last executing test programs: 4m20.507818611s ago: executing program 0 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 4m19.091661402s ago: executing program 0 (id=854): io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 4m16.287223282s ago: executing program 0 (id=861): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/270, 0xffffff9b}], 0x1, 0x0, 0x5c}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) 4m8.516689982s ago: executing program 0 (id=872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000f809000085"], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) 4m7.427233113s ago: executing program 0 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) 4m5.545824366s ago: executing program 0 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m59.170492336s ago: executing program 5 (id=888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x6) socket(0x14, 0x80000, 0x9) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfd}, 0x1c) 3m51.100126143s ago: executing program 5 (id=901): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 3m49.437179139s ago: executing program 32 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m49.375729086s ago: executing program 5 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 3m46.70339797s ago: executing program 5 (id=907): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x498, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, 0x0) bind$tipc(r0, 0x0, 0x0) 3m44.127486878s ago: executing program 5 (id=909): r0 = socket(0x2, 0x3, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket(0x2, 0x3, 0x0) close(r1) socket(0x18, 0xc003, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) 3m43.466142436s ago: executing program 5 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x8002) 3m28.226998042s ago: executing program 33 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x8002) 2m21.688532794s ago: executing program 2 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f0000000340)) 2m14.278477544s ago: executing program 2 (id=1073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0x0, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m2.222680564s ago: executing program 6 (id=1092): openat(0xffffffffffffff9c, 0x0, 0x1eda02, 0x39) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc13, &(0x7f0000002140)="$eJzs3U9sHNd5APDvDUmRkotk61iykxrB2gUcVWlUkootGwxQq2aJplFs1hSTNu7BK5FSt6KWC5JyZKNN1JMPLVA2BXppChQtUhg9BCyKHNpTChTolShyKwqoaeq6KArsIUYuhVnM7FtxSVGWaoqi/vx+gPTNznxv5s17o5nZeTtQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARv/TLp0bH0n7XAgC4m16eeXV03PUfAB4qZ3z/BwAAAAAAAAAAAACAe12KIt6LFF9/spNerz53jZxuti5fmZ2c2rnYwVSVHKjyyz8jY+MnPv/scyef78UPL3+nfTJemTlzqv7S4qX20vzy8vxcfbbVPLc4N3/ba9ht+e2OVQ1Qv3Tx8tz588v18eMntiy+Unt3+JEjtYmTY68d7uXOTk5NzfTlDA595K3f4GZveByIIs5HiovvvJcaEVHE7tviFsfOXjtY7cSxaidmJ6eqHVloNlor5cLpXkMUEbW+Qi/22ugu9MWu1COultUvK3ys3L2ZdmOpcXZhvj7dWFpprjQXW9OpW9tUpRfxfIpoR0Rn+MbVDUUR34gUb3+7k85GxECvHT5bvRh86/oUe7CPt2EwImpDEevFfdBn97DhKOK7keJb3xyNc7ldq2Z7JuLLZTwScbmM1yJWy/jpiFQeII9FvL/D8cT9ZTCK+P1I8eOJTprr9X11Xjn9lfoXW+cX+3J755X7/vpwN93j56aRKKJRnfE76aPf7AAAAAAAcO8p4o8ixVM/OJra0T+m2GxdqJ9pnF3oPhXuPfuv51IbGxsbtdSNozlO59jOcTXHtRzXyxibK6gVuXyO0zm2c1zNcS3H9Rw7OdYGcvkcp3Ns57ia41qO6zl2cqwN5vI5Tg9WNbvazp9Xc1zLcT3HzuB+9BMAAAAAAAAA3NzBKOKrkeKZX3ijeq84qvfSPz5x8tXjv9r/zvgTt1hPmXs8ItaK23sn90B+dXg6Tae0T+8Q033/73fz+3+/t9+VAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9lURRTwdKd74XidFioh6xOvRjdeG97t2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAnTCSing/UvzJl0aqz+tFxNci4oONDzYi4toHG3fafu8xAAAAAAAAADyAUhFvRoqnX+2kWkRcqb07/MiR2sTJsdcOD8RApDKlP/+VmTOn6i8tXmovzS8vz8/VZ1vNc4tz87e7uZHTzdblK7OTU3uyM7d0cI/rf3DkpcX2m0vNC7+1suPyQyOnzi6vLDXO7bw4DkYRUe+fc6yq8OzkVFXphWajVRWdTrdbYwAAAAAAAAAeBkOpiA8ixdt/9c71cefB7pj/4Pbc73whosjTk3n8+fowdPW7gY9VvxvoTn984uSvjX+qf3rHIetj1YB6fXZyamqmb/bg0I2pI3m7o7vbZfqU/b8SKf7gz+rpqTxva/8PXM/9zu9s9vfV7Su6SZ//P/p/S4/3+v+n++aV20ypiL+JFD/z60/EU1U9D8UNv5nIeV+KFL+x9mTOiwNl3tN5+aPV3yPnmwvzo2XulUjxD5e35j6Tcz+xmTt2u+16vyj7/+lI8d+/uXa9bXL/5x7Y7LX+/v/U9qNj9/2/47//R/vm1fJ2f/bO7DoRsfzmWxcbCwvzSw/jxMC9UQ0TJnaeiKv7t/X9PjNxN5TX/69Gir//43+5fr+Tr/8/FdVt1eb930++sXn9n9i+ojt6/f+Lr/Wu/5/oS53IdyNDgxEjK5faQ49HjCy/+dbnmpcaF+YvzLdOnHzhufHRF8ZGTwwd6N3cbU5t3/IN328eRmX//3ak+O4P/zo+k+dtvf/b+f7/0PYV7dH932N98w5tuV/Z9a6T+/9/I8U/TX4/juZ5H3b/3/v+fzTfhF+/P9+j/j/cN6/6jvexiJ/rm3f0cMQD96UMAAAA7rCUivh+Hk8dvcV46j9Girf+6+dzXjpS5r2Yl9eqv0deXmx97tTCwuK5xkrj7MJ8fabdODdflv1RpOj85ZO5bFGNr/bGm7tjvJtjsf8cKV74lV5udyy292zqsc3csTL3eKT4w5e35vaeYxzezB0vc/81Uoy9tnPukc3cE2Xuf0aKn/xpvZd7qMz9Qs59fDP3+LnFhbk96BYAAAAAANiVoVTEc5Hi704Mpt7z7dv5/ecND7336Pd/j/fNm7tL76vsulEB4B5XXv+Pllf1X/zz62P5W6//m+/J9F//t+v/fwNuNv1Rrv+1O7ObAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+dFEUsRoqvP9lJ14bLz10jp5uty1dmJ6d2LnYwVSUHqvzyz8jY+InPP/vcyed78cPL32mfjFdmzpyqv7R4qb00v7w8P1efbTXPLc7N3/Yadlt+u2NVA9QvXbw8d/58xPjxE1sWX6m9O/zIkdrEybHXDvdyZyenpmb6cgaHPvLWb9Dr12Lb/ANRxP9EiovvvJf+bTgv32Vb3OLY2WsHo4i/jYhyJ2Ynp6odWWg2Wivlwum+hqj1FXqx10Z3oS92pR5xtax+WeFj5e7NtBtLjbML8/XpxtJKc6W52JpO3dqmKr2I51NEOyI6wzeubiiKGIoUb3+7k344HDHQa4fPvjzz6uj4TSoxsjm5/YC6SwYjojYUsV7cB312DxuOIp6NFN/65mj8+3C3Xatmeybiy2U8EnG5jNciVsv46YhUHiCPRby/w/HE/WUwing0Uvx4opN+NJz7vjqvnP5K/Yut84t9ub3zyn1/fbib7vFz00gU8V51xu+k//DvGQAAAADgAVLEE5HiqR8cTdX44PUxxWbrQv1M4+xC97F+79l/PZfa2NjYqKVuHM1xOsd2jqs5ruW4nmMnx1qRy+c4nWM7x9Uc13Jcz7GTY20gl89xOsd2jqs5ruW4nmMnx9pgLp/jdI7tHFdzXMtxPcfO4H72FwAAAAAAAMDOiijiM5Hije910sZwd4D39ejGa94HeuD9XwAAAP//3kdScw==") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x48) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r2, 0x8002007ffb) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x700800}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1m59.571368075s ago: executing program 2 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) 1m59.493875895s ago: executing program 6 (id=1099): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) 1m58.376037345s ago: executing program 2 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000e80)={[{@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d4, &(0x7f00000011c0)="$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") 1m57.163620343s ago: executing program 6 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0xff0e, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m54.364670884s ago: executing program 6 (id=1105): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000280)={0x10, 0x2}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m51.379223195s ago: executing program 6 (id=1110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80), 0x1, 0x9dc3, &(0x7f0000009ec0)="$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") 1m48.625398527s ago: executing program 6 (id=1111): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x6, 0x6, 0x8}]}) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x9b, &(0x7f0000000300)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f00000000c0)="7c006eca", 0x0, 0xfffffffb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m48.480254961s ago: executing program 2 (id=1115): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$video(0x0, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x77}, {@remote, 0x4e20, 0x0, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m43.801559829s ago: executing program 2 (id=1120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x25c9, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1m32.175445836s ago: executing program 34 (id=1111): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x6, 0x6, 0x8}]}) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x9b, &(0x7f0000000300)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f00000000c0)="7c006eca", 0x0, 0xfffffffb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m28.507765657s ago: executing program 35 (id=1120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x25c9, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 14.342953589s ago: executing program 4 (id=1279): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x5140, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x0, 0x9) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) 12.358134162s ago: executing program 4 (id=1284): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10.211883957s ago: executing program 4 (id=1288): io_uring_setup(0x63d3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0xc2001) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0xf, 0x6, @multicast}, 0x14) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000600)=""/222, 0xde}], 0x1, 0x1a, 0xfff5) 9.10549623s ago: executing program 1 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 8.940922289s ago: executing program 4 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 8.009811959s ago: executing program 3 (id=1293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfff1}}, @TCA_STAB={0x4}]}, 0x3c}}, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) 7.06893531s ago: executing program 1 (id=1294): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f0000020f80)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4004000) 7.068632007s ago: executing program 7 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x19f82}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.981499385s ago: executing program 3 (id=1296): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{}, {}, {}, {}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) keyctl$dh_compute(0x17, &(0x7f0000000480), &(0x7f00000004c0)=""/4096, 0x1000, &(0x7f0000001500)={0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x0, 0x0, &(0x7f0000000000)) 5.966160363s ago: executing program 1 (id=1297): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x15) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x2000000}, 0x9}], 0x1, 0xcb, 0x0) 5.944177411s ago: executing program 7 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) 3.883528256s ago: executing program 1 (id=1299): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 3.878558972s ago: executing program 3 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) 3.284907328s ago: executing program 7 (id=1301): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.230480003s ago: executing program 1 (id=1302): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xf803, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1}, 0xa46}], 0x1, 0x2102, 0x0) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) 2.230159179s ago: executing program 3 (id=1303): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.135368834s ago: executing program 7 (id=1304): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 1.935942387s ago: executing program 4 (id=1305): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 1.934764464s ago: executing program 3 (id=1306): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0xfd8e49f1ee86724e) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) socket(0x10, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 1.811455291s ago: executing program 7 (id=1307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 34.13452ms ago: executing program 3 (id=1308): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f0000020f80)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4004000) 33.801397ms ago: executing program 7 (id=1309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) 9.726538ms ago: executing program 4 (id=1310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x25, 0x0, @fd, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 1 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x2, 0x2, 0x279}) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) kernel console output (not intermixed with test programs): devsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.407163][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.430440][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.444344][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.482046][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.507807][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.544757][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.586231][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.717661][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.764636][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.777028][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.786765][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.833206][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.844733][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.890038][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.899611][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.912397][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.943617][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.974902][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.009683][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.070072][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.091343][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.112980][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.640055][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.702493][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.993794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.512922][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.543681][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.654068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.804731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.813036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.824475][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.881096][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.989329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.998644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.195830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.230220][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.344012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.410924][ T6033] netlink: 'syz.5.6': attribute type 21 has an invalid length. [ 120.418919][ T6033] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6'. [ 120.438903][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.822832][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.860153][ T6033] netlink: 'syz.5.6': attribute type 5 has an invalid length. [ 120.870010][ T6033] netlink: 'syz.5.6': attribute type 6 has an invalid length. [ 120.880224][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.947809][ T6033] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6'. [ 121.064512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.073102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 122.551625][ T6052] vlan2: entered promiscuous mode [ 122.560006][ T6052] bridge0: entered promiscuous mode [ 122.596129][ T6052] vlan2: entered allmulticast mode [ 122.601498][ T6052] bridge0: entered allmulticast mode [ 122.717930][ T6051] tipc: Started in network mode [ 122.777451][ T6051] tipc: Node identity 4, cluster identity 4711 [ 122.802797][ T6051] tipc: Node number set to 4 [ 129.786009][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 130.523167][ T6092] team0 (unregistering): Port device team_slave_0 removed [ 130.630155][ T6092] team0 (unregistering): Port device team_slave_1 removed [ 131.164123][ T30] audit: type=1326 audit(1759032411.123:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42658eec9 code=0x7fc00000 [ 131.359685][ T30] audit: type=1326 audit(1759032411.123:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42658eec9 code=0x7fc00000 [ 131.530929][ T30] audit: type=1326 audit(1759032411.473:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb42652af79 code=0x7fc00000 [ 132.553320][ T6113] netlink: 'syz.2.31': attribute type 3 has an invalid length. [ 132.570009][ T6113] netlink: 'syz.2.31': attribute type 3 has an invalid length. [ 132.607017][ T6116] warning: `syz.5.