last executing test programs: 21m4.667860331s ago: executing program 3 (id=16): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setreuid(0xee00, 0x0) setns(0xffffffffffffffff, 0x24020000) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@random={'osx.', '/dev/cpu/#/msr\x00'}, &(0x7f0000000240)='\x00', 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setresuid(0x0, 0x0, 0x0) 21m2.576626615s ago: executing program 3 (id=19): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") socket$inet(0x2b, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0xb, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x1, 0x1ab, &(0x7f00000009c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x5, 0x1d, 0x100, &(0x7f00000000c0)="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"}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 20m55.744790737s ago: executing program 3 (id=28): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$eJzs3c9vVF0ZAOD3Tjttv34DBWWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMXY+6dSzu0HVqk7dDO8yR37j3nXuY9Z4ZzztzDDCeAnnUuItYiYiAi7kfESJ6f5FvcbG3pda9fPZlef/VkOolm8+4/kux8mhdtfyb1af6cQxHxg+9G/DjZHrexsjo/Va1WFvP06FJtYbSxsnp5rpDnTEyOT45dv3JtYt/qerb2m5ffmbv9w9/99ksv/rj2zZ+mxSr97ER2rr0e+6lV9WKU2vL6I+L2QQTrkv787w9HT9raPhMR57P2PxJ92bsJABxnzeZINEfa0wDAcZfe/5ciKZTzuYBSFArlcmsO70wMF6r1xtKlkfryw5nI5rBORbHwYK5aGcvnCk9FMUnT49nxZnpiS/pKRJyOiJ8PfpKly9P16kw3P/gAQA/7dMv4/+/B1vgPABxzQ+95va8IAMDR977jPwBw9Bn/AaD3vMf4b+ofAI4J9/8A0HuM/wDQe3Yd/58eTjkAgEPx/Tt30q25nv//1zOPVpa/VXp0eabSmC/XlqfL0/XFhfJsvT5brZSnm83dnq9ary+MX91INlZW79Xqyw+X7s3VpmYr9yrFA64PALC702ef/zmJiLUbn2RbtK3lYKyG463Q7QIAXdPX7QIAXeP3PNC79nCPbxoAjrkdluh9S8evCD2z+CscVRc/b/4fepX5f+hd/9/8/7f3vRzA4TP/D72r2Uys+Q8APcYcP/BB//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaqUbUmhnK0FvpY+FsrliBMRcSqKyYO5amUsIk5GxJ8Gi4NperzbhQYAPlDhb0m+/tfFkQulrWcHkv8MZvuI+Mkv7/7i8dTS0uJ4mv/PjfylZ3n+xEA3KgAAtLu5Pas1Tuf7thv516+eTL/ZDrOIL2+1FhdN467nW+tMf/Rn+6EoRsTwv5I83ZJ+Xunbh/hrTyPic5v1f9wWoZTNgbRWPt0aP4194gDib77+W+MX3opfyM6l+2L2Wnx2H8oCveb5rVY/mbe9tInl7a8Q57L9zu1/KOuhPtyb/m99W/9X2Oj/+rbFT7I2f24j/e6SvLz6++9ty2yOtM49jfhC/07xk434SYf+98Ie6/iXL375fKdzzV9FXIyd47fUsm52dKm2MNpYWb08V5uarcxWHk5MTI5Pjl2/cm1iNJujbj3+YacYf79x6WSn+Gn9hzvEH9ql/l/bY/1//d/7P/rKO+J/46s7v/9n3hE/HRO/vsf4U8M3Oy7fncaf6VD/3d7/S3uM/+KvqzN7vBQAOASNldX5qWq1srjLQfpZc7drHBzNg1iL+AiKkR8MxEdRjJ4/6HbPBBy0zUbf7ZIAAAAAAAAAAAAAAACdNFZW5wfjYH9O1O06AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHz9LwAA//9Jt84K") socket$inet(0x2b, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0xb, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x1, 0x1ab, &(0x7f00000009c0)="$eJzKKC4sZmdgYFjNwcDAIMAABowMPAwXGBgZWBgYGNQZIWIMTBBqPZT/AkrPhErbQPnNUHohlK64pb1uzSm/Myc9dbWWyTIzt8pDNUDF5FJ7jNwkF/NIMDOEph5ZVFxZlZ2Yk5Na1MDMUHGLgYMBFXA4gIxlZWBgyJrRWMI5SUpTjI0tU+HsmQ/y69g0jjA8WsG8sc4zr7GuMHVq3imGpKqsqqx5EydunNnY2di4cmJdVJrfKsaWFJdNTZ2MKN5iaF/1MAlmm9LrVOZLxguLpE6tqJoJ8/8dnrIVEhoaThJXJCwaTBiO1Nk2uDJU3EpOaWBI28LOmKTGJta25cwcRgZGBrcFCi3JJ5hCj3IsnSnBeECo6iRjg+Zbh0S3GdueOrCd4Tl8nGdNQZ9g/XEJBqeFgv9lQMYcaGgo01jLtNR2wZcijb8SXquNnTIY3O2ZlsEClKUBRK6E8mRBehISklew62hqGhkyJDRskkhIciswVGbYuodztUADA1K0qTAwMGxnhMUtBFxjZBgFo2AUjIJRMApGwSgYBaNgFIyCUTCCACAAAP//ptx9eg==") inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 20m46.006514952s ago: executing program 3 (id=39): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") socket$inet(0x2b, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0xb, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x1, 0x1ab, &(0x7f00000009c0)="$eJzKKC4sZmdgYFjNwcDAIMAABowMPAwXGBgZWBgYGNQZIWIMTBBqPZT/AkrPhErbQPnNUHohlK64pb1uzSm/Myc9dbWWyTIzt8pDNUDF5FJ7jNwkF/NIMDOEph5ZVFxZlZ2Yk5Na1MDMUHGLgYMBFXA4gIxlZWBgyJrRWMI5SUpTjI0tU+HsmQ/y69g0jjA8WsG8sc4zr7GuMHVq3imGpKqsqqx5EydunNnY2di4cmJdVJrfKsaWFJdNTZ2MKN5iaF/1MAlmm9LrVOZLxguLpE6tqJoJ8/8dnrIVEhoaThJXJCwaTBiO1Nk2uDJU3EpOaWBI28LOmKTGJta25cwcRgZGBrcFCi3JJ5hCj3IsnSnBeECo6iRjg+Zbh0S3GdueOrCd4Tl8nGdNQZ9g/XEJBqeFgv9lQMYcaGgo01jLtNR2wZcijb8SXquNnTIY3O2ZlsEClKUBRK6E8mRBehISklew62hqGhkyJDRskkhIciswVGbYuodztUADA1K0qTAwMGxnhMUtBFxjZBgFo2AUjIJRMApGwSgYBaNgFIyCUTCCACAAAP//ptx9eg==") inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x5, 0x1d, 0x100, &(0x7f00000000c0)="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"}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 20m35.098994912s ago: executing program 3 (id=46): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "10db3fa0"}, 0x5}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 20m28.339055007s ago: executing program 3 (id=55): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x25) timer_settime(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 20m12.356658261s ago: executing program 32 (id=55): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x25) timer_settime(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 19m20.164801989s ago: executing program 4 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000000), 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003a00010100000000000204000a03009566e68c04e8d5e7f1afdece41f537897b8dd6a37db860719f708905b5c3b5c1833cf3d3f43f769cd10c157ff51f8c5a78a2e02f791d"], 0x14}}, 0x4040000) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 19m14.295499692s ago: executing program 4 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000300)={[{}]}) 19m12.840519301s ago: executing program 4 (id=146): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@caif=@util={0x25, "6f1d6dc466d030842cc05129df287cc1"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="3896f702c4f6f9bb6442b716439f02c94eba1e7791985594d80dbb585d514f1043e34668a89fa936d405437cfdfb6096f369acfa5be93b4dd5e18df91f8576bd77545a57c8ef0cb394dd415131d1f4d63d56d8c080ddd04ccff5a4790fde7ba57afa84f51ffcb0b0c379bec0edc89b430c", 0x71}, {&(0x7f0000000000)="a67a097cfd350d3e7a96922159f010c414b294816f5900e3c3d4", 0x1a}, {&(0x7f0000000240)="ffc5aa269e93e075603d1fd05eeda5bf9ced58de413c22ea7087653bdb05e7aafad4aa51974bd63ee995ba05b466efce24f3aa675299ce04e572f49b7ef7a110788d84508438ce1dc9d7d7fbf710fa491617974055fb2c9c5f1e852897bf1837e3ca7c4eedf93a14674cb52413bc7e9e6bdd3a384ef8961a285ae12ea6a7b175adaa64dbef6f4eb80ae151baa2dee202ca7436ea14698847f461b91f60267873daf5847d936677bb129195fb9694d9892ba365fb26a5008d27aba697daef847bbe4650bb954ccc6d3764794153a17437b5ebcb4bf190d4859380fb", 