last executing test programs: 26.763053194s ago: executing program 2 (id=108): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) 26.370397162s ago: executing program 2 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 15.171938704s ago: executing program 1 (id=137): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2c, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb89"}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\t'], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 14.154210403s ago: executing program 2 (id=140): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[], 0xfd, 0x2b9, &(0x7f0000000980)="$eJzs3E9rE08YwPEnadM/KW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3p/jHbEvtH227bfD9QdpqZJzOZ7IZnF2bW7715Wqu4VsW0JD2ikhZZlg2R/FYplAqPab88JHHLcnXsx+cLd+4/uFkslaZnVWeKc9cKqjpx8cPzl28vfWyN3X038X5Y1vIP178Xvqz9v3ZufXMuevdGS43ONxotM+/YulB1a5bqbcc2rq3Vums3t9VXnMbiYkdNfWE8u9i0XVdNvaM1u6OthraaHTWPTbWulmXpeFb6zcCBI8ors7OmeCSDQRJGe73YbBbNQM/K8spxDAoAAJwssfzfSwU5/rHk/0+qrlZdre+V/6flcPL/kWOZzdPGz/83eyaNOBsyWzcARZMNr9/tyP8BAAAAAAAAAAAAAAAAAAAAADgNNjwv53leLpUKjtHfcLhmJvo/6XHiaETf/4a37+8/leBwcchiC/dGRJzX7XK7HByD+mJFquKILZMZkZ/++RAKyjM3StOT6svLqrMUxvuLBIej+Ei+d/xUEK+x+KV2OSPZeP8Fycl/veMLO+IzItIuD8mVy7F4S3Ly6ZE0xJEF/7zurod6NaV6/VZpR/+jfjsAAAAAAM4CS3/Lb7//DXaTtCyNbpN31Acvdp8PSG6P5wMqq0PSjR+U84PJfW4AAAAAAPqJ23lRM45jNyn0LqT+MFH9OHVWuIvyro09z1vaavTvnaZF5CBRo7sP7CCFbyJyAiY8VsgcxgX79VnwJvtpnMSvEQAAAICj1E36kx4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD9a7+bh0Xt/2bvsVh3A8l8SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBk+BUAAP//scoNhA==") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x24000800) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x21, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) dup(r1) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect$printer(0x2, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_ep_read(r5, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 13.986942907s ago: executing program 1 (id=142): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8f, 0x0, 0x100000}, 0x20) 12.851709043s ago: executing program 4 (id=143): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) getpgid(0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3559781769a899b5, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x32}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100210100000000dfb6cd12e2dccbe2e770bdba10000000000a0000", @ANYRES32=r6, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 12.851319021s ago: executing program 1 (id=144): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001380)={[{@checkpoint_diasble}, {}, {@fsync_mode_posix}, {@prjjquota}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@inline_dentry}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@discard_unit_block}, {@extent_cache}]}, 0x1, 0x550e, &(0x7f0000001e00)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r2, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r2, 0x8, 0x0, 0x10000) 11.503493365s ago: executing program 3 (id=145): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.839965647s ago: executing program 4 (id=147): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 9.51161392s ago: executing program 4 (id=148): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendfile(0xffffffffffffffff, r1, 0x0, 0x578410eb) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 9.429161342s ago: executing program 1 (id=149): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000001540)={[{@discard}, {@mblk_io_submit}, {@grpjquota}, {@quota}, {@nobarrier}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 8.038796907s ago: executing program 2 (id=151): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0xc4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) prctl$PR_SET_THP_DISABLE(0x29, 0x2) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) socket(0xa, 0x6, 0x4) 7.253803728s ago: executing program 4 (id=152): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) setuid(0xee00) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x10000000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) 7.092021105s ago: executing program 3 (id=153): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 6.920837588s ago: executing program 3 (id=154): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unlink(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) fdatasync(r0) 6.843488078s ago: executing program 0 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2, 0x0) socket(0x11, 0x800000002, 0x0) truncate(&(0x7f00000022c0)='./file1\x00', 0x400000f000) 5.500562675s ago: executing program 0 (id=156): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001800150000000000000000000a00000002020048000000001800098014"], 0x34}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) 5.303939931s ago: executing program 2 (id=157): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) 4.159496709s ago: executing program 0 (id=158): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 4.013846004s ago: executing program 1 (id=159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0xac, &(0x7f00000002c0)={0x0, 0xd6a3, 0x40, 0xfffffffe, 0xffffffde}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 3.943575975s ago: executing program 4 (id=160): prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffefff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, 0x0}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000), 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe0cf) readv(r3, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040880) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340), 0xfd, 0x46e, &(0x7f0000001680)="$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") sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40850}, 0x4080) 3.819949751s ago: executing program 0 (id=161): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 3.430341937s ago: executing program 3 (id=162): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6e20, 0x6f8e9cb5, @private2={0xfc, 0x2, '\x00', 0x9}, 0xffffffff}, 0x4) 2.476250091s ago: executing program 0 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={0x0}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.211940494s ago: executing program 3 (id=164): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") mount$9p_tcp(&(0x7f0000000280), 0x0, &(0x7f0000000340), 0x800002, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.104717326s ago: executing program 1 (id=165): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 599.438996ms ago: executing program 4 (id=166): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, &(0x7f0000000300), &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0xff, &(0x7f0000000400)=""/255, 0x40e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0xc, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000800)=[{0x0, 0x3, 0x1, 0x2}, {0x1, 0x3, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa0800000000000000bbbb0800451300240064000007219078ac1414bbac1414aa4e244e2404319078020200cb08fc3ee6"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 299.864235ms ago: executing program 3 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0xa) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) 286.733923ms ago: executing program 2 (id=168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) r7 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x802, 0x1}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r8, @ANYBLOB="020029bd7000fddbdf256c0000000c00990000000a00470000000800a0000500000008002201bd0100000500180115000000080026006c09000008009f00070000000500180134000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) 0s ago: executing program 0 (id=169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x11624fc, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000024600)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000012580)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 329.337391][ T5862] cgroup: Unknown subsys name 'net' [ 329.572779][ T5862] cgroup: Unknown subsys name 'cpuset' [ 329.582861][ T5862] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 331.286866][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 336.024653][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.032645][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.042376][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.050116][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.050345][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.059387][ T5882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.067126][ T5896] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.074140][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.079379][ T5896] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.086583][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.093938][ T5896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.100409][ T5882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.107971][ T5896] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.121417][ T5896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.123065][ T5882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.131691][ T5896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.136988][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.144017][ T5896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.150353][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.167129][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.174695][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.175382][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.183190][ T5882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.201959][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.262996][ T5896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.933947][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 