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.280827][ T6130] netlink: 'syz.5.36': attribute type 4 has an invalid length. [ 133.310837][ T6128] loop3: detected capacity change from 0 to 2048 [ 133.335795][ T6131] delete_channel: no stack [ 133.340480][ T6133] netlink: 'syz.5.36': attribute type 4 has an invalid length. [ 133.530627][ T6128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.600562][ T6128] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.760170][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.522324][ T30] audit: type=1326 audit(1759032414.493:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb42652b03f code=0x7fc00000 [ 134.638675][ T30] audit: type=1326 audit(1759032414.493:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb42658eec9 code=0x7fc00000 [ 134.953708][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 138.606121][ T6205] loop3: detected capacity change from 0 to 2048 [ 138.638964][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.647342][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.750832][ T6205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 139.688616][ T6214] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.817521][ T6214] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 139.951950][ T6214] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.951950][ T6214] [ 140.196881][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.209788][ T6214] EXT4-fs (loop3): Total free blocks count 0 [ 140.230051][ T6214] EXT4-fs (loop3): Free/Dirty block details [ 140.283669][ T6214] EXT4-fs (loop3): free_blocks=2415919104 [ 140.313663][ T6214] EXT4-fs (loop3): dirty_blocks=3184 [ 140.387758][ T6214] EXT4-fs (loop3): Block reservation details [ 140.493510][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.530114][ T6214] EXT4-fs (loop3): i_reserved_data_blocks=199 [ 141.221287][ T6267] netlink: 'syz.4.60': attribute type 10 has an invalid length. [ 141.301587][ T6269] netlink: 'syz.4.60': attribute type 10 has an invalid length. [ 141.337673][ T6269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.60'. [ 141.383231][ T6269] batadv0: entered promiscuous mode [ 141.416037][ T6269] batadv0: entered allmulticast mode [ 141.475370][ T6269] bridge0: port 3(batadv0) entered blocking state [ 141.515488][ T6269] bridge0: port 3(batadv0) entered disabled state [ 141.674830][ T6269] bridge0: port 3(batadv0) entered blocking state [ 141.681712][ T6269] bridge0: port 3(batadv0) entered forwarding state [ 141.980464][ T6245] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 141.989888][ T6245] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 142.042802][ T6267] bridge0: port 3(batadv0) entered disabled state [ 142.087239][ T6276] loop1: detected capacity change from 0 to 512 [ 142.100941][ T6267] batadv0: left allmulticast mode [ 142.113559][ T6267] batadv0: left promiscuous mode [ 142.118776][ T6267] bridge0: port 3(batadv0) entered disabled state [ 142.193729][ T6276] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 142.236327][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1118 with error 28 [ 142.285974][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.309564][ T6267] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 142.433638][ T6247] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.463316][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.473610][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.512473][ T6247] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.570322][ T6247] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.625278][ T6247] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.590002][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 144.023574][ T6294] tipc: Started in network mode [ 144.073569][ T6294] tipc: Node identity 7f000001, cluster identity 4711 [ 144.175427][ T6294] tipc: Enabled bearer , priority 10 [ 145.243929][ T5970] tipc: Node number set to 2130706433 [ 152.274075][ T30] audit: type=1326 audit(1759032431.453:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.1.83" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f582658eec9 code=0x0 [ 152.469509][ T6334] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 152.519973][ T6347] futex_wake_op: syz.1.85 tries to shift op by -1; fix this program [ 152.592600][ T6347] loop9: detected capacity change from 0 to 7 [ 152.631134][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.678513][ T6340] bond0: (slave batadv0): Releasing backup interface [ 152.701164][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.748826][ T6340] bridge_slave_0: left allmulticast mode [ 152.791141][ T6340] bridge_slave_0: left promiscuous mode [ 152.817866][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.818868][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.914521][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.936588][ T6340] bridge_slave_1: left allmulticast mode [ 152.967628][ T6340] bridge_slave_1: left promiscuous mode [ 152.999061][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.020214][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.052449][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.109652][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.144105][ T6340] bond0: (slave bond_slave_0): Releasing backup interface [ 153.187737][ T6340] bond0: (slave bond_slave_1): Releasing backup interface [ 153.199818][ T6347] ldm_validate_partition_table(): Disk read failed. [ 153.252621][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.326135][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.344836][ T6340] team0: Port device team_slave_0 removed [ 153.394726][ T6347] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.421141][ T6340] team0: Port device team_slave_1 removed [ 153.486031][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.533643][ T6347] Dev loop9: unable to read RDB block 0 [ 153.541608][ T6347] loop9: unable to read partition table [ 153.548327][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.563936][ T6347] loop9: partition table beyond EOD, truncated [ 153.582121][ T6347] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 153.582121][ T6347] ) failed (rc=-5) [ 153.925447][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.973514][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.008838][ T6353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.257380][ T6261] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.463667][ T6261] usb 2-1: Using ep0 maxpacket: 8 [ 155.536778][ T6261] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 155.583446][ T6261] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.632947][ T6261] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.695407][ T6261] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.733485][ T6261] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.826732][ T6261] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.998914][ T6261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.348287][ T6261] usb 2-1: GET_CAPABILITIES returned 0 [ 156.376683][ T6261] usbtmc 2-1:16.0: can't read capabilities [ 156.627756][ T6261] usb 2-1: USB disconnect, device number 2 [ 158.028818][ T6390] loop2: detected capacity change from 0 to 8192 [ 159.874153][ T30] audit: type=1804 audit(1759032439.813:8): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.102" name="/newroot/19/bus/file0" dev="overlay" ino=124 res=1 errno=0 [ 161.714788][ T6412] loop0: detected capacity change from 0 to 1024 [ 171.133497][ T30] audit: type=1326 audit(1759032451.063:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.2.126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72cb8eec9 code=0x0 [ 171.146802][ T6481] process 'syz.2.126' launched './file0' with NULL argv: empty string added [ 171.980460][ T6489] overlayfs: failed to clone upperpath [ 176.938634][ T6529] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 179.064174][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 179.094420][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.147'. [ 179.144270][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 179.191177][ T6534] [U] [ 179.485871][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.147'. [ 181.587275][ T6566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.712319][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.768329][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.276344][ T6578] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 184.761588][ T6584] vlan3: entered promiscuous mode [ 184.796896][ T6584] vlan3: entered allmulticast mode [ 184.831338][ T6584] hsr_slave_1: entered allmulticast mode [ 186.369711][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.163'. [ 187.413759][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.163'. [ 187.746299][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.165'. [ 189.535711][ T6611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.165'. [ 191.191348][ T6643] loop3: detected capacity change from 0 to 512 [ 191.266030][ T6643] EXT4-fs (loop3): Test dummy encryption mode enabled [ 191.335724][ T6643] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.580318][ T6643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.632405][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 191.677481][ T6643] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.175: bad orphan inode 131083 [ 191.703176][ T6643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.736537][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 191.887904][ T6634] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 192.412865][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.914162][ T6674] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 196.059311][ T6676] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 196.695042][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'. [ 196.967003][ T6658] syz.3.181 (6658): drop_caches: 2 [ 197.842290][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'. [ 202.322917][ T6718] netlink: 'syz.0.199': attribute type 2 has an invalid length. [ 203.964077][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.970429][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.533467][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 204.692149][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 204.700388][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.722569][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 204.755945][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.811826][ T24] usb 6-1: Product: syz [ 204.842652][ T24] usb 6-1: Manufacturer: syz [ 204.877602][ T24] usb 6-1: SerialNumber: syz [ 204.942493][ T24] usb 6-1: config 0 descriptor?? [ 204.994562][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 205.066833][ T24] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 205.622149][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 206.050260][ T24] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 206.096218][ T24] em28xx 6-1:0.0: board has no eeprom [ 206.463572][ T24] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 206.507994][ T24] em28xx 6-1:0.0: dvb set to bulk mode. [ 206.555111][ T1221] em28xx 6-1:0.0: Binding DVB extension [ 206.588909][ T24] usb 6-1: USB disconnect, device number 2 [ 206.651717][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 207.039983][ T6784] loop0: detected capacity change from 0 to 8192 [ 207.420891][ T1221] em28xx 6-1:0.0: Registering input extension [ 207.500806][ T24] em28xx 6-1:0.0: Closing input extension [ 207.621178][ T24] em28xx 6-1:0.0: Freeing device [ 211.525039][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 211.761923][ T6814] Zero length message leads to an empty skb [ 212.439107][ T6830] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.539377][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.233'. [ 212.898753][ T6843] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 212.940414][ T6843] netlink: 'syz.2.235': attribute type 4 has an invalid length. [ 212.962672][ T6843] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.235'. [ 213.154842][ T6836] bridge_slave_1: left allmulticast mode [ 213.221669][ T6836] bridge_slave_1: left promiscuous mode [ 213.361553][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.414415][ T6836] bridge_slave_0: left allmulticast mode [ 213.447171][ T6836] bridge_slave_0: left promiscuous mode [ 213.553740][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.777035][ T6850] syz_tun: entered allmulticast mode [ 213.793714][ T6854] dvmrp1: entered allmulticast mode [ 213.808736][ T6846] syz_tun: left allmulticast mode [ 214.797950][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 217.290351][ T6910] loop2: detected capacity change from 0 to 1024 [ 217.418533][ T6910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.777853][ T6917] binder: 6915:6917 ioctl c0306201 200000000080 returned -14 [ 217.814291][ T5875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.168277][ T6926] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.256'. [ 218.179391][ T6926] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.256'. [ 218.188861][ T6926] netlink: 448 bytes leftover after parsing attributes in process `syz.1.256'. [ 218.504533][ T5874] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 218.513864][ T5874] Bluetooth: hci0: Injecting HCI hardware error event [ 218.526536][ T5883] Bluetooth: hci0: hardware error 0x00 [ 220.064489][ T5523] veth0_vlan: left promiscuous mode [ 220.431081][ T5523] veth0_vlan: entered promiscuous mode [ 221.383529][ T6954] netlink: set zone limit has 4 unknown bytes [ 221.570107][ T5883] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 223.912966][ T6990] loop0: detected capacity change from 0 to 1024 [ 223.998610][ T6990] ======================================================= [ 223.998610][ T6990] WARNING: The mand mount option has been deprecated and [ 223.998610][ T6990] and is ignored by this kernel. Remove the mand [ 223.998610][ T6990] option from the mount to silence this warning. [ 223.998610][ T6990] ======================================================= [ 224.294731][ T6990] EXT4-fs: Ignoring removed nobh option [ 224.697549][ T6990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.821976][ T7004] evm: overlay not supported [ 224.912629][ T7013] loop1: detected capacity change from 0 to 2048 [ 225.005693][ T7013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 226.192741][ T7028] fuse: Bad value for 'fd' [ 226.400501][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 227.782510][ T7042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.285'. [ 229.262380][ T5873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.118463][ T7068] binder: 7066:7068 ioctl c0306201 200000000240 returned -14 [ 231.933679][ T5178] Bluetooth: hci2: command 0x0406 tx timeout [ 231.940030][ T5178] Bluetooth: hci4: command 0x0406 tx timeout [ 231.947445][ T5178] Bluetooth: hci3: command 0x0406 tx timeout [ 231.953755][ T5178] Bluetooth: hci5: command 0x0406 tx timeout [ 231.960029][ T5178] Bluetooth: hci1: command 0x0406 tx timeout [ 232.843250][ T7086] loop5: detected capacity change from 0 to 2048 [ 233.409395][ T7086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 233.693581][ T7086] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 233.739262][ T7086] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 278 with error 28 [ 234.043514][ T7086] EXT4-fs (loop5): This should not happen!! Data will be lost [ 234.043514][ T7086] [ 234.053213][ T7086] EXT4-fs (loop5): Total free blocks count 0 [ 234.135806][ T7086] EXT4-fs (loop5): Free/Dirty block details [ 234.160143][ T7086] EXT4-fs (loop5): free_blocks=2415919104 [ 234.200921][ T7086] EXT4-fs (loop5): dirty_blocks=288 [ 234.235124][ T7086] EXT4-fs (loop5): Block reservation details [ 234.499760][ T7086] EXT4-fs (loop5): i_reserved_data_blocks=18 [ 235.716473][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 237.421524][ T5970] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 237.813429][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 237.837729][ T5970] usb 4-1: config 0 has an invalid interface number: 236 but max is 0 [ 238.686558][ T5970] usb 4-1: config 0 has no interface number 0 [ 238.738730][ T5970] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=84.33 [ 238.763652][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.794509][ T5970] usb 4-1: Product: syz [ 238.811357][ T5970] usb 4-1: Manufacturer: syz [ 238.845368][ T5970] usb 4-1: SerialNumber: syz [ 238.908439][ T5970] usb 4-1: config 0 descriptor?? [ 238.978571][ T5970] usb-storage 4-1:0.236: USB Mass Storage device detected [ 239.075058][ T5970] usb-storage 4-1:0.236: device ignored [ 240.626685][ T1221] usb 4-1: USB disconnect, device number 2 [ 240.943734][ T7149] loop5: detected capacity change from 0 to 256 [ 242.014192][ T7149] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.404566][ T30] audit: type=1800 audit(1759032522.263:10): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.313" name="file1" dev="loop5" ino=1048604 res=0 errno=0 [ 243.382423][ T7149] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 243.497899][ T7149] FAT-fs (loop5): Filesystem has been set read-only [ 243.815355][ T7168] loop2: detected capacity change from 0 to 2048 [ 244.169310][ T7168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 245.424576][ T7181] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 245.756880][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 245.805669][ T7185] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 245.881751][ T7185] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 304 with error 28 [ 245.998974][ T7185] EXT4-fs (loop2): This should not happen!! Data will be lost [ 245.998974][ T7185] [ 246.069305][ T7185] EXT4-fs (loop2): Total free blocks count 0 [ 246.129785][ T7185] EXT4-fs (loop2): Free/Dirty block details [ 246.183479][ T7185] EXT4-fs (loop2): free_blocks=2415919104 [ 246.189305][ T7185] EXT4-fs (loop2): dirty_blocks=320 [ 246.273658][ T7185] EXT4-fs (loop2): Block reservation details [ 246.279779][ T7185] EXT4-fs (loop2): i_reserved_data_blocks=20 [ 246.593878][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 246.733528][ T5967] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 246.821878][ T6247] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 246.963580][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 247.063504][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 247.128850][ T5967] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 247.139734][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.188923][ T5967] usb 6-1: Product: syz [ 247.197948][ T5967] usb 6-1: Manufacturer: syz [ 247.221884][ T5967] usb 6-1: SerialNumber: syz [ 247.270776][ T5967] usb 6-1: config 0 descriptor?? [ 247.310761][ T5967] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 247.354532][ T5967] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 247.648121][ T7211] bond1: (slave ip6gretap1): making interface the new active one [ 247.671512][ T7211] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 247.935310][ T5967] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 248.451536][ T5967] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 248.493882][ T5967] em28xx 6-1:0.0: board has no eeprom [ 248.532182][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 248.937264][ T30] audit: type=1326 audit(1759032528.863:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582658eec9 code=0x7fc00000 [ 249.082940][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 250.002552][ T7200] em28xx 6-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 250.013512][ T5967] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 250.021352][ T5967] em28xx 6-1:0.0: dvb set to bulk mode. [ 250.048801][ T6261] em28xx 6-1:0.0: Binding DVB extension [ 250.944346][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 251.039399][ T5967] usb 6-1: USB disconnect, device number 3 [ 251.203529][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.309490][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 251.321509][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.344680][ T24] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 251.369350][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.379514][ T5967] em28xx 6-1:0.0: Disconnecting em28xx [ 251.392585][ T24] usb 2-1: Product: syz [ 251.402695][ T24] usb 2-1: Manufacturer: syz [ 251.412102][ T24] usb 2-1: SerialNumber: syz [ 251.848350][ T6261] em28xx 6-1:0.0: Registering input extension [ 251.850868][ T24] usb 2-1: config 0 descriptor?? [ 251.890993][ T7246] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.916205][ T7259] loop0: detected capacity change from 0 to 2048 [ 251.934144][ T5967] em28xx 6-1:0.0: Closing input extension [ 252.035770][ T5967] em28xx 6-1:0.0: Freeing device [ 252.100485][ T7259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 252.209234][ T24] powermate: unknown product id 0240 [ 252.243915][ T24] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 252.515923][ T7273] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.519001][ T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 252.898878][ T7273] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 253.031477][ T7273] EXT4-fs (loop0): This should not happen!! Data will be lost [ 253.031477][ T7273] [ 253.405220][ T7273] EXT4-fs (loop0): Total free blocks count 0 [ 253.411359][ T7273] EXT4-fs (loop0): Free/Dirty block details [ 253.717195][ T7273] EXT4-fs (loop0): free_blocks=2415919104 [ 253.806577][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 253.812131][ T7273] EXT4-fs (loop0): dirty_blocks=128 [ 253.937723][ C1] powermate: config urb returned -71 [ 253.945477][ C1] powermate: config urb returned -71 [ 253.951022][ C1] powermate: config urb returned -71 [ 253.956576][ C1] powermate: config urb returned -71 [ 254.002101][ T7273] EXT4-fs (loop0): Block reservation details [ 254.002393][ T1221] usb 2-1: USB disconnect, device number 3 [ 254.008910][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 254.545768][ T7273] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 254.568756][ T7289] bridge_slave_1: left allmulticast mode [ 254.600196][ T7289] bridge_slave_1: left promiscuous mode [ 254.609612][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.755943][ T7289] bridge_slave_0: left allmulticast mode [ 254.814620][ T7289] bridge_slave_0: left promiscuous mode [ 254.860505][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.887114][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 255.877050][ T7313] binder: 7310:7313 ioctl c0306201 200000000680 returned -14 [ 257.298676][ T7320] binder: 7319:7320 ioctl c0306201 200000000500 returned -14 [ 257.485051][ T7323] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 258.744884][ T7326] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 258.760881][ T7326] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 259.916967][ T7340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.504251][ T7331] gretap1: entered promiscuous mode [ 261.398106][ T7331] bond1: (slave gretap1): making interface the new active one [ 261.454088][ T7331] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 262.717414][ T7354] tipc: Started in network mode [ 262.722327][ T7354] tipc: Node identity 4, cluster identity 4711 [ 262.729481][ T7354] tipc: Node number set to 4 [ 265.263693][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 265.336851][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.346658][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.203931][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 266.225432][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.277131][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.478951][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.507092][ T24] usb 3-1: string descriptor 0 read error: -22 [ 267.526555][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.536464][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.082865][ T24] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 268.094085][ T24] cdc_ncm 3-1:1.0: bind() failure [ 268.158556][ T24] usb 3-1: USB disconnect, device number 2 [ 268.268644][ T7402] loop1: detected capacity change from 0 to 256 [ 268.490059][ T7402] FAT-fs (loop1): Directory bread(block 64) failed [ 269.018305][ T7402] FAT-fs (loop1): Directory bread(block 65) failed [ 269.098702][ T7402] FAT-fs (loop1): Directory bread(block 66) failed [ 269.147783][ T7402] FAT-fs (loop1): Directory bread(block 67) failed [ 269.173611][ T7402] FAT-fs (loop1): Directory bread(block 68) failed [ 269.219946][ T7402] FAT-fs (loop1): Directory bread(block 69) failed [ 269.278864][ T7402] FAT-fs (loop1): Directory bread(block 70) failed [ 269.333716][ T7402] FAT-fs (loop1): Directory bread(block 71) failed [ 269.340511][ T7402] FAT-fs (loop1): Directory bread(block 72) failed [ 269.453623][ T7402] FAT-fs (loop1): Directory bread(block 73) failed [ 269.723516][ T6261] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 270.703505][ T6261] usb 4-1: Using ep0 maxpacket: 16 [ 270.725534][ T6261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 270.767753][ T6261] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.801375][ T6261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.858552][ T6261] usb 4-1: Product: syz [ 270.862794][ T6261] usb 4-1: Manufacturer: syz [ 270.887476][ T6261] usb 4-1: SerialNumber: syz [ 270.949306][ T6261] usb 4-1: config 0 descriptor?? [ 270.984711][ T6261] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.042394][ T6261] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 273.134970][ T6261] em28xx 4-1:0.0: chip ID is em2765 [ 273.386747][ T7448] syz_tun: entered allmulticast mode [ 273.510954][ T7448] dvmrp1: entered allmulticast mode [ 273.637205][ T7446] syz_tun: left allmulticast mode [ 273.665692][ T7454] loop2: detected capacity change from 0 to 128 [ 273.776395][ T6261] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 273.814091][ T6261] em28xx 4-1:0.0: board has no eeprom [ 273.821899][ T7454] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 274.093584][ T7458] binder: 7457:7458 ioctl c0306201 200000000500 returned -14 [ 274.196767][ T6261] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 274.261608][ T6261] em28xx 4-1:0.0: dvb set to bulk mode. [ 274.622773][ T5967] em28xx 4-1:0.0: Binding DVB extension [ 274.644867][ T6261] usb 4-1: USB disconnect, device number 3 [ 274.652450][ T6261] em28xx 4-1:0.0: Disconnecting em28xx [ 276.391663][ T5967] em28xx 4-1:0.0: Registering input extension [ 276.564303][ T7469] netlink: 'syz.3.400': attribute type 4 has an invalid length. [ 276.616449][ T6261] em28xx 4-1:0.0: Closing input extension [ 276.664386][ T6261] em28xx 4-1:0.0: Freeing device [ 276.941224][ T7478] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 278.078655][ T7483] loop1: detected capacity change from 0 to 1024 [ 278.256589][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.632952][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.154952][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 280.710853][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 287.153500][ T5967] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 288.813490][ T5967] usb 2-1: Using ep0 maxpacket: 16 [ 288.839704][ T5967] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.883432][ T5967] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.015818][ T5967] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.042663][ T5967] usb 2-1: config 1 interface 0 has no altsetting 0 [ 289.062519][ T5967] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 289.081437][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.109012][ T5967] usb 2-1: Product: syz [ 289.134095][ T5967] usb 2-1: Manufacturer: syz [ 289.348766][ T5967] usb 2-1: SerialNumber: syz [ 289.486005][ T7563] overlayfs: failed to clone upperpath [ 290.908860][ T5967] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 290.931778][ T5967] usb 2-1: USB disconnect, device number 4 [ 290.955527][ T5967] usblp0: removed [ 291.395579][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'. [ 295.701715][ T7611] mmap: syz.5.442 (7611) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 298.730113][ T7634] loop5: detected capacity change from 0 to 16 [ 298.781836][ T7634] erofs (device loop5): mounted with root inode @ nid 36. [ 299.175226][ T7636] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 299.862570][ T7636] erofs (device loop5): read error -117 @ 43 of nid 36 [ 301.976622][ T7650] loop5: detected capacity change from 0 to 512 [ 302.161129][ T7650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.214629][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 302.259837][ T7650] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.361043][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 302.774704][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.541005][ T7681] loop0: detected capacity change from 0 to 512 [ 305.768238][ T7681] EXT4-fs: Ignoring removed i_version option [ 305.928030][ T7681] EXT4-fs: Ignoring removed bh option [ 306.112654][ T7681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.218234][ T7681] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.410817][ T5873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.783877][ T5970] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 309.113511][ T5970] usb 4-1: device descriptor read/64, error -71 [ 309.644550][ T5970] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 309.874157][ T5970] usb 4-1: device descriptor read/64, error -71 [ 310.037780][ T5970] usb usb4-port1: attempt power cycle [ 310.713522][ T5970] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 310.937809][ T5970] usb 4-1: device descriptor read/8, error -71 [ 312.350319][ T7741] loop1: detected capacity change from 0 to 128 [ 312.435549][ T7741] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.722011][ T7741] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 313.639400][ T7741] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 314.063690][ T7741] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 315.155803][ T5876] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.877948][ T7772] loop3: detected capacity change from 0 to 512 [ 317.346119][ T7772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.394991][ T7780] loop1: detected capacity change from 0 to 2048 [ 317.593292][ T7772] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.633761][ T7789] capability: warning: `syz.0.494' uses deprecated v2 capabilities in a way that may be insecure [ 317.667003][ T7780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.807701][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.404875][ T7812] fuse: Bad value for 'fd' [ 322.566035][ T7819] loop2: detected capacity change from 0 to 128 [ 322.738706][ T7819] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.824636][ T7819] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.716424][ T7819] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 325.843596][ T30] audit: type=1804 audit(1759032861.811:12): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.509" name="bus" dev="ramfs" ino=13888 res=1 errno=0 [ 325.891600][ T7845] syz_tun: entered allmulticast mode [ 325.894218][ T5875] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.968699][ T30] audit: type=1804 audit(1759032861.841:13): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.509" name="bus" dev="ramfs" ino=13888 res=1 errno=0 [ 326.409369][ T7844] syz_tun: left allmulticast mode [ 326.767917][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.774414][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.838763][ T7867] netlink: 60 bytes leftover after parsing attributes in process `syz.5.516'. [ 332.286969][ T7910] netlink: 88 bytes leftover after parsing attributes in process `syz.3.528'. [ 332.316777][ T7910] netlink: 48 bytes leftover after parsing attributes in process `syz.3.528'. [ 332.623866][ T24] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 334.235208][ T7934] Invalid source name [ 334.239296][ T7934] UBIFS error (pid: 7934): cannot open "./file0", error -22 [ 335.487401][ T24] usb 4-1: device descriptor read/all, error -71 [ 335.527060][ T7940] loop0: detected capacity change from 0 to 128 [ 337.540279][ T7940] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.591791][ T7940] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.048058][ T7940] fscrypt: loop0: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 339.263867][ T5970] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 339.289333][ T5873] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.447458][ T5970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.478500][ T5970] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 339.523447][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.603945][ T5970] usb 4-1: config 0 descriptor?? [ 339.638950][ T5970] pwc: Askey VC010 type 2 USB webcam detected. [ 340.277808][ T5970] pwc: recv_control_msg error -32 req 02 val 2b00 [ 340.319838][ T5970] pwc: recv_control_msg error -32 req 02 val 2700 [ 340.334449][ T5970] pwc: recv_control_msg error -32 req 02 val 2c00 [ 340.369291][ T5970] pwc: recv_control_msg error -32 req 04 val 1000 [ 340.420783][ T5970] pwc: recv_control_msg error -32 req 04 val 1300 [ 340.443873][ T5970] pwc: recv_control_msg error -32 req 04 val 1400 [ 340.475252][ T5970] pwc: recv_control_msg error -32 req 02 val 2000 [ 340.494150][ T5970] pwc: recv_control_msg error -32 req 02 val 2100 [ 340.557217][ T5970] pwc: recv_control_msg error -32 req 04 val 1500 [ 341.034108][ T5970] pwc: recv_control_msg error -71 req 02 val 2400 [ 341.784019][ T5970] pwc: recv_control_msg error -71 req 02 val 2600 [ 341.804098][ T5970] pwc: recv_control_msg error -71 req 02 val 2900 [ 341.813569][ T5970] pwc: recv_control_msg error -71 req 02 val 2800 [ 341.824596][ T5970] pwc: recv_control_msg error -71 req 04 val 1100 [ 341.855242][ T5970] pwc: recv_control_msg error -71 req 04 val 1200 [ 341.963858][ T5970] pwc: Registered as video103. [ 342.010207][ T5970] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 342.065557][ T5970] usb 4-1: USB disconnect, device number 10 [ 351.410801][ T8049] loop0: detected capacity change from 0 to 128 [ 351.491080][ T8049] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.542471][ T8049] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.201977][ T5873] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.416329][ T8060] loop3: detected capacity change from 0 to 512 [ 353.722669][ T8060] EXT4-fs: inline encryption not supported [ 354.708641][ T8060] EXT4-fs (loop3): Test dummy encryption mode enabled [ 354.720876][ T8060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.274226][ T8060] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 356.303900][ T8073] loop0: detected capacity change from 0 to 2048 [ 356.331997][ T8060] EXT4-fs (loop3): 1 truncate cleaned up [ 356.355457][ T8060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.858257][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.889305][ T8073] NILFS (loop0): error -4 creating segctord thread [ 359.026032][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.142644][ T8134] loop1: detected capacity change from 0 to 256 [ 364.186398][ T8134] FAT-fs (loop1): Directory bread(block 64) failed [ 364.193084][ T8134] FAT-fs (loop1): Directory bread(block 65) failed [ 364.233913][ T8134] FAT-fs (loop1): Directory bread(block 66) failed [ 364.240466][ T8134] FAT-fs (loop1): Directory bread(block 67) failed [ 364.268000][ T8134] FAT-fs (loop1): Directory bread(block 68) failed [ 364.307469][ T8134] FAT-fs (loop1): Directory bread(block 69) failed [ 365.764199][ T8134] FAT-fs (loop1): Directory bread(block 70) failed [ 365.770773][ T8134] FAT-fs (loop1): Directory bread(block 71) failed [ 366.490024][ T8134] FAT-fs (loop1): Directory bread(block 72) failed [ 366.572902][ T8134] FAT-fs (loop1): Directory bread(block 73) failed [ 368.066931][ T8161] loop1: detected capacity change from 0 to 128 [ 368.114572][ T8161] vfat: Unknown parameter '0177777777777777777777701777777777777777777777' [ 368.133158][ T8163] loop5: detected capacity change from 0 to 2048 [ 368.339142][ T8163] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 368.393823][ T8163] UDF-fs: Scanning with blocksize 512 failed [ 368.477190][ T8163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.872420][ T5883] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 370.881296][ T5883] Bluetooth: hci3: hcon ffff88807e514000 sent 1 < count 511 [ 371.016416][ T8182] loop1: detected capacity change from 0 to 512 [ 371.150283][ T8182] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 371.262236][ T8182] EXT4-fs (loop1): 1 truncate cleaned up [ 371.320544][ T8182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.112766][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.177437][ T30] audit: type=1804 audit(1759032911.151:14): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.607" name="bus" dev="ramfs" ino=14302 res=1 errno=0 [ 375.321393][ T30] audit: type=1804 audit(1759032911.201:15): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.607" name="bus" dev="ramfs" ino=14302 res=1 errno=0 [ 382.773479][ T30] audit: type=1800 audit(1759032918.711:16): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.618" name="/" dev="9p" ino=65538 res=0 errno=0 [ 388.334179][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.340532][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.805150][ T8282] loop2: detected capacity change from 0 to 32768 [ 388.830776][ T8282] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.629 (8282) [ 388.886156][ T8282] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 388.898988][ T8282] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 389.683675][ T8282] BTRFS info (device loop2): rebuilding free space tree [ 390.852564][ T8282] BTRFS info (device loop2): disabling free space tree [ 390.861866][ T8282] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 390.871816][ T8282] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 390.893995][ T8282] BTRFS info (device loop2): enabling ssd optimizations [ 390.900972][ T8282] BTRFS info (device loop2): force clearing of disk cache [ 390.908153][ T8282] BTRFS info (device loop2): enabling auto defrag [ 390.914640][ T8282] BTRFS info (device loop2): doing ref verification [ 390.921255][ T8282] BTRFS info (device loop2): max_inline set to 4096 [ 391.561350][ T8312] BTRFS info (device loop2 state M): force clearing of disk cache [ 391.574258][ T8316] loop1: detected capacity change from 0 to 256 [ 391.590958][ T8312] BTRFS info (device loop2 state M): max_inline set to 65970697666560 [ 391.612759][ T8316] exfat: Deprecated parameter 'namecase' [ 391.892106][ T8316] exfat: Deprecated parameter 'namecase' [ 392.071137][ T8316] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 392.644764][ T5875] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 393.379475][ T8328] loop0: detected capacity change from 0 to 2048 [ 394.211002][ T8328] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 394.232724][ T8328] UDF-fs: Scanning with blocksize 512 failed [ 394.249724][ T8328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.234802][ T8344] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 399.475046][ T8359] netlink: zone id is out of range [ 399.560713][ T8361] binder: 8360:8361 ioctl c00c620f 0 returned -14 [ 401.361383][ T8359] netlink: set zone limit has 4 unknown bytes [ 401.925853][ T8376] loop3: detected capacity change from 0 to 32768 [ 401.960553][ T8376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.652 (8376) [ 402.179901][ T8376] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 402.193623][ T8376] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 402.384282][ T6260] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 402.785353][ T6260] usb 3-1: Using ep0 maxpacket: 8 [ 402.800933][ T6260] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 402.823927][ T6260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.857907][ T6260] usb 3-1: config 0 descriptor?? [ 402.896404][ T8376] BTRFS info (device loop3): rebuilding free space tree [ 402.934000][ T8376] BTRFS info (device loop3): disabling free space tree [ 402.940921][ T8376] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 402.950679][ T8376] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 402.969389][ T8376] BTRFS info (device loop3): enabling ssd optimizations [ 402.976458][ T8376] BTRFS info (device loop3): force clearing of disk cache [ 402.983694][ T8376] BTRFS info (device loop3): enabling auto defrag [ 402.990156][ T8376] BTRFS info (device loop3): doing ref verification [ 402.996831][ T8376] BTRFS info (device loop3): max_inline set to 4096 [ 403.093102][ T6260] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 403.673686][ T8396] BTRFS info (device loop3 state M): force clearing of disk cache [ 403.681546][ T8396] BTRFS info (device loop3 state M): max_inline set to 65970697666560 [ 404.317682][ T5869] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 406.259518][ T6260] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 406.275897][ T6260] asix 3-1:0.0: probe with driver asix failed with error -71 [ 406.376757][ T6260] usb 3-1: USB disconnect, device number 3 [ 406.625948][ T8412] fuse: Bad value for 'fd' [ 407.324238][ T8411] orangefs_mount: mount request failed with -4 [ 408.195028][ T8420] Bluetooth: MGMT ver 1.23 [ 408.238817][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'. [ 410.368086][ T8441] loop1: detected capacity change from 0 to 512 [ 410.406577][ T8441] EXT4-fs: inline encryption not supported [ 410.459482][ T8441] EXT4-fs (loop1): Test dummy encryption mode enabled [ 410.487588][ T8441] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 410.587032][ T8441] EXT4-fs (loop1): 1 truncate cleaned up [ 410.607199][ T8441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.893580][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.878724][ T8462] loop3: detected capacity change from 0 to 8 [ 413.783454][ T6260] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 414.043770][ T6260] usb 3-1: Using ep0 maxpacket: 8 [ 414.058586][ T8477] loop5: detected capacity change from 0 to 2048 [ 414.065908][ T6260] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.111099][ T6260] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.182647][ T6260] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.230659][ T6260] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.235934][ T8477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 414.303010][ T6260] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 414.343072][ T6260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.715330][ T8446] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 415.532340][ T6260] usb 3-1: GET_CAPABILITIES returned 0 [ 415.593070][ T6260] usbtmc 3-1:16.0: can't read capabilities [ 415.618067][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 416.014795][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.025501][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.041553][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.050660][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.059742][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.068832][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.077917][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.086992][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.096066][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.105134][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.114203][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.123283][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.132361][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.141425][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.150501][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.719537][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.749255][ T8497] tty tty2: ldisc open failed (-12), clearing slot 1 [ 416.852525][ T5962] usb 3-1: USB disconnect, device number 4 [ 417.053794][ T8505] loop0: detected capacity change from 0 to 512 [ 417.061670][ T8505] EXT4-fs: inline encryption not supported [ 417.069548][ T8505] EXT4-fs (loop0): Test dummy encryption mode enabled [ 417.283822][ T8505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 417.650858][ T8505] EXT4-fs (loop0): 1 truncate cleaned up [ 417.880289][ T8505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.235393][ T5873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.493993][ T8517] loop1: detected capacity change from 0 to 64 [ 420.544699][ T8517] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 420.702956][ T8517] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 420.943906][ T8533] netlink: 'syz.1.690': attribute type 2 has an invalid length. [ 429.623851][ T8585] netlink: 72 bytes leftover after parsing attributes in process `syz.2.706'. [ 436.164091][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.173922][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.180693][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.187560][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.194361][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.201123][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.207906][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.215912][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.222685][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 436.229497][ T8650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 441.458295][ T8684] loop2: detected capacity change from 0 to 40427 [ 441.490910][ T8684] F2FS-fs (loop2): invalid crc value [ 441.908543][ T8684] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 441.931716][ T8684] F2FS-fs (loop2): Start checkpoint disabled! [ 441.992377][ T8684] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 443.982672][ T5977] kworker/u8:8: attempt to access beyond end of device [ 443.982672][ T5977] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 