T6998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.953021][ T5831] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 168.115369][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 168.117896][ T5831] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.131797][ T5831] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 168.131865][ T5831] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.131892][ T5831] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.131920][ T5831] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.131948][ T5831] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.131995][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.482326][ T5831] usb 3-1: usb_control_msg returned -32 [ 168.484690][ T5831] usbtmc 3-1:16.0: can't read capabilities [ 168.497384][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 168.629928][ T7327] loop5: detected capacity change from 0 to 1024 [ 168.701839][ T6998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.785922][ T5831] usb 3-1: USB disconnect, device number 7 [ 168.828017][ T6998] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.910922][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.911210][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.971750][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.972043][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.320538][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 170.659259][ T7389] jffs2: notice: (7389) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.794642][ T6998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.631233][ T6998] veth0_vlan: entered promiscuous mode [ 171.677592][ T6998] veth1_vlan: entered promiscuous mode [ 171.831885][ T6998] veth0_macvtap: entered promiscuous mode [ 171.866501][ T6998] veth1_macvtap: entered promiscuous mode [ 171.896816][ T7415] loop5: detected capacity change from 0 to 2048 [ 172.226703][ T7417] loop2: detected capacity change from 0 to 40427 [ 172.235439][ T7417] F2FS-fs (loop2): build fault injection rate: 174 [ 172.235486][ T7417] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 172.240426][ T7417] F2FS-fs (loop2): invalid crc value [ 172.264857][ T6998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.278964][ T6998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.350601][ T7417] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 172.364749][ T7417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.433339][ T7415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.575817][ T7417] f2fs_printk: 1 callbacks suppressed [ 172.575889][ T7417] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_new_inode_folio+0xed/0x140 [ 172.578323][ T7417] overlayfs: failed to create directory ./bus/index (errno: 12); mounting read-only [ 172.578385][ T7417] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 172.602073][ T64] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.616082][ T64] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.624946][ T64] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.629187][ T64] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.747982][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.748014][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.859138][ T5615] syz-executor: attempt to access beyond end of device [ 172.859138][ T5615] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 172.900111][ T5615] syz-executor: attempt to access beyond end of device [ 172.900111][ T5615] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 173.126378][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.126423][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.227098][ T5615] syz-executor: attempt to access beyond end of device [ 174.227098][ T5615] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 174.290013][ T5615] CPU: 1 UID: 0 PID: 5615 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 174.290053][ T5615] Tainted: [L]=SOFTLOCKUP [ 174.290062][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.290075][ T5615] Call Trace: [ 174.290084][ T5615] [ 174.290094][ T5615] dump_stack_lvl+0xe8/0x150 [ 174.290132][ T5615] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 174.290169][ T5615] f2fs_write_end_bio+0x1211/0x16e0 [ 174.290206][ T5615] ? blkg_put+0x22/0x240 [ 174.290261][ T5615] __submit_merged_bio+0x258/0x6a0 [ 174.290289][ T5615] ? rcu_is_watching+0x15/0xb0 [ 174.290321][ T5615] __submit_merged_write_cond+0x3c9/0x4e0 [ 174.290360][ T5615] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 174.290416][ T5615] f2fs_write_data_pages+0x2a27/0x36f0 [ 174.290448][ T5615] ? __lock_acquire+0x6df/0x2e50 [ 174.290507][ T5615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.290537][ T5615] ? is_bpf_text_address+0x26/0x2b0 [ 174.290576][ T5615] ? arch_stack_walk+0xfb/0x150 [ 174.290633][ T5615] ? add_lock_to_list+0xc7/0x100 [ 174.290661][ T5615] ? lockdep_unlock+0x5c/0xd0 [ 174.290690][ T5615] ? __lock_acquire+0x14b9/0x2e50 [ 174.290742][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.290784][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 174.290814][ T5615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.290848][ T5615] do_writepages+0x338/0x560 [ 174.290887][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 174.290921][ T5615] filemap_fdatawrite+0x1e9/0x2f0 [ 174.290954][ T5615] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 174.291035][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 174.291069][ T5615] f2fs_sync_dirty_inodes+0x30e/0x830 [ 174.291120][ T5615] f2fs_write_checkpoint+0xa3d/0x2710 [ 174.291153][ T5615] ? __lock_acquire+0x6df/0x2e50 [ 174.291210][ T5615] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 174.291311][ T5615] kill_f2fs_super+0x2dd/0x700 [ 174.291356][ T5615] ? __pfx_kill_f2fs_super+0x10/0x10 [ 174.291403][ T5615] ? call_rcu+0x64b/0x8b0 [ 174.291428][ T5615] ? lockdep_hardirqs_on+0x7a/0x110 [ 174.291477][ T5615] deactivate_locked_super+0xbc/0x110 [ 174.291515][ T5615] cleanup_mnt+0x3d3/0x460 [ 174.291546][ T5615] task_work_run+0x1d9/0x270 [ 174.291573][ T5615] ? __pfx_task_work_run+0x10/0x10 [ 174.291596][ T5615] ? do_exit+0x735/0x2360 [ 174.291615][ T5615] ? kmem_cache_free+0x182/0x650 [ 174.291641][ T5615] ? put_net+0x191/0x260 [ 174.291675][ T5615] do_exit+0x73a/0x2360 [ 174.291707][ T5615] ? __pfx_do_exit+0x10/0x10 [ 174.291725][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.291768][ T5615] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.291801][ T5615] do_group_exit+0x22d/0x2f0 [ 174.291829][ T5615] __x64_sys_exit_group+0x3f/0x40 [ 174.291850][ T5615] x64_sys_call+0x18c6/0x18d0 [ 174.291882][ T5615] do_syscall_64+0x166/0x510 [ 174.291914][ T5615] ? trace_irq_disable+0x3b/0x140 [ 174.291934][ T5615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.291956][ T5615] ? clear_bhb_loop+0x70/0xc0 [ 174.291984][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.292006][ T5615] RIP: 0033:0x7f2a3cb9e0d9 [ 174.292027][ T5615] Code: Unable to access opcode bytes at 0x7f2a3cb9e0af. [ 174.292038][ T5615] RSP: 002b:00007ffcbffee098 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 174.292063][ T5615] RAX: ffffffffffffffda RBX: 00007f2a3cc344e6 RCX: 00007f2a3cb9e0d9 [ 174.292079][ T5615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 174.292092][ T5615] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007f2a3cc34474 [ 174.292106][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbffef350 [ 174.292120][ T5615] R13: 00007f2a3cc34474 R14: 000055555645b4e8 R15: 00007ffcbfff0420 [ 174.292157][ T5615] [ 174.656735][ T5615] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 174.680045][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 174.680107][ T5615] Tainted: [L]=SOFTLOCKUP [ 174.680116][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.680129][ T5615] Call Trace: [ 174.680139][ T5615] [ 174.680148][ T5615] dump_stack_lvl+0xe8/0x150 [ 174.680189][ T5615] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 174.680227][ T5615] f2fs_write_end_bio+0x1211/0x16e0 [ 174.680289][ T5615] __submit_merged_bio+0x258/0x6a0 [ 174.680320][ T5615] ? rcu_is_watching+0x15/0xb0 [ 174.680355][ T5615] __submit_merged_write_cond+0x3c9/0x4e0 [ 174.680397][ T5615] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 174.680538][ T5615] f2fs_write_data_pages+0x2a27/0x36f0 [ 174.680657][ T5615] ? __lock_acquire+0x6df/0x2e50 [ 174.680836][ T5615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.680933][ T5615] ? is_bpf_text_address+0x26/0x2b0 [ 174.681046][ T5615] ? arch_stack_walk+0xfb/0x150 [ 174.681198][ T5615] ? add_lock_to_list+0xc7/0x100 [ 174.681283][ T5615] ? lockdep_unlock+0x5c/0xd0 [ 174.681378][ T5615] ? __lock_acquire+0x14b9/0x2e50 [ 174.681525][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.681649][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 174.681742][ T5615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.681847][ T5615] do_writepages+0x338/0x560 [ 174.681973][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 174.682090][ T5615] filemap_fdatawrite+0x1e9/0x2f0 [ 174.682179][ T5615] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 174.682403][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 174.682512][ T5615] f2fs_sync_dirty_inodes+0x30e/0x830 [ 174.682677][ T5615] f2fs_write_checkpoint+0xa3d/0x2710 [ 174.682773][ T5615] ? __lock_acquire+0x6df/0x2e50 [ 174.682938][ T5615] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 174.683221][ T5615] kill_f2fs_super+0x2dd/0x700 [ 174.683368][ T5615] ? __pfx_kill_f2fs_super+0x10/0x10 [ 174.683519][ T5615] ? call_rcu+0x64b/0x8b0 [ 174.683593][ T5615] ? lockdep_hardirqs_on+0x7a/0x110 [ 174.683748][ T5615] deactivate_locked_super+0xbc/0x110 [ 174.683864][ T5615] cleanup_mnt+0x3d3/0x460 [ 174.683960][ T5615] task_work_run+0x1d9/0x270 [ 174.684042][ T5615] ? __pfx_task_work_run+0x10/0x10 [ 174.684113][ T5615] ? do_exit+0x735/0x2360 [ 174.684163][ T5615] ? kmem_cache_free+0x182/0x650 [ 174.684236][ T5615] ? put_net+0x191/0x260 [ 174.684340][ T5615] do_exit+0x73a/0x2360 [ 174.684435][ T5615] ? __pfx_do_exit+0x10/0x10 [ 174.684486][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.684636][ T5615] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.684741][ T5615] do_group_exit+0x22d/0x2f0 [ 174.684842][ T5615] __x64_sys_exit_group+0x3f/0x40 [ 174.684905][ T5615] x64_sys_call+0x18c6/0x18d0 [ 174.684994][ T5615] do_syscall_64+0x166/0x510 [ 174.685089][ T5615] ? trace_irq_disable+0x3b/0x140 [ 174.685142][ T5615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.685214][ T5615] ? clear_bhb_loop+0x70/0xc0 [ 174.685318][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.685380][ T5615] RIP: 0033:0x7f2a3cb9e0d9 [ 174.685440][ T5615] Code: Unable to access opcode bytes at 0x7f2a3cb9e0af. [ 174.685475][ T5615] RSP: 002b:00007ffcbffee098 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 174.685549][ T5615] RAX: ffffffffffffffda RBX: 00007f2a3cc344e6 RCX: 00007f2a3cb9e0d9 [ 174.685598][ T5615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 174.685644][ T5615] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007f2a3cc34474 [ 174.685682][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbffef350 [ 174.685728][ T5615] R13: 00007f2a3cc34474 R14: 000055555645b4e8 R15: 00007ffcbfff0420 [ 174.685835][ T5615] [ 174.784476][ T5615] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 176.983459][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.995133][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.996454][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.015882][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.025402][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.157964][ T7498] loop5: detected capacity change from 0 to 512 [ 178.233118][ T7498] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.550: iget: bad i_size value: 38620345925642 [ 178.233184][ T7498] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.246054][ T7498] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.550: couldn't read orphan inode 15 (err -117) [ 178.246092][ T7498] loop5: lost filesystem error report for type 5 error -117 [ 178.291644][ T7498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.400057][ T7483] loop4: detected capacity change from 0 to 32768 [ 178.460076][ T7483] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.607687][ T7483] XFS (loop4): Ending clean mount [ 178.684527][ T7483] XFS (loop4): Quotacheck needed: Please wait. [ 178.952512][ T7483] XFS (loop4): Quotacheck: Done. [ 179.017333][ T6358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.082649][ T5627] Bluetooth: hci2: command tx timeout [ 179.204290][ T5613] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.498481][ T81] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.789896][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.816802][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.826600][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.835153][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.843634][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.984327][ T81] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.247718][ T81] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.313998][ T7544] Bluetooth: MGMT ver 1.23 [ 180.446948][ T7548] loop4: detected capacity change from 0 to 512 [ 180.485571][ T7548] EXT4-fs (loop4): Test dummy encryption mode enabled [ 180.504636][ T7548] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.565: corrupted in-inode xattr: invalid ea_ino [ 180.520024][ T7548] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.520610][ T7548] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.565: couldn't read orphan inode 15 (err -117) [ 180.543830][ T7548] loop4: lost filesystem error report for type 5 error -117 [ 180.559243][ T7548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.606095][ T81] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.957403][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.058635][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.060055][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.060624][ T7472] bridge_slave_0: entered allmulticast mode [ 181.082257][ T7472] bridge_slave_0: entered promiscuous mode [ 181.156372][ T7566] netlink: 80 bytes leftover after parsing attributes in process `syz.6.570'. [ 181.169038][ T5627] Bluetooth: hci2: command tx timeout [ 181.236964][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.237218][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.237756][ T7472] bridge_slave_1: entered allmulticast mode [ 181.276086][ T7472] bridge_slave_1: entered promiscuous mode [ 181.687752][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.725731][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.764662][ T7587] loop4: detected capacity change from 0 to 64 [ 181.882832][ T5627] Bluetooth: hci0: command tx timeout [ 181.935736][ T7587] hfs: hfs: Invalid key length: 224 [ 182.032143][ T7472] team0: Port device team_slave_0 added [ 182.039940][ T81] bridge_slave_1: left allmulticast mode [ 182.039998][ T81] bridge_slave_1: left promiscuous mode [ 182.043962][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.076333][ T5613] hfs: node 4:3 still has 1 user(s)! [ 182.087143][ T81] bridge_slave_0: left allmulticast mode [ 182.093061][ T81] bridge_slave_0: left promiscuous mode [ 182.099169][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.670796][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.720892][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.736227][ T81] bond0 (unregistering): Released all slaves [ 182.758675][ T7472] team0: Port device team_slave_1 added [ 182.770781][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.579'. [ 182.770838][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.579'. [ 182.770918][ T7608] netlink: 'syz.6.579': attribute type 15 has an invalid length. [ 182.904257][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.579'. [ 182.916037][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.579'. [ 182.925449][ T7608] netlink: 'syz.6.579': attribute type 15 has an invalid length. [ 183.082747][ T5926] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 183.082982][ T5926] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 183.083052][ T5926] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 183.083099][ T5926] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 183.128234][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.137097][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.165451][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.190070][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.190120][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.190152][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.242635][ T5627] Bluetooth: hci2: command tx timeout [ 183.331501][ T7618] overlayfs: failed to clone upperpath [ 183.963070][ T5627] Bluetooth: hci0: command tx timeout [ 184.031797][ T7472] hsr_slave_0: entered promiscuous mode [ 184.041634][ T7472] hsr_slave_1: entered promiscuous mode [ 184.050987][ T7472] debugfs: 'hsr0' already exists in 'hsr' [ 184.061432][ T7472] Cannot create hsr debugfs directory [ 184.183077][ T81] hsr_slave_0: left promiscuous mode [ 184.191378][ T81] hsr_slave_1: left promiscuous mode [ 184.206959][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.207010][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.217293][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.217321][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.257424][ T81] veth1_macvtap: left promiscuous mode [ 184.264532][ T81] veth0_macvtap: left promiscuous mode [ 184.264696][ T81] veth1_vlan: left promiscuous mode [ 184.264773][ T81] veth0_vlan: left promiscuous mode [ 184.421858][ T7639] loop4: detected capacity change from 0 to 2048 [ 184.575524][ T7639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.575659][ T7639] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.771509][ T5738] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 184.892137][ T81] team0 (unregistering): Port device team_slave_1 removed [ 