337.087774][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 337.106307][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 337.204482][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 337.254143][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.261477][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.270085][ T5874] bridge_slave_0: entered allmulticast mode [ 337.277645][ T5874] bridge_slave_0: entered promiscuous mode [ 337.305257][ T5886] chnl_net:caif_netlink_parms(): no params data found [ 337.324195][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.331508][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.338954][ T5874] bridge_slave_1: entered allmulticast mode [ 337.346305][ T5874] bridge_slave_1: entered promiscuous mode [ 337.455352][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.463281][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.470788][ T5881] bridge_slave_0: entered allmulticast mode [ 337.478079][ T5881] bridge_slave_0: entered promiscuous mode [ 337.540745][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.547921][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.555576][ T5881] bridge_slave_1: entered allmulticast mode [ 337.563813][ T5881] bridge_slave_1: entered promiscuous mode [ 337.574521][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.627705][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.664895][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.673246][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.681260][ T5876] bridge_slave_0: entered allmulticast mode [ 337.689665][ T5876] bridge_slave_0: entered promiscuous mode [ 337.725121][ T5874] team0: Port device team_slave_0 added [ 337.787566][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.797680][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.805188][ T5876] bridge_slave_1: entered allmulticast mode [ 337.815147][ T5876] bridge_slave_1: entered promiscuous mode [ 337.838916][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.850586][ T5874] team0: Port device team_slave_1 added [ 337.859132][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.868456][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.875590][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.883129][ T5873] bridge_slave_0: entered allmulticast mode [ 337.890596][ T5873] bridge_slave_0: entered promiscuous mode [ 337.899205][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.906374][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.913660][ T5873] bridge_slave_1: entered allmulticast mode [ 337.921646][ T5873] bridge_slave_1: entered promiscuous mode [ 337.929086][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.936216][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.943558][ T5886] bridge_slave_0: entered allmulticast mode [ 337.951334][ T5886] bridge_slave_0: entered promiscuous mode [ 338.016958][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.025136][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.032952][ T5886] bridge_slave_1: entered allmulticast mode [ 338.040912][ T5886] bridge_slave_1: entered promiscuous mode [ 338.064996][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.108556][ T5881] team0: Port device team_slave_0 added [ 338.143007][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.154002][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.161905][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.188597][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.202703][ T5881] team0: Port device team_slave_1 added [ 338.225478][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.237590][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.244762][ T51] Bluetooth: hci3: command tx timeout [ 338.252294][ T5896] Bluetooth: hci1: command tx timeout [ 338.267400][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.274684][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.301139][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.318998][ T51] Bluetooth: hci2: command tx timeout [ 338.319056][ T5896] Bluetooth: hci4: command tx timeout [ 338.324717][ T51] Bluetooth: hci0: command tx timeout [ 338.343038][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.370077][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.417751][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.424961][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.451285][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.466306][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.473551][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.499699][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.541661][ T5886] team0: Port device team_slave_0 added [ 338.550002][ T5876] team0: Port device team_slave_0 added [ 338.559728][ T5876] team0: Port device team_slave_1 added [ 338.589854][ T5873] team0: Port device team_slave_0 added [ 338.597734][ T5886] team0: Port device team_slave_1 added [ 338.620054][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.627066][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.653195][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.666766][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.673946][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.700041][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.713730][ T5873] team0: Port device team_slave_1 added [ 338.832421][ T5874] hsr_slave_0: entered promiscuous mode [ 338.839488][ T5874] hsr_slave_1: entered promiscuous mode [ 338.876608][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.883745][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.910637][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.943682][ T5876] hsr_slave_0: entered promiscuous mode [ 338.950551][ T5876] hsr_slave_1: entered promiscuous mode [ 338.956715][ T5876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.964590][ T5876] Cannot create hsr debugfs directory [ 338.971378][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.978917][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.005272][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.017364][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.026894][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.053087][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.069547][ T5881] hsr_slave_0: entered promiscuous mode [ 339.076192][ T5881] hsr_slave_1: entered promiscuous mode [ 339.082807][ T5881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.090475][ T5881] Cannot create hsr debugfs directory [ 339.101642][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.108691][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.134868][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.451702][ T5873] hsr_slave_0: entered promiscuous mode [ 339.458323][ T5873] hsr_slave_1: entered promiscuous mode [ 339.464493][ T5873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.472975][ T5873] Cannot create hsr debugfs directory [ 339.484190][ T5886] hsr_slave_0: entered promiscuous mode [ 339.491025][ T5886] hsr_slave_1: entered promiscuous mode [ 339.497194][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.504828][ T5886] Cannot create hsr debugfs directory [ 339.901736][ T5874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.944844][ T5874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.977956][ T5874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.006423][ T5874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.085481][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.098983][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.121860][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.145440][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.211459][ T5876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.246207][ T5876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.259262][ T5876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.272767][ T5876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.318234][ T51] Bluetooth: hci3: command tx timeout [ 340.319486][ T5896] Bluetooth: hci1: command tx timeout [ 340.402767][ T5896] Bluetooth: hci4: command tx timeout [ 340.403961][ T51] Bluetooth: hci0: command tx timeout [ 340.408450][ T5878] Bluetooth: hci2: command tx timeout [ 340.462336][ T5886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.474234][ T5886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.485594][ T5886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.496537][ T5886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.577597][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.604592][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.619456][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 340.631392][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.643440][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 340.655586][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 