444.244737][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 444.244785][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.244809][ T5977] Workqueue: writeback wb_workfn (flush-7:2) [ 444.244871][ T5977] Call Trace: [ 444.244883][ T5977] [ 444.244896][ T5977] dump_stack_lvl+0x16c/0x1f0 [ 444.244958][ T5977] f2fs_handle_critical_error+0x624/0x9f0 [ 444.245009][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.245052][ T5977] ? f2fs_build_fault_attr+0x53/0x1f0 [ 444.245105][ T5977] f2fs_write_end_io+0x958/0xcf0 [ 444.245162][ T5977] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 444.245220][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.245275][ T5977] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 444.245324][ T5977] bio_endio+0x713/0x860 [ 444.245389][ T5977] submit_bio_noacct+0x306/0x1ed0 [ 444.245450][ T5977] __submit_merged_bio+0x33c/0x770 [ 444.245506][ T5977] __submit_merged_write_cond+0x319/0x3f0 [ 444.245572][ T5977] f2fs_write_cache_pages+0x2067/0x2570 [ 444.245665][ T5977] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 444.245746][ T5977] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 444.245809][ T5977] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 444.245967][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.246020][ T5977] f2fs_write_data_pages+0x4ad/0xd90 [ 444.246089][ T5977] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 444.246161][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.246204][ T5977] ? __lock_acquire+0xb97/0x1ce0 [ 444.246265][ T5977] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 444.246328][ T5977] do_writepages+0x27a/0x600 [ 444.246383][ T5977] ? __pfx_do_writepages+0x10/0x10 [ 444.246428][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.246470][ T5977] ? reacquire_held_locks+0xcd/0x1f0 [ 444.246527][ T5977] ? writeback_sb_inodes+0x3b0/0xfa0 [ 444.246583][ T5977] __writeback_single_inode+0x160/0xfb0 [ 444.246638][ T5977] ? __pfx___writeback_single_inode+0x10/0x10 [ 444.246686][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.246735][ T5977] ? do_raw_spin_unlock+0x172/0x230 [ 444.246776][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.246827][ T5977] writeback_sb_inodes+0x60d/0xfa0 [ 444.246904][ T5977] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 444.246957][ T5977] ? do_raw_spin_lock+0x12c/0x2b0 [ 444.247069][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.247112][ T5977] ? rcu_is_watching+0x12/0xc0 [ 444.247157][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.247200][ T5977] ? queue_io+0x3f6/0x520 [ 444.247249][ T5977] wb_writeback+0x419/0xb70 [ 444.247311][ T5977] ? __pfx_wb_writeback+0x10/0x10 [ 444.247356][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.247414][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.247457][ T5977] ? mark_held_locks+0x49/0x80 [ 444.247522][ T5977] wb_workfn+0x14d/0xbe0 [ 444.247579][ T5977] ? try_to_wake_up+0x160/0x1870 [ 444.247624][ T5977] ? __pfx_wb_workfn+0x10/0x10 [ 444.247680][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.247733][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.247783][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.247826][ T5977] ? rcu_is_watching+0x12/0xc0 [ 444.247881][ T5977] process_one_work+0x9cf/0x1b70 [ 444.247940][ T5977] ? __pfx_batadv_nc_worker+0x10/0x10 [ 444.247994][ T5977] ? __pfx_process_one_work+0x10/0x10 [ 444.248035][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.248092][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.248134][ T5977] ? assign_work+0x1a0/0x250 [ 444.248178][ T5977] worker_thread+0x6c8/0xf10 [ 444.248230][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.248275][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.248318][ T5977] ? __kthread_parkme+0x19e/0x250 [ 444.248370][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.248417][ T5977] ? __pfx_worker_thread+0x10/0x10 [ 444.248458][ T5977] kthread+0x3c5/0x780 [ 444.248495][ T5977] ? __pfx_kthread+0x10/0x10 [ 444.248538][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.248581][ T5977] ? rcu_is_watching+0x12/0xc0 [ 444.248627][ T5977] ? __pfx_kthread+0x10/0x10 [ 444.248666][ T5977] ret_from_fork+0x56d/0x730 [ 444.248699][ T5977] ? __pfx_kthread+0x10/0x10 [ 444.248741][ T5977] ret_from_fork_asm+0x1a/0x30 [ 444.248815][ T5977] [ 444.248829][ T5977] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 448.716972][ T8727] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 448.723814][ T8727] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.744676][ T8727] vhci_hcd vhci_hcd.0: Device attached [ 448.802685][ T8728] vhci_hcd: connection closed [ 448.810251][ T1133] vhci_hcd: stop threads [ 448.908000][ T1133] vhci_hcd: release socket [ 448.928537][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 449.013925][ T1133] vhci_hcd: disconnect device [ 449.649446][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.656108][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.488379][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 1 < 9 [ 451.489213][ T8746] netlink: 188 bytes leftover after parsing attributes in process `syz.0.755'. [ 451.495205][ T5883] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 453.098482][ T8763] net_ratelimit: 3320 callbacks suppressed [ 453.098535][ T8763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.693583][ T8808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.701200][ T8808] IPv6: NLM_F_CREATE should be set when creating new route [ 459.708725][ T8808] IPv6: NLM_F_CREATE should be set when creating new route [ 459.716105][ T8808] IPv6: NLM_F_CREATE should be set when creating new route [ 464.351508][ T8838] loop5: detected capacity change from 0 to 128 [ 464.919269][ T8838] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 465.778975][ T8838] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 466.046647][ T8847] loop2: detected capacity change from 0 to 2048 [ 466.088015][ T8838] netlink: 44 bytes leftover after parsing attributes in process `syz.5.779'. [ 466.097464][ T8838] netlink: 'syz.5.779': attribute type 6 has an invalid length. [ 466.149237][ T8838] netlink: 'syz.5.779': attribute type 5 has an invalid length. [ 466.249806][ T8838] netlink: 'syz.5.779': attribute type 4 has an invalid length. [ 467.071115][ T8847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 467.574891][ T8860] loop1: detected capacity change from 0 to 32768 [ 467.682940][ T30] audit: type=1800 audit(1759033259.679:17): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.785" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 467.879662][ T8860] read_mapping_page failed! [ 467.885575][ T8860] read_mapping_page failed! [ 467.924440][ T8861] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 468.570407][ T5868] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.697238][ T8861] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 128 with error 28 [ 468.709712][ T8861] EXT4-fs (loop2): This should not happen!! Data will be lost [ 468.709712][ T8861] [ 468.719683][ T8861] EXT4-fs (loop2): Total free blocks count 0 [ 468.725684][ T8861] EXT4-fs (loop2): Free/Dirty block details [ 468.732173][ T8861] EXT4-fs (loop2): free_blocks=2415919104 [ 468.743213][ T8861] EXT4-fs (loop2): dirty_blocks=160 [ 468.748750][ T8861] EXT4-fs (loop2): Block reservation details [ 468.754820][ T8861] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 469.257929][ T6247] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 471.879331][ T8882] loop5: detected capacity change from 0 to 1024 [ 472.020318][ T8882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.444228][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.712836][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 482.790641][ T8954] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 483.861612][ T30] audit: type=1800 audit(1759033275.857:18): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.818" name="/" dev="9p" ino=2 res=0 errno=0 [ 490.472790][ T9035] loop1: detected capacity change from 0 to 2048 [ 490.586336][ T9035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 490.640666][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 490.964334][ T9045] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 491.007814][ T9045] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 264 with error 28 [ 491.057997][ T9045] EXT4-fs (loop1): This should not happen!! Data will be lost [ 491.057997][ T9045] [ 491.072203][ T9045] EXT4-fs (loop1): Total free blocks count 0 [ 491.079479][ T9045] EXT4-fs (loop1): Free/Dirty block details [ 491.099752][ T9045] EXT4-fs (loop1): free_blocks=2415919104 [ 491.239125][ T9045] EXT4-fs (loop1): dirty_blocks=272 [ 492.032372][ T9045] EXT4-fs (loop1): Block reservation details [ 492.047915][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 492.058784][ T9045] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 492.196715][ T6240] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 492.327358][ T9054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.841'. [ 500.051632][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 500.086906][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 507.589837][ T9149] binder: transaction release 61 bad handle 1, ret = -22 [ 511.316434][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.322778][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.195371][ T9317] loop1: detected capacity change from 0 to 1024 [ 528.329705][ T9317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.523877][ T5877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 533.586126][ T5877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 533.605223][ T5877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 533.619831][ T5877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 533.629604][ T5877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 533.966628][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 534.425421][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.463170][ T5883] Bluetooth: hci6: command tx timeout [ 538.883996][ T5883] Bluetooth: hci6: command tx timeout [ 539.373700][ T9397] netlink: 68 bytes leftover after parsing attributes in process `syz.1.919'. [ 540.083730][ T9403] loop1: detected capacity change from 0 to 64 [ 540.126842][ T9342] chnl_net:caif_netlink_parms(): no params data found [ 540.960595][ T5883] Bluetooth: hci6: command tx timeout [ 543.030571][ T5883] Bluetooth: hci6: command tx timeout [ 547.372774][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.419531][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.434474][ T9342] bridge_slave_0: entered allmulticast mode [ 547.466081][ T9342] bridge_slave_0: entered promiscuous mode [ 547.511603][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.518894][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.526129][ T9342] bridge_slave_1: entered allmulticast mode [ 547.534371][ T9342] bridge_slave_1: entered promiscuous mode [ 549.289945][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.330991][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.729239][ T9465] loop1: detected capacity change from 0 to 64 [ 550.652038][ T9342] team0: Port device team_slave_0 added [ 552.027214][ T9342] team0: Port device team_slave_1 added [ 553.952611][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.966346][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.995754][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 554.027703][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 554.056658][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.080662][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.131528][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.160052][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.494356][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.501348][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.010906][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.144168][ T5877] Bluetooth: hci3: command tx timeout [ 557.446058][ T9342] hsr_slave_0: entered promiscuous mode [ 557.463977][ T9342] hsr_slave_1: entered promiscuous mode [ 557.482095][ T9342] debugfs: 'hsr0' already exists in 'hsr' [ 557.500994][ T9342] Cannot create hsr debugfs directory [ 558.212330][ T5877] Bluetooth: hci3: command tx timeout [ 560.531409][ T5883] Bluetooth: hci3: command tx timeout [ 562.610060][ T5877] Bluetooth: hci3: command tx timeout [ 563.844542][ T9342] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 564.701238][ T9342] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 564.927038][ T9342] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 564.999102][ T9485] chnl_net:caif_netlink_parms(): no params data found [ 565.241702][ T9342] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.304172][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.342025][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.554849][ T9485] bridge_slave_0: entered allmulticast mode [ 568.563453][ T9485] bridge_slave_0: entered promiscuous mode [ 568.580106][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.597083][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.604401][ T9485] bridge_slave_1: entered allmulticast mode [ 568.637313][ T9485] bridge_slave_1: entered promiscuous mode [ 568.902523][ T9485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.299884][ T9485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.905291][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 570.948149][ T9485] team0: Port device team_slave_0 added [ 571.026513][ T9485] team0: Port device team_slave_1 added [ 571.053568][ T9610] bridge1: port 1(veth3) entered blocking state [ 571.060237][ T9610] bridge1: port 1(veth3) entered disabled state [ 571.068310][ T9610] veth3: entered allmulticast mode [ 571.115653][ T9610] veth3: entered promiscuous mode [ 571.902167][ T9609] bridge1: port 2(veth0_to_bond) entered blocking state [ 571.927568][ T9609] bridge1: port 2(veth0_to_bond) entered disabled state [ 571.965655][ T9609] veth0_to_bond: entered allmulticast mode [ 571.973937][ T9609] veth0_to_bond: entered promiscuous mode [ 572.049511][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.056610][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.083469][ T9485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.101435][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.111531][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.139479][ T9485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.291827][ T9485] hsr_slave_0: entered promiscuous mode [ 572.308307][ T9485] hsr_slave_1: entered promiscuous mode [ 572.323840][ T9485] debugfs: 'hsr0' already exists in 'hsr' [ 572.331809][ T9485] Cannot create hsr debugfs directory [ 572.413092][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.451628][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.458591][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.022897][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.453279][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.460530][ T9209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.118034][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.125483][ T9209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.553894][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 577.662706][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 578.124071][ T9657] Set syz0 is full, maxelem 0 reached [ 578.673996][ T9660] hfsplus: unable to find HFS+ superblock [ 578.697593][ T9485] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 