last executing test programs: 17m15.601901756s ago: executing program 3 (id=184): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db1", 0x4a}, {&(0x7f0000001400)="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", 0xf0f}], 0x2}, 0x0) 17m15.302791433s ago: executing program 3 (id=186): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x6, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000003c0)={0xc, {0xc, "ff69bbfd181f5fd1a2e39a78"}}, 0x12) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x2000, 0x3ffffff, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x29, 0x1a, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000020000000900020073797a3100000000050001000700000004000780fd35e4ea8bbd574f824a99141681b578d5f3fe2f1e559ac3d721f6c775621d3f54f7e851c931dbdb1aa770132e0faeb61e6ccfbd1175f07df798d4bb92f9743d23938201c41a217139baaf25f3f6f43f5b7b111900a5e6043f2bca326c0b0daf2408eed48f4dadb4a188ee49eb9c7c62e0762c5adc3d9a8b37d86cab270420d5"], 0x2c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) r8 = epoll_create1(0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x20000000}) epoll_create1(0x0) 17m12.490152108s ago: executing program 3 (id=189): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r1, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80064d12, &(0x7f0000000000)) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111b80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x9, 0x2, 0x0, 0x2, 0x1, 0xfff}, 0x20) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002680)=[@cswp={0x58, 0x114, 0x7, {{0x3a68, 0x6}, 0x0, 0x0, 0x8, 0x10001, 0x0, 0x7ff, 0x49, 0x800000000000005}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x81}}], 0x70, 0x20048000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0x7ffc0002}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x111) ioctl$TIOCEXCL(r1, 0x540c) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r5, 0x97, "9b76f710d7e1a722b1dc7d724b08a23eca72808eec67897aab096eeff33fe7990e7ce1fc5f050e2151c80c3885bf97de0ef022eefb9a2ebfbb277f889d7cd9ab644b377bc476339830561b635a6e07e4a093f380b7291184d42fa83978d2d44dae2d513c9b51429f04fcf2a5a297d0379ecdc75e8197ccd07e03a8fd16ed85c8013075b1223a8859f1bcfb4f4fbb0f41fc1bbf509e75d7"}, &(0x7f00000003c0)=0x9f) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000020000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=0x1, @ANYRES32=r7, @ANYBLOB='.\x00\x00\x00(\x00\x00\x00', @ANYBLOB="2b145c4808"], 0x20) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) 17m2.794857252s ago: executing program 3 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0xc0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r4) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) setsockopt$sock_int(r3, 0x1, 0x3e, 0x0, 0x0) bind$llc(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x39}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) unshare(0x2c000680) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = fcntl$dupfd(r7, 0x0, r7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0xd7, 0x1, &(0x7f0000000140)=""/67, 0x43}, &(0x7f0000000200)=0xfffffd5c) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x5, 0x2, 0x9, 0xb588, 0x5, 0x7fffffff, 0x3, 0x7, 0x7, 0x80000000, 0x8, 0x9, 0x2, 0xd24, 0x8, 0x4002, 0x0, 0x99, 0x15b, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x7, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x9, 0x3ca4, 0xfffffffe, 0x40, 0x8000000, 0x0, 0x6, 0x9, 0x10000, 0x0, 0x7, 0x0, 0x5, 0x0, 0xf, 0x8, 0x1, 0x31c, 0xd, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xb0, 0x1, 0xecc4, 0xc, 0x2559, 0x8000, 0xb647, 0xffffff80, 0x0, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x6, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x87, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0x0, 0x3, 0x6, 0x80000005, 0x40007, 0x3, 0x401, 0x100, 0x0, 0xc, 0x0, 0x80000000]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17m1.28127106s ago: executing program 3 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000280), 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000440)="a415", 0x2, 0x4404c06d, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x2}}, './file1\x00'}) 16m59.272505328s ago: executing program 3 (id=213): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) 16m43.468708216s ago: executing program 32 (id=213): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) 6m43.602440462s ago: executing program 0 (id=1387): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x480, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r4, 0x9) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) 6m43.369996112s ago: executing program 0 (id=1388): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x77, &(0x7f0000000d80)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x5, 0x80, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\\'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x3, 0xfff6, 0xd}, {0x6, 0x24, 0x1a, 0x7, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x80, 0xffc0}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x3, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0xf9, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0xf8, 0x8}}}}}}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x200, 0x7, 0x6, 0xf6, 0x40, 0x9c}, 0x17, &(0x7f0000000e80)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x8, 0xab, 0x4, 0x9}]}, 0x2, [{0x5c, &(0x7f0000000ec0)=@string={0x5c, 0x3, "5481cf23a2e5b16e2cb679c281da2fa7360e3755e22707952c5a5769235cc5c492be607dab0a257beea86da70dd0a07a303909dba80d70ca619999925f094a8861b9fa6e704258b0f6de5679c93413b3e557582d26988b9eb57c"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x45, @string={0x45, 0x3, "8801071151fa9a204c38629b173d8759b436a21a6b460b53025e49c276a22b366a654c11bbc642de78c03e477089e5f5e1fa0f35b9d0e2267b0110cc0336f29bb9dcc0"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xf, 0x87, "4d0213bd18039af5d1cc81d87f1eca2c3f0c48ce2bcd7a6d5656ddf9768ac7d0063955f4d4124376cbb35d70ebe642299f815f376c4edb2217483cb6cac1f026058d91894b4288bcaa2e91903d4afb42caff967b8eed0bc891d50a7939ab92727297f43e43412ade7185d36f748b2a4954331ef8b983130681e3889c12db83a97fbdb75fa0b974"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x1, '3'}, &(0x7f0000000300)={0x20, 0x82, 0x2, "1184"}, &(0x7f0000000340)={0x20, 0x83, 0x1, 'I'}, &(0x7f0000000380)={0x20, 0x84, 0x1, "03"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "c793bd"}}) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000540)={0x0, 0x10, 0xfe, {0xfe, 0x6, "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"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f00000006c0)={0x0, 0xf, 0xc1, {0x5, 0xf, 0xc1, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "7262bafd27d64bad91b40370cd19e18b"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xd, 0x1}, @generic={0x97, 0x10, 0xa, "d6afa03869bcbb382fbd13c2a111a20f5fb386a7484f617db3d1460641edf2a21b10fd3fc837a2252cb459c440a7938da44e10897a453afba554238e5e3e3721d6a9d6f3f2306bc1eb5cf4d000d4d912781dd4ba62264231dd411959492cdeffd011f0b4d5b50aaf05dae6dc64e0e795d2ea1cbe14257aaa7384987c206036ee1472f5b99ae8e6be86c21e91f699f0a31f9501d5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x86, 0xb}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8a, 0x18, 0x7, 0x0, "e6f8f47c", "6fc8e7be"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x9d, 0x5, 0xa, 0xfffa, 0xfff4}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000880)={0x0, 0xb, 0x45, "bef69a2b9bbfa2fc0a75f1101183a2447d3825136cb2e1d7eb434762f70ebb572150cf2b05f98bea920914264fe35eb42c6bd6d7d308484ed34b3ea17932f3b3eed1ba4051"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x100, 0x4, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "4fa2"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "e334"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x7}}) 6m39.932417648s ago: executing program 0 (id=1393): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000005700)='.\x00', &(0x7f0000005740)='system.posix_acl_default\x00', &(0x7f0000005780)=ANY=[@ANYBLOB="0200000001000500000014000400070000000804100002000000000020"], 0x24, 0x1) 6m37.592617502s ago: executing program 0 (id=1398): syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x40) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x105db, &(0x7f0000020c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6m34.284122912s ago: executing program 0 (id=1407): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x9}}) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_getparam(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m24.271773154s ago: executing program 0 (id=1428): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1, 0x80}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x1b, 0x13, &(0x7f0000002440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0xb, 0x6c8ab2716531d9b8, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xc, 0xa, 0x0, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002500)='syzkaller\x00', 0x9, 0x1f, &(0x7f0000002540)=""/31, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x8, &(0x7f0000002580)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x2, 0x7, 0x1430, 0x592}, 0x10, 0x0, r2, 0x6, 0x0, &(0x7f0000002600)=[{0x0, 0x5, 0x7}, {0x2, 0x2, 0x4, 0x1}, {0x3, 0x2, 0x9, 0x7}, {0x1, 0x2, 0x1, 0x7}, {0x2, 0x2, 0x1, 0x1}, {0x5, 0x23, 0xc, 0x8}], 0x10, 0x60}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x401, 0x1c, &(0x7f00000001c0)=""/28, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x0, 0xfffffff7}, 0x10, 0x617f, r3, 0x3, &(0x7f0000002740)=[r2, r2], &(0x7f0000002780)=[{0x1, 0x3, 0x3, 0x1}, {0x3, 0x1, 0x3, 0xa}, {0x4, 0x2, 0xa, 0x1}], 0x10, 0x6}, 0x94) 6m23.007241774s ago: executing program 33 (id=1428): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1, 0x80}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x1b, 0x13, &(0x7f0000002440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0xb, 0x6c8ab2716531d9b8, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xc, 0xa, 0x0, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002500)='syzkaller\x00', 0x9, 0x1f, &(0x7f0000002540)=""/31, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x8, &(0x7f0000002580)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x2, 0x7, 0x1430, 0x592}, 0x10, 0x0, r2, 0x6, 0x0, &(0x7f0000002600)=[{0x0, 0x5, 0x7}, {0x2, 0x2, 0x4, 0x1}, {0x3, 0x2, 0x9, 0x7}, {0x1, 0x2, 0x1, 0x7}, {0x2, 0x2, 0x1, 0x1}, {0x5, 0x23, 0xc, 0x8}], 0x10, 0x60}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x401, 0x1c, &(0x7f00000001c0)=""/28, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x0, 0xfffffff7}, 0x10, 0x617f, r3, 0x3, &(0x7f0000002740)=[r2, r2], &(0x7f0000002780)=[{0x1, 0x3, 0x3, 0x1}, {0x3, 0x1, 0x3, 0xa}, {0x4, 0x2, 0xa, 0x1}], 0x10, 0x6}, 0x94) 30.030788479s ago: executing program 4 (id=2043): syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file2\x00', 0x94, &(0x7f0000000240)=ANY=[], 0x1, 0xdac, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080), 0x800000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@ignoreqv}, {@cache_none}, {@access_uid={'access', 0x3d, r1}}, {@nodevmap}, {@access_any}, {@noextend}, {@nodevmap}, {@ignoreqv}], [{@pcr={'pcr', 0x3d, 0x32}}]}}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 21.946573049s ago: executing program 2 (id=2050): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000040)=0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r4, &(0x7f0000000300)="74c979dec5b0d1c9e79e319b3da1af0bb651e3f691e8857e6e6b835f2660fb4933c055cc3b599b80c66a8f80ae2e75141dcdbf5352cfb4e24a3b6c41e8521de7c6b53bb4f1ebc8d4a13e6a266d2bc5676dd4d8ddc87055669b6be7a74285ea37da5ba38b29b08172c69e82310f0876b53766df0d6df106af52155aae4935febe4f1482e11a6652b080add9a04bea2ca99eaca56db15384d7737e82f098c964bee66be79933178c5ac617dbeef7ad35c913aa52c1da35fbada28de2880d0c297ad8ce4c0e4cc9d35710c38d79", 0xcc) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x20000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) syz_read_part_table(0x601, &(0x7f0000000000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="080026040a0001"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x80c0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000) 21.400946704s ago: executing program 4 (id=2051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e23, 0xfffffff6, @mcast1, 0x200002}, 0x1c, &(0x7f00000004c0), 0x0, &(0x7f0000000580)}, 0x0) 17.237308572s ago: executing program 2 (id=2055): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) timer_create(0x1, 0x0, &(0x7f0000001400)) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x4000000000}, {0xffffffff}]}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption}]}, 0x3, 0x45c, &(0x7f0000000580)="$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") (rerun: 32) 14.707168592s ago: executing program 5 (id=2056): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c0000001200010025bd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000002880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2c5d97b0c0f6044}, 0xc, &(0x7f0000002840)={&(0x7f00000028c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="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"], 0x1260}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) socket$packet(0x11, 0x3, 0x300) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)={[{@gid}, {@cruft, 0x0}, {@unhide}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x6}}, {@map_off, 0x41}, {@session={'session', 0x3d, 0x61}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}._f[\x0f\x13\x89\xfbI\x9e\x9cT\x95l\xcb\xe9\r\xa4T\x84\x1b\xed_Y^z\x9a\x80\x11\x998\xcc\x81>\x1d\xbeL\x8cD[.\xf7//\t0$\xf0\xa2\x97\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000083c0)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000000300)="ff1a799c6bad602c992d075c8d02c92fe14b638c197c2f34129b5fb62471132f279be933f5d6c0823bc2e84d6176fcb932de752f6a291a4f5de6d4ad3ee2b434085d8b019e76327ce5b81f6eab7957cc", 0x50}, {&(0x7f0000000380)="cec03f32b5fd46bb09c0ebdf9b9f49532d98253b7cc328d7807be7c9686b99afb6122871f8d1f4ddebc5ce1835a815d08b3de954d138dae1f148e9b7e92c2b18f64e7d9730", 0x45}, {&(0x7f0000003b40)="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", 0x1000}, {&(0x7f0000004b40)="903cac6701ef66a7bd25495c90ac38422135f2925880d94ab63e657712ab2fbe873fa06b6af5fe280f05d0032ba4e596ce2d0d1370247f43a0187035d5273bae164b92ac8989b9ff98837eab08ab41fda379a5073298964776d06c00c48e5ce3f3d2fc6b22c01ddd076f1b06a272747c853322b6b8f6b17dc146921f5473f05e8b9147b7a07b53639cbad544525e9b8dae133a4afa3d111293644a905cab577e844a786c6a2a2c90aeea75e7779b309769e0aea5a44eecc621962434b2254b60c2", 0xc1}, {&(0x7f0000004c40)="e63f20654e81fc67dd97372e9ec89d3c4c9764a42f221f9c6395cc9d5d8612d23e98e7b4e15270d60886c1563aabc9051c606c688eb9e3fbd23d7b9ffe4a19d1bc0c6b97c2b92fd8b28da36687e8df0c6357f1487994de66031e9f77ac73f05af1214972a7bb77b5cfd5b9e4916891fad68537ae8fe92b66dcb9934c68f8eaf0bf812057121d8971dc490d94e25a49414effd78eaef8130f12d68e53d526653222c73821f7d19b2005dd8ddf10e1697f90bf9b3ee5bf07de3c86407bfa2dfc63fb0913f8318d21f25df63a842242d3f1ffefdcfc6086b0e1796764437b928ed3e87d26f811854143bbafec7453d5352824261486f2dc3dfc", 0xf8}, {&(0x7f0000004d40)="9d7f8d18c0490926aa983488f9f0a607c8894f8295375795e54571d858884c3dd0aee3c229885d42e570e5bd161e1c8c50ffabd7cd2f46703fa5942a0bbdebdf71a2ddae0e2fdf5888b1455007d106aab939", 0x52}, {&(0x7f0000004dc0)="063b6aef811b5e92a7dc8928d2ce7d5c96688de3bda43ecf8e716d4647694547d8212d4927ce38a6b308c331e840e2e6c138341b4e6fb7a3c89ce8b31e6f93c81d2947dbbdc3f673f6a90b9dd18ec24b31b4a794b3f754a3bc4b18af88c7b9bdb2fb11ef5f5c48aecb359c141fb04dd3758ee7", 0x73}, {&(0x7f0000004e40)="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", 0x1000}], 0x8, &(0x7f0000006100)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r7, r4]}}], 0xb8, 0x20000000}}], 0x1, 0x4004000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r9 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x80) r11 = openat$cgroup_procs(r10, 0x0, 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000001c00), 0x12) syz_open_dev$tty1(0xc, 0x4, 0x1) 12.860410936s ago: executing program 2 (id=2058): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=@deltfilter={0x30, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) 12.797263299s ago: executing program 4 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0x8, 0xe}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) r8 = eventfd(0x80000001) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2) r9 = syz_open_procfs(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r10, r10) setresuid(r10, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r12, 0x407, 0x4) read$FUSE(r11, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r12, &(0x7f0000000180)={0x90, 0xfffffffffffffffe, r13, {0x1, 0x0, 0x800000, 0x2, 0x4, 0x0, {0x4, 0x0, 0x5, 0x1, 0xffffffffffffffff, 0x100000001, 0xffffffff, 0x5, 0x6e5, 0xc000, 0x4, r14, r15, 0x9, 0x4}}}, 0x90) sendmmsg$unix(r2, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="77518332de49c65b873ea5d756c8b7bc8e", 0x11}, {&(0x7f0000000080)="58e6bb63f0ff23e515a39b36f7bd86d2442015976af23f183c9c754cd300dd8fa52ec9622554600d3c819e6a941a5bbd24600da414334064872dc1fa175b0ce48040ba07499892f9a371833f3033c1", 0x4f}, {&(0x7f0000000180)="7d90db4f6869a69ab4e8f4620f1a92957bd2bfd405922bd6fc4c0c18ddcd5cf58852412dcef4904175b547f7367dba8f298cfedd523aa7c028ba20a34f13ea99e2672443f499dc3c6f", 0x49}, {&(0x7f00000002c0)="1d2a9bef4e850af2f82c3ebdaafaeff972c6faf51bf36374d3cac874e8984b15efc39ac2cf82a52aaae9fd050786a5b050f37abb8329a855f23302c137cd41", 0x3f}, {&(0x7f0000000540)="c670ece5536baec44ba55dab6953bedb65bb81f8e25ea1a0510b478c4ea6a6167ed82fb6acb7d51c562214ea0a611dfdfa3ff9267f2b12e6ee3b504f2a2e69836a02628d59b6e91b6daeffda923f2292953f38b8dd78b385ef2b204a043efb21c321681a441648e98240d991e3e29bee809982aafea78eb45acfd94fc9d75a263edc8c3ac6bffd295e981205c74a2f13a80ca9a6305f14959a", 0x99}], 0x5, &(0x7f0000000740)=[@rights={{0x2c, 0x1, 0x1, [r8, r8, r1, r5, r8, r8, 0xffffffffffffffff]}}], 0x30, 0x84}}, {{&(0x7f0000000800)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e, &(0x7f0000000bc0), 0x0, &(0x7f0000001440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r6, r8, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [r8, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x30, 0x1, 0x1, [r5, r8, r7, r7, r2, r7, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, r10, r15}}}], 0x158, 0x40000}}], 0x2, 