184.899082][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.931365][ T81] team0 (unregistering): Port device team_slave_0 removed [ 184.939316][ T5738] usb 7-1: Using ep0 maxpacket: 32 [ 184.952579][ T5738] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 184.976123][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.987120][ T5738] usb 7-1: config 0 has no interfaces? [ 184.999319][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.011693][ T5738] usb 7-1: Product: syz [ 185.011750][ T5738] usb 7-1: Manufacturer: syz [ 185.011771][ T5738] usb 7-1: SerialNumber: syz [ 185.051339][ T5738] usb 7-1: config 0 descriptor?? [ 185.326037][ T7653] loop4: detected capacity change from 0 to 1764 [ 185.334825][ T5627] Bluetooth: hci2: command tx timeout [ 185.673039][ T5738] usb 7-1: USB disconnect, device number 2 [ 186.044495][ T5627] Bluetooth: hci0: command tx timeout [ 186.091046][ T7669] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 186.600337][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.612868][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.613108][ T7529] bridge_slave_0: entered allmulticast mode [ 186.672903][ T7529] bridge_slave_0: entered promiscuous mode [ 186.703019][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.704799][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.711722][ T7529] bridge_slave_1: entered allmulticast mode [ 186.739897][ T7529] bridge_slave_1: entered promiscuous mode [ 186.793938][ T7693] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 187.116015][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.604'. [ 187.322114][ T7529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.362202][ T7529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.547088][ T7529] team0: Port device team_slave_0 added [ 187.573593][ T7529] team0: Port device team_slave_1 added [ 187.845826][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.845870][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.845900][ T7529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.880557][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.880581][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.880616][ T7529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.927206][ T190] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 188.016750][ T7472] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 188.028117][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.038730][ T7472] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 188.072113][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.080816][ T7472] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 188.089508][ T190] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 188.104525][ T190] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.116710][ T190] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.128558][ T5627] Bluetooth: hci0: command tx timeout [ 188.129821][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.149141][ T190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.158654][ T190] usb 7-1: Product: syz [ 188.158677][ T190] usb 7-1: Manufacturer: syz [ 188.158693][ T190] usb 7-1: SerialNumber: syz [ 188.219828][ T7472] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 188.230950][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.311980][ T7529] hsr_slave_0: entered promiscuous mode [ 188.317803][ T7529] hsr_slave_1: entered promiscuous mode [ 188.421095][ T190] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 188.859049][ T190] usb 7-1: USB disconnect, device number 3 [ 188.881623][ T190] usblp0: removed [ 189.175260][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.251008][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.318384][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.318658][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.672691][ T7766] netlink: 'syz.3.615': attribute type 4 has an invalid length. [ 189.731118][ T7768] netlink: 'syz.3.615': attribute type 4 has an invalid length. [ 189.829385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.829518][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.989306][ T7529] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 190.002261][ T7529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.017318][ T7529] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 190.034848][ T7529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.055793][ T7529] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 190.084721][ T7529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.115496][ T7529] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 190.136625][ T7529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.473349][ T7529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.569900][ T7529] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.627177][ T7797] loop4: detected capacity change from 0 to 512 [ 190.645152][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.645336][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.672296][ T7797] EXT4-fs (loop4): Test dummy encryption mode enabled [ 190.685262][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 190.701952][ T7797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e09d, mo2=0002] [ 190.756415][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.756668][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.804780][ T7797] System zones: 1-12 [ 190.831616][ T7797] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.280286][ T7797] fscrypt: AES-256-XTS using blk-crypto-fallback [ 191.287115][ T7797] EXT4-fs error (device loop4): __ext4_add_entry:2414: inode #2: comm syz.4.622: Directory hole found for htree leaf block 0 [ 191.470476][ T5613] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 192.242762][ T5724] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 192.413710][ T5724] usb 7-1: Using ep0 maxpacket: 16 [ 192.418570][ T5724] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.434684][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.434751][ T5724] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.434816][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.470265][ T5724] usb 7-1: config 0 descriptor?? [ 192.620220][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.690095][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 192.747172][ T7529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.830044][ T5738] usb 7-1: USB disconnect, device number 4 [ 193.461091][ T7862] loop4: detected capacity change from 0 to 4096 [ 193.617473][ T7876] futex_wake_op: syz.6.632 tries to shift op by 144; fix this program [ 193.650487][ T7862] ntfs3(loop4): Failed to read $AttrDef (-5). [ 194.110229][ T7472] veth0_vlan: entered promiscuous mode [ 194.120263][ T7875] Set syz1 is full, maxelem 6117 reached [ 194.157262][ T7472] veth1_vlan: entered promiscuous mode [ 194.253344][ T7472] veth0_macvtap: entered promiscuous mode [ 194.304247][ T7472] veth1_macvtap: entered promiscuous mode [ 194.364414][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364499][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.401442][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.465002][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.581158][ T7529] veth0_vlan: entered promiscuous mode [ 194.656802][ T7893] loop4: detected capacity change from 0 to 128 [ 194.670234][ T7893] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.688208][ T7893] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.734765][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.748157][ T1024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.810721][ T1024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.843695][ T1174] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.980799][ T7893] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 195.037241][ T7529] veth1_vlan: entered promiscuous mode [ 195.041123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.041225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.303848][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 195.369431][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.369471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.507447][ T7529] veth0_macvtap: entered promiscuous mode [ 195.536673][ T7529] veth1_macvtap: entered promiscuous mode [ 195.608885][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.688178][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.730151][ T7913] SQUASHFS error: Failed to read block 0x0: -5 [ 195.772636][ T1174] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.832717][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.835634][ T1174] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.835767][ T1174] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.390736][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.390793][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.532458][ T1221] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 196.588858][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.588916][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.682557][ T1221] usb 5-1: Using ep0 maxpacket: 32 [ 196.689916][ T1221] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 196.704934][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.728970][ T1221] usb 5-1: config 0 descriptor?? [ 196.759909][ T1221] gspca_main: sq930x-2.14.0 probing 041e:403c [ 197.986873][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.8.656'. [ 198.059277][ T1221] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 198.068442][ T1221] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 198.154941][ T1221] usb 5-1: USB disconnect, device number 6 [ 198.167691][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 198.323043][ T7964] loop7: detected capacity change from 0 to 1024 [ 200.915558][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.7.681'. [ 201.162812][ T5831] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 201.320891][ T5831] usb 8-1: Using ep0 maxpacket: 32 [ 201.331221][ T5831] usb 8-1: New USB device found, idVendor=0403, idProduct=fd4b, bcdDevice=56.a8 [ 201.336294][ T5831] usb 8-1: config 203 has an invalid interface number: 182 but max is 0 [ 201.336336][ T5831] usb 8-1: config 203 has no interface number 0 [ 201.337425][ T5831] usb 8-1: config 203 interface 182 has no altsetting 0 [ 201.394069][ T5831] usb 8-1: string descriptor 0 read error: -22 [ 201.394461][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.454886][ T5831] ftdi_sio 8-1:203.182: FTDI USB Serial Device converter detected [ 201.475777][ T5831] ftdi_sio ttyUSB0: unknown device type: 0x56a8 [ 201.543582][ T8050] ------------[ cut here ]------------ [ 201.543617][ T8050] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x3dd/0x480 [ 201.543695][ T8050] WARNING: kernel/sched/core.c:9122 at __might_sleep+0x92/0xf0, CPU#1: syz.3.688/8050 [ 201.575059][ T8050] Modules linked in: [ 201.579311][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.3.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.591353][ T8050] Tainted: [L]=SOFTLOCKUP [ 201.596662][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.608413][ T8050] RIP: 0010:__might_sleep+0xac/0xf0 [ 201.614645][ T8050] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 3e 93 c5 0e 43 80 3c 3c 00 74 08 48 89 df e8 bf 87 9f 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 201.635331][ T8050] RSP: 0018:ffffc90003cc7ae0 EFLAGS: 00010246 [ 201.641623][ T8050] RAX: 0000000000000000 RBX: ffff88802128f668 RCX: ffffffff81a00c1d [ 201.651560][ T8050] RDX: ffffffff81a00c1d RSI: 0000000000000002 RDI: ffffffff905bfab0 [ 201.660473][ T8050] RBP: 0000000000000002 R08: ffffc90003cc7c27 R09: 0000000000000000 [ 201.669684][ T8050] R10: ffffc90003cc7c00 R11: fffff52000798f85 R12: 1ffff11004251ecd [ 201.679644][ T8050] R13: 000000000000026f R14: ffffffff905bfab0 R15: dffffc0000000000 [ 201.689133][ T8050] FS: 00007f822472c6c0(0000) GS:ffff88812500d000(0000) knlGS:0000000000000000 [ 201.699805][ T8050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.707320][ T8050] CR2: 000000110c2d8dc3 CR3: 0000000077e98000 CR4: 00000000003526f0 [ 201.717711][ T8050] Call Trace: [ 201.721334][ T8050] [ 201.725623][ T8050] __mutex_lock+0x118/0x1550 [ 201.730414][ T8050] ? do_raw_spin_lock+0x12b/0x2f0 [ 201.736718][ T8050] ? futex_hash_allocate+0x7fb/0xf00 [ 201.742175][ T8050] ? __pfx___mutex_lock+0x10/0x10 [ 201.747520][ T8050] ? lockdep_hardirqs_on+0x7a/0x110 [ 201.753057][ T8050] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 201.759047][ T8050] ? prepare_to_wait_event+0x436/0x480 [ 201.764840][ T8050] futex_hash_allocate+0x7fb/0xf00 [ 201.770253][ T8050] ? __pfx_futex_hash_allocate+0x10/0x10 [ 201.777178][ T8050] ? __pfx_var_wake_function+0x10/0x10 [ 201.784122][ T8050] ? static_key_count+0x41/0x70 [ 201.789824][ T8050] ? security_task_prctl+0x163/0x190 [ 201.796041][ T8050] __se_sys_prctl+0x78c/0x1910 [ 201.801002][ T8050] ? __pfx___se_sys_prctl+0x10/0x10 [ 201.806918][ T8050] ? __x64_sys_prctl+0x20/0xc0 [ 201.811974][ T8050] do_syscall_64+0x166/0x510 [ 201.816883][ T8050] ? trace_irq_disable+0x3b/0x140 [ 201.822472][ T8050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.828963][ T8050] ? clear_bhb_loop+0x70/0xc0 [ 201.834119][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.840515][ T8050] RIP: 0033:0x7f822379e0d9 [ 201.845162][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.865742][ T8050] RSP: 002b:00007f822472c028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 201.874744][ T8050] RAX: ffffffffffffffda RBX: 00007f8223a25fa0 RCX: 00007f822379e0d9 [ 201.883288][ T8050] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 201.891417][ T8050] RBP: 00007f8223835024 R08: 0000000000000000 R09: 0000000000000000 [ 201.901186][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.910117][ T8050] R13: 00007f8223a26038 R14: 00007f8223a25fa0 R15: 00007ffd0ec8a5e8 [ 201.918589][ T8050] [ 201.921667][ T8050] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 201.929175][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.3.