0xdb}, {&(0x7f0000000540)}], 0x4}, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 19m10.864364854s ago: executing program 4 (id=150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000016401010200"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000110000000000000000000000000000000000003c00000002000000e0000001000000000000000000000000060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) 19m8.499535708s ago: executing program 4 (id=155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="1000000000006536009eb86a60c709d6b6cac4c2a01a50b07800b705000008000022f0cdddfcc01d16bb487550749a9ed6d31bb0ee310b47c89df970f511a3f4de21ae6f2cdc5b1cc7dc8b7b512942c56fc9ab47414ca3affd994818e3accfd2c67fca94156fa673f7cda52c5ba70c6f50f975cf77dd86300c2e"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) open(0x0, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_pgetevents(0x0, 0x6, 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380), &(0x7f0000000600)={0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) 19m7.077627967s ago: executing program 4 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 18m51.725077261s ago: executing program 33 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 18m12.142995655s ago: executing program 0 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18m10.405342374s ago: executing program 0 (id=232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) 18m9.128587322s ago: executing program 0 (id=235): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$llc_int(r3, 0x10c, 0x3, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0xffffffea, 0x0, 0x4804}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) 18m0.758089726s ago: executing program 0 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x10000010, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xc140, 0xd4, {0x0}, {0xee01}, 0xe}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) pipe(&(0x7f0000000200)) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) connect$tipc(r4, &(0x7f0000000440)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 17m58.264952632s ago: executing program 0 (id=247): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none}) 17m52.50567872s ago: executing program 0 (id=253): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") socket$inet(0x2b, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0xb, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x1, 0x1ab, &(0x7f00000009c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x5, 0x1d, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 17m36.555212238s ago: executing program 34 (id=253): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") socket$inet(0x2b, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0xb, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x1, 0x1ab, &(0x7f00000009c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x5, 0x1d, 0x100, &(0x7f00000000c0)="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"}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 24.538441544s ago: executing program 2 (id=1354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() io_uring_setup(0x4d3f, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084146, 0x0) 22.664067609s ago: executing program 2 (id=1357): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) close_range(r1, 0xffffffffffffffff, 0x0) 20.410212935s ago: executing program 2 (id=1358): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000004c0)={[{@utf8}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@unhide}, {@noadinicb}, {@nostrict}, {@uid_forget}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x11}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, 0x0, 0xfffffffe}, 0x10) rmdir(0x0) 16.725503907s ago: executing program 2 (id=1361): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000280), 0x21, 0x5548, &(0x7f00000058c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 16.723254526s ago: executing program 5 (id=1362): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r6, 0x6, 0x0, 0x0, 0x2, 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none}) 15.407734589s ago: executing program 5 (id=1363): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xb5) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 14.216616483s ago: executing program 2 (id=1364): io_setup(0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000300)={[{}, {@gid}]}) 11.068367945s ago: executing program 1 (id=1365): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x3c, 0x13, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") setrlimit(0x1, 0x0) truncate(0x0, 0x400000f000) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) sendmmsg$unix(r2, &(0x7f0000000640)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x6000080}}], 0x1, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="c0f069923334e3", 0x7}, {&(0x7f0000000340)="110071138b94abb9f73348e1102158c5ece57893b58b15c9373d6a481397c387bb98a6d4651d25f4e4dbc68e8b1bb9f6c73a9393e1e5c02c7876cd553fb67b682bb8a2d08da381b4d2c5d691d62894a2a9810a09196bf7d7d813ef597a8dfca7893c2aa0d472a7ff7b3657545d994ce00bc2212110ae4f001e9ddd44ecf7dfe864a486d07d7e3f828bd736a67ed1e91b88dd25e3c308d0d954aada8af321c779aa0d4a3f6fcc2bb8b65194bf43ed349ff4ff4b7f154774a6feb2bb0d0e59ec1189b566ff6ae27400642b", 0xca}], 0x2, &(0x7f0000000a80)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xf0, 0x117, 0x2, 0xd9, "2986fe03a2e54b3ca623cb6636a82b6e1eec9a9ea87d485e5c9c63781120bac90cc4a63ef7cd5b29d4afbf054eef23071ed9f5c19a0f5c6ca87e3d593e8bd13c48b85369efd1f6500c3a1511b3d44779905dbe7217f1b477669b51bde5ed3d5e1d32e6bc60bf4e49f03fb3b978c5f3e5981a876ffc30adcda93a4c38f07ffa40b8180e1a1671e48a72180e4f22b7d4f0472318e0404da9e4dc2199d02e7ea0ccf8a16a0eb517c332f000f785b9da1d1303e9f39745bd0c49c51789c5634b7e8d038ac4a138ee57df4834d6090573bc172391a47b3eff71db26"}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x90, 0x117, 0x2, 0x7a, "b922fe0f1447be3160247217479eff93a1e54f9435a6443197da464fcbe0f5b7a088c7a799f6bbb84fcb2191bc93ef2744f952148726547a20b22b8944677bba9c588c64fcddfd95f8bca45a5af5e34561f36e10626303e0ec1368b82e9bc851c79f592cae497612376d7a5474ea8129aeb98dc5a7b22118a96a"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1c8, 