0x4040000) socket(0x80000000000000a, 0x2, 0x0) preadv(r9, &(0x7f0000000100), 0x0, 0x5b, 0x100) 10.119085075s ago: executing program 1 (id=2063): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 9.731989165s ago: executing program 2 (id=2064): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) io_setup(0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = getpgid(0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) 9.684968213s ago: executing program 5 (id=2065): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @empty, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x7, 0x1, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @private1}}}}, 0x0) 9.363364647s ago: executing program 1 (id=2066): socket$inet6(0xa, 0x3, 0x88) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x18, r4, 0x301, 0x70bd25, 0x25dfdbfe, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x805}, 0x90) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}]}}]}, 0x40}}, 0x24040084) 8.053345991s ago: executing program 5 (id=2067): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 7.758813605s ago: executing program 4 (id=2068): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 7.544634495s ago: executing program 1 (id=2069): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x3, 0x6, 0x80, "aa20235fc773e1fc9e627f3d5179f677b344b2b7a3a773a6d74574c9c5992ce1", 0x34343452}) 7.381057707s ago: executing program 2 (id=2070): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x841) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) close_range(r4, 0xffffffffffffffff, 0x0) 7.380617711s ago: executing program 5 (id=2071): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.949045038s ago: executing program 1 (id=2072): socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) fallocate(r3, 0x0, 0x42d7, 0x4) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000340)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 6.075778182s ago: executing program 2 (id=2073): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 3.955505557s ago: executing program 1 (id=2074): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r2, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r3], 0x7) poll(0x0, 0x0, 0x8) syz_open_dev$usbfs(0x0, 0x7, 0x1) 3.418357025s ago: executing program 5 (id=2075): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = socket$inet(0x2, 0xa, 0x629d) bind$inet(r3, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.977787276s ago: executing program 1 (id=2076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) 1.774921715s ago: executing program 4 (id=2077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x800) syz_open_procfs(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14, 0x3ed, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3ed, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x48851) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xd06b, 0x8, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000f00)={r5}) connect$inet6(r4, 0x0, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000380)=""/185, &(0x7f0000000440)=0xb9) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) 1.724924843s ago: executing program 5 (id=2078): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x224, 0xc, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x208, 0x3, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x190, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "cc5ca22e2f05d5eeb67e218a1fe76ea334b41a2e3e54c818065b86d6733cc197f59200438a6a26f448fb5ee4c7a9bdc08d42aa0afbe7518c774ad1386e36e6ea4cca59709880d472398014ae46e0c19f89e7a371920dcdb0d4"}, @NFTA_DATA_VALUE={0x69, 0x1, "21fb531cc5583d3a5d7f37217744548acb2e7aa187b27007965bbeb91cd3f340fdc15f70c99e61135c6eed71e04e3710c315d6fa611db07d54b63fb7869f57bc8a613d8298529055f892b2c201babf412dfe6fbc33fcb324eb2843ef1251a124331cde6995"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x24c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 0s ago: executing program 4 (id=2079): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0xa3d, 0xa, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x2, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @tfcpad={0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x4810) kernel console output (not intermixed with test programs): 1080.641590][ T5628] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1081.046798][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1081.046908][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1081.093964][T10318] team0 (unregistering): Port device team_slave_1 removed [ 1081.179792][ T5844] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1081.180953][T10318] team0 (unregistering): Port device team_slave_0 removed [ 1081.390966][ T5844] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1081.390996][ T5844] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.391018][ T5844] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1081.391040][ T5844] usb 6-1: config 1 has no interface number 0 [ 1081.391073][ T5844] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1081.391112][ T5844] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1081.393588][ T5844] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1081.393619][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.393641][ T5844] usb 6-1: Product: syz [ 1081.393657][ T5844] usb 6-1: Manufacturer: syz [ 1081.393673][ T5844] usb 6-1: SerialNumber: syz [ 1081.504234][ T5844] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1081.504294][ T5844] cdc_ncm 6-1:1.1: bind() failure [ 1081.788788][ T5812] usb 6-1: USB disconnect, device number 21 [ 1082.448190][T13930] loop1: detected capacity change from 0 to 2048 [ 1082.549401][T13930] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1082.574207][T13925] loop2: detected capacity change from 0 to 32768 [ 1082.596424][ T9554] udevd[9554]: incorrect nilfs2 checksum on /dev/loop1 [ 1082.618147][T13925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1799 (13925) [ 1082.758105][ T9554] udevd[9554]: incorrect nilfs2 checksum on /dev/loop1 [ 1082.855164][T13925] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1082.855199][T13925] BTRFS info (device loop2): using crc32c checksum algorithm [ 1082.890507][T13938] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1083.120379][T13721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.120761][T13721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.121134][T13721] bridge_slave_0: entered allmulticast mode [ 1083.125136][T13721] bridge_slave_0: entered promiscuous mode [ 1083.203293][T13930] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 1083.226108][T13930] Remounting filesystem read-only [ 1083.387587][T13721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.387955][T13721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.406518][T13721] bridge_slave_1: entered allmulticast mode [ 1083.418939][T13721] bridge_slave_1: entered promiscuous mode [ 1083.821960][T13925] BTRFS info (device loop2): enabling ssd optimizations [ 1083.821992][T13925] BTRFS info (device loop2): turning on async discard [ 1083.822011][T13925] BTRFS info (device loop2): enabling free space tree [ 1083.969614][T13721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.001444][T13721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.139047][T13964] loop5: detected capacity change from 0 to 128 [ 1084.258452][ T5628] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1084.313547][ T5844] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1084.341185][T13721] team0: Port device team_slave_0 added [ 1084.355434][T13721] team0: Port device team_slave_1 added [ 1084.427029][T13721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.427131][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.427163][T13721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.478796][T13721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.478814][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.478859][T13721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.624228][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 1084.626859][ T5844] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1084.626895][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.690807][ T5844] usb 2-1: config 0 descriptor?? [ 1084.747793][ T5844] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1084.795468][T13721] hsr_slave_0: entered promiscuous mode [ 1084.812265][T13721] hsr_slave_1: entered promiscuous mode [ 1084.814788][T13721] debugfs: 'hsr0' already exists in 'hsr' [ 1084.814817][T13721] Cannot create hsr debugfs directory [ 1085.307064][T13970] loop2: detected capacity change from 0 to 512 [ 1085.679348][T13970] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1806: corrupted in-inode xattr: invalid ea_ino [ 1085.679386][T13970] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1085.685717][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1085.685739][ C0] EXT4-fs (loop2): initial error at time 1779593382: ext4_iget_extra_inode:5128: inode 15 [ 1085.685788][ C0] EXT4-fs (loop2): last error at time 1779593382: ext4_iget_extra_inode:5128: inode 15 [ 1085.930554][T13970] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1806: couldn't read orphan inode 15 (err -117) [ 1085.930593][T13970] loop2: lost filesystem error report for type 5 error -117 [ 1086.096352][T13970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.625708][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.630071][ T5844] gspca_sonixj: i2c_w8 err -71 [ 1086.649919][ T5844] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1086.663251][ T5844] usb 2-1: USB disconnect, device number 28 [ 1086.859599][ T5630] Bluetooth: hci2: unexpected event for opcode 0x200d [ 1087.448088][T13982] loop5: detected capacity change from 0 to 16 [ 1087.835335][T13982] erofs (device loop5): mounted with root inode @ nid 36. [ 1088.040951][T13989] loop2: detected capacity change from 0 to 512 [ 1088.649341][T13992] loop1: detected capacity change from 0 to 32768 [ 1088.650506][T13992] btrfs: Deprecated parameter 'usebackuproot' [ 1088.650528][T13992] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1088.651383][T13992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1810 (13992) [ 1088.681936][T13992] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1088.682062][T13992] BTRFS info (device loop1): using crc32c checksum algorithm [ 1088.757718][T13989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.757860][T13989] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.053975][T13988] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1809: iget: bad i_size value: 2533274857506816 [ 1089.127315][ T1128] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1089.127460][T13992] BTRFS error (device loop1): failed to load root extent [ 1089.127494][T13992] BTRFS warning (device loop1): try to load backup roots slot 1 [ 1089.145104][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1089.145484][T13992] BTRFS warning (device loop1): couldn't read tree root [ 1089.145545][T13992] BTRFS warning (device loop1): try to load backup roots slot 2 [ 1089.212099][ T1584] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1089.217467][T13992] BTRFS warning (device loop1): couldn't read tree root [ 1089.217496][T13992] BTRFS warning (device loop1): try to load backup roots slot 3 [ 1089.308502][T13992] BTRFS info (device loop1): rebuilding free space tree [ 1089.406478][T13992] BTRFS info (device loop1): checking UUID tree [ 1089.407130][T13992] BTRFS info (device loop1): enabling ssd optimizations [ 1089.407155][T13992] BTRFS info (device loop1): turning on async discard [ 1089.407174][T13992] BTRFS info (device loop1): enabling free space tree [ 1089.407192][T13992] BTRFS info (device loop1): force clearing of disk cache [ 1089.407212][T13992] BTRFS info (device loop1): enabling auto defrag [ 1089.407229][T13992] BTRFS info (device loop1): trying to use backup root at mount time [ 1089.407249][T13992] BTRFS info (device loop1): use lzo compression, level 1 [ 1089.962812][T14031] FAULT_INJECTION: forcing a failure. [ 1089.962812][T14031] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.962853][T14031] CPU: 1 UID: 0 PID: 14031 Comm: syz.5.1811 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1089.962896][T14031] Tainted: [L]=SOFTLOCKUP [ 1089.962905][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1089.962920][T14031] Call Trace: [ 1089.962929][T14031] [ 1089.962940][T14031] dump_stack_lvl+0xe8/0x150 [ 1089.962977][T14031] should_fail_ex+0x46b/0x600 [ 1089.963014][T14031] should_failslab+0xa8/0x100 [ 1089.963047][T14031] kmem_cache_alloc_noprof+0x87/0x680 [ 1089.963075][T14031] ? __anon_vma_prepare+0x117/0x4a0 [ 1089.963108][T14031] __anon_vma_prepare+0x117/0x4a0 [ 1089.963134][T14031] ? __pte_alloc+0x15e/0x1a0 [ 1089.963174][T14031] do_pte_missing+0x1d63/0x2940 [ 1089.963220][T14031] handle_mm_fault+0xdc2/0x14d0 [ 1089.963246][T14031] ? handle_mm_fault+0xed/0x14d0 [ 1089.963269][T14031] ? __pfx_handle_mm_fault+0x10/0x10 [ 1089.963308][T14031] __get_user_pages+0x16d4/0x2620 [ 1089.963352][T14031] populate_vma_page_range+0x2be/0x3c0 [ 1089.963373][T14031] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1089.963392][T14031] ? lockdep_hardirqs_on+0x7a/0x110 [ 1089.963412][T14031] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1089.963435][T14031] __mm_populate+0x25f/0x390 [ 1089.963455][T14031] ? __pfx___mm_populate+0x10/0x10 [ 1089.963473][T14031] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1089.963492][T14031] ? lockdep_hardirqs_on+0x7a/0x110 [ 1089.963509][T14031] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1089.963529][T14031] do_mlock+0x646/0x750 [ 1089.963553][T14031] ? __pfx_do_mlock+0x10/0x10 [ 1089.963580][T14031] ? fput+0xa0/0xd0 [ 1089.963599][T14031] ? ksys_write+0x248/0x270 [ 1089.963624][T14031] ? __pfx_ksys_write+0x10/0x10 [ 1089.963651][T14031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.963673][T14031] __x64_sys_mlock+0x60/0x70 [ 1089.963701][T14031] do_syscall_64+0x15f/0x560 [ 1089.963721][T14031] ? trace_irq_disable+0x3b/0x140 [ 1089.963743][T14031] ? clear_bhb_loop+0x40/0x90 [ 1089.963764][T14031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.963784][T14031] RIP: 0033:0x7f682ba1ce59 [ 1089.963802][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.963819][T14031] RSP: 002b:00007f6829c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1089.963844][T14031] RAX: ffffffffffffffda RBX: 00007f682bc95fa0 RCX: 00007f682ba1ce59 [ 1089.963858][T14031] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 1089.963870][T14031] RBP: 00007f6829c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.963882][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.963894][T14031] R13: 00007f682bc96038 R14: 00007f682bc95fa0 R15: 00007ffcea5eb748 [ 1089.963924][T14031] [ 1091.023829][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.130589][ T5625] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1091.399611][T14036] netlink: 'syz.5.1813': attribute type 6 has an invalid length. [ 1091.464036][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1813'. [ 1091.680481][T14048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1814'. [ 1093.641231][T14060] loop5: detected capacity change from 0 to 32768 [ 1093.642192][T14060] btrfs: Deprecated parameter 'usebackuproot' [ 1093.642209][T14060] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1093.652994][T14060] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1817 (14060) [ 1093.669233][T14060] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1093.669265][T14060] BTRFS info (device loop5): using crc32c checksum algorithm [ 1093.876182][ T1429] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1093.876327][T14060] BTRFS error (device loop5): failed to load root extent [ 1093.876364][T14060] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1093.877868][ T1429] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1093.877995][T14060] BTRFS warning (device loop5): couldn't read tree root [ 1093.878018][T14060] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1093.878399][ T1429] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1093.878488][T14060] BTRFS warning (device loop5): couldn't read tree root [ 1093.878541][T14060] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1093.993194][T14060] BTRFS info (device loop5): rebuilding free space tree [ 1094.645018][T14060] BTRFS info (device loop5): checking UUID tree [ 1094.650040][T14060] BTRFS info (device loop5): enabling ssd optimizations [ 1094.650067][T14060] BTRFS info (device loop5): turning on async discard [ 1094.650086][T14060] BTRFS info (device loop5): enabling free space tree [ 1094.650104][T14060] BTRFS info (device loop5): force clearing of disk cache [ 1094.650122][T14060] BTRFS info (device loop5): enabling auto defrag [ 1094.650141][T14060] BTRFS info (device loop5): trying to use backup root at mount time [ 1094.650161][T14060] BTRFS info (device loop5): use lzo compression, level 1 [ 1094.696842][T14048] loop2: detected capacity change from 0 to 32768 [ 1094.826047][T14048] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1814 (14048) [ 1095.294339][ T38] audit: type=1800 audit(1779593391.080:5596): pid=14086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1817" name="file0" dev="loop5" ino=260 res=0 errno=0 [ 1096.236474][ T8879] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1098.861913][T14120] FAULT_INJECTION: forcing a failure. [ 1098.861913][T14120] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.861943][T14120] CPU: 1 UID: 0 PID: 14120 Comm: syz.5.1823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1098.861965][T14120] Tainted: [L]=SOFTLOCKUP [ 1098.861971][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1098.861981][T14120] Call Trace: [ 1098.861987][T14120] [ 1098.861994][T14120] dump_stack_lvl+0xe8/0x150 [ 1098.862017][T14120] should_fail_ex+0x46b/0x600 [ 1098.862042][T14120] should_failslab+0xa8/0x100 [ 1098.862064][T14120] kmem_cache_alloc_noprof+0x87/0x680 [ 1098.862083][T14120] ? skb_clone+0x212/0x3a0 [ 1098.862104][T14120] skb_clone+0x212/0x3a0 [ 1098.862126][T14120] __netlink_deliver_tap+0x424/0x8b0 [ 1098.862155][T14120] ? netlink_deliver_tap+0x2e/0x1b0 [ 1098.862174][T14120] netlink_deliver_tap+0x19c/0x1b0 [ 1098.862192][T14120] netlink_sendskb+0x68/0x140 [ 