340.680054][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.729785][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.737087][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.750917][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.758223][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.795023][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.833780][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.840989][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.874827][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.882184][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.902922][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.969641][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.007922][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.015110][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.063554][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.070761][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.153797][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.313019][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.361981][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.369258][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.427500][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.512291][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.519537][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.544440][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.602794][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.610048][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.645804][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.678104][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.685476][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.720759][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.931901][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.104125][ T5881] veth0_vlan: entered promiscuous mode [ 342.164904][ T5876] veth0_vlan: entered promiscuous mode [ 342.213683][ T5881] veth1_vlan: entered promiscuous mode [ 342.259910][ T5876] veth1_vlan: entered promiscuous mode [ 342.396543][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.401381][ T5896] Bluetooth: hci1: command tx timeout [ 342.405650][ T5878] Bluetooth: hci3: command tx timeout [ 342.416319][ T5881] veth0_macvtap: entered promiscuous mode [ 342.433456][ T5881] veth1_macvtap: entered promiscuous mode [ 342.473991][ T5876] veth0_macvtap: entered promiscuous mode [ 342.481533][ T5878] Bluetooth: hci4: command tx timeout [ 342.481554][ T5896] Bluetooth: hci2: command tx timeout [ 342.486999][ T5878] Bluetooth: hci0: command tx timeout [ 342.517432][ T5876] veth1_macvtap: entered promiscuous mode [ 342.535352][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.553880][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.579677][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.608796][ T5970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.621475][ T5967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.640053][ T5874] veth0_vlan: entered promiscuous mode [ 342.647630][ T5967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.657530][ T5970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.672700][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.703384][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.716870][ T5874] veth1_vlan: entered promiscuous mode [ 342.763441][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.785354][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.814238][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.823883][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.852168][ T5886] veth0_vlan: entered promiscuous mode [ 342.957064][ T5886] veth1_vlan: entered promiscuous mode [ 342.983780][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.992103][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.003862][ T5874] veth0_macvtap: entered promiscuous mode [ 343.013697][ T5873] veth0_vlan: entered promiscuous mode [ 343.066653][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.075441][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.086763][ T5874] veth1_macvtap: entered promiscuous mode [ 343.105558][ T5886] veth0_macvtap: entered promiscuous mode [ 343.129150][ T5873] veth1_vlan: entered promiscuous mode [ 343.161258][ T5886] veth1_macvtap: entered promiscuous mode [ 343.177963][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.195498][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.227520][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.229491][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.243920][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.307362][ T5873] veth0_macvtap: entered promiscuous mode [ 343.330362][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.344561][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.352716][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 343.371733][ T5873] veth1_macvtap: entered promiscuous mode [ 343.405632][ T5965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.415693][ T5965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.432886][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.477318][ T5965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.531225][ T5965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.573190][ T5965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.599736][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.607666][ T5965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.628414][ T5965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.743021][ T5965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.780683][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.881982][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.925514][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.925581][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.926049][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.017059][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.017085][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.356020][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.379330][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.433507][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.465524][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.487081][ T5878] Bluetooth: hci3: command tx timeout [ 344.493539][ T51] Bluetooth: hci1: command tx timeout [ 344.559326][ T51] Bluetooth: hci4: command tx timeout [ 344.559335][ T5896] Bluetooth: hci0: command tx timeout [ 344.571014][ T5878] Bluetooth: hci2: command tx timeout [ 344.699220][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.707102][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.838448][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.846329][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.031596][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.078229][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.138795][ T5959] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 345.199626][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 345.328950][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 345.377760][ T5959] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 345.430482][ T5959] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 345.456570][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.505158][ T5959] usb 4-1: Product: syz [ 345.513498][ T5959] usb 4-1: Manufacturer: syz [ 345.520307][ T5959] usb 4-1: SerialNumber: syz [ 345.548200][ T5959] usb 4-1: config 0 descriptor?? [ 345.592565][ T5959] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 345.636179][ T5959] usb 4-1: Detected FT232R [ 345.787621][ T5959] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 345.919770][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 346.372087][ T6019] loop2: detected capacity change from 0 to 2048 [ 346.469072][ T6019] EXT4-fs: Ignoring removed i_version option [ 346.493167][ T5959] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 346.542779][ T5959] usb 4-1: USB disconnect, device number 2 [ 346.643592][ T5959] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 346.709994][ T5959] ftdi_sio 4-1:0.0: device disconnected [ 346.762817][ T6019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.856107][ T6019] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.925430][ T6033] loop0: detected capacity change from 0 to 128 [ 346.935991][ T6019] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10: bg 0: block 345: padding at end of block bitmap is not set [ 346.957549][ T6019] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 346.973961][ T6019] EXT4-fs (loop2): This should not happen!! Data will be lost [ 346.973961][ T6019] [ 347.094958][ T5886] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.111834][ T6033] ======================================================= [ 347.111834][ T6033] WARNING: The mand mount option has been deprecated and [ 347.111834][ T6033] and is ignored by this kernel. Remove the mand [ 347.111834][ T6033] option from the mount to silence this warning. [ 347.111834][ T6033] ======================================================= [ 350.750097][ T6042] syz.2.15 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 350.761326][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.2.15 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 350.761356][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.761378][ T6042] Call Trace: [ 350.761387][ T6042] [ 350.761398][ T6042] dump_stack_lvl+0x189/0x250 [ 350.761447][ T6042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.761479][ T6042] ? __pfx__printk+0x10/0x10 [ 350.761526][ T6042] dump_header+0xd3/0x480 [ 350.761557][ T6042] oom_kill_process+0x3b6/0x950 [ 350.761587][ T6042] out_of_memory+0xf09/0x12a0 [ 350.761625][ T6042] ? __pfx_out_of_memory+0x10/0x10 [ 350.761660][ T6042] mem_cgroup_out_of_memory+0x145/0x240 [ 350.761689][ T6042] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 350.761728][ T6042] ? _raw_spin_unlock+0x28/0x50 [ 350.761756][ T6042] ? memcg1_oom_prepare+0x37f/0x450 [ 350.761791][ T6042] try_charge_memcg+0xdff/0x1290 [ 350.761832][ T6042] ? __pfx_try_charge_memcg+0x10/0x10 [ 350.761875][ T6042] charge_memcg+0x9f/0x180 [ 350.761909][ T6042] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 350.761943][ T6042] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 350.761981][ T6042] __read_swap_cache_async+0x28c/0x510 [ 350.762022][ T6042] swap_cluster_readahead+0x305/0x5f0 [ 350.762056][ T6042] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 350.762099][ T6042] ? get_vma_policy+0x27c/0x3c0 [ 350.762137][ T6042] swapin_readahead+0x17d/0xb50 [ 350.762163][ T6042] ? __pfx_filemap_get_entry+0x10/0x10 [ 