579.794019][ T9485] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 579.866353][ T9485] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 581.278241][ T9485] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 581.788728][ T9690] loop2: detected capacity change from 0 to 256 [ 583.536522][ T9690] syz.2.995: attempt to access beyond end of device [ 583.536522][ T9690] loop2: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 583.794049][ T9485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.985354][ T9485] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.030962][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.062993][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.070592][ T9223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.172480][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.179725][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.811616][ T9485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.261792][ T9342] veth0_vlan: entered promiscuous mode [ 585.302657][ T9342] veth1_vlan: entered promiscuous mode [ 585.408255][ T9342] veth0_macvtap: entered promiscuous mode [ 585.430950][ T9342] veth1_macvtap: entered promiscuous mode [ 585.480528][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.523464][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.581719][ T9211] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.606062][ T9211] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.632902][ T9211] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.667045][ T9211] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.984758][ T6236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.009872][ T6236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.042581][ T9485] veth0_vlan: entered promiscuous mode [ 587.213465][ T9485] veth1_vlan: entered promiscuous mode [ 587.249351][ T6236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.282916][ T6236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.980780][ T9485] veth0_macvtap: entered promiscuous mode [ 588.025494][ T9485] veth1_macvtap: entered promiscuous mode [ 588.213694][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.264887][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.390964][ T9211] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.509774][ T6196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.037754][ T6196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.956267][ T6236] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.727530][ T9205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.017069][ T9205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.227924][ T9817] loop1: detected capacity change from 0 to 2048 [ 595.340608][ T9802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.386208][ T9817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.389668][ T9802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.773075][ T9817] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1346: i_size: 17247522816 lbcount: 17247526912 extent 129+225280 [ 597.318322][ T9840] loop1: detected capacity change from 0 to 128 [ 597.503007][ T9840] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 599.788375][ T9804] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 600.343199][ T9852] loop2: detected capacity change from 0 to 40427 [ 600.374086][ T9852] F2FS-fs (loop2): invalid crc value [ 600.550115][ T9852] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 600.854582][ T9852] F2FS-fs (loop2): Start checkpoint disabled! [ 601.975937][ T9865] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 602.035505][ T9865] netlink: 'syz.3.1032': attribute type 4 has an invalid length. [ 602.048007][ T9852] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 602.121556][ T9869] loop7: detected capacity change from 0 to 256 [ 602.160307][ T9865] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1032'. [ 602.226127][ T30] audit: type=1800 audit(1759033394.251:19): pid=9873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1030" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 602.276478][ T9873] syz.2.1030: attempt to access beyond end of device [ 602.276478][ T9873] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 602.300225][ T9873] syz.2.1030: attempt to access beyond end of device [ 602.300225][ T9873] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 602.319706][ T9873] syz.2.1030: attempt to access beyond end of device [ 602.319706][ T9873] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 602.335945][ T9873] syz.2.1030: attempt to access beyond end of device [ 602.335945][ T9873] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 602.352528][ T9873] syz.2.1030: attempt to access beyond end of device [ 602.352528][ T9873] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 604.388830][ T6243] kworker/u8:17: attempt to access beyond end of device [ 604.388830][ T6243] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 604.435787][ T6243] CPU: 0 UID: 0 PID: 6243 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 604.435836][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.435865][ T6243] Workqueue: writeback wb_workfn (flush-7:2) [ 604.435928][ T6243] Call Trace: [ 604.435939][ T6243] [ 604.435953][ T6243] dump_stack_lvl+0x16c/0x1f0 [ 604.436015][ T6243] f2fs_handle_critical_error+0x624/0x9f0 [ 604.436065][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.436108][ T6243] ? f2fs_build_fault_attr+0x53/0x1f0 [ 604.436160][ T6243] f2fs_write_end_io+0x958/0xcf0 [ 604.436217][ T6243] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 604.436275][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.436328][ T6243] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 604.436378][ T6243] bio_endio+0x713/0x860 [ 604.436442][ T6243] submit_bio_noacct+0x306/0x1ed0 [ 604.436503][ T6243] __submit_merged_bio+0x33c/0x770 [ 604.436561][ T6243] __submit_merged_write_cond+0x319/0x3f0 [ 604.436631][ T6243] f2fs_write_cache_pages+0x2067/0x2570 [ 604.436723][ T6243] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 604.436788][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.436831][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.436879][ T6243] ? find_held_lock+0x2b/0x80 [ 604.436927][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.436975][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.437017][ T6243] ? do_raw_spin_unlock+0x172/0x230 [ 604.437077][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.437119][ T6243] ? f2fs_available_free_memory+0x279/0xa30 [ 604.437240][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.437283][ T6243] ? lock_acquire+0x179/0x350 [ 604.437342][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.437394][ T6243] f2fs_write_data_pages+0x4ad/0xd90 [ 604.437463][ T6243] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 604.437536][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.437578][ T6243] ? __lock_acquire+0xb97/0x1ce0 [ 604.437636][ T6243] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 604.437698][ T6243] do_writepages+0x27a/0x600 [ 604.437754][ T6243] ? __pfx_do_writepages+0x10/0x10 [ 604.437798][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.437840][ T6243] ? reacquire_held_locks+0xcd/0x1f0 [ 604.437903][ T6243] ? writeback_sb_inodes+0x3b0/0xfa0 [ 604.437960][ T6243] __writeback_single_inode+0x160/0xfb0 [ 604.438015][ T6243] ? __pfx___writeback_single_inode+0x10/0x10 [ 604.438063][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.438106][ T6243] ? do_raw_spin_unlock+0x172/0x230 [ 604.438147][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.438197][ T6243] writeback_sb_inodes+0x60d/0xfa0 [ 604.438274][ T6243] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 604.438324][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.438366][ T6243] ? mark_held_locks+0x49/0x80 [ 604.438496][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.438538][ T6243] ? rcu_is_watching+0x12/0xc0 [ 604.438584][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.438625][ T6243] ? queue_io+0x3f6/0x520 [ 604.438674][ T6243] wb_writeback+0x419/0xb70 [ 604.438736][ T6243] ? __pfx_wb_writeback+0x10/0x10 [ 604.438782][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.438840][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.438888][ T6243] ? mark_held_locks+0x49/0x80 [ 604.438954][ T6243] wb_workfn+0x14d/0xbe0 [ 604.439011][ T6243] ? try_to_wake_up+0x160/0x1870 [ 604.439057][ T6243] ? __pfx_wb_workfn+0x10/0x10 [ 604.439113][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.439161][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.439210][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.439252][ T6243] ? rcu_is_watching+0x12/0xc0 [ 604.439307][ T6243] process_one_work+0x9cf/0x1b70 [ 604.439367][ T6243] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 604.439408][ T6243] ? __pfx_process_one_work+0x10/0x10 [ 604.439449][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.439506][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.439548][ T6243] ? assign_work+0x1a0/0x250 [ 604.439591][ T6243] worker_thread+0x6c8/0xf10 [ 604.439658][ T6243] ? __pfx_worker_thread+0x10/0x10 [ 604.439699][ T6243] kthread+0x3c5/0x780 [ 604.439737][ T6243] ? __pfx_kthread+0x10/0x10 [ 604.439777][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.439820][ T6243] ? rcu_is_watching+0x12/0xc0 [ 604.439871][ T6243] ? __pfx_kthread+0x10/0x10 [ 604.439911][ T6243] ret_from_fork+0x56d/0x730 [ 604.439944][ T6243] ? __pfx_kthread+0x10/0x10 [ 604.439982][ T6243] ret_from_fork_asm+0x1a/0x30 [ 604.440056][ T6243] [ 604.883655][ T6243] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 608.877949][ T30] audit: type=1326 audit(1759033400.611:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.7.1040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f764578eec9 code=0x0 [ 612.731276][ T9931] loop6: detected capacity change from 0 to 1024 [ 612.792328][ T9937] loop1: detected capacity change from 0 to 256 [ 613.166959][ T9939] ptrace attach of "./syz-executor exec"[9485] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 615.972102][ T9946] syz.1.1053: attempt to access beyond end of device [ 615.972102][ T9946] loop1: rw=2049, sector=256, nr_sectors = 16 limit=256 [ 617.445080][ T9971] loop7: detected capacity change from 0 to 1024 [ 617.464903][ T9971] ext4: Unknown parameter 'nouser_xattr' [ 618.734604][ T9982] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 618.759580][ T9982] qnx6: wrong signature (magic) in superblock #1. [ 618.766446][ T9982] qnx6: unable to read the first superblock [ 624.634906][T10015] binder: 10010:10015 ioctl c0306201 2000000003c0 returned -14 [ 625.316244][T10020] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 627.297682][T10025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.346413][T10025] bond1: (slave bond2): making interface the new active one [ 627.383485][T10025] bond1: (slave bond2): Enslaving as an active interface with an up link [ 628.619352][T10050] loop7: detected capacity change from 0 to 128 [ 632.054488][ T5877] Bluetooth: hci3: command tx timeout [ 634.660752][T10067] new mount options do not match the existing superblock, will be ignored [ 634.807799][T10069] hfsplus: unable to find HFS+ superblock [ 635.347327][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.353937][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.409645][T10073] loop6: detected capacity change from 0 to 2048 [ 636.560532][T10073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.961977][ T9749] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 637.403164][ T9749] usb 8-1: unable to get BOS descriptor or descriptor too short [ 637.745949][T10012] syz.2.1073 (10012): drop_caches: 2 [ 637.751645][ T9749] usb 8-1: not running at top speed; connect to a high speed hub [ 637.761122][ T9749] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.933668][ T9749] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.014982][ T9749] usb 8-1: string descriptor 0 read error: -22 [ 638.040535][ T9749] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 638.136839][ T9749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.175110][T10091] loop1: detected capacity change from 0 to 32768 [ 638.182698][T10091] XFS: ikeep mount option is deprecated. [ 638.227469][T10091] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 638.249393][ T9749] usb 8-1: 0:2 : does not exist [ 639.259994][T10091] XFS (loop1): Ending clean mount [ 639.288233][T10091] XFS (loop1): Quotacheck needed: Please wait. [ 640.514944][T10091] XFS (loop1): Quotacheck: Done. [ 640.642792][T10114] loop2: detected capacity change from 0 to 512 [ 640.672154][ T9749] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 641.134181][T10114] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2264924194)! [ 641.154200][T10114] EXT4-fs (loop2): group descriptors corrupted! [ 643.277695][ T9749] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 643.439365][ T5876] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 643.517733][ T9749] usb 8-1: USB disconnect, device number 2 [ 643.538852][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.561655][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.568462][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.575236][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.581986][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.588756][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.595533][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.602322][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.609097][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 643.615874][T10126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 645.106159][T10135] new mount options do not match the existing superblock, will be ignored [ 645.143183][T10135] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 647.622138][T10149] loop6: detected capacity change from 0 to 128 [ 648.261186][T10149] affs: No valid root block on device loop6 [ 648.805929][T10153] syz.1.1103 uses obsolete (PF_INET,SOCK_PACKET) [ 650.452170][ T30] audit: type=1326 audit(1759033441.261:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.6.1111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f693058eec9 code=0x0 [ 652.868723][ T9749] IPVS: starting estimator thread 0... [ 652.976179][T10180] IPVS: using max 28 ests per chain, 67200 per kthread [ 655.628688][T10200] net_ratelimit: 3320 callbacks suppressed [ 655.628708][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 656.009971][T10204] new mount options do not match the existing superblock, will be ignored [ 656.051918][T10204] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 657.303784][ T5877] Bluetooth: hci6: command 0x0406 tx timeout [ 657.553195][T10217] loop1: detected capacity change from 0 to 128 [ 658.648236][T10217] affs: No valid root block on device loop1 [ 665.514562][ T30] audit: type=1800 audit(1759033457.571:22): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1134" name="/" dev="9p" ino=65538 res=0 errno=0 [ 665.535251][T10251] netfs: Couldn't get user pages (rc=-14) [ 670.498545][ T5877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 670.514935][ T5877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 670.523318][ T5877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 670.534825][ T5877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 670.544815][ T5877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 672.422019][ T5883] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 