1098.862219][T14120] netlink_rcv_skb+0x2b6/0x4b0 [ 1098.862236][T14120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1098.862259][T14120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1098.862286][T14120] ? netlink_deliver_tap+0x2e/0x1b0 [ 1098.862303][T14120] ? netlink_deliver_tap+0x2e/0x1b0 [ 1098.862323][T14120] genl_rcv+0x28/0x40 [ 1098.862342][T14120] netlink_unicast+0x780/0x920 [ 1098.862375][T14120] netlink_sendmsg+0x813/0xb40 [ 1098.862399][T14120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.862419][T14120] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1098.862443][T14120] ? aa_sock_msg_perm+0x122/0x200 [ 1098.862461][T14120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.862478][T14120] sock_sendmsg_nosec+0x112/0x150 [ 1098.862501][T14120] ____sys_sendmsg+0x55c/0x870 [ 1098.862523][T14120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.862546][T14120] ? import_iovec+0x73/0xa0 [ 1098.862565][T14120] ___sys_sendmsg+0x2a5/0x360 [ 1098.862581][T14120] ? __lock_acquire+0x6b5/0x2d10 [ 1098.862605][T14120] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.862648][T14120] ? __fget_files+0x2a/0x420 [ 1098.862683][T14120] ? __fget_files+0x3a6/0x420 [ 1098.862708][T14120] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1098.862728][T14120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1098.862753][T14120] ? __pfx_ksys_write+0x10/0x10 [ 1098.862781][T14120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.862799][T14120] do_syscall_64+0x15f/0x560 [ 1098.862815][T14120] ? trace_irq_disable+0x3b/0x140 [ 1098.862835][T14120] ? clear_bhb_loop+0x40/0x90 [ 1098.862855][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.862871][T14120] RIP: 0033:0x7f682ba1ce59 [ 1098.862891][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.862905][T14120] RSP: 002b:00007f6829c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.862922][T14120] RAX: ffffffffffffffda RBX: 00007f682bc95fa0 RCX: 00007f682ba1ce59 [ 1098.862934][T14120] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1098.862945][T14120] RBP: 00007f6829c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.862955][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.862965][T14120] R13: 00007f682bc96038 R14: 00007f682bc95fa0 R15: 00007ffcea5eb748 [ 1098.862990][T14120] [ 1099.621315][T14126] loop5: detected capacity change from 0 to 32768 [ 1099.655086][T14126] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1099.847161][T14126] netlink: 'syz.5.1825': attribute type 9 has an invalid length. [ 1099.847188][T14126] netlink: 'syz.5.1825': attribute type 7 has an invalid length. [ 1099.847202][T14126] netlink: 'syz.5.1825': attribute type 8 has an invalid length. [ 1099.848599][T14126] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1825'. [ 1100.608815][T14133] loop1: detected capacity change from 0 to 4096 [ 1100.631136][T14133] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1100.631156][T14133] NILFS (loop1): trying rollback from an earlier position [ 1100.744463][T14133] NILFS (loop1): recovery complete [ 1100.755592][T14134] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1102.081561][ T5630] Bluetooth: hci3: unexpected cc 0x0c2d length: 65 > 4 [ 1102.081596][ T5630] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 1102.467285][ T8879] ocfs2: Unmounting device (7,5) on (node local) [ 1102.962061][T14141] netlink: 'syz.5.1826': attribute type 10 has an invalid length. [ 1103.467186][T14141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.558973][T14141] team0: Port device bond0 added [ 1103.910176][T14149] loop5: detected capacity change from 0 to 128 [ 1103.958809][T14149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1103.958926][T14149] System zones: 1-3, 19-19, 35-36 [ 1104.039913][T14149] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1104.051377][T14149] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.351149][ T8879] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1104.813494][T14160] loop1: detected capacity change from 0 to 1024 [ 1104.830928][T14160] hfsplus: bad catalog entry used to create inode [ 1104.831023][T14160] hfsplus: failed to load root directory [ 1106.891523][T13721] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1107.765720][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1107.784275][T13721] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1107.896486][T14162] loop4: detected capacity change from 0 to 2048 [ 1108.006788][T14162] loop4: p1 p2 p3 [ 1108.006788][T14162] p1: [ 1108.097912][T14162] loop4: p1 size 16779263 extends beyond EOD, truncated [ 1108.158358][T14162] loop4: p2 size 458752 extends beyond EOD, truncated [ 1108.185044][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1108.232660][T14162] loop4: p3 start 3036741376 is beyond EOD, truncated [ 1108.325706][T13721] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1108.397716][T14174] loop5: detected capacity change from 0 to 136 [ 1108.600047][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1108.647849][T13721] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1108.922032][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1109.937057][T13721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.009233][T13721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.141693][T10320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.141817][T10320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.386339][ T5630] Bluetooth: hci0: unexpected cc 0x0c2d length: 65 > 4 [ 1111.386376][ T5630] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 1111.714410][T10320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.724660][T10320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.639633][ T5630] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1113.711890][T14229] loop2: detected capacity change from 0 to 1024 [ 1113.768439][T14229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1113.890809][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1846'. [ 1113.898233][T14229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.310484][T14229] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 1114.494688][ T5630] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1114.596221][T14244] loop5: detected capacity change from 0 to 32768 [ 1114.597422][T14244] btrfs: Deprecated parameter 'usebackuproot' [ 1114.597444][T14244] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1114.598733][T14244] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1848 (14244) [ 1114.639327][T14244] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1114.639363][T14244] BTRFS info (device loop5): using crc32c checksum algorithm [ 1114.937967][ T1584] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1114.938131][T14244] BTRFS error (device loop5): failed to load root extent [ 1114.938176][T14244] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1114.939558][T10314] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1114.947282][T14244] BTRFS warning (device loop5): couldn't read tree root [ 1114.947306][T14244] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1114.950321][T10314] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1114.950456][T14244] BTRFS warning (device loop5): couldn't read tree root [ 1114.950477][T14244] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1115.022816][T14244] BTRFS info (device loop5): rebuilding free space tree [ 1115.179188][T14244] BTRFS info (device loop5): checking UUID tree [ 1115.180072][T14244] BTRFS info (device loop5): enabling ssd optimizations [ 1115.180100][T14244] BTRFS info (device loop5): turning on async discard [ 1115.180120][T14244] BTRFS info (device loop5): enabling free space tree [ 1115.180139][T14244] BTRFS info (device loop5): force clearing of disk cache [ 1115.180157][T14244] BTRFS info (device loop5): enabling auto defrag [ 1115.180176][T14244] BTRFS info (device loop5): trying to use backup root at mount time [ 1115.180196][T14244] BTRFS info (device loop5): use lzo compression, level 1 [ 1115.419674][T14275] FAULT_INJECTION: forcing a failure. [ 1115.419674][T14275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1115.419717][T14275] CPU: 1 UID: 0 PID: 14275 Comm: syz.4.1850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1115.419750][T14275] Tainted: [L]=SOFTLOCKUP [ 1115.419759][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1115.419774][T14275] Call Trace: [ 1115.419783][T14275] [ 1115.419793][T14275] dump_stack_lvl+0xe8/0x150 [ 1115.419831][T14275] should_fail_ex+0x46b/0x600 [ 1115.419869][T14275] prepare_alloc_pages+0x22a/0x6b0 [ 1115.419909][T14275] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1115.419944][T14275] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1115.419975][T14275] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 1115.420010][T14275] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1115.420049][T14275] ? __pfx_policy_nodemask+0x10/0x10 [ 1115.420086][T14275] __alloc_pages_noprof+0x10/0x100 [ 1115.420120][T14275] alloc_pages_bulk_noprof+0x67e/0x890 [ 1115.420152][T14275] ? alloc_pages_mpol+0x2ae/0x380 [ 1115.420187][T14275] ? alloc_pages_noprof+0x161/0x2f0 [ 1115.420225][T14275] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1115.420252][T14275] ? rt_spin_unlock+0x160/0x200 [ 1115.420288][T14275] alloc_vmap_area+0xd47/0x1480 [ 1115.420331][T14275] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1115.420363][T14275] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1115.420393][T14275] ? __get_vm_area_node+0x13f/0x300 [ 1115.420419][T14275] ? copy_process+0x837/0x43d0 [ 1115.420457][T14275] __get_vm_area_node+0x1f8/0x300 [ 1115.420491][T14275] __vmalloc_node_range_noprof+0x36a/0x1750 [ 1115.420527][T14275] ? copy_process+0x837/0x43d0 [ 1115.420559][T14275] ? percpu_ref_get_many+0x19/0x140 [ 1115.420704][T14275] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1115.420737][T14275] ? rcu_is_watching+0x15/0xb0 [ 1115.420770][T14275] ? memcpy_and_pad+0x48/0x80 [ 1115.420819][T14275] __vmalloc_node_noprof+0xc2/0x100 [ 1115.420846][T14275] ? copy_process+0x837/0x43d0 [ 1115.420881][T14275] ? copy_process+0x837/0x43d0 [ 1115.420921][T14275] dup_task_struct+0x298/0x860 [ 1115.420957][T14275] ? rt_spin_unlock+0x160/0x200 [ 1115.420991][T14275] copy_process+0x837/0x43d0 [ 1115.421043][T14275] ? kasan_save_track+0x4f/0x80 [ 1115.421068][T14275] ? kasan_save_track+0x3e/0x80 [ 1115.421091][T14275] ? __kasan_kmalloc+0x93/0xb0 [ 1115.421116][T14275] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1115.421143][T14275] ? create_io_worker+0xab/0x5c0 [ 1115.421215][T14275] ? io_wq_enqueue+0x675/0x8a0 [ 1115.421236][T14275] ? io_submit_sqes+0x144d/0x22e0 [ 1115.421288][T14275] ? __se_sys_io_uring_enter+0x34a/0x1c40 [ 1115.421325][T14275] ? __pfx_copy_process+0x10/0x10 [ 1115.421369][T14275] ? __pfx_io_wq_worker+0x10/0x10 [ 1115.421396][T14275] ? __pfx_io_wq_worker+0x10/0x10 [ 1115.421423][T14275] create_io_thread+0xfc/0x170 [ 1115.421451][T14275] ? __pfx_create_io_thread+0x10/0x10 [ 1115.421485][T14275] ? __pfx_io_wq_worker+0x10/0x10 [ 1115.421524][T14275] ? __raw_spin_lock_init+0x45/0x100 [ 1115.421553][T14275] ? __init_swait_queue_head+0xa9/0x150 [ 1115.421580][T14275] ? create_io_worker+0x27/0x5c0 [ 1115.421608][T14275] create_io_worker+0x181/0x5c0 [ 1115.421639][T14275] io_wq_enqueue+0x675/0x8a0 [ 1115.421662][T14275] ? io_wq_enqueue+0x332/0x8a0 [ 1115.421685][T14275] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1115.421716][T14275] io_submit_sqes+0x144d/0x22e0 [ 1115.421775][T14275] __se_sys_io_uring_enter+0x34a/0x1c40 [ 1115.421810][T14275] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1115.421849][T14275] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1115.421877][T14275] ? fput+0xa0/0xd0 [ 1115.421907][T14275] ? ksys_write+0x248/0x270 [ 1115.421940][T14275] ? __pfx_ksys_write+0x10/0x10 [ 1115.421976][T14275] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1115.422002][T14275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.422029][T14275] do_syscall_64+0x15f/0x560 [ 1115.422053][T14275] ? trace_irq_disable+0x3b/0x140 [ 1115.422080][T14275] ? clear_bhb_loop+0x40/0x90 [ 1115.422109][T14275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.422133][T14275] RIP: 0033:0x7f7ad055ce59 [ 1115.422155][T14275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.422176][T14275] RSP: 002b:00007f7ace7ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1115.422201][T14275] RAX: ffffffffffffffda RBX: 00007f7ad07d5fa0 RCX: 00007f7ad055ce59 [ 1115.422218][T14275] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1115.422233][T14275] RBP: 00007f7ace7ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.422248][T14275] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1115.422263][T14275] R13: 00007f7ad07d6038 R14: 00007f7ad07d5fa0 R15: 00007ffc9d658e78 [ 1115.422300][T14275] [ 1115.422620][T14275] warn_alloc: 1 callbacks suppressed [ 1115.422635][T14275] syz.4.1850: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1115.422787][T14275] CPU: 1 UID: 0 PID: 14275 Comm: syz.4.1850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1115.422819][T14275] Tainted: [L]=SOFTLOCKUP [ 1115.422828][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1115.422843][T14275] Call Trace: [ 1115.422852][T14275] [ 1115.422862][T14275] dump_stack_lvl+0xe8/0x150 [ 1115.422894][T14275] warn_alloc+0x24c/0x270 [ 1115.422922][T14275] ? kasan_quarantine_put+0xbb/0x1f0 [ 1115.422952][T14275] ? __pfx_warn_alloc+0x10/0x10 [ 1115.422983][T14275] ? __get_vm_area_node+0x211/0x300 [ 1115.423007][T14275] ? __get_vm_area_node+0x13f/0x300 [ 1115.423034][T14275] ? copy_process+0x837/0x43d0 [ 1115.423070][T14275] ? __get_vm_area_node+0x211/0x300 [ 1115.423104][T14275] __vmalloc_node_range_noprof+0x38f/0x1750 [ 1115.423130][T14275] ? percpu_ref_get_many+0x19/0x140 [ 1115.423196][T14275] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1115.423229][T14275] ? rcu_is_watching+0x15/0xb0 [ 1115.423261][T14275] ? memcpy_and_pad+0x48/0x80 [ 1115.423294][T14275] __vmalloc_node_noprof+0xc2/0x100 [ 1115.423322][T14275] ? copy_process+0x837/0x43d0 [ 1115.423354][T14275] ? copy_process+0x837/0x43d0 [ 1115.423394][T14275] dup_task_struct+0x298/0x860 [ 1115.423429][T14275] ? rt_spin_unlock+0x160/0x200 [ 1115.423462][T14275] copy_process+0x837/0x43d0 [ 1115.423521][T14275] ? kasan_save_track+0x4f/0x80 [ 1115.423546][T14275] ? kasan_save_track+0x3e/0x80 [ 1115.423571][T14275] ? __kasan_kmalloc+0x93/0xb0 [ 1115.423597][T14275] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1115.423625][T14275] ? create_io_worker+0xab/0x5c0 [ 1115.423649][T14275] ? io_wq_enqueue+0x675/0x8a0 [ 1115.423670][T14275] ? io_submit_sqes+0x144d/0x22e0 [ 1115.423694][T14275] ? __se_sys_io_uring_enter+0x34a/0x1c40 [ 1115.423730][T14275] ? __pfx_copy_process+0x10/0x10 [ 1115.423773][T14275] ? __pfx_io_wq_worker+0x10/0x10 [ 1115.423799][T14275] ? __pfx_io_wq_worker+0x10/0x10 [ 1115.423826][T14275] create_io_thread+0xfc/0x170 [ 1115.423852][T14275] ? __pfx_create_io_thread+0x10/0x10 [ 1115.423892][T14275] ? __pfx_io_wq_worker+0x10/0x10 [ 1115.423924][T14275] ? __raw_spin_lock_init+0x45/0x100 [ 1115.423952][T14275] ? __init_swait_queue_head+0xa9/0x150 [ 1115.423979][T14275] ? create_io_worker+0x27/0x5c0 [ 1115.424006][T14275] create_io_worker+0x181/0x5c0 [ 1115.424037][T14275] io_wq_enqueue+0x675/0x8a0 [ 1115.424059][T14275] ? io_wq_enqueue+0x332/0x8a0 [ 1115.424081][T14275] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1115.424113][T14275] io_submit_sqes+0x144d/0x22e0 [ 1115.424170][T14275] __se_sys_io_uring_enter+0x34a/0x1c40 [ 1115.424204][T14275] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1115.424244][T14275] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1115.424271][T14275] ? fput+0xa0/0xd0 [ 1115.424295][T14275] ? ksys_write+0x248/0x270 [ 1115.424328][T14275] ? __pfx_ksys_write+0x10/0x10 [ 1115.424372][T14275] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1115.424398][T14275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.424425][T14275] do_syscall_64+0x15f/0x560 [ 1115.424448][T14275] ? trace_irq_disable+0x3b/0x140 [ 1115.424475][T14275] ? clear_bhb_loop+0x40/0x90 [ 1115.424504][T14275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.424535][T14275] RIP: 0033:0x7f7ad055ce59 [ 1115.424555][T14275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.424576][T14275] RSP: 002b:00007f7ace7ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1115.424599][T14275] RAX: ffffffffffffffda RBX: 00007f7ad07d5fa0 RCX: 00007f7ad055ce59 [ 1115.424617][T14275] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1115.424632][T14275] RBP: 00007f7ace7ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.424647][T14275] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1115.424662][T14275] R13: 00007f7ad07d6038 R14: 00007f7ad07d5fa0 R15: 00007ffc9d658e78 [ 1115.424705][T14275] [ 1115.424716][T14275] Mem-Info: [ 1115.424726][T14275] active_anon:36928 inactive_anon:0 isolated_anon:0 [ 1115.424726][T14275] active_file:0 inactive_file:65994 isolated_file:0 [ 1115.424726][T14275] unevictable:768 dirty:364 writeback:0 [ 1115.424726][T14275] slab_reclaimable:12587 slab_unreclaimable:104493 [ 1115.424726][T14275] mapped:32360 shmem:29759 pagetables:1653 [ 1115.424726][T14275] sec_pagetables:0 bounce:0 [ 1115.424726][T14275] kernel_misc_reclaimable:0 [ 1115.424726][T14275] free:1257700 free_pcp:15330 free_cma:0 [ 1115.424787][T14275] Node 0 active_anon:147712kB inactive_anon:0kB active_file:0kB inactive_file:263776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129440kB dirty:1456kB writeback:0kB shmem:117500kB kernel_stack:14372kB pagetables:6440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1115.424848][T14275] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1115.424900][T14275] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.424966][T14275] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1115.425008][T14275] Node 0 DMA32 free:1082552kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:147712kB inactive_anon:0kB active_file:0kB inactive_file:263776kB unevictable:1536kB writepending:1456kB zspages:0kB present:3129332kB managed:2554700kB mlocked:0kB bounce:0kB free_pcp:57316kB local_pcp:6664kB free_cma:0kB [ 1115.425079][T14275] lowmem_reserve[]: 0 0 1 1 1 [ 1115.425117][T14275] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1168kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1115.425180][T14275] lowmem_reserve[]: 