0x4000000}, {0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)="e1d9b54271b703d89d66f0ae0af0f17245b83fd2fba5888319a230130437734c4ca9040a8fec710f4162f78205e23804f4c8b56d5f05115b554b886041a763dd327602e3bdf2ed8646d443a2deebe7c831194dbc03d42f626a649bfcc3c52d42426733d9220eb85c8977cac57f74eadd58140f8d270efb6ab76a9879ffd7cdfd3351a510100d7a3458556372e10a116be79339584d4e93bf832cd9219e2319fb7e", 0xa1}, {&(0x7f0000003540)="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", 0xe87}], 0x2, &(0x7f0000000c80)=[@assoc={0x18, 0x117, 0x4, 0xf1e2}, @iv={0xa8, 0x117, 0x2, 0x94, "347d1c4cc248bbfde328491c9f52e5a1c99bf01baf9f3521c2e7a3b221385ac8ab236893a6c7e74cf46329b5ee7f57c134ac9641069ab091b91b6dfbab6de32794bbc6ce3148c59743470feb265d3b3a12f66c88032c8dbc306b983f5e03fe83093a56d17505f0f08f4115031e49b6fd27649954958ccec17be1c2087d735d094d68445a9e7c6c2964eb0b41e2da5aded2de0532"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xc0, 0x117, 0x2, 0xaa, "e0e272faca6276a6a8d29c5e16093b82ce17946767c96c9e09e281806bb072198edf997f0cba0130d53c508d8d01ec9dd40f893b1e9c8d8da949c75b3801bb6a6efb159f65bca9bd4f7988d73b94615222cb19563475d5798a46cb445fd5bbdeb684e9d5447779d56274458c7cfa99081924476f18751c6c540c66fe93fa9567b4d37fe2d1b45c7b420018cad5a556bcd9340cf5206f9fd4fc89bd9ef3f907bb17a3950a5061d5be821e"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xd8, 0x117, 0x2, 0xbd, "7fdd497f514ed0219edf284efbf22d37e44dea4108f7f0343960b0612893bbdf1703890d9064cbc9389b955ce7dd1d70b17a37b09f3c7f86f4baa6e7ce7b41d16a9cda46b3cd8fb8e4ade22d729769ad50895b30e4253c1c53c4e1693b15a4988d1327dcf4ba849a3700920e9946f2f45083d05a58dc911cf869d137fc6e8e3e324c1cbf9fbfcc23bbc6d2ef006558346c35c8fd26c68c3282ea453a2a99f84bc18bce34bbf741fe5d32325eaa591b42b899c3443944f3d0956c6c853d"}], 0x2d0, 0x4000}], 0x2, 0x20004044) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="67002abd7000fedbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="080015"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x410) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001080)) 11.062907863s ago: executing program 5 (id=1366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() io_uring_setup(0x4d3f, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084146, 0x0) 6.484638825s ago: executing program 5 (id=1367): getpid() r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.648769767s ago: executing program 1 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.536557778s ago: executing program 5 (id=1369): r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="6b5ea0cd187ede3e538bc3543948db9297109ca599cded039b156251280c7ab65af41be8ce62414fe0e3ec3ee9e934d857d01d2100604b4cb96352c190d2a873f0456fbfe4300bb80f3eb66e6ac9489e2c0a22124aa2564aa23304616ea710e465bb0aa8ba8801dc0b08424236366badebbb569dc0c8fbf88f", 0x79}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) ioctl(r1, 0x1, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6daf8d4a4b9c578b) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_connect(0x0, 0x3c, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xbd, 0xe3, 0x81, 0x10, 0x582, 0x10, 0xf0ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a, 0x1, 0x1, 0x9, 0xb0, 0x2, [{{0x9, 0x4, 0x9b, 0x5, 0x2, 0x3a, 0xd3, 0x4b, 0xf0, [], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x1, 0xfb, 0x6, [@generic={0x6, 0xb, '-thQ'}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x6, 0x9, 0x3}}]}}]}}]}}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0}) 4.871289469s ago: executing program 1 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b0601020000000000000000060000020500010007000000400007801800148014000240fe80000000000000000000000000001f0c00018008000140ac141436060004004e240000080008400000006806000540020000000900020073"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000180)=0xa, 0x4) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 4.660608105s ago: executing program 2 (id=1371): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setreuid(0xee00, 0x0) setns(0xffffffffffffffff, 0x24020000) lsetxattr(0x0, &(0x7f0000000200)=@random={'osx.', '/dev/cpu/#/msr\x00'}, &(0x7f0000000240)='\x00', 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.413707708s ago: executing program 1 (id=1372): openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x4, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='qgroup_meta_free_all_pertrans\x00', 0xffffffffffffffff, 0x0, 0x13b59609}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.730166379s ago: executing program 1 (id=1373): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0xc000) 58.472775ms ago: executing program 1 (id=1374): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setreuid(0xee00, 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@random={'osx.', '/dev/cpu/#/msr\x00'}, &(0x7f0000000240)='\x00', 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setresuid(0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1375): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) kernel console output (not intermixed with test programs): 5 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1134.691970][ T5855] RSP: 002b:00007ffea50bfc48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1134.692001][ T5855] RAX: 0000000000000000 RBX: 00007f7052210925 RCX: 00007f705218fc57 [ 1134.692022][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea50bfd00 [ 1134.692043][ T5855] RBP: 00007ffea50bfd00 R08: 0000000000000000 R09: 0000000000000000 [ 1134.692064][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea50c0d90 [ 1134.692085][ T5855] R13: 00007f7052210925 R14: 0000000000114b03 R15: 00007ffea50c0dd0 [ 1134.692129][ T5855] [ 1134.692142][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1134.985944][T10557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1135.033620][T11323] FAT-fs (loop5): Directory bread(block 64) failed [ 1135.037836][T10557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1135.195426][T11323] FAT-fs (loop5): Directory bread(block 65) failed [ 1135.202098][T11323] FAT-fs (loop5): Directory bread(block 66) failed [ 