350.762198][ T6042] ? __pfx_swapin_readahead+0x10/0x10 [ 350.762229][ T6042] ? __filemap_get_folio+0x9a6/0xaf0 [ 350.762271][ T6042] ? swap_cache_get_folio+0xae/0x3b0 [ 350.762303][ T6042] do_swap_page+0x525/0x5ac0 [ 350.762339][ T6042] ? __lock_acquire+0xab9/0xd20 [ 350.762382][ T6042] ? do_swap_page+0x184/0x5ac0 [ 350.762410][ T6042] ? __pfx_do_swap_page+0x10/0x10 [ 350.762442][ T6042] ? __pfx_default_wake_function+0x10/0x10 [ 350.762472][ T6042] ? ___pte_offset_map+0x1cf/0x250 [ 350.762508][ T6042] ? pte_offset_map_rw_nolock+0xea/0x160 [ 350.762543][ T6042] __handle_mm_fault+0xe55/0x5440 [ 350.762594][ T6042] ? __pfx___handle_mm_fault+0x10/0x10 [ 350.762650][ T6042] ? find_vma+0xe7/0x160 [ 350.762680][ T6042] ? __pfx_find_vma+0x10/0x10 [ 350.762713][ T6042] handle_mm_fault+0x40a/0x8e0 [ 350.762757][ T6042] do_user_addr_fault+0x764/0x1390 [ 350.762804][ T6042] exc_page_fault+0x76/0xf0 [ 350.762840][ T6042] asm_exc_page_fault+0x26/0x30 [ 350.762860][ T6042] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 350.762887][ T6042] Code: c9 75 f6 e9 42 10 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 350.762904][ T6042] RSP: 0018:ffffc90004a07918 EFLAGS: 00050246 [ 350.762932][ T6042] RAX: 0000000000000000 RBX: 00007fead8c44e00 RCX: 0000000000000040 [ 350.762947][ T6042] RDX: 0000000000000000 RSI: ffffffff8db80a8e RDI: 00007fead8c44e00 [ 350.762961][ T6042] RBP: ffffc90004a07af0 R08: 0000000000000000 R09: ffffffff820c56a0 [ 350.762975][ T6042] R10: dffffc0000000000 R11: ffffed100f143671 R12: 00007fead8c44c00 [ 350.762990][ T6042] R13: dffffc0000000000 R14: 00007fead8c44c00 R15: ffff888078a19e00 [ 350.763013][ T6042] ? __might_fault+0xb0/0x130 [ 350.763056][ T6042] copy_fpstate_to_sigframe+0x14c/0xce0 [ 350.763081][ T6042] ? __kasan_slab_free+0x62/0x70 [ 350.763110][ T6042] ? __dequeue_signal+0x487/0x5b0 [ 350.763130][ T6042] ? get_signal+0x55f/0x1340 [ 350.763154][ T6042] ? arch_do_signal_or_restart+0x9a/0x750 [ 350.763178][ T6042] ? do_syscall_64+0x2bd/0x3b0 [ 350.763196][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.763225][ T6042] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 350.763300][ T6042] ? fpu__alloc_mathframe+0xad/0x130 [ 350.763330][ T6042] get_sigframe+0x58d/0x7d0 [ 350.763362][ T6042] ? __pfx_get_sigframe+0x10/0x10 [ 350.763385][ T6042] ? kmem_cache_free+0x18f/0x400 [ 350.763432][ T6042] x64_setup_rt_frame+0x15b/0xd40 [ 350.763466][ T6042] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.763499][ T6042] ? _raw_spin_unlock_irq+0x2e/0x50 [ 350.763527][ T6042] ? get_signal+0x1151/0x1340 [ 350.763561][ T6042] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 350.763599][ T6042] arch_do_signal_or_restart+0x3d7/0x750 [ 350.763633][ T6042] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 350.763678][ T6042] ? exit_to_user_mode_loop+0x40/0x110 [ 350.763710][ T6042] exit_to_user_mode_loop+0x75/0x110 [ 350.763738][ T6042] do_syscall_64+0x2bd/0x3b0 [ 350.763760][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.763780][ T6042] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.763801][ T6042] ? clear_bhb_loop+0x60/0xb0 [ 350.763827][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.763848][ T6042] RIP: 0033:0x7fead7d8e927 [ 350.763873][ T6042] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 350.763889][ T6042] RSP: 002b:00007fead8c44fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 350.763910][ T6042] RAX: 00000000000001a9 RBX: 00007fead7fb5fa0 RCX: 00007fead7d8e929 [ 350.763924][ T6042] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 350.763937][ T6042] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 350.763950][ T6042] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 350.763962][ T6042] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 350.763994][ T6042] [ 350.764003][ T6042] memory: usage 307200kB, limit 307200kB, failcnt 45 [ 351.323889][ T6042] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 351.331867][ T6042] kmem: usage 307068kB, limit 9007199254740988kB, failcnt 0 [ 351.339225][ T6042] Memory cgroup stats for /syz2: [ 351.339626][ T6042] cache 8192 [ 351.347792][ T6042] rss 0 [ 351.350607][ T6042] rss_huge 0 [ 351.353818][ T6042] shmem 0 [ 351.356771][ T6042] mapped_file 8192 [ 351.362221][ T6042] dirty 8192 [ 351.365455][ T6042] writeback 0 [ 351.368792][ T6042] workingset_refault_anon 3 [ 351.373312][ T6042] workingset_refault_file 0 [ 351.377827][ T6042] swap 180224 [ 351.381164][ T6042] swapcached 12288 [ 351.438529][ T6042] pgpgin 529 [ 351.441809][ T6042] pgpgout 524 [ 351.445123][ T6042] pgfault 743 [ 351.448922][ T6042] pgmajfault 2 [ 351.452347][ T6042] inactive_anon 8192 [ 351.456271][ T6042] active_anon 4096 [ 351.460151][ T6042] inactive_file 8192 [ 351.464102][ T6042] active_file 0 [ 351.467588][ T6042] unevictable 0 [ 351.471127][ T6042] hierarchical_memory_limit 314572800 [ 351.476522][ T6042] hierarchical_memsw_limit 9223372036854771712 [ 351.482828][ T6042] total_cache 8192 [ 351.486583][ T6042] total_rss 0 [ 351.492876][ T6042] total_rss_huge 0 [ 351.496653][ T6042] total_shmem 0 [ 351.500311][ T6042] total_mapped_file 8192 [ 351.504576][ T6042] total_dirty 8192 [ 351.508385][ T6042] total_writeback 0 [ 351.512236][ T6042] total_workingset_refault_anon 3 [ 351.517300][ T6042] total_workingset_refault_file 0 [ 351.522418][ T6042] total_swap 180224 [ 351.526304][ T6042] total_swapcached 12288 [ 351.530638][ T6042] total_pgpgin 529 [ 351.534390][ T6042] total_pgpgout 524 [ 351.538385][ T6042] total_pgfault 743 [ 351.542221][ T6042] total_pgmajfault 2 [ 351.546137][ T6042] total_inactive_anon 8192 [ 351.550613][ T6042] total_active_anon 4096 [ 351.554871][ T6042] total_inactive_file 8192 [ 351.559331][ T6042] total_active_file 0 [ 351.563329][ T6042] total_unevictable 0 [ 351.567328][ T6042] anon_cost 0 [ 351.570662][ T6042] file_cost 0 [ 351.573969][ T6042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.15,pid=6040,uid=0 [ 351.588897][ T6042] Memory cgroup out of memory: Killed process 6040 (syz.2.15) total-vm:101816kB, anon-rss:944kB, file-rss:23840kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 351.715815][ T6061] loop1: detected capacity change from 0 to 512 [ 352.381799][ T6061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.580436][ T6061] EXT4-fs (loop1): orphan cleanup on readonly fs [ 353.060375][ T6061] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.17: bg 0: block 248: padding at end of block bitmap is not set [ 353.375296][ T6061] Quota error (device loop1): write_blk: dquota write failed [ 353.383218][ T6061] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 353.393332][ T6061] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.17: Failed to acquire dquot type 1 [ 353.550506][ T6061] EXT4-fs (loop1): 1 truncate cleaned up [ 353.725121][ T6061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.813838][ T32] oom_reaper: reaped process 6040 (syz.2.15), now anon-rss:0kB, file-rss:22724kB, shmem-rss:0kB [ 353.860890][ T6061] syz.1.17 (6061) used greatest stack depth: 20088 bytes left [ 354.215175][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.416032][ T6078] loop1: detected capacity change from 0 to 1024 [ 354.472642][ T6078] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 355.637882][ T6094] loop2: detected capacity change from 0 to 256 [ 355.655227][ T6094] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 356.042963][ T6100] loop0: detected capacity change from 0 to 512 [ 356.142555][ T6100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.230537][ T6100] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 356.800690][ T6100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 357.000133][ T6100] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 357.097777][ T6100] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 357.110205][ T6100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 357.194204][ T6100] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.26: dx entry: limit 65535 != root limit 120 [ 357.265982][ T6100] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.26: Corrupt directory, running e2fsck is recommended [ 357.604202][ T6111] loop2: detected capacity change from 0 to 512 [ 357.623625][ T6111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.661280][ T6111] EXT4-fs (loop2): orphan cleanup on readonly fs [ 357.680100][ T6111] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.29: bg 0: block 248: padding at end of block bitmap is not set [ 357.705035][ T6111] Quota error (device loop2): write_blk: dquota write failed [ 357.713066][ T6111] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 357.723452][ T6111] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.29: Failed to acquire dquot type 1 [ 357.746845][ T6111] EXT4-fs (loop2): 1 truncate cleaned up [ 357.784834][ T6111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.970482][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.443448][ T6111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.007696][ T6124] loop0: detected capacity change from 0 to 512 [ 359.019202][ T6124] EXT4-fs: Ignoring removed i_version option [ 359.044606][ T6006] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 359.060279][ T6124] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 359.187791][ T6124] EXT4-fs (loop0): orphan cleanup on readonly fs [ 359.226878][ T6124] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.33: bg 0: block 131: padding at end of block bitmap is not set [ 359.248869][ T6124] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 359.293091][ T6118] kvm: kvm [6113]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xdb [ 359.302055][ T6118] kvm: kvm [6113]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xdb [ 359.315507][ T6118] kvm: kvm [6113]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x24 [ 359.324290][ T6118] kvm: kvm [6113]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x24 [ 359.333532][ T6118] kvm: kvm [6113]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb0 [ 359.342281][ T6118] kvm: kvm [6113]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xb0 [ 359.351486][ T6118] kvm: kvm [6113]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xed [ 359.376034][ T6006] usb 5-1: config 0 has an invalid interface number: 243 but max is 0 [ 359.399367][ T6006] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 359.416197][ T6124] EXT4-fs (loop0): 1 truncate cleaned up [ 359.422275][ T6006] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 359.438741][ T6118] kvm: kvm [6113]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xed [ 359.453548][ T6124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.474856][ T6006] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 359.517021][ T6006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.592268][ T6006] usb 5-1: config 0 has no interface number 0 [ 359.625379][ T6006] usb 5-1: config 0 interface 243 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.674188][ T6006] usb 5-1: config 0 interface 243 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 359.692086][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.717938][ T6006] usb 5-1: config 0 interface 243 altsetting 0 endpoint 0x7 has an invalid bInterval 242, changing to 11 [ 359.818937][ T6006] usb 5-1: config 0 interface 243 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 359.911652][ T6006] usb 5-1: config 0 interface 243 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.975710][ T6006] usb 5-1: config 0 interface 243 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 360.008505][ T6006] usb 5-1: config 0 interface 243 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 360.039046][ T6006] usb 5-1: config 0 interface 243 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 360.056353][ T6006] usb 5-1: config 0 interface 243 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.074828][ T6006] usb 5-1: config 0 interface 243 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 360.100380][ T6006] usb 5-1: New USB device found, idVendor=12d1, idProduct=7653, bcdDevice=83.17 [ 360.110957][ T6133] loop3: detected capacity change from 0 to 128 [ 360.114613][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.159575][ T6006] usb 5-1: config 0 descriptor?? [ 360.184978][ T6006] option 5-1:0.243: GSM modem (1-port) converter detected [ 360.426351][ T6006] usb 5-1: USB disconnect, device number 2 [ 360.438543][ T5977] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 360.842475][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.069151][ T5977] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 361.106560][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.164979][ T6006] option 5-1:0.243: device disconnected [ 361.166910][ T5977] usb 3-1: config 0 descriptor?? [ 361.343959][ T6140] loop0: detected capacity change from 0 to 128 [ 361.366173][ T6140] EXT4-fs (loop0): Test dummy encryption mode enabled [ 361.375560][ T6141] loop4: detected capacity change from 0 to 512 [ 361.412545][ T6141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.430430][ T6140] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.447459][ T6141] ext4: Unknown parameter 'subj_user' [ 361.453250][ T6140] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.688931][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 361.854907][ T5977] razer 0003:1532:010D.0001: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0 [ 361.960969][ T6147] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 362.070658][ T6148] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 362.640912][ T6006] usb 3-1: USB disconnect, device number 2 [ 362.717548][ T5881] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.934016][ T6153] loop0: detected capacity change from 0 to 128 [ 362.942276][ T6149] fido_id[6149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 362.997045][ T6153] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0101) [ 363.031536][ T6153] FAT-fs (loop0): Filesystem has been set read-only [ 363.139411][ T6157] netlink: 'syz.0.40': attribute type 4 has an invalid length. [ 363.202583][ T6158] netlink: 'syz.0.40': attribute type 4 has an invalid length. [ 363.480524][ T6162] usb usb8: usbfs: process 6162 (syz.2.43) did not claim interface 0 before use [ 364.026400][ T6168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 365.187631][ T6175] loop0: detected capacity change from 0 to 512 [ 365.315738][ T6175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 365.492799][ T6175] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 365.521566][ T6175] EXT4-fs (loop0): 1 truncate cleaned up [ 366.230602][ T6175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.593851][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.759043][ T6193] Zero length message leads to an empty skb [ 368.098712][ T5977] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 368.297637][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 368.322494][ T5977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.354231][ T5977] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.386876][ T5977] usb 1-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 368.429105][ T5977] usb 1-1: New USB device strings: Mfr=130, Product=74, SerialNumber=0 [ 368.468554][ T5977] usb 1-1: Product: syz [ 368.472808][ T5977] usb 1-1: Manufacturer: syz [ 368.536950][ T5977] usb 1-1: config 0 descriptor?? [ 368.853908][ T6006] usb 1-1: USB disconnect, device number 2 [ 369.877803][ T6208] loop2: detected capacity change from 0 to 512 [ 369.950597][ T6208] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 369.995916][ T6208] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 370.055039][ T6208] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.55: Failed to acquire dquot type 1 [ 370.058162][ T6006] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 370.155343][ T6208] EXT4-fs (loop2): 1 truncate cleaned up [ 370.173870][ T6208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.212472][ T6208] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.236638][ T6006] usb 5-1: Using ep0 maxpacket: 16 [ 370.252815][ T6006] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 370.276604][ T6006] usb 5-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 370.292176][ T6208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.296047][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.325816][ T6006] usb 5-1: Product: syz [ 370.346062][ T6006] usb 5-1: Manufacturer: syz [ 370.356182][ T6006] usb 5-1: SerialNumber: syz [ 370.622685][ T6211] loop4: detected capacity change from 0 to 256 [ 370.677094][ T6211] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.507563][ T6237] loop3: detected capacity change from 0 to 256 [ 374.536865][ T6237] exfat: Unknown parameter 'aPlow_u000000000000000304' [ 374.569801][ T6006] ftdi_sio 5-1:64.0: Ignoring interface reserved for JTAG [ 374.625246][ T6006] usb 5-1: USB disconnect, device number 3 [ 376.005112][ T6248] evm: overlay not supported [ 376.148130][ T5959] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 376.205919][ T6250] loop4: detected capacity change from 0 to 2048 [ 376.345690][ T5959] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.366195][ T5959] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.370209][ T6250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.440251][ T5959] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 376.500892][ T6256] loop3: detected capacity change from 0 to 2048 [ 376.509402][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 376.517539][ T5959] usb 1-1: SerialNumber: syz [ 376.534042][ T6256] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.603807][ T6256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.630581][ T6258] loop2: detected capacity change from 0 to 16 [ 376.650605][ T6258] erofs (device loop2): too large lz4 pclusterblks 16832 [ 376.857365][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.995671][ T5959] usb 1-1: 0:2 : does not exist [ 377.001617][ T5959] usb 1-1: unit 5: unexpected type 0x0a [ 377.002452][ T6264] wireguard0: entered promiscuous mode [ 377.042371][ T6264] wireguard0: entered allmulticast mode [ 377.129054][ T6268] process 'syz.3.69' launched './file1' with NULL argv: empty string added [ 377.459607][ T5959] usb 1-1: USB disconnect, device number 3 [ 377.673932][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.750918][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.996272][ T6277] loop3: detected capacity change from 0 to 512 [ 378.091679][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.155244][ T6277] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.187144][ T6284] loop2: detected capacity change from 0 to 512 [ 378.256722][ T6284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.328780][ T6284] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.886414][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.199335][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.392459][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.499905][ T5886] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.848318][ T6299] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 384.092230][ T6330] fuse: Bad value for 'fd' [ 385.569728][ T6330] loop2: detected capacity change from 0 to 1024 [ 385.624392][ T6330] EXT4-fs: Ignoring removed orlov option [ 386.000197][ T6330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.115064][ T30] audit: type=1804 audit(1751364631.866:2): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.88" name="/newroot/21/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 386.153305][ T6342] loop3: detected capacity change from 0 to 128 [ 386.218858][ T5936] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 386.280966][ T30] audit: type=1804 