0 0 0 0 0 [ 1115.425219][T14275] Node 1 Normal free:3932888kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:3980kB local_pcp:3980kB free_cma:0kB [ 1115.425288][T14275] lowmem_reserve[]: 0 0 0 0 0 [ 1115.425327][T14275] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1115.425460][T14275] Node 0 DMA32: 1327*4kB (UME) 1033*8kB (UME) 281*16kB (UME) 159*32kB (UME) 128*64kB (UME) 43*128kB (UME) 55*256kB (UME) 19*512kB (UME) 26*1024kB (UME) 16*2048kB (UME) 235*4096kB (UM) = 1082612kB [ 1115.425680][T14275] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1115.425795][T14275] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 3*16kB (UM) 2*32kB (M) 2*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (UM) = 3932940kB [ 1115.425974][T14275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.425994][T14275] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1115.426014][T14275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.426035][T14275] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1115.426053][T14275] 95677 total pagecache pages [ 1115.426063][T14275] 0 pages in swap cache [ 1115.426072][T14275] Free swap = 124996kB [ 1115.426081][T14275] Total swap = 124996kB [ 1115.426091][T14275] 2097051 pages RAM [ 1115.426099][T14275] 0 pages HighMem/MovableOnly [ 1115.426108][T14275] 426470 pages reserved [ 1115.426117][T14275] 0 pages cma reserved [ 1115.782823][ T38] audit: type=1800 audit(1779593410.033:5597): pid=14273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1848" name="file0" dev="loop5" ino=259 res=0 errno=0 [ 1116.935117][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.486276][ T8879] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1117.517043][T14286] devtmpfs: Too few inodes for current use [ 1117.605582][T14289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.226466][T14295] loop1: detected capacity change from 0 to 4096 [ 1118.304005][T14295] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1118.304033][T14295] NILFS (loop1): trying rollback from an earlier position [ 1118.332885][T14289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.357886][T14295] NILFS (loop1): recovery complete [ 1118.395646][T14300] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1118.839368][T14304] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1118.839396][T14304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1118.841289][T14304] vhci_hcd vhci_hcd.0: Device attached [ 1119.629043][ T5844] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1119.719986][T14313] loop4: detected capacity change from 0 to 256 [ 1119.815055][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1119.932866][T13721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.092123][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1120.095244][ T9] usb 6-1: config 0 has no interfaces? [ 1120.118032][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1120.118060][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.118079][ T9] usb 6-1: Product: syz [ 1120.118093][ T9] usb 6-1: Manufacturer: syz [ 1120.118106][ T9] usb 6-1: SerialNumber: syz [ 1120.151911][ T9] usb 6-1: config 0 descriptor?? [ 1120.447933][T14305] vhci_hcd: unknown pdu 2 [ 1120.451658][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1120.451679][ T12] vhci_hcd vhci_hcd.5: release socket [ 1120.516849][T14313] FAT-fs (loop4): invalid media value (0x00) [ 1120.516874][T14313] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1120.547001][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1120.613012][T12747] usb 6-1: USB disconnect, device number 22 [ 1120.793755][T14335] FAULT_INJECTION: forcing a failure. [ 1120.793755][T14335] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.793797][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.1.1856 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1120.793829][T14335] Tainted: [L]=SOFTLOCKUP [ 1120.793838][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1120.793852][T14335] Call Trace: [ 1120.793871][T14335] [ 1120.793882][T14335] dump_stack_lvl+0xe8/0x150 [ 1120.793920][T14335] should_fail_ex+0x46b/0x600 [ 1120.793957][T14335] should_failslab+0xa8/0x100 [ 1120.793991][T14335] __kmalloc_noprof+0xdf/0x7b0 [ 1120.794018][T14335] ? kfree+0x4d/0x6c0 [ 1120.794042][T14335] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1120.794077][T14335] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1120.794118][T14335] tomoyo_mount_permission+0x3e8/0x9d0 [ 1120.794149][T14335] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 1120.794175][T14335] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1120.794259][T14335] security_sb_mount+0xe4/0x320 [ 1120.794291][T14335] path_mount+0xbc/0x10e0 [ 1120.794314][T14335] ? user_path_at+0xd4/0x160 [ 1120.794347][T14335] ? user_path_at+0xd4/0x160 [ 1120.794377][T14335] __se_sys_mount+0x31d/0x420 [ 1120.794408][T14335] ? __pfx___se_sys_mount+0x10/0x10 [ 1120.794440][T14335] ? __x64_sys_mount+0x20/0xc0 [ 1120.794468][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.794494][T14335] do_syscall_64+0x15f/0x560 [ 1120.794518][T14335] ? trace_irq_disable+0x3b/0x140 [ 1120.794545][T14335] ? clear_bhb_loop+0x40/0x90 [ 1120.794573][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.794597][T14335] RIP: 0033:0x7f135a6fce59 [ 1120.794618][T14335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.794639][T14335] RSP: 002b:00007f135894e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1120.794663][T14335] RAX: ffffffffffffffda RBX: 00007f135a975fa0 RCX: 00007f135a6fce59 [ 1120.794681][T14335] RDX: 0000200000000b80 RSI: 0000200000000340 RDI: 0000000000000000 [ 1120.794704][T14335] RBP: 00007f135894e090 R08: 0000200000000000 R09: 0000000000000000 [ 1120.794721][T14335] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1120.794736][T14335] R13: 00007f135a976038 R14: 00007f135a975fa0 R15: 00007fffa0f9bb68 [ 1120.794774][T14335] [ 1120.798026][T14335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1121.214677][T14340] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1859'. [ 1121.541655][T13721] veth0_vlan: entered promiscuous mode [ 1121.622602][T13721] veth1_vlan: entered promiscuous mode [ 1121.740963][T13721] veth0_macvtap: entered promiscuous mode [ 1121.769469][T13721] veth1_macvtap: entered promiscuous mode [ 1121.833736][T13721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.413361][T13721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.474663][T14340] loop4: detected capacity change from 0 to 131072 [ 1122.475792][T14340] f2fs: Unknown parameter 'ÿÿ ' [ 1122.596622][T10312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.628283][T10312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.047066][ T1429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.048080][ T1429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.200793][ T5844] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1125.783970][T14376] loop1: detected capacity change from 0 to 1024 [ 1125.802058][T14376] EXT4-fs: Ignoring removed oldalloc option [ 1125.802081][T14376] EXT4-fs: Ignoring removed oldalloc option [ 1125.865717][T14379] loop2: detected capacity change from 0 to 128 [ 1125.910777][T14376] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1126.048296][T14376] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1127.028976][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1127.182047][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1127.192036][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1127.213803][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1127.219731][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1128.412186][ T5844] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1128.573484][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 1128.576239][ T5844] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1128.576265][ T5844] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping [ 1128.576284][ T5844] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.576305][ T5844] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1128.579434][ T5844] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.579465][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.579489][ T5844] usb 6-1: Product: syz [ 1128.579505][ T5844] usb 6-1: Manufacturer: syz [ 1128.579521][ T5844] usb 6-1: SerialNumber: syz [ 1128.872574][ T5604] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1128.993040][T14418] loop2: detected capacity change from 0 to 32768 [ 1129.055656][ T5604] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1129.055688][ T5604] usb 2-1: config 8 has no interface number 0 [ 1129.106992][ T5604] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1129.107091][ T5604] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 1129.107125][ T5604] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1129.107151][ T5604] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1129.107259][ T5604] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1129.107285][ T5604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.194804][T14412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.198482][T14412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.237082][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1871'. [ 1129.239854][T14421] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1129.447771][ T5637] Bluetooth: hci1: command tx timeout [ 1129.584958][T14418] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1129.749398][T14418] XFS (loop2): Ending clean mount [ 1129.948817][ T5628] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1130.280820][ T5844] usb 6-1: USB disconnect, device number 23 [ 1130.355849][ T5604] usb 2-1: string descriptor 0 read error: -71 [ 1130.398567][ T5604] ir_toy 2-1:8.177: required endpoints not found [ 1130.523927][ T5604] usb 2-1: USB disconnect, device number 29 [ 1131.135706][T14456] loop5: detected capacity change from 0 to 1164 [ 1131.168017][T14456] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1131.718029][ T5637] Bluetooth: hci1: command tx timeout [ 1131.769001][T14465] FAULT_INJECTION: forcing a failure. [ 1131.769001][T14465] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.769037][T14465] CPU: 0 UID: 0 PID: 14465 Comm: syz.2.1876 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1131.769064][T14465] Tainted: [L]=SOFTLOCKUP [ 1131.769071][T14465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1131.769084][T14465] Call Trace: [ 1131.769091][T14465] [ 1131.769100][T14465] dump_stack_lvl+0xe8/0x150 [ 1131.769131][T14465] should_fail_ex+0x46b/0x600 [ 1131.769161][T14465] should_failslab+0xa8/0x100 [ 1131.769199][T14465] kmem_cache_alloc_noprof+0x87/0x680 [ 1131.769223][T14465] ? alloc_empty_file+0x5b/0x1d0 [ 1131.769245][T14465] alloc_empty_file+0x5b/0x1d0 [ 1131.769265][T14465] path_openat+0x11b/0x3960 [ 1131.769299][T14465] ? try_to_take_rt_mutex+0x840/0xb00 [ 1131.769326][T14465] ? arch_stack_walk+0xfb/0x150 [ 1131.769367][T14465] ? __lock_acquire+0x6b5/0x2d10 [ 1131.769399][T14465] ? __pfx_path_openat+0x10/0x10 [ 1131.769427][T14465] ? kasan_save_track+0x4f/0x80 [ 1131.769445][T14465] ? kasan_save_track+0x3e/0x80 [ 1131.769462][T14465] ? __kasan_slab_alloc+0x6c/0x80 [ 1131.769491][T14465] ? do_raw_spin_lock+0x12b/0x2f0 [ 1131.769518][T14465] do_file_open+0x23e/0x4a0 [ 1131.769541][T14465] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1131.769563][T14465] ? __pfx_do_file_open+0x10/0x10 [ 1131.769583][T14465] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1131.769625][T14465] ? alloc_fd+0x679/0x6f0 [ 1131.769656][T14465] do_sys_openat2+0x115/0x200 [ 1131.769679][T14465] ? __pfx_do_sys_openat2+0x10/0x10 [ 1131.769703][T14465] ? exc_page_fault+0x6a/0xc0 [ 1131.769725][T14465] ? do_user_addr_fault+0xc6f/0x1340 [ 1131.769755][T14465] __x64_sys_openat+0x138/0x170 [ 1131.769786][T14465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.769807][T14465] do_syscall_64+0x15f/0x560 [ 1131.769829][T14465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.769850][T14465] ? clear_bhb_loop+0x40/0x90 [ 1131.769878][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.769901][T14465] RIP: 0033:0x7f4908fdd68e [ 1131.769918][T14465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1131.769936][T14465] RSP: 002b:00007f4907273ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1131.769956][T14465] RAX: ffffffffffffffda RBX: 00007f49072766c0 RCX: 00007f4908fdd68e [ 1131.769971][T14465] RDX: 0000000000000002 RSI: 00007f49090b210a RDI: ffffffffffffff9c [ 1131.769985][T14465] RBP: 00007f4907276090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.769999][T14465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 1131.770010][T14465] R13: 0000200000000080 R14: 0000000000000000 R15: 00007fff7a58e558 [ 1131.770041][T14465] [ 1132.159119][ T1429] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.594930][T14460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1879'. [ 1132.594959][T14460] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1879'. [ 1132.594983][T14460] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1879'. [ 1132.757376][T14474] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1883'. [ 1132.893089][T14479] loop5: detected capacity change from 0 to 512 [ 1132.932509][T14479] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1133.411130][ T32] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1133.500277][T14482] loop2: detected capacity change from 0 to 32768 [ 1133.501447][T14482] btrfs: Deprecated parameter 'usebackuproot' [ 1133.501468][T14482] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1133.533907][T14482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1888 (14482) [ 1133.556889][T14482] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1133.556923][T14482] BTRFS info (device loop2): using crc32c checksum algorithm [ 1133.611142][ T32] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1133.611192][ T32] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1133.611216][ T32] usb 6-1: Product: syz [ 1133.611232][ T32] usb 6-1: SerialNumber: syz [ 1133.670405][ T45] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1133.670583][T14482] BTRFS error (device loop2): failed to load root extent [ 1133.670626][T14482] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1133.676292][T10322] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1133.676365][T14482] BTRFS warning (device loop2): couldn't read tree root [ 1133.676386][T14482] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1133.676930][T10322] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1133.677031][T14482] BTRFS warning (device loop2): couldn't read tree root [ 1133.677053][T14482] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1133.707487][T14482] BTRFS info (device loop2): rebuilding free space tree [ 1133.881568][ T32] usb 6-1: config 0 descriptor?? [ 1133.968441][ T5637] Bluetooth: hci1: command tx timeout [ 1134.028570][ T5604] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1134.125201][ T32] hso 6-1:0.0: Can't find BULK endpoints [ 1134.192795][T14482] BTRFS info (device loop2): checking UUID tree [ 1134.399112][T14482] BTRFS info (device loop2): enabling ssd optimizations [ 1134.399144][T14482] BTRFS info (device loop2): turning on async discard [ 1134.399162][T14482] BTRFS info (device loop2): enabling free space tree [ 1134.399180][T14482] BTRFS info (device loop2): force clearing of disk cache [ 1134.399197][T14482] BTRFS info (device loop2): enabling auto defrag [ 1134.399215][T14482] BTRFS info (device loop2): trying to use backup root at mount time [ 1134.399234][T14482] BTRFS info (device loop2): use lzo compression, level 1 [ 1135.105468][ T38] audit: type=1800 audit(1779593427.417:5598): pid=14507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1888" name="file0" dev="loop2" ino=259 res=0 errno=0 [ 1135.237086][ T5604] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1135.237118][ T5604] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1135.237139][ T5604] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.237161][ T5604] usb 5-1: config 220 has no interface number 2 [ 1135.237231][ T5604] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1135.237262][ T5604] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1135.237282][ T5604] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1135.237302][ T5604] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1135.297445][ T5604] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1135.297472][ T5604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.297490][ T5604] usb 5-1: Product: syz [ 1135.297504][ T5604] usb 5-1: Manufacturer: syz [ 1135.297516][ T5604] usb 5-1: SerialNumber: syz [ 1135.399328][ T1429] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.551540][ T5844] usb 6-1: USB disconnect, device number 24 [ 1136.259517][ T5637] Bluetooth: hci1: command tx timeout [ 1136.975785][ T5628] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1138.579173][ T5604] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1138.579207][ T5604] uvcvideo 5-1:220.0: No valid video chain found. [ 1138.579270][ T5604] usb 5-1: selecting invalid altsetting 0 [ 1138.593664][ T1429] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.693101][ T5604] usb 5-1: selecting invalid altsetting 0 [ 1138.693142][ T5604] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1138.713453][ T5604] usb 5-1: USB disconnect, device number 41 [ 1139.038967][T14537] loop1: detected capacity change from 0 to 8 [ 1139.340414][T14537] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 1139.340475][T14537] unable to read xattr id index table [ 1139.823238][T14530] loop5: detected capacity change from 0 to 32768 [ 1139.845947][T14530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1894 (14530) [ 1140.463877][T14546] loop4: detected capacity change from 0 to 32768 [ 1140.540703][T14546] (syz.4.1897,14546,0):ocfs2_verify_heartbeat:839 ERROR: Heartbeat has to be started to mount a read-write clustered device. [ 1140.546830][T14546] (syz.4.1897,14546,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1140.743252][T14530] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1140.743288][T14530] BTRFS info (device loop5): using sha256 checksum algorithm [ 1140.861912][T14550] loop2: detected