672.433135][ T5883] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 672.477014][ T5883] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 672.487742][ T5883] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 672.604415][ T5883] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 672.733661][ T5877] Bluetooth: hci7: command tx timeout [ 674.743148][ T5877] Bluetooth: hci8: command tx timeout [ 674.756288][ T5877] Bluetooth: hci7: command tx timeout [ 676.783704][ T5883] Bluetooth: hci8: command tx timeout [ 676.841099][ T5883] Bluetooth: hci7: command tx timeout [ 677.846642][ T5883] Bluetooth: hci3: command 0x0406 tx timeout [ 678.834146][ T5877] Bluetooth: hci8: command tx timeout [ 678.924866][ T5877] Bluetooth: hci7: command tx timeout [ 680.260267][ T5977] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.806142][ T30] audit: type=1800 audit(1759033472.871:23): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1169" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 680.951403][ T5877] Bluetooth: hci8: command tx timeout [ 681.650042][ T5977] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.713433][T10306] chnl_net:caif_netlink_parms(): no params data found [ 681.764466][T10292] chnl_net:caif_netlink_parms(): no params data found [ 683.935810][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 684.401998][ T5977] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.340902][ T5977] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.144839][T10404] lo speed is unknown, defaulting to 1000 [ 690.150900][T10404] lo speed is unknown, defaulting to 1000 [ 690.159565][T10404] lo speed is unknown, defaulting to 1000 [ 690.175848][T10404] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 690.192924][T10404] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 690.519194][T10411] loop7: detected capacity change from 0 to 40427 [ 690.545827][T10404] lo speed is unknown, defaulting to 1000 [ 690.554125][T10404] lo speed is unknown, defaulting to 1000 [ 690.563402][T10404] lo speed is unknown, defaulting to 1000 [ 690.571253][T10404] lo speed is unknown, defaulting to 1000 [ 690.581264][T10404] lo speed is unknown, defaulting to 1000 [ 690.589148][T10404] lo speed is unknown, defaulting to 1000 [ 690.597040][T10404] lo speed is unknown, defaulting to 1000 [ 690.642005][T10411] F2FS-fs (loop7): build fault injection rate: 14 [ 690.648719][T10411] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 690.664362][T10411] F2FS-fs (loop7): invalid crc value [ 690.681227][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 690.705976][ C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 690.977726][T10411] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 690.988618][T10411] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 691.035302][T10411] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 691.350212][T10411] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 691.390566][T10404] lo speed is unknown, defaulting to 1000 [ 691.446183][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1182'. [ 691.476605][T10404] lo speed is unknown, defaulting to 1000 [ 691.627203][T10306] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.643821][T10306] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.660080][T10306] bridge_slave_0: entered allmulticast mode [ 691.670465][T10306] bridge_slave_0: entered promiscuous mode [ 691.697741][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.716990][T10306] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.739615][T10306] bridge_slave_1: entered allmulticast mode [ 691.751065][T10306] bridge_slave_1: entered promiscuous mode [ 691.794879][T10404] lo speed is unknown, defaulting to 1000 [ 692.549831][ T9485] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0 [ 692.559143][T10292] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.568805][T10292] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.576160][T10292] bridge_slave_0: entered allmulticast mode [ 692.584446][T10292] bridge_slave_0: entered promiscuous mode [ 692.610179][ T9485] F2FS-fs (loop7): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0] [ 692.683734][T10292] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.723698][T10292] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.778015][T10292] bridge_slave_1: entered allmulticast mode [ 692.797565][ C1] F2FS-fs (loop7): inject write IO error in f2fs_write_end_io of bio_endio+0x713/0x860 [ 692.807381][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 692.807427][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.807449][ C1] Call Trace: [ 692.807461][ C1] [ 692.807475][ C1] dump_stack_lvl+0x16c/0x1f0 [ 692.807540][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 692.807594][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.807640][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 692.807691][ C1] f2fs_write_end_io+0x958/0xcf0 [ 692.807754][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 692.807812][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.807867][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 692.807918][ C1] bio_endio+0x713/0x860 [ 692.807983][ C1] blk_update_request+0x93e/0x15f0 [ 692.808043][ C1] blk_mq_end_request+0x4f/0x90 [ 692.808085][ C1] lo_complete_rq+0x1d4/0x290 [ 692.808132][ C1] blk_complete_reqs+0xb1/0xf0 [ 692.808194][ C1] handle_softirqs+0x219/0x8e0 [ 692.808257][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 692.808308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.808358][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 692.808404][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 692.808458][ C1] run_ksoftirqd+0x3a/0x60 [ 692.808503][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 692.808556][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.808608][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 692.808664][ C1] kthread+0x3c5/0x780 [ 692.808707][ C1] ? __pfx_kthread+0x10/0x10 [ 692.808747][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.808792][ C1] ? rcu_is_watching+0x12/0xc0 [ 692.808840][ C1] ? __pfx_kthread+0x10/0x10 [ 692.808880][ C1] ret_from_fork+0x56d/0x730 [ 692.808914][ C1] ? __pfx_kthread+0x10/0x10 [ 692.808952][ C1] ret_from_fork_asm+0x1a/0x30 [ 692.809021][ C1] [ 692.809034][ C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 692.844268][T10292] bridge_slave_1: entered promiscuous mode [ 692.844934][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 692.844979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.845001][ C1] Call Trace: [ 692.845013][ C1] [ 692.845026][ C1] dump_stack_lvl+0x16c/0x1f0 [ 692.845089][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 692.845141][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.845185][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 692.845235][ C1] f2fs_write_end_io+0x958/0xcf0 [ 692.845290][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 692.845347][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.845400][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 692.845451][ C1] bio_endio+0x713/0x860 [ 692.845514][ C1] blk_update_request+0x93e/0x15f0 [ 692.845573][ C1] blk_mq_end_request+0x4f/0x90 [ 692.845615][ C1] lo_complete_rq+0x1d4/0x290 [ 692.845661][ C1] blk_complete_reqs+0xb1/0xf0 [ 692.845729][ C1] handle_softirqs+0x219/0x8e0 [ 692.845786][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 692.845835][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.845883][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 692.845928][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 692.845979][ C1] run_ksoftirqd+0x3a/0x60 [ 692.846023][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 692.846074][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.846124][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 692.846179][ C1] kthread+0x3c5/0x780 [ 692.846217][ C1] ? __pfx_kthread+0x10/0x10 [ 692.846262][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.846306][ C1] ? rcu_is_watching+0x12/0xc0 [ 692.846353][ C1] ? __pfx_kthread+0x10/0x10 [ 692.846393][ C1] ret_from_fork+0x56d/0x730 [ 692.846427][ C1] ? __pfx_kthread+0x10/0x10 [ 692.846465][ C1] ret_from_fork_asm+0x1a/0x30 [ 692.846532][ C1] [ 692.846546][ C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 693.186607][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 693.186657][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 693.186683][ C1] Call Trace: [ 693.186695][ C1] [ 693.186708][ C1] dump_stack_lvl+0x16c/0x1f0 [ 693.186770][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 693.186819][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.186861][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 693.186909][ C1] f2fs_write_end_io+0x958/0xcf0 [ 693.186967][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 693.187021][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.187072][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 693.187119][ C1] bio_endio+0x713/0x860 [ 693.187181][ C1] blk_update_request+0x93e/0x15f0 [ 693.187237][ C1] blk_mq_end_request+0x4f/0x90 [ 693.187276][ C1] lo_complete_rq+0x1d4/0x290 [ 693.187320][ C1] blk_complete_reqs+0xb1/0xf0 [ 693.187377][ C1] handle_softirqs+0x219/0x8e0 [ 693.187431][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 693.187479][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.187525][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 693.187568][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 693.187617][ C1] run_ksoftirqd+0x3a/0x60 [ 693.187660][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 693.187709][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.187757][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 693.187808][ C1] kthread+0x3c5/0x780 [ 693.187845][ C1] ? __pfx_kthread+0x10/0x10 [ 693.187881][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.187923][ C1] ? rcu_is_watching+0x12/0xc0 [ 693.187973][ C1] ? __pfx_kthread+0x10/0x10 [ 693.188010][ C1] ret_from_fork+0x56d/0x730 [ 693.188042][ C1] ? __pfx_kthread+0x10/0x10 [ 693.188078][ C1] ret_from_fork_asm+0x1a/0x30 [ 693.188143][ C1] [ 693.188162][ C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 693.249402][T10441] No source specified [ 693.251113][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 693.251160][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 693.251182][ C1] Call Trace: [ 693.251194][ C1] [ 693.251207][ C1] dump_stack_lvl+0x16c/0x1f0 [ 693.251273][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 693.251324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.251370][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 693.251421][ C1] f2fs_write_end_io+0x958/0xcf0 [ 693.251477][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 693.251534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.251588][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 693.251640][ C1] bio_endio+0x713/0x860 [ 693.251704][ C1] blk_update_request+0x93e/0x15f0 [ 693.251765][ C1] blk_mq_end_request+0x4f/0x90 [ 693.251807][ C1] lo_complete_rq+0x1d4/0x290 [ 693.251854][ C1] blk_complete_reqs+0xb1/0xf0 [ 693.251915][ C1] handle_softirqs+0x219/0x8e0 [ 693.251979][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 693.252030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.252080][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 693.252126][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 693.252179][ C1] run_ksoftirqd+0x3a/0x60 [ 693.252223][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 693.252275][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.252326][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 693.252382][ C1] kthread+0x3c5/0x780 [ 693.252420][ C1] ? __pfx_kthread+0x10/0x10 [ 693.252460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.252504][ C1] ? rcu_is_watching+0x12/0xc0 [ 693.252552][ C1] ? __pfx_kthread+0x10/0x10 [ 693.252591][ C1] ret_from_fork+0x56d/0x730 [ 693.252626][ C1] ? __pfx_kthread+0x10/0x10 [ 693.252664][ C1] ret_from_fork_asm+0x1a/0x30 [ 693.252733][ C1] [ 693.252746][ C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 693.563967][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 693.564018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 693.564040][ C1] Call Trace: [ 693.564052][ C1] [ 693.564066][ C1] dump_stack_lvl+0x16c/0x1f0 [ 693.564134][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 693.564187][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.564235][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 693.564286][ C1] f2fs_write_end_io+0x958/0xcf0 [ 693.564343][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 693.564402][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.564457][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 693.564510][ C1] bio_endio+0x713/0x860 [ 693.564576][ C1] blk_update_request+0x93e/0x15f0 [ 693.564639][ C1] blk_mq_end_request+0x4f/0x90 [ 693.564681][ C1] lo_complete_rq+0x1d4/0x290 [ 693.564723][ C1] blk_complete_reqs+0xb1/0xf0 [ 693.564786][ C1] handle_softirqs+0x219/0x8e0 [ 693.564845][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 693.564898][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.564955][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 693.565003][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 693.565058][ C1] run_ksoftirqd+0x3a/0x60 [ 693.565105][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 693.565159][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.565212][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 693.565269][ C1] kthread+0x3c5/0x780 [ 693.565308][ C1] ? __pfx_kthread+0x10/0x10 [ 693.565357][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.565405][ C1] ? rcu_is_watching+0x12/0xc0 [ 693.565455][ C1] ? __pfx_kthread+0x10/0x10 [ 693.565495][ C1] ret_from_fork+0x56d/0x730 [ 693.565530][ C1] ? __pfx_kthread+0x10/0x10 [ 693.565569][ C1] ret_from_fork_asm+0x1a/0x30 [ 693.565640][ C1] [ 693.565653][ C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 693.751863][ T9485] F2FS-fs (loop7): do_checkpoint failed err:-5, stop checkpoint [ 695.021357][T10306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.115024][T10306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.161903][T10454] loop1: detected capacity change from 0 to 512 [ 695.233834][T10454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 695.304961][T10454] EXT4-fs (loop1): 1 truncate cleaned up [ 695.334477][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.340823][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.359240][T10454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.636614][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 697.089986][T10292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.117841][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.175106][ T5877] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 697.200391][T10306] team0: Port device team_slave_0 added [ 697.326134][T10292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.555322][T10306] team0: Port device team_slave_1 added [ 699.174883][ T5977] bridge_slave_1: left allmulticast mode [ 699.183981][ T5977] bridge_slave_1: left promiscuous mode [ 699.193068][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.263640][T10488] uprobe: syz.4.1201:10488 failed to unregister, leaking uprobe [ 700.034106][ T5977] bridge_slave_0: left allmulticast mode [ 700.078388][ T5977] bridge_slave_0: left promiscuous mode [ 700.102475][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.238884][ T5877] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 701.248448][ T5877] Bluetooth: hci2: Injecting HCI hardware error event [ 701.258246][ T5883] Bluetooth: hci2: hardware error 0x00 [ 703.936211][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1207'. [ 704.214362][ T5883] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 704.760566][T10522] loop7: detected capacity change from 0 to 2048 [ 705.097973][T10522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.215006][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.528725][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.788400][ T5977] bond0 (unregistering): Released all slaves [ 710.371977][ T24] IPVS: starting estimator thread 0... [ 710.531297][T10306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.597799][T10306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.694187][T10555] IPVS: using max 22 ests per chain, 52800 per kthread [ 710.727356][T10306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.045807][T10292] team0: Port device team_slave_0 added [ 713.274972][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'. [ 714.704443][T10306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.978007][T10306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.747175][T10591] loop1: detected capacity change from 0 to 128 [ 715.832412][T10306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.850142][T10292] team0: Port device team_slave_1 added [ 715.858077][T10591] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 716.137120][T10591] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 717.548864][T10292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.587033][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.182632][T10292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.168621][ T9749] IPVS: starting estimator thread 0... [ 719.282011][T10612] IPVS: using max 22 ests per chain, 52800 per kthread [ 719.414743][T10292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.421733][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.716659][T10292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.687064][ T30] audit: type=1107 audit(1759033515.301:24): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 725.282941][T10292] hsr_slave_0: entered promiscuous mode [ 725.316320][T10292] hsr_slave_1: entered promiscuous mode [ 725.337202][T10292] debugfs: 'hsr0' already exists in 'hsr' [ 725.353586][T10292] Cannot create hsr debugfs directory [ 725.575068][T10306] hsr_slave_0: entered promiscuous mode [ 725.589287][T10306] hsr_slave_1: entered promiscuous mode [ 725.619978][T10306] debugfs: 'hsr0' already exists in 'hsr' [ 725.660942][T10306] Cannot create hsr debugfs directory [ 725.875330][ T5228] udevd[5228]: worker [10431] terminated by signal 33 (Unknown signal 33) [ 726.164417][ T5228] udevd[5228]: worker [10431] failed while handling '/devices/virtual/bdi/9p-29' [ 726.270982][T10668] netlink: 'syz.4.1243': attribute type 15 has an invalid length. [ 727.273267][ T5977] hsr_slave_0: left promiscuous mode [ 727.375527][T10672] loop7: detected capacity change from 0 to 512 [ 727.409688][ T5977] hsr_slave_1: left promiscuous mode [ 727.583321][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.651623][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.670474][T10672] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 727.782563][T10672] EXT4-fs (loop7): mount failed [ 727.987840][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.133686][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.114458][ T5977] veth1_macvtap: left promiscuous mode [ 729.120453][ T5977] veth0_macvtap: left promiscuous mode [ 729.219207][ T5977] veth1_vlan: left promiscuous mode [ 729.248476][ T5977] veth0_vlan: left promiscuous mode [ 729.625153][T10694] loop1: detected capacity change from 0 to 512 [ 729.690878][T10694] EXT4-fs: Ignoring removed nobh option [ 729.914673][T10694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.076697][T10694] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1252: iget: bad i_size value: 15393162788874 [ 730.198120][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.209763][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.218481][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.240584][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.252984][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 730.344541][ T5877] Bluetooth: hci5: unexpected event for opcode 0x0c7d [ 730.783858][T10707] netlink: 'syz.3.1255': attribute type 15 has an invalid length. [ 731.938657][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.584519][ T5883] Bluetooth: hci4: command tx timeout [ 733.209356][ T9486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 733.219116][ T9486] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 733.227689][ T9486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 733.237393][ T9486] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 733.245273][ T9486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 734.453419][ T5877] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 734.462116][ T5877] Bluetooth: hci5: Injecting HCI hardware error event [ 734.471494][ T5877] Bluetooth: hci5: hardware error 0x00 [ 734.594206][ T9486] Bluetooth: hci4: command tx timeout [ 735.315738][ T9486] Bluetooth: hci6: command tx timeout [ 736.240544][T10716] syz.7.1257 (10716): drop_caches: 2 [ 736.673842][ T9486] Bluetooth: hci4: command tx timeout [ 736.754180][ T5877] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 736.796578][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 737.433776][ T5877] Bluetooth: hci6: command tx timeout [ 737.614175][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 738.833782][ T5877] Bluetooth: hci4: command tx timeout [ 739.744050][ T5877] Bluetooth: hci6: command tx timeout [ 740.642583][ T30] audit: type=1107 audit(1759033532.701:25): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 742.067262][ T5877] Bluetooth: hci6: command tx timeout [ 742.189648][T10701] lo speed is unknown, defaulting to 1000 [ 742.360372][ T30] audit: type=1326 audit(1759033534.421:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.4.1277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb42658eec9 code=0x0 [ 742.480105][T10792] overlayfs: failed to clone upperpath [ 742.516444][T10714] lo speed is unknown, defaulting to 1000 [ 743.497396][ T5977] bridge_slave_1: left allmulticast mode [ 743.509777][ T5977] bridge_slave_1: left promiscuous mode [ 743.529450][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.562422][ T5977] bridge_slave_0: left allmulticast mode [ 743.570934][ T5977] bridge_slave_0: left promiscuous mode [ 743.576771][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.644471][ T5977] bridge_slave_1: left allmulticast mode [ 743.690959][ T5977] bridge_slave_1: left promiscuous mode [ 743.703969][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.792597][ T5977] bridge_slave_0: left allmulticast mode [ 743.815478][ T5977] bridge_slave_0: left promiscuous mode [ 743.829452][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.450560][ T30] audit: type=1326 audit(1759033538.901:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.3.1286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2f8eec9 code=0x0 [ 747.505392][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.188133][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.263715][ T5977] bond0 (unregistering): Released all slaves [ 750.436390][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.505338][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.539576][ T5977] bond0 (unregistering): Released all slaves [ 750.774766][T10701] chnl_net:caif_netlink_parms(): no params data found [ 751.201165][T10877] syz.1.1294 (10877): drop_caches: 2 [ 751.467731][ T5977] hsr_slave_0: left promiscuous mode [ 751.583691][ T5977] hsr_slave_1: left promiscuous mode [ 751.619270][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.663431][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.741994][ T5977] hsr_slave_0: left promiscuous mode [ 751.791156][ T5977] hsr_slave_1: left promiscuous mode [ 753.455738][T10891] loop7: detected capacity change from 0 to 8 [ 753.464214][T10891] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 753.916344][T10891] cramfs: Error -5 while decompressing! [ 753.922177][T10891] cramfs: ffffffff9af32e28(26)->ffff8880730fa000(4096) [ 753.929370][T10891] cramfs: Error -3 while decompressing! [ 753.934995][T10891] cramfs: ffffffff9af32e42(26)->ffff88807314a000(4096) [ 753.942067][T10891] cramfs: Error -3 while decompressing! [ 753.947775][T10891] cramfs: ffffffff9af32e5c(16)->ffff8880688eb000(4096) [ 753.955803][T10891] cramfs: Error -5 while decompressing! [ 753.962853][T10891] cramfs: ffffffff9af32e28(26)->ffff8880730fa000(4096) [ 754.131309][T10297] udevd[10297]: incorrect cramfs checksum on /dev/loop7 [ 754.141309][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.394754][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.142191][T10297] udevd[10297]: incorrect cramfs checksum on /dev/loop7 [ 756.052067][T10916] netlink: zone id is out of range [ 756.171184][T10916] netlink: zone id is out of range [ 757.294279][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.300627][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.508535][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 757.554952][T10916] netlink: set zone limit has 4 unknown bytes [ 757.714523][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 758.645061][T10935] Device name cannot be null; rc = [-22] [ 759.022430][ T49] ------------[ cut here ]------------ [ 759.028289][ T49] WARNING: CPU: 1 PID: 49 at io_uring/io_uring.c:2980 io_ring_exit_work+0x3fc/0x10f0 [ 759.037869][ T49] Modules linked in: [ 759.041953][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 759.051997][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 759.062178][ T49] Workqueue: iou_exit io_ring_exit_work [ 759.067779][ T49] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 759.074258][ T49] Code: 0f 85 0a 0b 00 00 48 8b 05 61 63 4a 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 df e6 e4 fc 4d 85 f6 79 12 e8 65 eb e4 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 53 eb e4 fc 48 8b 74 24 60 [ 759.094275][ T49] RSP: 0018:ffffc90000b97a90 EFLAGS: 00010293 [ 759.100347][ T49] RAX: 0000000000000000 RBX: ffff8880304546c8 RCX: ffffffff84d6aeb1 [ 759.109059][ T49] RDX: ffff88801f2bda00 RSI: ffffffff84d6aebb RDI: 0000000000000007 [ 759.117081][ T49] RBP: ffffc90000b97c50 R08: 0000000000000007 R09: 0000000000000000 [ 759.125207][ T49] R10: fffffffffffffff1 R11: 0000000000000000 R12: ffff888030454000 [ 759.133191][ T49] R13: dffffc0000000000 R14: fffffffffffffff1 R15: ffff888030454040 [ 759.141932][ T49] FS: 0000000000000000(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 759.150913][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.157781][ T49] CR2: 000000110c32051d CR3: 00000000781e4000 CR4: 0000000000350ef0 [ 759.166360][ T49] Call Trace: [ 759.169633][ T49] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 759.172565][ T49] ? __pfx_io_ring_exit_work+0x10/0x10 [ 759.178076][ T49] ? try_to_wake_up+0x160/0x1870 [ 759.183346][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.189236][ T49] ? debug_object_deactivate+0x1ec/0x3a0 [ 759.196252][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.201923][ T49] ? rcu_is_watching+0x12/0xc0 [ 759.206769][ T49] process_one_work+0x9cf/0x1b70 [ 759.211757][ T49] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 759.217503][ T49] ? __pfx_process_one_work+0x10/0x10 [ 759.222881][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.229343][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.235030][ T49] ? assign_work+0x1a0/0x250 [ 759.239626][ T49] worker_thread+0x6c8/0xf10 [ 759.244273][ T49] ? __pfx_worker_thread+0x10/0x10 [ 759.249419][ T49] kthread+0x3c5/0x780 [ 759.253486][ T49] ? __pfx_kthread+0x10/0x10 [ 759.258743][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.264404][ T49] ? rcu_is_watching+0x12/0xc0 [ 759.269175][ T49] ? __pfx_kthread+0x10/0x10 [ 759.273810][ T49] ret_from_fork+0x56d/0x730 [ 759.278400][ T49] ? __pfx_kthread+0x10/0x10 [ 759.283000][ T49] ret_from_fork_asm+0x1a/0x30 [ 759.289180][ T49] [ 759.292196][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 759.299488][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 759.308770][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 759.318848][ T49] Workqueue: iou_exit io_ring_exit_work [ 759.324411][ T49] Call Trace: [ 759.327708][ T49] [ 759.330632][ T49] dump_stack_lvl+0x3d/0x1f0 [ 759.335238][ T49] vpanic+0x6e8/0x7a0 [ 759.339236][ T49] ? __pfx_vpanic+0x10/0x10 [ 759.343757][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.349399][ T49] ? io_ring_exit_work+0x3fc/0x10f0 [ 759.354606][ T49] panic+0xca/0xd0 [ 759.358347][ T49] ? __pfx_panic+0x10/0x10 [ 759.362795][ T49] ? check_panic_on_warn+0x1f/0xb0 [ 759.367909][ T49] check_panic_on_warn+0xab/0xb0 [ 759.372846][ T49] __warn+0xf6/0x3c0 [ 759.376737][ T49] ? io_ring_exit_work+0x3fc/0x10f0 [ 759.381947][ T49] report_bug+0x3c3/0x580 [ 759.386295][ T49] ? io_ring_exit_work+0x3fc/0x10f0 [ 759.391517][ T49] handle_bug+0x184/0x210 [ 759.395851][ T49] exc_invalid_op+0x17/0x50 [ 759.400356][ T49] asm_exc_invalid_op+0x1a/0x20 [ 759.405206][ T49] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 759.411020][ T49] Code: 0f 85 0a 0b 00 00 48 8b 05 61 63 4a 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 df e6 e4 fc 4d 85 f6 79 12 e8 65 eb e4 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 53 eb e4 fc 48 8b 74 24 60 [ 759.430632][ T49] RSP: 0018:ffffc90000b97a90 EFLAGS: 00010293 [ 759.436695][ T49] RAX: 0000000000000000 RBX: ffff8880304546c8 RCX: ffffffff84d6aeb1 [ 759.444663][ T49] RDX: ffff88801f2bda00 RSI: ffffffff84d6aebb RDI: 0000000000000007 [ 759.452626][ T49] RBP: ffffc90000b97c50 R08: 0000000000000007 R09: 0000000000000000 [ 759.460589][ T49] R10: fffffffffffffff1 R11: 0000000000000000 R12: ffff888030454000 [ 759.468553][ T49] R13: dffffc0000000000 R14: fffffffffffffff1 R15: ffff888030454040 [ 759.476531][ T49] ? io_ring_exit_work+0x3f1/0x10f0 [ 759.481741][ T49] ? io_ring_exit_work+0x3fb/0x10f0 [ 759.486970][ T49] ? __pfx_io_ring_exit_work+0x10/0x10 [ 759.492448][ T49] ? try_to_wake_up+0x160/0x1870 [ 759.497391][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.503030][ T49] ? debug_object_deactivate+0x1ec/0x3a0 [ 759.508686][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.514324][ T49] ? rcu_is_watching+0x12/0xc0 [ 759.519101][ T49] process_one_work+0x9cf/0x1b70 [ 759.524052][ T49] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 759.529702][ T49] ? __pfx_process_one_work+0x10/0x10 [ 759.535075][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.540720][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.546352][ T49] ? assign_work+0x1a0/0x250 [ 759.550943][ T49] worker_thread+0x6c8/0xf10 [ 759.555557][ T49] ? __pfx_worker_thread+0x10/0x10 [ 759.560668][ T49] kthread+0x3c5/0x780 [ 759.564736][ T49] ? __pfx_kthread+0x10/0x10 [ 759.569329][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.574963][ T49] ? rcu_is_watching+0x12/0xc0 [ 759.579738][ T49] ? __pfx_kthread+0x10/0x10 [ 759.584327][ T49] ret_from_fork+0x56d/0x730 [ 759.588917][ T49] ? __pfx_kthread+0x10/0x10 [ 759.593509][ T49] ret_from_fork_asm+0x1a/0x30 [ 759.598353][ T49] [ 759.601574][ T49] Kernel Offset: disabled [ 759.605892][ T49] Rebooting in 86400 seconds..