1135.241023][T10557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1135.249645][T10557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1135.257820][T10557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1135.261967][T11046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.302890][T11046] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.320513][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.327864][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.334175][T11323] FAT-fs (loop5): Directory bread(block 67) failed [ 1135.342592][T11323] FAT-fs (loop5): Directory bread(block 68) failed [ 1135.350524][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1135.350574][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1135.350597][ T5855] Call Trace: [ 1135.350610][ T5855] [ 1135.350625][ T5855] dump_stack_lvl+0x16c/0x1f0 [ 1135.350689][ T5855] f2fs_handle_critical_error+0x621/0x9f0 [ 1135.350738][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.350783][ T5855] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1135.350831][ T5855] f2fs_write_end_io+0x785/0xc20 [ 1135.350882][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1135.350937][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.350993][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1135.351047][ T5855] bio_endio+0x70d/0x850 [ 1135.351089][ T5855] submit_bio_noacct+0x56d/0x1eb0 [ 1135.351152][ T5855] __submit_merged_bio+0x33c/0x770 [ 1135.351212][ T5855] __submit_merged_write_cond+0x319/0x3f0 [ 1135.351283][ T5855] f2fs_write_cache_pages+0x2067/0x2570 [ 1135.351379][ T5855] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1135.351453][ T5855] ? __lock_acquire+0xb8a/0x1c90 [ 1135.351526][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.351578][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.351633][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.351684][ T5855] ? __lock_acquire+0xb8a/0x1c90 [ 1135.351764][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.351833][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.351881][ T5855] ? lockdep_hardirqs_on+0x7c/0x110 [ 1135.351950][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.352053][ T5855] ? __pfx___schedule+0x10/0x10 [ 1135.352115][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.352176][ T5855] f2fs_write_data_pages+0x4ad/0xd90 [ 1135.352254][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1135.352318][ T5855] ? preempt_schedule_thunk+0x16/0x30 [ 1135.352389][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.352454][ T5855] ? preempt_schedule_thunk+0x16/0x30 [ 1135.352513][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1135.352576][ T5855] do_writepages+0x27a/0x600 [ 1135.352646][ T5855] ? __pfx_do_writepages+0x10/0x10 [ 1135.352704][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1135.352747][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.352794][ T5855] ? _raw_spin_unlock+0x28/0x50 [ 1135.352854][ T5855] filemap_fdatawrite_wbc+0x104/0x160 [ 1135.352918][ T5855] ? __schedule+0x1181/0x5de0 [ 1135.352972][ T5855] __filemap_fdatawrite_range+0xb2/0xf0 [ 1135.353021][ T5855] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1135.353138][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.353187][ T5855] ? preempt_schedule_thunk+0x16/0x30 [ 1135.353253][ T5855] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1135.353341][ T5855] block_operations+0x2a3/0xfd0 [ 1135.353416][ T5855] ? __pfx_block_operations+0x10/0x10 [ 1135.353551][ T5855] ? trace_f2fs_write_checkpoint+0x32/0x220 [ 1135.353606][ T5855] ? trace_f2fs_write_checkpoint+0x40/0x220 [ 1135.353662][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.353712][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1135.353776][ T5855] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1135.353853][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.353903][ T5855] ? kfree+0x2b4/0x4d0 [ 1135.353945][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.353995][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1135.354049][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.354100][ T5855] ? kthread_stop+0x273/0x650 [ 1135.354144][ T5855] kill_f2fs_super+0x3c2/0x470 [ 1135.354187][ T5855] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1135.354250][ T5855] deactivate_locked_super+0xc1/0x1a0 [ 1135.354297][ T5855] deactivate_super+0xde/0x100 [ 1135.354343][ T5855] cleanup_mnt+0x225/0x450 [ 1135.354426][ T5855] task_work_run+0x150/0x240 [ 1135.354487][ T5855] ? __pfx_task_work_run+0x10/0x10 [ 1135.354532][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1135.354587][ T5855] ? __pfx___x64_sys_umount+0x10/0x10 [ 1135.354654][ T5855] exit_to_user_mode_loop+0xeb/0x110 [ 1135.354709][ T5855] do_syscall_64+0x3f6/0x4c0 [ 1135.354782][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.354827][ T5855] RIP: 0033:0x7f705218fc57 [ 1135.354861][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1135.354905][ T5855] RSP: 002b:00007ffea50bfc48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1135.354946][ T5855] RAX: 0000000000000000 RBX: 00007f7052210925 RCX: 00007f705218fc57 [ 1135.354974][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea50bfd00 [ 1135.355001][ T5855] RBP: 00007ffea50bfd00 R08: 0000000000000000 R09: 0000000000000000 [ 1135.355028][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea50c0d90 [ 1135.355055][ T5855] R13: 00007f7052210925 R14: 0000000000114b03 R15: 00007ffea50c0dd0 [ 1135.355111][ T5855] [ 1135.855288][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1135.879379][T11323] FAT-fs (loop5): Directory bread(block 69) failed [ 1135.922425][T11323] FAT-fs (loop5): Directory bread(block 70) failed [ 1135.957797][T11323] FAT-fs (loop5): Directory bread(block 71) failed [ 1135.971234][T11323] FAT-fs (loop5): Directory bread(block 72) failed [ 1136.060811][T11323] FAT-fs (loop5): Directory bread(block 73) failed [ 1136.340468][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.347874][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.434987][T11331] loop1: detected capacity change from 0 to 512 [ 1136.447932][T11331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1136.577260][T11331] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1136.613972][T11331] EXT4-fs (loop1): 1 truncate cleaned up [ 1136.616187][ T78] bridge_slave_1: left allmulticast mode [ 1136.634599][ T78] bridge_slave_1: left promiscuous mode [ 1136.640580][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.646299][T11331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.725804][ T78] bridge_slave_0: left allmulticast mode [ 1136.731692][ T78] bridge_slave_0: left promiscuous mode [ 1136.744363][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.787921][T11335] loop5: detected capacity change from 0 to 128 [ 1136.855571][T11335] msdos: Bad value for 'umask' [ 1137.864039][ T5870] Bluetooth: hci5: command tx timeout [ 1138.121509][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.570945][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.586712][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.606747][ T78] bond0 (unregistering): Released all slaves [ 1139.973881][ T5870] Bluetooth: hci5: command tx timeout [ 1141.063139][T11213] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1142.337042][ T5870] Bluetooth: hci5: command tx timeout [ 1142.528159][T11213] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1142.889506][T11213] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1143.061605][T11213] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1143.259656][T11362] loop2: detected capacity change from 0 to 2048 [ 1143.520428][ T78] hsr_slave_0: left promiscuous mode [ 1143.598225][ T78] hsr_slave_1: left promiscuous mode [ 1143.623182][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.668818][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.201263][T10557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1144.414767][T10557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1144.424686][T10557] Bluetooth: hci5: command tx timeout [ 1144.634111][T10557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1144.667214][T11374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1144.690229][T11374] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1146.620023][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1146.703924][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1147.033892][T11374] Bluetooth: hci6: command tx timeout [ 1147.594842][ T8164] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1147.725431][T11400] loop5: detected capacity change from 0 to 16 [ 1147.748007][T11400] erofs (device loop5): mounted with root inode @ nid 36. [ 1147.783982][T11400] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1147.818465][T11400] erofs (device loop5): failed to decompress -29 in[58, 4038] out[1851] [ 1147.827266][T11400] erofs (device loop5): read error -117 @ 43 of nid 36 [ 1148.337025][ T8164] usb 2-1: Using ep0 maxpacket: 8 [ 1148.558003][ T8164] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.571158][ T8164] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1148.581238][ T8164] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1148.594481][ T8164] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1148.603600][ T8164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.781628][T11327] chnl_net:caif_netlink_parms(): no params data found [ 1148.958212][ T8164] usbtmc 2-1:16.0: bulk endpoints not found [ 1149.562142][T11374] Bluetooth: hci6: command tx timeout [ 1149.723612][ T8164] usb 2-1: USB disconnect, device number 2 [ 1151.616308][T11374] Bluetooth: hci6: command tx timeout [ 1152.421564][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.432145][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.507841][T11327] bridge_slave_0: entered allmulticast mode [ 1152.559362][T11327] bridge_slave_0: entered promiscuous mode [ 1152.598075][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.633168][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.655294][T11327] bridge_slave_1: entered allmulticast mode [ 1152.783993][T11327] bridge_slave_1: entered promiscuous mode [ 1152.887973][T11213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.211119][T11440] overlayfs: missing 'lowerdir' [ 1153.683854][T11374] Bluetooth: hci6: command tx timeout [ 1153.879156][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.930888][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.132711][T11213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.612822][T11327] team0: Port device team_slave_0 added [ 1154.683317][T11327] team0: Port device team_slave_1 added [ 1154.751410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.758681][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.032229][T11369] chnl_net:caif_netlink_parms(): no params data found [ 1156.079825][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.087133][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.408211][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.458399][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.596564][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.665869][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.774464][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.881406][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.170824][T11463] loop1: detected capacity change from 0 to 512 [ 1157.279578][T11463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.320357][T11463] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.320825][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.330663][T11327] hsr_slave_0: entered promiscuous mode [ 1160.346204][T11327] hsr_slave_1: entered promiscuous mode [ 1160.643086][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.672387][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.691018][T11369] bridge_slave_0: entered allmulticast mode [ 1160.736499][T11369] bridge_slave_0: entered promiscuous mode [ 1160.785434][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.795607][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.824091][T11369] bridge_slave_1: entered allmulticast mode [ 1160.836635][T11369] bridge_slave_1: entered promiscuous mode [ 1160.845254][T11484] loop1: detected capacity change from 0 to 4096 [ 1162.050119][T11484] ntfs3(loop1): failed to convert "0000" to iso8859-9 [ 1162.096225][T11484] ntfs3(loop1): failed