capacity change from 0 to 128 [ 1140.867880][T14550] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1140.874981][ T1429] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.232653][T14544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1897'. [ 1141.233955][T14530] BTRFS info (device loop5): setting nodatasum [ 1141.233981][T14530] BTRFS info (device loop5): enabling ssd optimizations [ 1141.234001][T14530] BTRFS info (device loop5): turning on async discard [ 1141.234019][T14530] BTRFS info (device loop5): enabling free space tree [ 1141.548498][T14568] loop1: detected capacity change from 0 to 32768 [ 1141.549663][T14568] btrfs: Deprecated parameter 'usebackuproot' [ 1141.549678][T14568] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1141.550364][T14568] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1901 (14568) [ 1141.647065][T14568] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1141.647101][T14568] BTRFS info (device loop1): using crc32c checksum algorithm [ 1141.754332][ T45] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1141.754487][T14568] BTRFS error (device loop1): failed to load root extent [ 1141.754527][T14568] BTRFS warning (device loop1): try to load backup roots slot 1 [ 1141.757016][ T1584] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1141.757149][T14568] BTRFS warning (device loop1): couldn't read tree root [ 1141.757170][T14568] BTRFS warning (device loop1): try to load backup roots slot 2 [ 1141.757578][ T1584] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1141.757696][T14568] BTRFS warning (device loop1): couldn't read tree root [ 1141.757718][T14568] BTRFS warning (device loop1): try to load backup roots slot 3 [ 1141.873645][T14568] BTRFS info (device loop1): rebuilding free space tree [ 1142.008875][T14568] BTRFS info (device loop1): checking UUID tree [ 1142.026211][T14568] BTRFS info (device loop1): enabling ssd optimizations [ 1142.026239][T14568] BTRFS info (device loop1): turning on async discard [ 1142.026257][T14568] BTRFS info (device loop1): enabling free space tree [ 1142.026275][T14568] BTRFS info (device loop1): force clearing of disk cache [ 1142.026293][T14568] BTRFS info (device loop1): enabling auto defrag [ 1142.026311][T14568] BTRFS info (device loop1): trying to use backup root at mount time [ 1142.026331][T14568] BTRFS info (device loop1): use lzo compression, level 1 [ 1142.092889][ T8879] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1142.466804][ T38] audit: type=1800 audit(1779593434.655:5599): pid=14592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1901" name="file0" dev="loop1" ino=259 res=0 errno=0 [ 1142.545257][ T5755] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1142.721037][ T5755] usb 3-1: Using ep0 maxpacket: 8 [ 1142.812945][ T5755] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1142.813204][ T5755] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1142.813231][ T5755] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1142.813257][ T5755] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1142.813283][ T5755] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.813354][ T5755] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1142.813380][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.935493][T14387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.935778][T14387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.936100][T14387] bridge_slave_0: entered allmulticast mode [ 1142.984666][T14387] bridge_slave_0: entered promiscuous mode [ 1143.003844][T14387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.004292][T14387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.004587][T14387] bridge_slave_1: entered allmulticast mode [ 1143.063854][T14387] bridge_slave_1: entered promiscuous mode [ 1143.102961][ T5755] usb 3-1: usb_control_msg returned -32 [ 1143.103012][ T5755] usbtmc 3-1:16.0: can't read capabilities [ 1143.289975][ T5625] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1143.674526][T14596] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 1143.674739][T14600] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1143.959018][T14590] loop4: detected capacity change from 0 to 256 [ 1144.025445][T14596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.030463][T14596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.184793][T14605] loop5: detected capacity change from 0 to 128 [ 1144.877490][T14387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.162300][T14387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.597179][T14387] team0: Port device team_slave_0 added [ 1146.810710][ T5844] usb 3-1: USB disconnect, device number 48 [ 1146.917597][T14387] team0: Port device team_slave_1 added [ 1147.618319][T14635] loop2: detected capacity change from 0 to 32768 [ 1147.621683][T14635] btrfs: Deprecated parameter 'usebackuproot' [ 1147.621700][T14635] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1147.638750][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1147.638857][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1147.661691][T14635] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1913 (14635) [ 1147.684392][T14635] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1147.684426][T14635] BTRFS info (device loop2): using crc32c checksum algorithm [ 1147.899689][T14652] netlink: 'syz.1.1914': attribute type 8 has an invalid length. [ 1148.078877][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1148.079063][T14635] BTRFS error (device loop2): failed to load root extent [ 1148.079105][T14635] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1148.081670][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1148.081770][T14635] BTRFS warning (device loop2): couldn't read tree root [ 1148.081786][T14635] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1148.082107][ T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1148.082193][T14635] BTRFS warning (device loop2): couldn't read tree root [ 1148.082208][T14635] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1148.098070][T14635] BTRFS info (device loop2): rebuilding free space tree [ 1148.269605][T14387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.269621][T14387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.269645][T14387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.449171][T14635] BTRFS info (device loop2): checking UUID tree [ 1148.450313][T14635] BTRFS info (device loop2): enabling ssd optimizations [ 1148.450340][T14635] BTRFS info (device loop2): turning on async discard [ 1148.450357][T14635] BTRFS info (device loop2): enabling free space tree [ 1148.450376][T14635] BTRFS info (device loop2): force clearing of disk cache [ 1148.450394][T14635] BTRFS info (device loop2): enabling auto defrag [ 1148.450411][T14635] BTRFS info (device loop2): trying to use backup root at mount time [ 1148.450431][T14635] BTRFS info (device loop2): use lzo compression, level 1 [ 1148.564644][ T1429] bridge_slave_1: left allmulticast mode [ 1148.564697][ T1429] bridge_slave_1: left promiscuous mode [ 1148.565885][ T1429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.789053][T14658] loop1: detected capacity change from 0 to 4096 [ 1148.899662][T14658] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1148.899691][T14658] NILFS (loop1): trying rollback from an earlier position [ 1148.964299][ T38] audit: type=1800 audit(1779593440.656:5600): pid=14663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1913" name="file0" dev="loop2" ino=259 res=0 errno=0 [ 1149.226024][T14658] NILFS (loop1): recovery complete [ 1149.455385][T14666] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1149.479975][ T1429] bridge_slave_0: left allmulticast mode [ 1149.480011][ T1429] bridge_slave_0: left promiscuous mode [ 1149.480276][ T1429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.610854][ T5628] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1150.509938][T14677] loop1: detected capacity change from 0 to 512 [ 1150.522791][T14677] FAT-fs (loop1): Directory bread(block 199916) failed [ 1150.522825][T14677] FAT-fs (loop1): Directory bread(block 199917) failed [ 1150.522851][T14677] FAT-fs (loop1): Directory bread(block 199918) failed [ 1150.522876][T14677] FAT-fs (loop1): Directory bread(block 199919) failed [ 1150.522901][T14677] FAT-fs (loop1): Directory bread(block 199920) failed [ 1150.522926][T14677] FAT-fs (loop1): Directory bread(block 199921) failed [ 1150.522950][T14677] FAT-fs (loop1): Directory bread(block 199922) failed [ 1150.522975][T14677] FAT-fs (loop1): Directory bread(block 199923) failed [ 1150.536432][ T5637] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1150.670464][T14681] FAT-fs (loop1): Directory bread(block 199916) failed [ 1150.670506][T14681] FAT-fs (loop1): Directory bread(block 199917) failed [ 1153.014448][T14707] loop2: detected capacity change from 0 to 2048 [ 1153.218617][T14707] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1153.237048][T14707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1154.114448][T14715] loop1: detected capacity change from 0 to 32768 [ 1154.115418][T14715] btrfs: Deprecated parameter 'usebackuproot' [ 1154.115434][T14715] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1154.119321][T14715] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1925 (14715) [ 1154.131575][T14715] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1154.131606][T14715] BTRFS info (device loop1): using crc32c checksum algorithm [ 1154.377125][T10322] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1154.378679][T14715] BTRFS error (device loop1): failed to load root extent [ 1154.378724][T14715] BTRFS warning (device loop1): try to load backup roots slot 1 [ 1154.384159][T10318] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1154.384313][T14715] BTRFS warning (device loop1): couldn't read tree root [ 1154.384336][T14715] BTRFS warning (device loop1): try to load backup roots slot 2 [ 1154.385071][T10318] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1154.385193][T14715] BTRFS warning (device loop1): couldn't read tree root [ 1154.385214][T14715] BTRFS warning (device loop1): try to load backup roots slot 3 [ 1154.539399][T14715] BTRFS info (device loop1): rebuilding free space tree [ 1154.591312][T14715] BTRFS info (device loop1): checking UUID tree [ 1154.597031][T14715] BTRFS info (device loop1): enabling ssd optimizations [ 1154.597059][T14715] BTRFS info (device loop1): turning on async discard [ 1154.597079][T14715] BTRFS info (device loop1): enabling free space tree [ 1154.597091][T14715] BTRFS info (device loop1): force clearing of disk cache [ 1154.597104][T14715] BTRFS info (device loop1): enabling auto defrag [ 1154.597116][T14715] BTRFS info (device loop1): trying to use backup root at mount time [ 1154.597130][T14715] BTRFS info (device loop1): use lzo compression, level 1 [ 1154.802322][T14729] loop2: detected capacity change from 0 to 4096 [ 1154.838310][T14729] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1154.838336][T14729] NILFS (loop2): trying rollback from an earlier position [ 1154.886700][T14729] NILFS (loop2): recovery complete [ 1154.901100][T14736] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1155.197977][ T38] audit: type=1800 audit(1779593446.417:5601): pid=14737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1925" name="file0" dev="loop1" ino=259 res=0 errno=0 [ 1155.428431][T14740] loop5: detected capacity change from 0 to 512 [ 1155.441531][T14740] EXT4-fs: Ignoring removed nobh option [ 1155.514185][T14740] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 1155.641216][ T5625] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1155.916525][ T1429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.061981][ T1429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.144231][ T32] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1156.153596][ T1429] bond0 (unregistering): Released all slaves [ 1156.318190][T14743] loop4: detected capacity change from 0 to 128 [ 1156.363914][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 1156.366366][ T32] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 1156.366398][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.419160][ T32] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1156.642773][T14749] loop2: detected capacity change from 0 to 32768 [ 1156.680123][T14749] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1156.680799][T14387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.680815][T14387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.680844][T14387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.736162][T14749] JBD2: Ignoring recovery information on journal [ 1156.811397][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1157.064703][T14749] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1157.368961][ T32] usb 6-1: USB disconnect, device number 25 [ 1157.860818][T14387] hsr_slave_0: entered promiscuous mode [ 1157.960060][T14387] hsr_slave_1: entered promiscuous mode [ 1157.978220][T14387] debugfs: 'hsr0' already exists in 'hsr' [ 1157.980883][T14387] Cannot create hsr debugfs directory [ 1158.041999][ T38] audit: type=1800 audit(1779593449.039:5602): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1932" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1159.407734][ T5637] Bluetooth: hci5: unexpected cc 0x0c2d length: 65 > 4 [ 1159.407767][ T5637] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 1161.893192][ T5628] ocfs2: Unmounting device (7,2) on (node local) [ 1162.367900][ T1429] hsr_slave_0: left promiscuous mode [ 1162.590046][ T1429] hsr_slave_1: left promiscuous mode [ 1162.591217][ T1429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.591244][ T1429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.656622][ T1429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.656652][ T1429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.049186][T14780] loop5: detected capacity change from 0 to 8 [ 1163.210519][T14780] unable to read xattr id index table [ 1163.594779][ T1429] veth1_macvtap: left promiscuous mode [ 1163.594887][ T1429] veth0_macvtap: left promiscuous mode [ 1163.595180][ T1429] veth1_vlan: left promiscuous mode [ 1163.595401][ T1429] veth0_vlan: left promiscuous mode [ 1163.678606][ T5755] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1163.941199][ T5755] usb 6-1: Using ep0 maxpacket: 16 [ 1163.945576][ T5755] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1163.945604][ T5755] usb 6-1: config 0 has no interface number 0 [ 1163.945639][ T5755] usb 6-1: config 0 interface 31 has no altsetting 0 [ 1163.949929][ T5755] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice=7d.b5 [ 1163.949957][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.949977][ T5755] usb 6-1: Product: syz [ 1163.949992][ T5755] usb 6-1: Manufacturer: syz [ 1163.950006][ T5755] usb 6-1: SerialNumber: syz [ 1163.980424][ T5755] usb 6-1: config 0 descriptor?? [ 1164.186011][T12983] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1164.463970][T12983] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1164.464000][T12983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.464021][T12983] usb 3-1: Product: syz [ 1164.464087][T12983] usb 3-1: Manufacturer: syz [ 1164.464102][T12983] usb 3-1: SerialNumber: syz [ 1164.531106][ T32] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1164.725492][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1164.725524][ T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1164.725549][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.746737][T12983] usb 3-1: config 0 descriptor?? [ 1164.755843][T12983] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1164.757557][ T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1164.757588][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1164.757612][ T32] usb 2-1: Product: syz [ 1164.757629][ T32] usb 2-1: Manufacturer: syz [ 1164.757646][ T32] usb 2-1: SerialNumber: syz [ 1165.036060][ T5755] usb 6-1: USB disconnect, device number 26 [ 1165.160917][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.162152][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.188655][ T32] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1166.528904][T14797] loop4: detected capacity change from 0 to 4096 [ 1166.571001][T14797] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1166.571030][T14797] NILFS (loop4): trying rollback from an earlier position [ 1166.730889][ T5755] usb 2-1: USB disconnect, device number 30 [ 1166.731424][T14797] NILFS (loop4): recovery complete [ 1166.737932][T14801] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1167.003089][ T1429] team0 (unregistering): Port device team_slave_1 removed [ 1167.035208][ T1429] team0 (unregistering): Port device team_slave_0 removed [ 1167.211458][ T5755] usblp0: removed [ 1167.357293][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1168.414670][T12983] gspca_stk1135: reg_w 0x300 err -110 [ 1168.415758][T12983] gspca_stk1135: serial bus timeout: status=0x00 [ 1168.415776][T12983] gspca_stk1135: Sensor write failed [ 1168.415839][T12983] gspca_stk1135: serial bus timeout: status=0x00 [ 1168.415851][T12983] gspca_stk1135: Sensor write failed [ 1168.415887][T12983] gspca_stk1135: serial bus timeout: status=0x00 [ 1168.415898][T12983] gspca_stk1135: Sensor read failed [ 1168.415936][T12983] gspca_stk1135: serial bus timeout: status=0x00 [ 1168.415948][T12983] gspca_stk1135: Sensor read failed [ 1168.415956][T12983] gspca_stk1135: Detected sensor type unknown (0x0) [ 1168.415996][T12983] gspca_stk1135: serial bus timeout: status=0x00 [ 1168.416007][T12983] gspca_stk1135: Sensor read failed [ 1168.416060][T12983] gspca_stk1135: serial bus timeout: status=0x00 [ 1168.416072][T12983] gspca_stk1135: Sensor read failed [ 1168.416110][T12983] gspca_stk1135: serial bus timeout: status=0x00 [ 1168.416121][T12983] gspca_stk1135: Sensor write failed [ 1168.416160][T12983] gspca_stk1135: serial bus timeout: status=0x00 [ 1168.416171][T12983] gspca_stk1135: Sensor write failed [ 1168.416264][T12983] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1169.183950][T14842] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1952'. [ 1169.310034][T14843] loop1: detected capacity change from 0 to 512 [ 