audit(1751364631.896:3): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.88" name="/newroot/21/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 386.478448][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 386.515218][ T5936] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 386.538381][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.549779][ T30] audit: type=1800 audit(1751364632.016:4): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.92" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 386.587729][ T5886] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.608521][ T5936] usb 2-1: config 0 descriptor?? [ 386.978632][ T6006] usb 2-1: USB disconnect, device number 2 [ 387.087002][ T6351] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 388.143781][ T6366] loop1: detected capacity change from 0 to 128 [ 388.152173][ T6366] EXT4-fs (loop1): Test dummy encryption mode enabled [ 388.264428][ T6366] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.265640][ T6366] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 388.561414][ T6370] loop4: detected capacity change from 0 to 256 [ 388.574509][ T6370] exfat: Deprecated parameter 'utf8' [ 388.746209][ T6372] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 389.433790][ T6370] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 390.499873][ T5873] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.099382][ T6388] loop1: detected capacity change from 0 to 512 [ 394.138090][ T6388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.298349][ T6388] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 395.299501][ T6388] EXT4-fs: failed to create workqueue [ 395.314498][ T6388] EXT4-fs (loop1): mount failed [ 396.164820][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 396.186871][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 396.612234][ T6387] ceph: No mds server is up or the cluster is laggy [ 396.770237][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.778413][ T6407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.924512][ T6405] block device autoloading is deprecated and will be removed. [ 396.970251][ T6413] trusted_key: encrypted_key: insufficient parameters specified [ 397.014778][ T6409] bridge0: entered promiscuous mode [ 397.073047][ T6409] macsec1: entered promiscuous mode [ 397.101163][ T6409] bridge0: port 3(macsec1) entered blocking state [ 397.126077][ T6409] bridge0: port 3(macsec1) entered disabled state [ 397.175042][ T6409] macsec1: entered allmulticast mode [ 397.204692][ T6409] bridge0: entered allmulticast mode [ 397.218170][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 397.246741][ T6409] macsec1: left allmulticast mode [ 397.483660][ T6418] block device autoloading is deprecated and will be removed. [ 397.652874][ T5936] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 397.673321][ T6409] bridge0: left allmulticast mode [ 398.275956][ T6409] bridge0: left promiscuous mode [ 398.418197][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 398.556881][ T5936] usb 4-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 398.578128][ T5936] usb 4-1: New USB device strings: Mfr=130, Product=74, SerialNumber=0 [ 398.586461][ T5936] usb 4-1: Product: syz [ 398.608440][ T5936] usb 4-1: Manufacturer: syz [ 398.631728][ T5936] usb 4-1: config 0 descriptor?? [ 399.550606][ T6437] syz.4.117 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 399.928960][ T5936] usb 4-1: Found UVC 0.00 device syz (05a9:2640) [ 399.961198][ T5936] usb 4-1: No valid video chain found. [ 400.032292][ T5936] usb 4-1: USB disconnect, device number 3 [ 401.396944][ T6459] loop1: detected capacity change from 0 to 40427 [ 401.409568][ T6459] F2FS-fs (loop1): build fault injection rate: 771 [ 401.426436][ T6459] F2FS-fs (loop1): invalid crc value [ 401.573116][ T6459] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 402.550419][ T6473] syz.1.124: attempt to access beyond end of device [ 402.550419][ T6473] loop1: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 402.581668][ T6473] syz.1.124: attempt to access beyond end of device [ 402.581668][ T6473] loop1: rw=2049, sector=79880, nr_sectors = 2040 limit=40427 [ 402.610507][ T6473] syz.1.124: attempt to access beyond end of device [ 402.610507][ T6473] loop1: rw=2049, sector=49152, nr_sectors = 1776 limit=40427 [ 403.140682][ T5873] syz-executor: attempt to access beyond end of device [ 403.140682][ T5873] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 403.157680][ T30] audit: type=1326 audit(1751364648.906:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473f8e929 code=0x7ffc0000 [ 403.191321][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 403.191353][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.191370][ T5873] Call Trace: [ 403.191379][ T5873] [ 403.191389][ T5873] dump_stack_lvl+0x189/0x250 [ 403.191431][ T5873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.191460][ T5873] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 403.191490][ T5873] ? __pfx_queue_work_on+0x10/0x10 [ 403.191521][ T5873] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 403.191550][ T5873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 403.191581][ T5873] ? f2fs_hw_is_readonly+0x39b/0x470 [ 403.191611][ T5873] f2fs_handle_critical_error+0x37c/0x540 [ 403.191644][ T5873] f2fs_write_end_io+0x495/0x810 [ 403.191671][ T5873] ? blkg_put+0x22/0x240 [ 403.191710][ T5873] __submit_merged_bio+0x27a/0x6a0 [ 403.191741][ T5873] __submit_merged_write_cond+0x255/0x530 [ 403.191802][ T5873] f2fs_write_data_pages+0x261d/0x3000 [ 403.191864][ T5873] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.191940][ T5873] ? check_path+0x21/0x40 [ 403.191968][ T5873] ? check_noncircular+0xe0/0x160 [ 403.192047][ T5873] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.192074][ T5873] do_writepages+0x32e/0x550 [ 403.192113][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 403.192137][ T5873] filemap_fdatawrite+0x199/0x240 [ 403.192164][ T5873] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 403.192243][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 403.192265][ T5873] f2fs_sync_dirty_inodes+0x31f/0x830 [ 403.192309][ T5873] f2fs_write_checkpoint+0x95a/0x1df0 [ 403.192362][ T5873] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 403.192431][ T5873] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 403.192448][ T5873] ? kfree+0x18e/0x440 [ 403.192478][ T5873] ? kill_f2fs_super+0x298/0x6c0 [ 403.192514][ T5873] kill_f2fs_super+0x2c3/0x6c0 [ 403.192552][ T5873] ? __pfx_kill_f2fs_super+0x10/0x10 [ 403.192581][ T5873] ? radix_tree_delete_item+0x2b6/0x400 [ 403.192617][ T5873] ? shrinker_free+0x2ce/0x3e0 [ 403.192644][ T5873] deactivate_locked_super+0xbc/0x130 [ 403.192674][ T5873] cleanup_mnt+0x425/0x4c0 [ 403.192698][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.192730][ T5873] task_work_run+0x1d1/0x260 [ 403.192754][ T5873] ? __pfx_task_work_run+0x10/0x10 [ 403.192773][ T5873] ? __x64_sys_umount+0x122/0x160 [ 403.192808][ T5873] ? exit_to_user_mode_loop+0x40/0x110 [ 403.192837][ T5873] exit_to_user_mode_loop+0xec/0x110 [ 403.192863][ T5873] do_syscall_64+0x2bd/0x3b0 [ 403.192879][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.192907][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.192927][ T5873] ? clear_bhb_loop+0x60/0xb0 [ 403.192952][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.192980][ T5873] RIP: 0033:0x7ff60bb8fc57 [ 403.193000][ T5873] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 403.193016][ T5873] RSP: 002b:00007fff7ce89498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 403.193037][ T5873] RAX: 0000000000000000 RBX: 00007ff60bc10925 RCX: 00007ff60bb8fc57 [ 403.193050][ T5873] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7ce89550 [ 403.193062][ T5873] RBP: 00007fff7ce89550 R08: 0000000000000000 R09: 0000000000000000 [ 403.193073][ T5873] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7ce8a5e0 [ 403.193085][ T5873] R13: 00007ff60bc10925 R14: 00000000000625e5 R15: 00007fff7ce8a620 [ 403.193117][ T5873] [ 403.193126][ T5873] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 403.306225][ T30] audit: type=1326 audit(1751364648.906:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473f8e929 code=0x7ffc0000 [ 403.582271][ T30] audit: type=1326 audit(1751364648.916:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f4473f8e929 code=0x7ffc0000 [ 403.582326][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 403.582348][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.582360][ T5873] Call Trace: [ 403.582367][ T5873] [ 403.582376][ T5873] dump_stack_lvl+0x189/0x250 [ 403.582422][ T5873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.582454][ T5873] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 403.582487][ T5873] ? __pfx_queue_work_on+0x10/0x10 [ 403.582521][ T5873] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 403.582552][ T5873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 403.582585][ T5873] ? f2fs_hw_is_readonly+0x39b/0x470 [ 403.582638][ T5873] f2fs_handle_critical_error+0x37c/0x540 [ 403.582675][ T5873] f2fs_write_end_io+0x495/0x810 [ 403.582708][ T5873] ? blkg_put+0x22/0x240 [ 403.582766][ T5873] __submit_merged_bio+0x27a/0x6a0 [ 403.582801][ T5873] __submit_merged_write_cond+0x255/0x530 [ 403.582836][ T5873] f2fs_write_data_pages+0x261d/0x3000 [ 403.582906][ T5873] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.582990][ T5873] ? check_path+0x21/0x40 [ 403.583019][ T5873] ? check_noncircular+0xe0/0x160 [ 403.583107][ T5873] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.583150][ T5873] do_writepages+0x32e/0x550 [ 403.583195][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 403.583223][ T5873] filemap_fdatawrite+0x199/0x240 [ 403.583257][ T5873] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 403.583344][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 