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.941006][ T8050] Tainted: [L]=SOFTLOCKUP [ 201.946082][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.956816][ T8050] Call Trace: [ 201.960144][ T8050] [ 201.963202][ T8050] vpanic+0x56c/0xa60 [ 201.967323][ T8050] ? __pfx__printk+0x10/0x10 [ 201.972101][ T8050] ? __pfx_vpanic+0x10/0x10 [ 201.976999][ T8050] ? is_bpf_text_address+0x292/0x2b0 [ 201.982772][ T8050] ? is_bpf_text_address+0x26/0x2b0 [ 201.988243][ T8050] panic+0xc5/0xd0 [ 201.992175][ T8050] ? __pfx_panic+0x10/0x10 [ 201.996787][ T8050] __warn+0x315/0x4c0 [ 202.000926][ T8050] ? __might_sleep+0x92/0xf0 [ 202.005797][ T8050] ? __might_sleep+0x92/0xf0 [ 202.011002][ T8050] __report_bug+0x276/0x570 [ 202.016019][ T8050] ? __might_sleep+0x92/0xf0 [ 202.021481][ T8050] ? __pfx___report_bug+0x10/0x10 [ 202.026577][ T8050] ? prepare_to_wait_event+0x3dd/0x480 [ 202.032104][ T8050] ? prepare_to_wait_event+0x3dd/0x480 [ 202.037747][ T8050] ? __lock_acquire+0x6df/0x2e50 [ 202.043124][ T8050] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 202.049190][ T8050] ? stack_depot_save_flags+0x3ec/0x800 [ 202.054914][ T8050] report_bug_entry+0x19a/0x290 [ 202.060363][ T8050] ? __might_sleep+0xac/0xf0 [ 202.065301][ T8050] ? __might_sleep+0xb1/0xf0 [ 202.070406][ T8050] handle_bug+0xce/0x200 [ 202.075246][ T8050] exc_invalid_op+0x1a/0x50 [ 202.079996][ T8050] asm_exc_invalid_op+0x1a/0x20 [ 202.084986][ T8050] RIP: 0010:__might_sleep+0xac/0xf0 [ 202.090733][ T8050] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 3e 93 c5 0e 43 80 3c 3c 00 74 08 48 89 df e8 bf 87 9f 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 202.110871][ T8050] RSP: 0018:ffffc90003cc7ae0 EFLAGS: 00010246 [ 202.117869][ T8050] RAX: 0000000000000000 RBX: ffff88802128f668 RCX: ffffffff81a00c1d [ 202.126682][ T8050] RDX: ffffffff81a00c1d RSI: 0000000000000002 RDI: ffffffff905bfab0 [ 202.135843][ T8050] RBP: 0000000000000002 R08: ffffc90003cc7c27 R09: 0000000000000000 [ 202.144225][ T8050] R10: ffffc90003cc7c00 R11: fffff52000798f85 R12: 1ffff11004251ecd [ 202.153170][ T8050] R13: 000000000000026f R14: ffffffff905bfab0 R15: dffffc0000000000 [ 202.161575][ T8050] ? prepare_to_wait_event+0x3dd/0x480 [ 202.167123][ T8050] ? prepare_to_wait_event+0x3dd/0x480 [ 202.172895][ T8050] __mutex_lock+0x118/0x1550 [ 202.177754][ T8050] ? do_raw_spin_lock+0x12b/0x2f0 [ 202.182950][ T8050] ? futex_hash_allocate+0x7fb/0xf00 [ 202.188395][ T8050] ? __pfx___mutex_lock+0x10/0x10 [ 202.193756][ T8050] ? lockdep_hardirqs_on+0x7a/0x110 [ 202.199024][ T8050] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 202.205098][ T8050] ? prepare_to_wait_event+0x436/0x480 [ 202.211067][ T8050] futex_hash_allocate+0x7fb/0xf00 [ 202.216448][ T8050] ? __pfx_futex_hash_allocate+0x10/0x10 [ 202.222418][ T8050] ? __pfx_var_wake_function+0x10/0x10 [ 202.228035][ T8050] ? static_key_count+0x41/0x70 [ 202.233674][ T8050] ? security_task_prctl+0x163/0x190 [ 202.239125][ T8050] __se_sys_prctl+0x78c/0x1910 [ 202.243981][ T8050] ? __pfx___se_sys_prctl+0x10/0x10 [ 202.249441][ T8050] ? __x64_sys_prctl+0x20/0xc0 [ 202.254625][ T8050] do_syscall_64+0x166/0x510 [ 202.259282][ T8050] ? trace_irq_disable+0x3b/0x140 [ 202.264366][ T8050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.270523][ T8050] ? clear_bhb_loop+0x70/0xc0 [ 202.275338][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.281572][ T8050] RIP: 0033:0x7f822379e0d9 [ 202.286096][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.306378][ T8050] RSP: 002b:00007f822472c028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 202.314867][ T8050] RAX: ffffffffffffffda RBX: 00007f8223a25fa0 RCX: 00007f822379e0d9 [ 202.323769][ T8050] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 202.332055][ T8050] RBP: 00007f8223835024 R08: 0000000000000000 R09: 0000000000000000 [ 202.340189][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.348389][ T8050] R13: 00007f8223a26038 R14: 00007f8223a25fa0 R15: 00007ffd0ec8a5e8 [ 202.356989][ T8050] [ 202.363676][ T8050] Kernel Offset: disabled [ 202.368056][ T8050] Rebooting in 86400 seconds..