1169.385776][T14843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1169.389372][T14843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1169.389392][T14843] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1169.466848][T14843] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1951: Allocating blocks 41-42 which overlap fs metadata [ 1169.466876][T14843] loop1: lost filesystem error report for type 5 error -117 [ 1169.476942][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1169.476969][ C1] EXT4-fs (loop1): initial error at time 1779593459: ext4_mb_mark_diskspace_used:4222 [ 1169.476998][ C1] EXT4-fs (loop1): last error at time 1779593459: ext4_mb_mark_diskspace_used:4222 [ 1169.563605][T14843] EXT4-fs (loop1): Remounting filesystem read-only [ 1169.563767][T14843] Quota error (device loop1): write_blk: dquota write failed [ 1169.563787][T14843] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1169.564050][T14843] Quota error (device loop1): write_blk: dquota write failed [ 1169.564175][T14843] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1169.564331][T14843] EXT4-fs (loop1): 1 truncate cleaned up [ 1169.567332][T14843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.720370][T14853] loop4: detected capacity change from 0 to 128 [ 1169.807041][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1170.169362][T14856] loop5: detected capacity change from 0 to 2048 [ 1170.318267][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.341443][T14856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1170.467139][ T5640] usb 3-1: USB disconnect, device number 49 [ 1170.766397][T14868] loop2: detected capacity change from 0 to 16 [ 1170.767459][T14868] erofs: Unknown parameter 'ÿÿÿ' [ 1171.384259][T14875] loop5: detected capacity change from 0 to 4096 [ 1171.495705][T14875] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1171.495735][T14875] NILFS (loop5): trying rollback from an earlier position [ 1171.601132][T14875] NILFS (loop5): recovery complete [ 1171.613571][T14879] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1171.966355][T14883] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1962'. [ 1173.163486][T14894] loop5: detected capacity change from 0 to 32768 [ 1173.164734][T14894] btrfs: Deprecated parameter 'usebackuproot' [ 1173.164758][T14894] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1173.188528][T14894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1966 (14894) [ 1173.205212][T14894] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1173.205302][T14894] BTRFS info (device loop5): using crc32c checksum algorithm [ 1173.627496][T14896] loop1: detected capacity change from 0 to 32768 [ 1173.629000][T14896] btrfs: Deprecated parameter 'usebackuproot' [ 1173.629022][T14896] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1173.641637][T14896] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 1d88154b-7a12-400c-a024-abf49069b8c7 [ 1173.641819][T14896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1965 (14896) [ 1173.684609][T10312] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1173.684776][T14894] BTRFS error (device loop5): failed to load root extent [ 1173.684819][T14894] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1173.721995][ T1584] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1173.722127][T14894] BTRFS warning (device loop5): couldn't read tree root [ 1173.722149][T14894] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1173.732939][ T44] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1173.733061][T14894] BTRFS warning (device loop5): couldn't read tree root [ 1173.733083][T14894] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1173.839440][T14896] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1173.839476][T14896] BTRFS info (device loop1): using crc32c checksum algorithm [ 1173.921038][T14894] BTRFS info (device loop5): rebuilding free space tree [ 1174.233431][T10321] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1174.233740][T14896] BTRFS error (device loop1): failed to load root extent [ 1174.233789][T14896] BTRFS warning (device loop1): try to load backup roots slot 1 [ 1174.241375][T10311] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1174.241562][T14896] BTRFS warning (device loop1): couldn't read tree root [ 1174.241585][T14896] BTRFS warning (device loop1): try to load backup roots slot 2 [ 1174.261356][T10321] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1174.261523][T14896] BTRFS warning (device loop1): couldn't read tree root [ 1174.261545][T14896] BTRFS warning (device loop1): try to load backup roots slot 3 [ 1174.363609][T14896] BTRFS info (device loop1): rebuilding free space tree [ 1174.531391][T14894] BTRFS info (device loop5): checking UUID tree [ 1174.538498][T14894] BTRFS info (device loop5): enabling ssd optimizations [ 1174.538522][T14894] BTRFS info (device loop5): turning on async discard [ 1174.538539][T14894] BTRFS info (device loop5): enabling free space tree [ 1174.538556][T14894] BTRFS info (device loop5): force clearing of disk cache [ 1174.538574][T14894] BTRFS info (device loop5): enabling auto defrag [ 1174.538590][T14894] BTRFS info (device loop5): trying to use backup root at mount time [ 1174.538608][T14894] BTRFS info (device loop5): use lzo compression, level 1 [ 1174.738316][T14896] BTRFS info (device loop1): checking UUID tree [ 1174.742916][T14896] BTRFS info (device loop1): enabling ssd optimizations [ 1174.742941][T14896] BTRFS info (device loop1): turning on async discard [ 1174.742960][T14896] BTRFS info (device loop1): enabling free space tree [ 1174.742978][T14896] BTRFS info (device loop1): force clearing of disk cache [ 1174.742997][T14896] BTRFS info (device loop1): enabling auto defrag [ 1174.743015][T14896] BTRFS info (device loop1): trying to use backup root at mount time [ 1174.743036][T14896] BTRFS info (device loop1): use lzo compression, level 1 [ 1175.169339][ T38] audit: type=1800 audit(1779593464.862:5603): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1966" name="file0" dev="loop5" ino=259 res=0 errno=0 [ 1175.561327][ T38] audit: type=1800 audit(1779593465.222:5604): pid=14896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1965" name="file0" dev="loop1" ino=259 res=0 errno=0 [ 1176.126591][T14938] loop2: detected capacity change from 0 to 32768 [ 1176.234429][ T5625] BTRFS info (device loop1): last unmount of filesystem 1d88154b-7a12-400c-a024-abf49069b8c7 [ 1176.660579][ T8879] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1177.962642][ T5755] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1178.040529][T14974] loop5: detected capacity change from 0 to 4096 [ 1178.144073][T14974] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1178.144103][T14974] NILFS (loop5): trying rollback from an earlier position [ 1178.157596][ T5755] usb 2-1: Using ep0 maxpacket: 16 [ 1178.160874][ T5755] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1178.160904][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.242247][ T5755] usb 2-1: config 0 descriptor?? [ 1178.253417][ T5755] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1178.309399][T14974] NILFS (loop5): recovery complete [ 1178.315641][T14980] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1180.196041][T14996] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1973'. [ 1180.661543][ T5755] gspca_sonixj: i2c_w8 err -71 [ 1180.684674][ T5755] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1180.689830][ T5755] usb 2-1: USB disconnect, device number 31 [ 1181.343070][ T5812] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1182.028479][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 1182.038933][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.038967][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.038992][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1182.039038][ T5812] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1182.039063][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.137839][ T5812] usb 3-1: config 0 descriptor?? [ 1184.029447][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 1184.029576][ T5812] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1184.051730][ T5812] usb 3-1: USB disconnect, device number 50 [ 1184.294377][T15030] loop1: detected capacity change from 0 to 128 [ 1186.399233][T15045] FAULT_INJECTION: forcing a failure. [ 1186.399233][T15045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.399301][T15045] CPU: 1 UID: 0 PID: 15045 Comm: syz.4.1980 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1186.399333][T15045] Tainted: [L]=SOFTLOCKUP [ 1186.399342][T15045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1186.399357][T15045] Call Trace: [ 1186.399366][T15045] [ 1186.399377][T15045] dump_stack_lvl+0xe8/0x150 [ 1186.399414][T15045] should_fail_ex+0x46b/0x600 [ 1186.399451][T15045] _copy_from_user+0x2d/0xb0 [ 1186.399475][T15045] ipv6_set_mcast_msfilter+0x148/0x310 [ 1186.399508][T15045] do_ipv6_setsockopt+0x12ee/0x3150 [ 1186.399544][T15045] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1186.399587][T15045] ? __lock_acquire+0x6b5/0x2d10 [ 1186.399618][T15045] ? __pfx___schedule+0x10/0x10 [ 1186.399671][T15045] ? irqentry_exit+0x218/0x760 [ 1186.399698][T15045] ? lockdep_hardirqs_on+0x7a/0x110 [ 1186.399722][T15045] ? irqentry_exit+0x218/0x760 [ 1186.399743][T15045] ? rcu_is_watching+0x15/0xb0 [ 1186.399797][T15045] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1186.399830][T15045] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1186.399868][T15045] ipv6_setsockopt+0x59/0x170 [ 1186.399894][T15045] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1186.399930][T15045] do_sock_setsockopt+0x17c/0x1b0 [ 1186.399959][T15045] __x64_sys_setsockopt+0x143/0x1b0 [ 1186.399986][T15045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.400013][T15045] do_syscall_64+0x15f/0x560 [ 1186.400039][T15045] ? clear_bhb_loop+0x40/0x90 [ 1186.400069][T15045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.400092][T15045] RIP: 0033:0x7f7ad055ce59 [ 1186.400114][T15045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.400135][T15045] RSP: 002b:00007f7ace76c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1186.400160][T15045] RAX: ffffffffffffffda RBX: 00007f7ad07d6180 RCX: 00007f7ad055ce59 [ 1186.400178][T15045] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 1186.400193][T15045] RBP: 00007f7ace76c090 R08: 0000000000000090 R09: 0000000000000000 [ 1186.400209][T15045] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1186.400224][T15045] R13: 00007f7ad07d6218 R14: 00007f7ad07d6180 R15: 00007ffc9d658e78 [ 1186.400262][T15045] [ 1187.747914][T14387] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1188.031455][T14387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.059910][T15055] loop4: detected capacity change from 0 to 4096 [ 1188.068541][T14387] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1188.070948][T15056] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1984'. [ 1188.113739][T15055] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1188.113762][T15055] NILFS (loop4): trying rollback from an earlier position [ 1188.465065][ T5812] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1188.572100][T15055] NILFS (loop4): recovery complete [ 1188.573290][T15069] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1188.643597][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 1188.646245][ T5812] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1188.646276][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.652211][T14387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.691597][ T5812] usb 2-1: config 0 descriptor?? [ 1188.712338][ T5812] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1188.847359][T14387] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1188.915836][T14387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1188.931522][T14387] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1189.217848][T14387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1190.164414][ T5812] gspca_sonixj: reg_r err -110 [ 1190.164517][ T5812] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1190.372589][T15088] FAULT_INJECTION: forcing a failure. [ 1190.372589][T15088] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.372621][T15088] CPU: 1 UID: 0 PID: 15088 Comm: syz.2.1991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1190.372646][T15088] Tainted: [L]=SOFTLOCKUP [ 1190.372652][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1190.372670][T15088] Call Trace: [ 1190.372677][T15088] [ 1190.372684][T15088] dump_stack_lvl+0xe8/0x150 [ 1190.372712][T15088] should_fail_ex+0x46b/0x600 [ 1190.372740][T15088] should_failslab+0xa8/0x100 [ 1190.372765][T15088] __kmalloc_cache_noprof+0x84/0x690 [ 1190.372788][T15088] ? disk_seqf_start+0x6d/0x120 [ 1190.372884][T15088] disk_seqf_start+0x6d/0x120 [ 1190.372903][T15088] seq_read_iter+0x3f8/0xe20 [ 1190.372936][T15088] ? alloc_pages_bulk_noprof+0x67e/0x890 [ 1190.372971][T15088] proc_reg_read_iter+0x1bf/0x290 [ 1190.373000][T15088] copy_splice_read+0x605/0xab0 [ 1190.373031][T15088] ? __pfx_copy_splice_read+0x10/0x10 [ 1190.373050][T15088] ? rcu_is_watching+0x15/0xb0 [ 1190.373078][T15088] ? look_up_lock_class+0x57/0x110 [ 1190.373098][T15088] ? register_lock_class+0x31/0x2e0 [ 1190.373129][T15088] ? alloc_pipe_info+0x373/0x4d0 [ 1190.373155][T15088] ? __pfx_copy_splice_read+0x10/0x10 [ 1190.373174][T15088] splice_direct_to_actor+0x483/0xc80 [ 1190.373205][T15088] ? __pfx_direct_splice_actor+0x10/0x10 [ 1190.373233][T15088] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1190.373290][T15088] do_splice_direct+0x19b/0x2a0 [ 1190.373331][T15088] ? __pfx_do_splice_direct+0x10/0x10 [ 1190.373355][T15088] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1190.373386][T15088] ? rw_verify_area+0x25b/0x4e0 [ 1190.373412][T15088] do_sendfile+0x547/0x7e0 [ 1190.373429][T15088] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1190.373461][T15088] ? __pfx_do_sendfile+0x10/0x10 [ 1190.373490][T15088] __se_sys_sendfile64+0x144/0x1a0 [ 1190.373520][T15088] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1190.373555][T15088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.373576][T15088] do_syscall_64+0x15f/0x560 [ 1190.373594][T15088] ? trace_irq_disable+0x3b/0x140 [ 1190.373616][T15088] ? clear_bhb_loop+0x40/0x90 [ 1190.373638][T15088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.373657][T15088] RIP: 0033:0x7f490901ce59 [ 1190.373675][T15088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.373691][T15088] RSP: 002b:00007f4907276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1190.373710][T15088] RAX: ffffffffffffffda RBX: 00007f4909295fa0 RCX: 00007f490901ce59 [ 1190.373724][T15088] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1190.373735][T15088] RBP: 00007f4907276090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.373746][T15088] R10: 000000000000106f R11: 0000000000000246 R12: 0000000000000001 [ 1190.373758][T15088] R13: 00007f4909296038 R14: 00007f4909295fa0 R15: 00007fff7a58e558 [ 1190.373786][T15088] [ 1190.943846][T15090] loop4: detected capacity change from 0 to 128 [ 1191.512558][ T5630] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1191.512583][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1191.512607][ T5630] Tainted: [L]=SOFTLOCKUP [ 1191.512613][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1191.512625][ T5630] Workqueue: hci3 hci_rx_work [ 1191.512724][ T5630] Call Trace: [ 1191.512732][ T5630] [ 1191.512740][ T5630] dump_stack_lvl+0xe8/0x150 [ 1191.512767][ T5630] sysfs_create_dir_ns+0x271/0x2a0 [ 1191.512810][ T5630] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1191.512836][ T5630] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1191.512858][ T5630] ? rt_spin_unlock+0x160/0x200 [ 1191.512883][ T5630] kobject_add_internal+0x631/0xd10 [ 1191.512911][ T5630] kobject_add+0x163/0x240 [ 1191.512939][ T5630] ? __pfx_kobject_add+0x10/0x10 [ 1191.512965][ T5630] ? get_device_parent+0x370/0x3a0 [ 1191.512996][ T5630] device_add+0x408/0xb90 [ 1191.513025][ T5630] hci_conn_add_sysfs+0xd5/0x210 [ 1191.513069][ T5630] le_conn_complete_evt+0x10e6/0x16b0 [ 1191.513135][ T5630] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1191.513180][ T5630] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1191.513204][ T5630] ? lockdep_hardirqs_on+0x7a/0x110 [ 1191.513231][ T5630] ? skb_pull_data+0xfb/0x200 [ 1191.513264][ T5630] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1191.513294][ T5630] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1191.513326][ T5630] hci_event_packet+0x659/0xef0 [ 1191.513394][ T5630] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1191.513434][ T5630] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1191.513458][ T5630] ? __pfx_hci_event_packet+0x10/0x10 [ 1191.513490][ T5630] ? rt_spin_unlock+0x14f/0x200 [ 1191.513529][ T5630] ? hci_send_to_monitor+0xe2/0x590 [ 1191.513562][ T5630] hci_rx_work+0x3ee/0x1040 [ 1191.513606][ T5630] ? process_one_work+0x8be/0x1630 [ 1191.513643][ T5630] process_one_work+0x98b/0x1630 [ 1191.513705][ T5630] ? __pfx_process_one_work+0x10/0x10 [ 1191.513737][ T5630] ? do_raw_spin_lock+0x12b/0x2f0 [ 1191.513783][ T5630] worker_thread+0xb49/0x1140 [ 1191.513831][ T5630] kthread+0x388/0x470 [ 1191.513854][ T5630] ? __pfx_worker_thread+0x10/0x10 [ 1191.513868][ T5630] ? __pfx_kthread+0x10/0x10 [ 1191.513889][ T5630] ret_from_fork+0x514/0xb70 [ 1191.513916][ T5630] ? __pfx_ret_from_fork+0x10/0x10 [ 1191.513939][ T5630] ? __switch_to+0xc79/0x1410 [ 1191.513960][ T5630] ? __pfx_kthread+0x10/0x10 [ 1191.513981][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1191.514018][ T5630] [ 1191.514194][ T5630] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1191.514250][ T5630] Bluetooth: hci3: failed to register connection device [ 1191.909487][ T5604] usb 2-1: USB disconnect, device number 32 [ 1192.042422][T15100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1995'. [ 1192.126730][T15103] loop1: detected capacity change from 0 to 164 [ 1192.322591][T15103] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1192.365035][T15103] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1192.494284][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1192.541198][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1192.574326][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1192.579868][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1192.638710][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1192.941204][T15103] Symlink