403.583371][ T5873] f2fs_sync_dirty_inodes+0x31f/0x830 [ 403.583423][ T5873] f2fs_write_checkpoint+0x95a/0x1df0 [ 403.583482][ T5873] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 403.583563][ T5873] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 403.583581][ T5873] ? kfree+0x18e/0x440 [ 403.583612][ T5873] ? kill_f2fs_super+0x298/0x6c0 [ 403.583652][ T5873] kill_f2fs_super+0x2c3/0x6c0 [ 403.583691][ T5873] ? __pfx_kill_f2fs_super+0x10/0x10 [ 403.583722][ T5873] ? radix_tree_delete_item+0x2b6/0x400 [ 403.583763][ T5873] ? shrinker_free+0x2ce/0x3e0 [ 403.583793][ T5873] deactivate_locked_super+0xbc/0x130 [ 403.583824][ T5873] cleanup_mnt+0x425/0x4c0 [ 403.583852][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.583886][ T5873] task_work_run+0x1d1/0x260 [ 403.583914][ T5873] ? __pfx_task_work_run+0x10/0x10 [ 403.583937][ T5873] ? __x64_sys_umount+0x122/0x160 [ 403.583974][ T5873] ? exit_to_user_mode_loop+0x40/0x110 [ 403.584007][ T5873] exit_to_user_mode_loop+0xec/0x110 [ 403.584035][ T5873] do_syscall_64+0x2bd/0x3b0 [ 403.584055][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.584085][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.584109][ T5873] ? clear_bhb_loop+0x60/0xb0 [ 403.584144][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.584165][ T5873] RIP: 0033:0x7ff60bb8fc57 [ 403.584187][ T5873] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 403.584205][ T5873] RSP: 002b:00007fff7ce89498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 403.584227][ T5873] RAX: 0000000000000000 RBX: 00007ff60bc10925 RCX: 00007ff60bb8fc57 [ 403.584243][ T5873] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7ce89550 [ 403.584257][ T5873] RBP: 00007fff7ce89550 R08: 0000000000000000 R09: 0000000000000000 [ 403.584270][ T5873] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7ce8a5e0 [ 403.584284][ T5873] R13: 00007ff60bc10925 R14: 00000000000625e5 R15: 00007fff7ce8a620 [ 403.584339][ T5873] [ 403.584349][ T5873] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 403.604306][ T30] audit: type=1326 audit(1751364648.916:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473f8e929 code=0x7ffc0000 [ 403.604354][ T30] audit: type=1326 audit(1751364648.916:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4473f8e929 code=0x7ffc0000 [ 403.604398][ T30] audit: type=1326 audit(1751364648.926:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473f8e929 code=0x7ffc0000 [ 403.604444][ T30] audit: type=1326 audit(1751364648.926:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4473f907bc code=0x7ffc0000 [ 403.604486][ T30] audit: type=1326 audit(1751364648.926:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4473f906f4 code=0x7ffc0000 [ 404.149472][ T30] audit: type=1326 audit(1751364648.926:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473f8e929 code=0x7ffc0000 [ 404.246969][ T30] audit: type=1326 audit(1751364648.936:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4473f8e929 code=0x7ffc0000 [ 404.419016][ T6469] loop3: detected capacity change from 0 to 40427 [ 404.468413][ T6469] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 404.475433][ T6469] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 404.569225][ T6469] F2FS-fs (loop3): heap/no_heap options were deprecated [ 404.594826][ T6469] F2FS-fs (loop3): invalid crc value [ 404.608444][ T6469] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 404.695994][ T6485] overlayfs: failed to resolve './file0': -2 [ 405.448788][ T6498] loop4: detected capacity change from 0 to 256 [ 408.557754][ T6512] loop3: detected capacity change from 0 to 512 [ 408.765628][ T6512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.831781][ T6512] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.271964][ T6521] loop2: detected capacity change from 0 to 128 [ 409.315333][ T6521] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0101) [ 409.361165][ T6521] FAT-fs (loop2): Filesystem has been set read-only [ 409.384113][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.327535][ T6532] netlink: 'syz.2.140': attribute type 4 has an invalid length. [ 410.439584][ T6535] netlink: 'syz.2.140': attribute type 4 has an invalid length. [ 411.047411][ T5889] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 413.164689][ T6568] loop1: detected capacity change from 0 to 40427 [ 413.184100][ T6568] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 413.212436][ T6568] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 413.275366][ T6568] F2FS-fs (loop1): invalid crc value [ 413.796700][ T6568] F2FS-fs (loop1): Start checkpoint disabled! [ 413.831928][ T6568] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 413.842727][ T6568] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 415.276935][ T5889] usb 3-1: device descriptor read/all, error -71 [ 416.670148][ T6609] loop3: detected capacity change from 0 to 4096 [ 416.754400][ T6614] loop1: detected capacity change from 0 to 512 [ 416.788896][ T6609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.804755][ T6614] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.863482][ T6614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 417.880512][ T6614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.940466][ T6614] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.008127][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 419.008148][ T30] audit: type=1800 audit(1751364664.756:76): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.149" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 419.340214][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.655857][ T6635] loop4: detected capacity change from 0 to 512 [ 419.929758][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.998436][ T6635] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 420.747028][ T6635] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 420.838427][ T6635] EXT4-fs error (device loop4): ext4_do_update_inode:5567: inode #11: comm syz.4.160: corrupted inode contents [ 420.937484][ T6635] EXT4-fs error (device loop4): ext4_dirty_inode:6458: inode #11: comm syz.4.160: mark_inode_dirty error [ 421.133051][ T6635] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.160: invalid indirect mapped block 1 (level 1) [ 421.237073][ T6635] EXT4-fs error (device loop4): ext4_do_update_inode:5567: inode #11: comm syz.4.160: corrupted inode contents [ 421.502727][ T6635] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 421.504857][ T6635] EXT4-fs error (device loop4): ext4_do_update_inode:5567: inode #11: comm syz.4.160: corrupted inode contents [ 421.505891][ T6635] EXT4-fs error (device loop4): ext4_truncate:4596: inode #11: comm syz.4.160: mark_inode_dirty error [ 421.506915][ T6635] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 421.510218][ T6635] EXT4-fs (loop4): 1 truncate cleaned up [ 422.293745][ T6656] loop3: detected capacity change from 0 to 512 [ 422.301113][ T6635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.350445][ T6656] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.422993][ T6656] EXT4-fs: Ignoring removed bh option [ 422.503403][ T6656] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 422.604315][ T6656] EXT4-fs (loop3): 1 truncate cleaned up [ 422.670351][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.698237][ T6005] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 422.745230][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.919860][ T6005] usb 2-1: Using ep0 maxpacket: 32 [ 422.944159][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.986595][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.011827][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.035444][ T6005] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 423.098286][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.148412][ T6005] usb 2-1: config 0 descriptor?? [ 423.181338][ T6005] hub 2-1:0.0: USB hub found [ 423.378160][ T6005] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 423.407017][ T6005] ------------[ cut here ]------------ [ 423.412723][ T6005] WARNING: kernel/workqueue.c:4208 at __flush_work+0xabc/0xbc0, CPU#0: kworker/0:6/6005 [ 423.422655][ T6005] Modules linked in: [ 423.426851][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: kworker/0:6 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 423.438589][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.448990][ T6005] Workqueue: usb_hub_wq hub_event [ 423.454096][ T6005] RIP: 0010:__flush_work+0xabc/0xbc0 [ 423.459511][ T6005] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 423.480265][ T6005] RSP: 0018:ffffc9000496e940 EFLAGS: 00010283 [ 423.486399][ T6005] RAX: ffffffff818a8e3b RBX: 1ffff1100a928c54 RCX: 0000000000100000 [ 423.495218][ T6005] RDX: ffffc90019916000 RSI: 0000000000017e37 RDI: 0000000000017e38 [ 423.503386][ T6005] RBP: ffffc9000496eb10 R08: ffffffff8fa17437 R09: 1ffffffff1f42e86 [ 423.511483][ T6005] R10: dffffc0000000000 R11: fffffbfff1f42e87 R12: 0000000000000000 [ 423.519567][ T6005] R13: ffff8880549462a0 R14: dffffc0000000000 R15: ffff888054946288 [ 423.527594][ T6005] FS: 0000000000000000(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 423.536621][ T6005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.543382][ T6005] CR2: 00007f4474183338 CR3: 0000000027b34000 CR4: 00000000003526f0 [ 423.551490][ T6005] Call Trace: [ 423.554816][ T6005] [ 423.557790][ T6005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.564250][ T6005] ? __pfx___flush_work+0x10/0x10 [ 423.569597][ T6005] ? __timer_delete_sync+0x218/0x2d0 [ 423.574974][ T6005] ? __pfx___might_resched+0x10/0x10 [ 423.581193][ T6005] ? __pfx___timer_delete_sync+0x10/0x10 [ 423.586894][ T6005] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 423.593157][ T6005] ? flush_delayed_work+0x11d/0x190 [ 423.595311][ T6664] loop4: detected capacity change from 0 to 128 [ 423.598577][ T6005] flush_delayed_work+0x13e/0x190 [ 423.598633][ T6005] ? __pfx_flush_delayed_work+0x10/0x10 [ 423.616319][ T6005] ? _dev_err+0x10a/0x160 [ 423.621511][ T6005] hub_quiesce+0x1f0/0x330 [ 423.626007][ T6005] hub_disconnect+0xc8/0x470 [ 423.631522][ T6005] hub_probe+0x132f/0x36e0 [ 423.636034][ T6005] ? __pfx_hub_probe+0x10/0x10 [ 423.642127][ T6005] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 423.648585][ T6005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.655000][ T6005] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 423.661152][ T6005] ? pm_runtime_enable+0x1f3/0x340 [ 423.666334][ T6005] usb_probe_interface+0x634/0xbf0 [ 423.671978][ T6005] ? __pfx_usb_probe_interface+0x10/0x10 [ 423.677684][ T6005] really_probe+0x26d/0x9a0 [ 423.683654][ T6005] __driver_probe_device+0x18c/0x2f0 [ 423.690258][ T6005] driver_probe_device+0x4f/0x430 [ 423.695365][ T6005] __device_attach_driver+0x2ce/0x530 [ 423.701521][ T6005] bus_for_each_drv+0x24e/0x2e0 [ 423.706524][ T6005] ? __pfx___device_attach_driver+0x10/0x10 [ 423.712605][ T6005] ? __pfx_bus_for_each_drv+0x10/0x10 [ 423.718118][ T6005] __device_attach+0x2b8/0x400 [ 423.722949][ T6005] ? __pfx___device_attach+0x10/0x10 [ 423.728336][ T6005] ? do_raw_spin_unlock+0x122/0x240 [ 423.733582][ T6005] bus_probe_device+0x185/0x260 [ 423.738553][ T6005] device_add+0x7b6/0xb50 [ 423.742952][ T6005] usb_set_configuration+0x1a87/0x20e0 [ 423.748661][ T6005] usb_generic_driver_probe+0x8d/0x150 [ 423.754181][ T6005] usb_probe_device+0x1c4/0x390 [ 423.759195][ T6005] ? __pfx_usb_probe_device+0x10/0x10 [ 423.764615][ T6005] really_probe+0x26d/0x9a0 [ 423.769246][ T6005] __driver_probe_device+0x18c/0x2f0 [ 423.774596][ T6005] driver_probe_device+0x4f/0x430 [ 423.779868][ T6005] __device_attach_driver+0x2ce/0x530 [ 423.786104][ T6005] bus_for_each_drv+0x24e/0x2e0 [ 423.791745][ T6005] ? __pfx___device_attach_driver+0x10/0x10 [ 423.797697][ T6005] ? __pfx_bus_for_each_drv+0x10/0x10 [ 423.803194][ T6005] __device_attach+0x2b8/0x400 [ 423.808097][ T6005] ? __pfx___device_attach+0x10/0x10 [ 423.813518][ T6005] ? do_raw_spin_unlock+0x122/0x240 [ 423.818878][ T6005] bus_probe_device+0x185/0x260 [ 423.823775][ T6005] device_add+0x7b6/0xb50 [ 423.828237][ T6005] usb_new_device+0xa39/0x16f0 [ 423.833085][ T6005] ? __pfx_usb_new_device+0x10/0x10 [ 423.838411][ T6005] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.843654][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.848957][ T6005] hub_event+0x2941/0x4a00 [ 423.853500][ T6005] ? __pfx_hub_event+0x10/0x10 [ 423.858603][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 423.864376][ T6005] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.869736][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 423.875500][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 423.881379][ T6005] process_scheduled_works+0xae1/0x17b0 [ 423.887868][ T6005] ? __pfx_process_scheduled_works+0x10/0x10 [ 423.894654][ T6005] worker_thread+0x8a0/0xda0 [ 423.899364][ T6005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.905762][ T6005] ? __kthread_parkme+0x7b/0x200 [ 423.910813][ T6005] kthread+0x70e/0x8a0 [ 423.914937][ T6005] ? __pfx_worker_thread+0x10/0x10 [ 423.920163][ T6005] ? __pfx_kthread+0x10/0x10 [ 423.924791][ T6005] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.930083][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.935573][ T6005] ? __pfx_kthread+0x10/0x10 [ 423.940364][ T6005] ret_from_fork+0x3fc/0x770 [ 423.945070][ T6005] ? __pfx_ret_from_fork+0x10/0x10 [ 423.950290][ T6005] ? __switch_to_asm+0x39/0x70 [ 423.955098][ T6005] ? __switch_to_asm+0x33/0x70 [ 423.959980][ T6005] ? __pfx_kthread+0x10/0x10 [ 423.964704][ T6005] ret_from_fork_asm+0x1a/0x30 [ 423.969620][ T6005] [ 423.972716][ T6005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 423.980020][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: kworker/0:6 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 423.991591][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.001680][ T6005] Workqueue: usb_hub_wq hub_event [ 424.006742][ T6005] Call Trace: [ 424.010038][ T6005] [ 424.012980][ T6005] dump_stack_lvl+0x99/0x250 [ 424.017602][ T6005] ? __asan_memcpy+0x40/0x70 [ 424.022211][ T6005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.027426][ T6005] ? __pfx__printk+0x10/0x10 [ 424.032053][ T6005] panic+0x2db/0x790 [ 424.035982][ T6005] ? __pfx_panic+0x10/0x10 [ 424.040435][ T6005] ? ret_from_fork_asm+0x1a/0x30 [ 424.045393][ T6005] __warn+0x334/0x4c0 [ 424.049406][ T6005] ? __flush_work+0xabc/0xbc0 [ 424.054112][ T6005] ? __flush_work+0xabc/0xbc0 [ 424.058802][ T6005] report_bug+0x2be/0x4f0 [ 424.063145][ T6005] ? __flush_work+0xabc/0xbc0 [ 424.067857][ T6005] ? __flush_work+0xabc/0xbc0 [ 424.072736][ T6005] ? __flush_work+0xabe/0xbc0 [ 424.077608][ T6005] handle_bug+0x84/0x160 [ 424.081873][ T6005] exc_invalid_op+0x1a/0x50 [ 424.086405][ T6005] asm_exc_invalid_op+0x1a/0x20 [ 424.091292][ T6005] RIP: 0010:__flush_work+0xabc/0xbc0 [ 424.096620][ T6005] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 424.116245][ T6005] RSP: 0018:ffffc9000496e940 EFLAGS: 00010283 [ 424.122334][ T6005] RAX: ffffffff818a8e3b RBX: 1ffff1100a928c54 RCX: 0000000000100000 [ 424.130322][ T6005] RDX: ffffc90019916000 RSI: 0000000000017e37 RDI: 0000000000017e38 [ 424.138305][ T6005] RBP: ffffc9000496eb10 R08: ffffffff8fa17437 R09: 1ffffffff1f42e86 [ 424.146284][ T6005] R10: dffffc0000000000 R11: fffffbfff1f42e87 R12: 0000000000000000 [ 424.154276][ T6005] R13: ffff8880549462a0 R14: dffffc0000000000 R15: ffff888054946288 [ 424.162309][ T6005] ? __flush_work+0xabb/0xbc0 [ 424.167024][ T6005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.173370][ T6005] ? __pfx___flush_work+0x10/0x10 [ 424.178419][ T6005] ? __timer_delete_sync+0x218/0x2d0 [ 424.183732][ T6005] ? __pfx___might_resched+0x10/0x10 [ 424.189032][ T6005] ? __pfx___timer_delete_sync+0x10/0x10 [ 424.194681][ T6005] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 424.200420][ T6005] ? flush_delayed_work+0x11d/0x190 [ 424.205642][ T6005] flush_delayed_work+0x13e/0x190 [ 424.210695][ T6005] ? __pfx_flush_delayed_work+0x10/0x10 [ 424.216271][ T6005] ? _dev_err+0x10a/0x160 [ 424.220616][ T6005] hub_quiesce+0x1f0/0x330 [ 424.225051][ T6005] hub_disconnect+0xc8/0x470 [ 424.229673][ T6005] hub_probe+0x132f/0x36e0 [ 424.234129][ T6005] ? __pfx_hub_probe+0x10/0x10 [ 424.238908][ T6005] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 424.244814][ T6005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.251158][ T6005] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 424.256731][ T6005] ? pm_runtime_enable+0x1f3/0x340 [ 424.261864][ T6005] usb_probe_interface+0x634/0xbf0 [ 424.267004][ T6005] ? __pfx_usb_probe_interface+0x10/0x10 [ 424.272665][ T6005] really_probe+0x26d/0x9a0 [ 424.277233][ T6005] __driver_probe_device+0x18c/0x2f0 [ 424.282558][ T6005] driver_probe_device+0x4f/0x430 [ 424.287609][ T6005] __device_attach_driver+0x2ce/0x530 [ 424.293012][ T6005] bus_for_each_drv+0x24e/0x2e0 [ 424.297892][ T6005] ? __pfx___device_attach_driver+0x10/0x10 [ 424.303844][ T6005] ? __pfx_bus_for_each_drv+0x10/0x10 [ 424.309254][ T6005] __device_attach+0x2b8/0x400 [ 424.314047][ T6005] ? __pfx___device_attach+0x10/0x10 [ 424.319356][ T6005] ? do_raw_spin_unlock+0x122/0x240 [ 424.324655][ T6005] bus_probe_device+0x185/0x260 [ 424.329695][ T6005] device_add+0x7b6/0xb50 [ 424.334052][ T6005] usb_set_configuration+0x1a87/0x20e0 [ 424.339568][ T6005] usb_generic_driver_probe+0x8d/0x150 [ 424.345072][ T6005] usb_probe_device+0x1c4/0x390 [ 424.349957][ T6005] ? __pfx_usb_probe_device+0x10/0x10 [ 424.355355][ T6005] really_probe+0x26d/0x9a0 [ 424.359890][ T6005] __driver_probe_device+0x18c/0x2f0 [ 424.365201][ T6005] driver_probe_device+0x4f/0x430 [ 424.370248][ T6005] __device_attach_driver+0x2ce/0x530 [ 424.375645][ T6005] bus_for_each_drv+0x24e/0x2e0 [ 424.380522][ T6005] ? __pfx___device_attach_driver+0x10/0x10 [ 424.386455][ T6005] ? __pfx_bus_for_each_drv+0x10/0x10 [ 424.391853][ T6005] __device_attach+0x2b8/0x400 [ 424.396641][ T6005] ? __pfx___device_attach+0x10/0x10 [ 424.401973][ T6005] ? do_raw_spin_unlock+0x122/0x240 [ 424.407276][ T6005] bus_probe_device+0x185/0x260 [ 424.412150][ T6005] device_add+0x7b6/0xb50 [ 424.416507][ T6005] usb_new_device+0xa39/0x16f0 [ 424.421301][ T6005] ? __pfx_usb_new_device+0x10/0x10 [ 424.426516][ T6005] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.431731][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.436970][ T6005] hub_event+0x2941/0x4a00 [ 424.441452][ T6005] ? __pfx_hub_event+0x10/0x10 [ 424.446318][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 424.452147][ T6005] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.457359][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 424.463105][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 424.468862][ T6005] process_scheduled_works+0xae1/0x17b0 [ 424.474468][ T6005] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.480483][ T6005] worker_thread+0x8a0/0xda0 [ 424.485100][ T6005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.491453][ T6005] ? __kthread_parkme+0x7b/0x200 [ 424.496416][ T6005] kthread+0x70e/0x8a0 [ 424.500505][ T6005] ? __pfx_worker_thread+0x10/0x10 [ 424.505790][ T6005] ? __pfx_kthread+0x10/0x10 [ 424.510400][ T6005] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.515623][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.520867][ T6005] ? __pfx_kthread+0x10/0x10 [ 424.525474][ T6005] ret_from_fork+0x3fc/0x770 [ 424.530088][ T6005] ? __pfx_ret_from_fork+0x10/0x10 [ 424.535222][ T6005] ? __switch_to_asm+0x39/0x70 [ 424.539995][ T6005] ? __switch_to_asm+0x33/0x70 [ 424.544768][ T6005] ? __pfx_kthread+0x10/0x10 [ 424.549372][ T6005] ret_from_fork_asm+0x1a/0x30 [ 424.554169][ T6005] [ 424.557554][ T6005] Kernel Offset: disabled [ 424.561885][ T6005] Rebooting in 86400 seconds..