component flag not implemented [ 1192.941220][T15103] Symlink component flag not implemented [ 1193.034783][T15110] Symlink component flag not implemented (7) [ 1193.034806][T15110] Symlink component flag not implemented (116) [ 1193.035156][T15110] 9p: Bad value for 'rfdno' [ 1193.334370][T15123] netlink: 'syz.2.2000': attribute type 28 has an invalid length. [ 1193.334395][T15123] netlink: 'syz.2.2000': attribute type 3 has an invalid length. [ 1193.334411][T15123] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2000'. [ 1193.579538][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2001'. [ 1193.680925][T15127] loop5: detected capacity change from 0 to 2048 [ 1193.682018][T15127] udf: Unknown parameter '€' [ 1194.976979][T15134] loop5: detected capacity change from 0 to 128 [ 1195.057887][ T5630] Bluetooth: hci1: command tx timeout [ 1195.063137][T15135] loop2: detected capacity change from 0 to 256 [ 1196.300416][T15135] FAT-fs (loop2): Directory bread(block 64) failed [ 1196.300454][T15135] FAT-fs (loop2): Directory bread(block 65) failed [ 1196.300576][T15135] FAT-fs (loop2): Directory bread(block 66) failed [ 1196.300602][T15135] FAT-fs (loop2): Directory bread(block 67) failed [ 1196.300713][T15135] FAT-fs (loop2): Directory bread(block 68) failed [ 1196.300739][T15135] FAT-fs (loop2): Directory bread(block 69) failed [ 1196.303705][T15135] FAT-fs (loop2): Directory bread(block 70) failed [ 1196.303737][T15135] FAT-fs (loop2): Directory bread(block 71) failed [ 1196.331805][T15135] FAT-fs (loop2): Directory bread(block 72) failed [ 1196.331844][T15135] FAT-fs (loop2): Directory bread(block 73) failed [ 1197.048646][ T32] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1197.232582][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 1197.238048][ T32] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1197.238078][ T32] usb 2-1: config 0 has no interface number 0 [ 1197.248384][ T32] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1197.248416][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.248438][ T32] usb 2-1: Product: syz [ 1197.248463][ T32] usb 2-1: Manufacturer: syz [ 1197.248479][ T32] usb 2-1: SerialNumber: syz [ 1197.297851][ T5630] Bluetooth: hci1: command tx timeout [ 1197.299664][ T32] usb 2-1: config 0 descriptor?? [ 1197.329809][ T32] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1197.449316][ T821] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1197.663199][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 1197.686143][ T821] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1197.686243][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.941958][T15157] raw_sendmsg: syz.5.2008 forgot to set AF_INET. Fix it! [ 1197.977898][ T821] usb 3-1: config 0 descriptor?? [ 1197.992656][ T32] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1198.039137][ T821] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1198.117794][ T32] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1198.349141][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1198.388795][ T32] usb 2-1: USB disconnect, device number 33 [ 1198.526566][ T32] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1198.605622][ T32] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1198.652781][ T32] quatech2 2-1:0.51: device disconnected [ 1199.005457][T15167] tipc: Started in network mode [ 1199.005492][T15167] tipc: Node identity e0000001, cluster identity 4711 [ 1199.005538][T15167] tipc: Enabling of bearer rejected, failed to enable media [ 1199.554493][ T5630] Bluetooth: hci1: command tx timeout [ 1199.583263][ T821] gspca_sonixj: i2c_w8 err -71 [ 1199.604872][ T821] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1199.746465][ T821] usb 3-1: USB disconnect, device number 51 [ 1201.232171][T15187] loop5: detected capacity change from 0 to 1024 [ 1201.365708][T15187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.365867][T15187] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.194864][T15200] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2017: bg 0: block 112: padding at end of block bitmap is not set [ 1202.347083][ T5630] Bluetooth: hci1: command tx timeout [ 1202.362165][T15200] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1202.362199][T15200] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1202.362199][T15200] [ 1202.362215][T15200] EXT4-fs (loop5): Total free blocks count 0 [ 1202.362231][T15200] EXT4-fs (loop5): Free/Dirty block details [ 1202.362288][T15200] EXT4-fs (loop5): free_blocks=0 [ 1202.362337][T15200] EXT4-fs (loop5): dirty_blocks=64 [ 1202.362352][T15200] EXT4-fs (loop5): Block reservation details [ 1202.362366][T15200] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 1202.524227][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 1202.712121][ T8879] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1202.750483][ T8879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1203.040077][ T1025] kworker/u8:7 (1025) used greatest stack depth: 16256 bytes left [ 1203.219900][T15210] loop2: detected capacity change from 0 to 32768 [ 1203.222200][T15210] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2023 (15210) [ 1203.264535][T15210] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1203.264577][T15210] BTRFS info (device loop2): using sha256 checksum algorithm [ 1203.276793][T11963] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1203.478131][T11963] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1203.478157][T11963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1203.478178][T11963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1203.519201][T11963] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1203.519234][T11963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.519256][T11963] usb 2-1: Product: syz [ 1203.519272][T11963] usb 2-1: Manufacturer: syz [ 1203.519287][T11963] usb 2-1: SerialNumber: syz [ 1203.549158][T15210] BTRFS info (device loop2): setting nodatasum [ 1203.549189][T15210] BTRFS info (device loop2): enabling ssd optimizations [ 1203.549213][T15210] BTRFS info (device loop2): enabling free space tree [ 1203.609392][T11963] usb 2-1: config 0 descriptor?? [ 1203.641448][T11963] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 1203.753373][T12983] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1203.893350][T11963] usb 2-1: USB disconnect, device number 34 [ 1204.491509][T12983] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1204.491536][T12983] usb 5-1: config 0 has no interface number 0 [ 1204.491577][T12983] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.491605][T12983] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.491642][T12983] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1204.491667][T12983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.498959][T12983] usb 5-1: config 0 descriptor?? [ 1205.396659][T15241] overlayfs: failed to resolve './bus': -2 [ 1205.425586][T15229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.427999][T15229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.756504][ T5628] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1206.244225][T15255] loop1: detected capacity change from 0 to 512 [ 1206.326302][T15255] EXT4-fs: Ignoring removed nobh option [ 1206.340408][T15255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1206.551332][T15255] EXT4-fs (loop1): 1 truncate cleaned up [ 1206.601962][T15255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.750034][T15107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.750710][T15107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.751151][T15107] bridge_slave_0: entered allmulticast mode [ 1206.827426][T15107] bridge_slave_0: entered promiscuous mode [ 1206.890196][T15261] loop5: detected capacity change from 0 to 4096 [ 1206.966249][T15261] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1206.966278][T15261] NILFS (loop5): trying rollback from an earlier position [ 1207.037093][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.172114][T15261] NILFS (loop5): recovery complete [ 1207.300890][T15262] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.308883][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.309493][T15107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.310040][T15107] bridge_slave_1: entered allmulticast mode [ 1207.427711][T15107] bridge_slave_1: entered promiscuous mode [ 1207.705147][T15229] loop4: detected capacity change from 0 to 512 [ 1209.102932][T15107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.310588][T15107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.884571][T15107] team0: Port device team_slave_0 added [ 1211.019923][ T5630] Bluetooth: hci0: unexpected cc 0x0c2d length: 65 > 4 [ 1211.019958][ T5630] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 1211.125756][T15281] loop2: detected capacity change from 0 to 764 [ 1211.218705][ T1128] bridge_slave_1: left allmulticast mode [ 1211.218742][ T1128] bridge_slave_1: left promiscuous mode [ 1211.219264][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.856712][T12983] usbhid 5-1:0.1: can't add hid device: -32 [ 1211.860058][T12983] usbhid 5-1:0.1: probe with driver usbhid failed with error -32 [ 1212.207734][ T1128] bridge_slave_0: left allmulticast mode [ 1212.207771][ T1128] bridge_slave_0: left promiscuous mode [ 1212.208074][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.869486][T15290] loop1: detected capacity change from 0 to 32768 [ 1213.870806][T15290] btrfs: Deprecated parameter 'usebackuproot' [ 1213.870831][T15290] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1213.878421][T15290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2037 (15290) [ 1214.079563][T15295] loop5: detected capacity change from 0 to 32768 [ 1214.080761][T15295] btrfs: Deprecated parameter 'usebackuproot' [ 1214.080784][T15295] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1214.149583][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1214.149709][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1214.157318][T15295] BTRFS info: device /dev/loop5 (7:5) using temp-fsid f0552ef3-034e-4cfc-9bbd-a79607958f39 [ 1214.157383][T15295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2041 (15295) [ 1214.229238][T15290] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1214.229275][T15290] BTRFS info (device loop1): using crc32c checksum algorithm [ 1214.232947][T15295] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1214.232979][T15295] BTRFS info (device loop5): using crc32c checksum algorithm [ 1214.294783][T15303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2042'. [ 1214.299383][ T821] usb 5-1: USB disconnect, device number 42 [ 1214.515060][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1214.515191][T15295] BTRFS error (device loop5): failed to load root extent [ 1214.515220][T15295] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1214.536620][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1214.536919][T15295] BTRFS warning (device loop5): couldn't read tree root [ 1214.536980][T15295] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1214.539001][T10322] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1214.539391][T15295] BTRFS warning (device loop5): couldn't read tree root [ 1214.539451][T15295] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1214.551159][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1214.551377][T15290] BTRFS error (device loop1): failed to load root extent [ 1214.551423][T15290] BTRFS warning (device loop1): try to load backup roots slot 1 [ 1214.552394][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1214.552559][T15290] BTRFS warning (device loop1): couldn't read tree root [ 1214.552628][T15290] BTRFS warning (device loop1): try to load backup roots slot 2 [ 1214.574663][T10311] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1214.574778][T15290] BTRFS warning (device loop1): couldn't read tree root [ 1214.574805][T15290] BTRFS warning (device loop1): try to load backup roots slot 3 [ 1214.616408][T15295] BTRFS info (device loop5): rebuilding free space tree [ 1214.684094][T15290] BTRFS info (device loop1): rebuilding free space tree [ 1215.055468][T15290] BTRFS info (device loop1): checking UUID tree [ 1215.056690][T15290] BTRFS info (device loop1): enabling ssd optimizations [ 1215.056717][T15290] BTRFS info (device loop1): turning on async discard [ 1215.056737][T15290] BTRFS info (device loop1): enabling free space tree [ 1215.056756][T15290] BTRFS info (device loop1): force clearing of disk cache [ 1215.056775][T15290] BTRFS info (device loop1): enabling auto defrag [ 1215.056794][T15290] BTRFS info (device loop1): trying to use backup root at mount time [ 1215.056815][T15290] BTRFS info (device loop1): use zstd compression, level 3 [ 1215.071523][T15295] BTRFS info (device loop5): checking UUID tree [ 1215.079692][T15295] BTRFS info (device loop5): enabling ssd optimizations [ 1215.079770][T15295] BTRFS info (device loop5): turning on async discard [ 1215.079822][T15295] BTRFS info (device loop5): enabling free space tree [ 1215.079872][T15295] BTRFS info (device loop5): force clearing of disk cache [ 1215.079916][T15295] BTRFS info (device loop5): enabling auto defrag [ 1215.079965][T15295] BTRFS info (device loop5): trying to use backup root at mount time [ 1215.080015][T15295] BTRFS info (device loop5): use lzo compression, level 1 [ 1215.649281][ T38] audit: type=1800 audit(1779593502.233:5605): pid=15295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2041" name="file0" dev="loop5" ino=259 res=0 errno=0 [ 1216.029666][ T5625] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1217.755118][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.389385][ T8879] BTRFS info (device loop5): last unmount of filesystem f0552ef3-034e-4cfc-9bbd-a79607958f39 [ 1218.421544][T15334] loop4: detected capacity change from 0 to 4096 [ 1218.477815][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.606949][ T1128] bond0 (unregistering): Released all slaves [ 1218.624541][T15334] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1218.624567][T15334] NILFS (loop4): trying rollback from an earlier position [ 1218.834481][T15107] team0: Port device team_slave_1 added [ 1219.087854][T15334] NILFS (loop4): recovery complete [ 1219.089752][T15340] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1221.276367][T15107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.276386][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.276416][T15107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.479981][ T38] audit: type=1326 audit(1779593507.606:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15343 comm="syz.2.2047" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490901ce59 code=0x7ffc0000 [ 1221.480041][ T38] audit: type=1326 audit(1779593507.606:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15343 comm="syz.2.2047" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490901ce59 code=0x7ffc0000 [ 1221.480092][ T38] audit: type=1326 audit(1779593507.606:5608): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=15343 comm="syz.2.2047" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490901ce59 code=0x7ffc0000 [ 1221.480142][ T38] audit: type=1326 audit(1779593507.606:5609): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=15343 comm="syz.2.2047" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490901ce59 code=0x7ffc0000 [ 1221.480192][ T38] audit: type=1326 audit(1779593507.606:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15343 comm="syz.2.2047" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f490901ce59 code=0x7ffc0000 [ 1221.480242][ T38] audit: type=1326 audit(1779593507.606:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15343 comm="syz.2.2047" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f490901ce59 code=0x7ffc0000 [ 1221.657710][T15107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.657730][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.657787][T15107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.860548][T15107] hsr_slave_0: entered promiscuous mode [ 1221.863493][T15107] hsr_slave_1: entered promiscuous mode [ 1221.884169][T15107] debugfs: 'hsr0' already exists in 'hsr' [ 1221.884199][T15107] Cannot create hsr debugfs directory [ 1222.690466][T15365] loop1: detected capacity change from 0 to 764 [ 1222.830367][T15363] erspan1: entered promiscuous mode [ 1222.830395][T15363] erspan1: entered allmulticast mode [ 1222.911904][T15362] loop2: detected capacity change from 0 to 2048 [ 1223.040642][T15362] loop2: p2 < > p4 [ 1223.046327][T15362] loop2: p4 size 8192 extends beyond EOD, truncated [ 1223.217847][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 1224.007867][ T1128] hsr_slave_0: left promiscuous mode [ 1224.066256][ T1128] hsr_slave_1: left promiscuous mode [ 1224.067395][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.141137][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.837945][T15371] loop5: detected capacity change from 0 to 32768 [ 1225.677992][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 1226.024365][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 1226.702795][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 1226.787015][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1227.847672][T15394] loop5: detected capacity change from 0 to 32768 [ 1227.848517][T15394] btrfs: Deprecated parameter 'usebackuproot' [ 1227.848533][T15394] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1227.867098][T15394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2053 (15394) [ 1227.902023][T15394] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1227.902057][T15394] BTRFS info (device loop5): using crc32c checksum algorithm [ 1228.236016][T10322] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1228.236151][T15394] BTRFS error (device loop5): failed to load root extent [ 1228.252884][T15394] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1228.253632][T10314] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1228.255136][T15394] BTRFS warning (device loop5): couldn't read tree root [ 1228.255160][T15394] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1228.285864][T10314] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1228.286236][T15394] BTRFS warning (device loop5): couldn't read tree root [ 1228.286295][T15394] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1228.363660][T15394] BTRFS info (device loop5): rebuilding free space tree [ 1228.442717][T15414] loop2: detected capacity change from 0 to 512 [ 1228.508345][T15414] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2055: inode has both inline data and extents flags [ 1228.508377][T15414] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1228.510327][T15414] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2055: couldn't read orphan inode 15 (err -117) [ 1228.510360][T15414] loop2: lost filesystem error report for type 5 error -117 [ 1228.514602][T15414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1228.714163][T15394] BTRFS info (device loop5): disabling free space tree [ 1228.714298][T15394] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1228.714318][T15394] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1228.805669][T15394] BTRFS info (device loop5): checking UUID tree [ 1228.827511][T15394] BTRFS info (device loop5): enabling ssd optimizations [ 1228.827529][T15394] BTRFS info (device loop5): using spread ssd allocation scheme [ 1228.827543][T15394] BTRFS info (device loop5): turning on async discard [ 1228.827556][T15394] BTRFS info (device loop5): force clearing of disk cache [ 1228.827568][T15394] BTRFS info (device loop5): enabling auto defrag [ 1228.827579][T15394] BTRFS info (device loop5): trying to use backup root at mount time [ 1228.827593][T15394] BTRFS info (device loop5): use zstd compression, level 3 [ 1230.108758][ T8879] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1230.261824][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1231.814909][T15438] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1231.815004][T15438] UDF-fs: Scanning with blocksize 512 failed [ 1231.817639][T15438] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1231.817661][T15438] UDF-fs: Scanning with blocksize 1024 failed [ 1231.818568][T15438] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1231.818589][T15438] UDF-fs: Scanning with blocksize 2048 failed [ 1231.867811][T15438] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1231.867836][T15438] UDF-fs: Scanning with blocksize 4096 failed [ 1231.980683][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.429364][T15456] random: crng reseeded on system resumption [ 1236.514564][T15484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2067'. [ 1236.514604][T15484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2067'. [ 1236.800221][T15484] erspan0: entered promiscuous mode [ 1236.813237][T15484] gretap0: entered promiscuous mode [ 1237.511647][ T32] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1238.223093][ T32] usb 6-1: config 0 has no interfaces? [ 1238.223134][ T32] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1238.223161][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.260741][ T32] usb 6-1: config 0 descriptor?? [ 1238.776129][T15511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1238.776158][T15511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1238.776269][T15511] vhci_hcd vhci_hcd.0: Device attached [ 1239.958571][T15515] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1239.958608][T15515] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1239.963208][T15515] vhci_hcd vhci_hcd.0: Device attached [ 1239.971952][T14373] usb 6-1: USB disconnect, device number 27 [ 1240.425668][T11963] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1240.540607][T15526] input: syz0 as /devices/virtual/input/input13 [ 1240.643449][T15525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.650398][T15511] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 1240.650465][T15511] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1240.758471][T15515] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 1240.758500][T15515] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1240.841287][T15515] vhci_hcd vhci_hcd.0: Device attached [ 1240.938965][T15511] vhci_hcd vhci_hcd.0: Device attached [ 1240.956157][T15523] vhci_hcd: connection closed [ 1240.958091][T10314] vhci_hcd vhci_hcd.4: stop threads [ 1240.958349][T10314] vhci_hcd vhci_hcd.4: release socket [ 1240.994967][T10314] vhci_hcd vhci_hcd.4: disconnect device [ 1241.028584][T15521] vhci_hcd: connection closed [ 1241.029106][ T1128] vhci_hcd vhci_hcd.4: stop threads [ 1241.029130][ T1128] vhci_hcd vhci_hcd.4: release socket [ 1241.029207][ T1128] vhci_hcd vhci_hcd.4: disconnect device [ 1241.029630][T15512] vhci_hcd: connection reset by peer [ 1241.030183][ T1128] vhci_hcd vhci_hcd.4: stop threads [ 1241.030201][ T1128] vhci_hcd vhci_hcd.4: release socket [ 1241.032752][T15518] vhci_hcd: connection closed [ 1241.046951][ T1128] vhci_hcd vhci_hcd.4: disconnect device [ 1241.121991][ T1128] vhci_hcd vhci_hcd.4: stop threads [ 1241.122019][ T1128] vhci_hcd vhci_hcd.4: release socket [ 1241.133198][ T1128] vhci_hcd vhci_hcd.4: disconnect device [ 1243.922051][T15548] [ 1243.922067][T15548] ====================================================== [ 1243.922136][T15548] WARNING: possible circular locking dependency detected [ 1243.922184][T15548] syzkaller #0 Tainted: G L [ 1243.922225][T15548] ------------------------------------------------------ [ 1243.922264][T15548] syz.4.2077/15548 is trying to acquire lock: [ 1243.922278][T15548] ffff88803dc914c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1243.922417][T15548] [ 1243.922417][T15548] but task is already holding lock: [ 1243.922427][T15548] ffffffff8e74bdd8 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1243.922514][T15548] [ 1243.922514][T15548] which lock already depends on the new lock. [ 1243.922514][T15548] [ 1243.922524][T15548] [ 1243.922524][T15548] the existing dependency chain (in reverse order) is: [ 1243.922534][T15548] [ 1243.922534][T15548] -> #6 (major_names_lock){+.+.}-{4:4}: [ 1243.922592][T15548] mutex_lock_nested+0x5a/0x1d0 [ 1243.922622][T15548] blk_request_module+0x35/0x2a0 [ 1243.922652][T15548] blkdev_get_no_open+0x3f/0xe0 [ 1243.922676][T15548] bdev_file_open_by_dev+0xa0/0x240 [ 1243.922702][T15548] swsusp_check+0x56/0x490 [ 1243.922752][T15548] software_resume+0x51/0x4c0 [ 1243.922774][T15548] resume_store+0x333/0x4f0 [ 1243.922794][T15548] kernfs_fop_write_iter+0x3b0/0x540 [ 1243.922827][T15548] vfs_write+0x629/0xba0 [ 1243.922852][T15548] ksys_write+0x156/0x270 [ 1243.922877][T15548] do_syscall_64+0x15f/0x560 [ 1243.922898][T15548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.922920][T15548] [ 1243.922920][T15548] -> #5 (system_transition_mutex){+.+.}-{4:4}: [ 1243.922952][T15548] mutex_lock_nested+0x5a/0x1d0 [ 1243.922979][T15548] lock_system_sleep+0x49/0x70 [ 1243.923004][T15548] resume_store+0x2ff/0x4f0 [ 1243.923024][T15548] kernfs_fop_write_iter+0x3b0/0x540 [ 1243.923054][T15548] vfs_write+0x629/0xba0 [ 1243.923078][T15548] ksys_write+0x156/0x270 [ 1243.923103][T15548] do_syscall_64+0x15f/0x560 [ 1243.923123][T15548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.923145][T15548] [ 1243.923145][T15548] -> #4 (&of->mutex){+.+.}-{4:4}: [ 1243.923175][T15548] mutex_lock_nested+0x5a/0x1d0 [ 1243.923210][T15548] kernfs_seq_start+0x5c/0x420 [ 1243.923243][T15548] traverse+0x164/0x580 [ 1243.923274][T15548] seq_read_iter+0xd09/0xe20 [ 1243.923303][T15548] lo_rw_aio+0xc80/0xf00 [ 1243.923381][T15548] loop_process_work+0x92a/0x11b0 [ 1243.923406][T15548] process_one_work+0x98b/0x1630 [ 1243.923438][T15548] worker_thread+0xb49/0x1140 [ 1243.923457][T15548] kthread+0x388/0x470 [ 1243.923481][T15548] ret_from_fork+0x514/0xb70 [ 1243.923507][T15548] ret_from_fork_asm+0x1a/0x30 [ 1243.923536][T15548] [ 1243.923536][T15548] -> #3 (&p->lock){+.+.}-{4:4}: [ 1243.923567][T15548] mutex_lock_nested+0x5a/0x1d0 [ 1243.923593][T15548] seq_read_iter+0xb8/0xe20 [ 1243.923623][T15548] lo_rw_aio+0xc80/0xf00 [ 1243.923645][T15548] loop_process_work+0x92a/0x11b0 [ 1243.923669][T15548] process_one_work+0x98b/0x1630 [ 1243.923699][T15548] worker_thread+0xb49/0x1140 [ 1243.923718][T15548] kthread+0x388/0x470 [ 1243.923742][T15548] ret_from_fork+0x514/0xb70 [ 1243.923767][T15548] ret_from_fork_asm+0x1a/0x30 [ 1243.923796][T15548] [ 1243.923796][T15548] -> #2 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1243.923830][T15548] process_one_work+0x8d7/0x1630 [ 1243.923863][T15548] worker_thread+0xb49/0x1140 [ 1243.923883][T15548] kthread+0x388/0x470 [ 1243.923906][T15548] ret_from_fork+0x514/0xb70 [ 1243.923932][T15548] ret_from_fork_asm+0x1a/0x30 [ 1243.923962][T15548] [ 1243.923962][T15548] -> #1 ((wq_completion)loop2){+.+.}-{0:0}: [ 1243.923994][T15548] touch_wq_lockdep_map+0xcb/0x180 [ 1243.924017][T15548] __flush_workqueue+0x14b/0x14f0 [ 1243.924039][T15548] drain_workqueue+0xd3/0x390 [ 1243.924061][T15548] lo_release+0x287/0x8f0 [ 1243.924084][T15548] bdev_release+0x541/0x660 [ 1243.924109][T15548] blkdev_release+0x15/0x20 [ 1243.924136][T15548] __fput+0x461/0xa70 [ 1243.924156][T15548] fput_close_sync+0x11f/0x240 [ 1243.924178][T15548] __x64_sys_close+0x7e/0x110 [ 1243.924207][T15548] do_syscall_64+0x15f/0x560 [ 1243.924228][T15548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.924250][T15548] [ 1243.924250][T15548] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 1243.924281][T15548] __lock_acquire+0x15a5/0x2d10 [ 1243.924308][T15548] lock_acquire+0x106/0x350 [ 1243.924334][T15548] mutex_lock_nested+0x5a/0x1d0 [ 1243.924360][T15548] bdev_open+0xe0/0xcc0 [ 1243.924385][T15548] bdev_file_open_by_dev+0x1be/0x240 [ 1243.924411][T15548] disk_scan_partitions+0x1c1/0x2c0 [ 1243.924440][T15548] add_disk_fwnode+0x321/0x480 [ 1243.924469][T15548] brd_alloc+0x5c9/0x7d0 [ 1243.924489][T15548] blk_request_module+0x27d/0x2a0 [ 1243.924519][T15548] blkdev_get_no_open+0x3f/0xe0 [ 1243.924544][T15548] bdev_file_open_by_dev+0xa0/0x240 [ 1243.924569][T15548] swsusp_check+0x56/0x490 [ 1243.924593][T15548] software_resume+0x51/0x4c0 [ 1243.924613][T15548] resume_store+0x333/0x4f0 [ 1243.924634][T15548] kernfs_fop_write_iter+0x3b0/0x540 [ 1243.924665][T15548] vfs_write+0x629/0xba0 [ 1243.924689][T15548] ksys_write+0x156/0x270 [ 1243.924716][T15548] do_syscall_64+0x15f/0x560 [ 1243.924737][T15548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.924758][T15548] [ 1243.924758][T15548] other info that might help us debug this: [ 1243.924758][T15548] [ 1243.924768][T15548] Chain exists of: [ 1243.924768][T15548] &disk->open_mutex --> system_transition_mutex --> major_names_lock [ 1243.924768][T15548] [ 1243.924835][T15548] Possible unsafe locking scenario: [ 1243.924835][T15548] [ 1243.924844][T15548] CPU0 CPU1 [ 1243.924882][T15548] ---- ---- [ 1243.924897][T15548] lock(major_names_lock); [ 1243.924914][T15548] lock(system_transition_mutex); [ 1243.924933][T15548] lock(major_names_lock); [ 1243.924952][T15548] lock(&disk->open_mutex); [ 1243.924968][T15548] [ 1243.924968][T15548] *** DEADLOCK *** [ 1243.924968][T15548] [ 1243.924976][T15548] 6 locks held by syz.4.2077/15548: [ 1243.924990][T15548] #0: ffff888038c8c328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1243.925071][T15548] #1: ffff8880359f4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1243.925157][T15548] #2: ffff888032e14478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1243.925227][T15548] #3: ffff88801ee8ff08 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1243.925297][T15548] #4: ffffffff8de756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 1243.925350][T15548] #5: ffffffff8e74bdd8 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1243.925412][T15548] [ 1243.925412][T15548] stack backtrace: [ 1243.925431][T15548] CPU: 1 UID: 0 PID: 15548 Comm: syz.4.2077 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1243.925462][T15548] Tainted: [L]=SOFTLOCKUP [ 1243.925471][T15548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.925486][T15548] Call Trace: [ 1243.925496][T15548] [ 1243.925507][T15548] dump_stack_lvl+0xe8/0x150 [ 1243.925538][T15548] print_circular_bug+0x2e1/0x300 [ 1243.925576][T15548] check_noncircular+0x12e/0x150 [ 1243.925614][T15548] __lock_acquire+0x15a5/0x2d10 [ 1243.925656][T15548] ? bdev_open+0xe0/0xcc0 [ 1243.925682][T15548] lock_acquire+0x106/0x350 [ 1243.925710][T15548] ? bdev_open+0xe0/0xcc0 [ 1243.925739][T15548] ? bdev_open+0xe0/0xcc0 [ 1243.925768][T15548] ? bdev_open+0xe0/0xcc0 [ 1243.925793][T15548] mutex_lock_nested+0x5a/0x1d0 [ 1243.925821][T15548] ? bdev_open+0xe0/0xcc0 [ 1243.925848][T15548] bdev_open+0xe0/0xcc0 [ 1243.925881][T15548] bdev_file_open_by_dev+0x1be/0x240 [ 1243.925910][T15548] disk_scan_partitions+0x1c1/0x2c0 [ 1243.925944][T15548] add_disk_fwnode+0x321/0x480 [ 1243.925979][T15548] brd_alloc+0x5c9/0x7d0 [ 1243.926004][T15548] ? __pfx_brd_alloc+0x10/0x10 [ 1243.926041][T15548] ? __pfx_brd_probe+0x10/0x10 [ 1243.926064][T15548] ? __pfx_brd_probe+0x10/0x10 [ 1243.926088][T15548] ? blk_request_module+0x25b/0x2a0 [ 1243.926122][T15548] ? __pfx_brd_probe+0x10/0x10 [ 1243.926147][T15548] blk_request_module+0x27d/0x2a0 [ 1243.926181][T15548] blkdev_get_no_open+0x3f/0xe0 [ 1243.926216][T15548] bdev_file_open_by_dev+0xa0/0x240 [ 1243.926246][T15548] swsusp_check+0x56/0x490 [ 1243.926275][T15548] software_resume+0x51/0x4c0 [ 1243.926299][T15548] resume_store+0x333/0x4f0 [ 1243.926321][T15548] ? irqentry_exit+0x218/0x760 [ 1243.926343][T15548] ? rcu_is_watching+0x15/0xb0 [ 1243.926376][T15548] ? __pfx_resume_store+0x10/0x10 [ 1243.926403][T15548] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1243.926427][T15548] ? __pfx_resume_store+0x10/0x10 [ 1243.926451][T15548] ? kobj_attr_store+0x4f/0x90 [ 1243.926482][T15548] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1243.926505][T15548] kernfs_fop_write_iter+0x3b0/0x540 [ 1243.926543][T15548] vfs_write+0x629/0xba0 [ 1243.926574][T15548] ? __pfx_vfs_write+0x10/0x10 [ 1243.926603][T15548] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1243.926627][T15548] ? lockdep_hardirqs_on+0x7a/0x110 [ 1243.926650][T15548] ? mutex_lock_nested+0x152/0x1d0 [ 1243.926678][T15548] ? fdget_pos+0x252/0x320 [ 1243.926706][T15548] ksys_write+0x156/0x270 [ 1243.926736][T15548] ? __pfx_ksys_write+0x10/0x10 [ 1243.926768][T15548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.926793][T15548] do_syscall_64+0x15f/0x560 [ 1243.926816][T15548] ? clear_bhb_loop+0x40/0x90 [ 1243.926842][T15548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.926865][T15548] RIP: 0033:0x7f7ad055ce59 [ 1243.926886][T15548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.926908][T15548] RSP: 002b:00007f7ace76c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1243.926932][T15548] RAX: ffffffffffffffda RBX: 00007f7ad07d6180 RCX: 00007f7ad055ce59 [ 1243.926950][T15548] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000005 [ 1243.926967][T15548] RBP: 00007f7ad05f2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1243.926983][T15548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.926997][T15548] R13: 00007f7ad07d6218 R14: 00007f7ad07d6180 R15: 00007ffc9d658e78 [ 1243.927025][T15548] [ 1243.936181][T15548] block device autoloading is deprecated and will be removed. [ 1243.936829][T15548] PM: Image not found (code -22) [ 1244.410045][T15107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1244.616463][T15107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1244.637013][T15107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1244.735314][T15107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1244.747282][T15107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1244.898033][T15107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1244.935981][T15107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1245.066087][T12983] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1245.119802][T15107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1245.239399][T12983] usb 6-1: Using ep0 maxpacket: 32 [ 1245.253777][T12983] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1245.253805][T12983] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1245.253830][T12983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1245.253853][T12983] usb 6-1: config 1 has no interface number 0 [ 1245.253889][T12983] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1245.253919][T12983] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1245.253960][T12983] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1245.253985][T12983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.616959][T12983] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1245.685466][T15107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.703661][T12983] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1245.761787][T15107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.783447][T10322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.783907][T10322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.811758][T10322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.811858][T10322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.986857][T11963] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1246.188468][T12983] usb 6-1: USB disconnect, device number 28 [ 1246.199787][T12983] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1246.394906][T15107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.679234][T15107] veth0_vlan: entered promiscuous mode [ 1246.693884][T15107] veth1_vlan: entered promiscuous mode [ 1246.736118][T15107] veth0_macvtap: entered promiscuous mode [ 1246.741644][T15107] veth1_macvtap: entered promiscuous mode [ 1246.774187][T15107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.805219][T15107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.820373][T10322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.820542][T10322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.820581][T10322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.820618][T10322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.013039][T15107] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 1247.041053][ T1429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.041075][ T1429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.046398][T15107] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 1247.089215][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.089238][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50