to convert name for inode 1e. [ 1162.131341][T11499] ntfs3(loop1): failed to convert "0000" to iso8859-9 [ 1162.139722][T11497] loop5: detected capacity change from 0 to 164 [ 1162.151272][T11484] ntfs3(loop1): ino=1f, mi_enum_attr [ 1162.176343][T11213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1162.200805][T11497] Unable to read rock-ridge attributes [ 1162.203866][T11499] ntfs3(loop1): failed to convert name for inode 1e. [ 1162.207116][T11484] ntfs3(loop1): ino=1f, mi_enum_attr [ 1162.290089][T11497] Unable to read rock-ridge attributes [ 1162.318080][T11499] ntfs3(loop1): ino=1f, mi_enum_attr [ 1162.337171][T11497] Unable to read rock-ridge attributes [ 1162.354098][T11497] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1162.414473][T11499] ntfs3(loop1): ino=1f, mi_enum_attr [ 1162.461703][T11505] Unable to read rock-ridge attributes [ 1162.467638][T11505] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1162.639568][T11505] Unable to read rock-ridge attributes [ 1163.463843][ T5931] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1163.532964][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.911245][T11508] loop2: detected capacity change from 0 to 40427 [ 1163.974528][T11508] F2FS-fs (loop2): invalid crc value [ 1163.992789][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.001010][T11508] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1164.013867][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 1164.024430][ T5931] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1164.145764][ T5931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1164.155613][T11508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1164.165295][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1164.184043][ T5931] usb 2-1: SerialNumber: syz [ 1164.228778][ T5931] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1164.479122][ T30] audit: type=1800 audit(1752633266.542:20): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1136" name="file1" dev="loop2" ino=14 res=0 errno=0 [ 1165.192452][ T9398] usb 2-1: USB disconnect, device number 3 [ 1165.355153][ T5855] syz-executor: attempt to access beyond end of device [ 1165.355153][ T5855] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1165.424333][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1165.424399][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1165.424430][ T5855] Call Trace: [ 1165.424444][ T5855] [ 1165.424462][ T5855] dump_stack_lvl+0x16c/0x1f0 [ 1165.424552][ T5855] f2fs_handle_critical_error+0x621/0x9f0 [ 1165.424611][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.424665][ T5855] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1165.424723][ T5855] f2fs_write_end_io+0x785/0xc20 [ 1165.424786][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1165.424851][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.424915][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1165.424970][ T5855] bio_endio+0x70d/0x850 [ 1165.425018][ T5855] submit_bio_noacct+0x56d/0x1eb0 [ 1165.425087][ T5855] __submit_merged_bio+0x33c/0x770 [ 1165.425152][ T5855] __submit_merged_write_cond+0x319/0x3f0 [ 1165.425226][ T5855] f2fs_write_cache_pages+0x2067/0x2570 [ 1165.425326][ T5855] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1165.425403][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.425455][ T5855] ? __lock_acquire+0x622/0x1c90 [ 1165.425541][ T5855] ? __pfx_stack_trace_save+0x10/0x10 [ 1165.425604][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.425681][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.425804][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.425856][ T5855] ? mod_memcg_lruvec_state+0x394/0x610 [ 1165.425937][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.425999][ T5855] f2fs_write_data_pages+0x4ad/0xd90 [ 1165.426076][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1165.426141][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.426206][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.426266][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1165.426337][ T5855] do_writepages+0x27a/0x600 [ 1165.426414][ T5855] ? __pfx_do_writepages+0x10/0x10 [ 1165.426486][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1165.426538][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.426590][ T5855] ? _raw_spin_unlock+0x28/0x50 [ 1165.426655][ T5855] filemap_fdatawrite_wbc+0x104/0x160 [ 1165.426731][ T5855] __filemap_fdatawrite_range+0xb2/0xf0 [ 1165.426787][ T5855] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1165.426904][ T5855] ? find_held_lock+0x2b/0x80 [ 1165.426962][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.427015][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1165.427065][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.427125][ T5855] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1165.427219][ T5855] block_operations+0x2a3/0xfd0 [ 1165.427294][ T5855] ? __pfx___schedule+0x10/0x10 [ 1165.427358][ T5855] ? __pfx_block_operations+0x10/0x10 [ 1165.427495][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.427547][ T5855] ? down_write+0x14d/0x200 [ 1165.427587][ T5855] ? __pfx_down_write+0x10/0x10 [ 1165.427632][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.427683][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1165.427748][ T5855] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1165.427827][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.427879][ T5855] ? kfree+0x2b4/0x4d0 [ 1165.427914][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.427971][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.428023][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1165.428078][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.428130][ T5855] ? kthread_stop+0x273/0x650 [ 1165.428177][ T5855] kill_f2fs_super+0x3c2/0x470 [ 1165.428219][ T5855] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1165.428259][ T5855] ? lockdep_hardirqs_on+0x7c/0x110 [ 1165.428346][ T5855] deactivate_locked_super+0xc1/0x1a0 [ 1165.428395][ T5855] deactivate_super+0xde/0x100 [ 1165.428443][ T5855] cleanup_mnt+0x225/0x450 [ 1165.428501][ T5855] task_work_run+0x150/0x240 [ 1165.428552][ T5855] ? __pfx_task_work_run+0x10/0x10 [ 1165.428597][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.428654][ T5855] ? __pfx___x64_sys_umount+0x10/0x10 [ 1165.428722][ T5855] exit_to_user_mode_loop+0xeb/0x110 [ 1165.428777][ T5855] do_syscall_64+0x3f6/0x4c0 [ 1165.428852][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.428897][ T5855] RIP: 0033:0x7f705218fc57 [ 1165.428931][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1165.428977][ T5855] RSP: 002b:00007ffea50bfc48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1165.429020][ T5855] RAX: 0000000000000000 RBX: 00007f7052210925 RCX: 00007f705218fc57 [ 1165.429050][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea50bfd00 [ 1165.429079][ T5855] RBP: 00007ffea50bfd00 R08: 0000000000000000 R09: 0000000000000000 [ 1165.429107][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea50c0d90 [ 1165.429137][ T5855] R13: 00007f7052210925 R14: 000000000011c434 R15: 00007ffea50c0dd0 [ 1165.429195][ T5855] [ 1165.429213][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1165.946448][T11524] overlayfs: missing 'lowerdir' [ 1165.947235][T11522] loop5: detected capacity change from 0 to 2048 [ 1165.957837][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1165.957896][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1165.957924][ T5855] Call Trace: [ 1165.957939][ T5855] [ 1165.957956][ T5855] dump_stack_lvl+0x16c/0x1f0 [ 1165.958030][ T5855] f2fs_handle_critical_error+0x621/0x9f0 [ 1165.958087][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.958139][ T5855] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1165.958196][ T5855] f2fs_write_end_io+0x785/0xc20 [ 1165.958258][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1165.958321][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.958384][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1165.958445][ T5855] bio_endio+0x70d/0x850 [ 1165.958491][ T5855] submit_bio_noacct+0x56d/0x1eb0 [ 1165.958558][ T5855] __submit_merged_bio+0x33c/0x770 [ 1165.958622][ T5855] __submit_merged_write_cond+0x319/0x3f0 [ 1165.958695][ T5855] f2fs_write_cache_pages+0x2067/0x2570 [ 1165.958793][ T5855] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1165.958868][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.958919][ T5855] ? __lock_acquire+0x622/0x1c90 [ 1165.958997][ T5855] ? __pfx_stack_trace_save+0x10/0x10 [ 1165.959056][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.959133][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.959255][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.959305][ T5855] ? mod_memcg_lruvec_state+0x394/0x610 [ 1165.959385][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.959450][ T5855] f2fs_write_data_pages+0x4ad/0xd90 [ 1165.959525][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1165.959588][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.959652][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.959710][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1165.959779][ T5855] do_writepages+0x27a/0x600 [ 1165.959855][ T5855] ? __pfx_do_writepages+0x10/0x10 [ 1165.959919][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1165.959969][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.960018][ T5855] ? _raw_spin_unlock+0x28/0x50 [ 1165.960082][ T5855] filemap_fdatawrite_wbc+0x104/0x160 [ 1165.960156][ T5855] __filemap_fdatawrite_range+0xb2/0xf0 [ 1165.960210][ T5855] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1165.960327][ T5855] ? find_held_lock+0x2b/0x80 [ 1165.960384][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.960443][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1165.960493][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.960552][ T5855] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1165.960644][ T5855] block_operations+0x2a3/0xfd0 [ 1165.960718][ T5855] ? __pfx___schedule+0x10/0x10 [ 1165.960780][ T5855] ? __pfx_block_operations+0x10/0x10 [ 1165.960911][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.960961][ T5855] ? down_write+0x14d/0x200 [ 1165.961002][ T5855] ? __pfx_down_write+0x10/0x10 [ 1165.961045][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.961095][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1165.961158][ T5855] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1165.961236][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.961285][ T5855] ? kfree+0x2b4/0x4d0 [ 1165.961320][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.961376][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.961435][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1165.961489][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.961541][ T5855] ? kthread_stop+0x273/0x650 [ 1165.961587][ T5855] kill_f2fs_super+0x3c2/0x470 [ 1165.961629][ T5855] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1165.961668][ T5855] ? lockdep_hardirqs_on+0x7c/0x110 [ 1165.961754][ T5855] deactivate_locked_super+0xc1/0x1a0 [ 1165.961802][ T5855] deactivate_super+0xde/0x100 [ 1165.961850][ T5855] cleanup_mnt+0x225/0x450 [ 1165.961903][ T5855] task_work_run+0x150/0x240 [ 1165.961954][ T5855] ? __pfx_task_work_run+0x10/0x10 [ 1165.961999][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.962054][ T5855] ? __pfx___x64_sys_umount+0x10/0x10 [ 1165.962121][ T5855] exit_to_user_mode_loop+0xeb/0x110 [ 1165.962175][ T5855] do_syscall_64+0x3f6/0x4c0 [ 1165.962247][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.962291][ T5855] RIP: 0033:0x7f705218fc57 [ 1165.962325][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1165.962370][ T5855] RSP: 002b:00007ffea50bfc48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1165.962418][ T5855] RAX: 0000000000000000 RBX: 00007f7052210925 RCX: 00007f705218fc57 [ 1165.962447][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea50bfd00 [ 1165.962475][ T5855] RBP: 00007ffea50bfd00 R08: 0000000000000000 R09: 0000000000000000 [ 1165.962503][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea50c0d90 [ 1165.962532][ T5855] R13: 00007f7052210925 R14: 000000000011c434 R15: 00007ffea50c0dd0 [ 1165.962589][ T5855] [ 1165.962606][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1166.302668][T11522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1167.014665][T11369] team0: Port device team_slave_0 added [ 1167.088912][T11369] team0: Port device team_slave_1 added [ 1167.783297][ T78] bridge_slave_1: left allmulticast mode [ 1167.804523][ T78] bridge_slave_1: left promiscuous mode [ 1167.810504][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.977307][T11553] netlink: 'syz.5.1140': attribute type 1 has an invalid length. [ 1167.990810][ T78] bridge_slave_0: left allmulticast mode [ 1168.046528][ T78] bridge_slave_0: left promiscuous mode [ 1168.052492][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.457750][T11575] loop1: detected capacity change from 0 to 16 [ 1171.481441][T11575] erofs (device loop1): mounted with root inode @ nid 36. [ 1171.510943][T11575] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1171.528308][T11575] erofs (device loop1): failed to decompress -29 in[58, 4038] out[1851] [ 1171.537065][T11575] erofs (device loop1): read error -117 @ 43 of nid 36 [ 1172.229498][T11577] loop2: detected capacity change from 0 to 256 [ 1172.281817][T11577] FAT-fs (loop2): Directory bread(block 64) failed [ 1172.289545][T11577] FAT-fs (loop2): Directory bread(block 65) failed [ 1172.296303][T11577] FAT-fs (loop2): Directory bread(block 66) failed [ 1172.302994][T11577] FAT-fs (loop2): Directory bread(block 67) failed [ 1172.309957][T11577] FAT-fs (loop2): Directory bread(block 68) failed [ 1172.316880][T11577] FAT-fs (loop2): Directory bread(block 69) failed [ 1172.323594][T11577] FAT-fs (loop2): Directory bread(block 70) failed [ 1172.330491][T11577] FAT-fs (loop2): Directory bread(block 71) failed [ 1172.337278][T11577] FAT-fs (loop2): Directory bread(block 72) failed [ 1172.343920][T11577] FAT-fs (loop2): Directory bread(block 73) failed [ 1173.165479][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.342908][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.924306][ T78] bond0 (unregistering): Released all slaves [ 1174.742945][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.767090][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.794648][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.835713][T11553] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1175.183277][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.301935][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.413966][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.554639][ T78] hsr_slave_0: left promiscuous mode [ 1175.619692][ T78] hsr_slave_1: left promiscuous mode [ 1175.633488][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.691959][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.150439][T11595] loop2: detected capacity change from 0 to 2048 [ 1176.262964][T11595] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1177.090441][T11601] loop1: detected capacity change from 0 to 2048 [ 1177.292076][T11601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1178.084938][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 1178.550891][T11374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1178.562203][T11374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1178.571491][T11374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1178.584372][T11374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1178.593634][T11374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1178.658139][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1179.033272][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1180.250063][T11608] loop2: detected capacity change from 0 to 32768 [ 1180.637067][T11374] Bluetooth: hci0: command tx timeout [ 1182.011558][T11625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1155'. [ 1182.562476][T11369] hsr_slave_0: entered promiscuous mode [ 1182.579024][T11369] hsr_slave_1: entered promiscuous mode [ 1182.633461][T11369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1182.704637][T11369] Cannot create hsr debugfs directory [ 1182.723962][T11374] Bluetooth: hci0: command tx timeout [ 1184.816781][T11374] Bluetooth: hci0: command tx timeout [ 1186.737524][T11643] loop1: detected capacity change from 0 to 2048 [ 1186.809192][T11327] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1186.890702][T11374] Bluetooth: hci0: command tx timeout [ 1187.043068][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.053814][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.266159][T11327] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1187.350934][T11327] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1188.804143][T11327] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1192.794577][T11609] chnl_net:caif_netlink_parms(): no params data found [ 1192.837186][T11327] kthread_run failed with err -4 [ 1193.757295][T11609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.784030][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.791487][T11609] bridge_slave_0: entered allmulticast mode [ 1193.808689][T11609] bridge_slave_0: entered promiscuous mode [ 1193.923955][T11609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.931638][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.942725][T11609] bridge_slave_1: entered allmulticast mode [ 1193.951740][T11609] bridge_slave_1: entered promiscuous mode [ 1194.108545][T11609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.212261][T11609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.316574][T11609] team0: Port device team_slave_0 added [ 1194.364441][T11369] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1194.491703][T11609] team0: Port device team_slave_1 added [ 1194.506245][ T6017] bridge_slave_1: left allmulticast mode [ 1194.533514][ T6017] bridge_slave_1: left promiscuous mode [ 1194.548987][T11712] loop1: detected capacity change from 0 to 2048 [ 1194.557607][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.610418][T11712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1194.662988][ T6017] bridge_slave_0: left allmulticast mode [ 1194.694747][ T6017] bridge_slave_0: left promiscuous mode [ 1194.702379][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.713774][T11718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1168'. [ 1198.644610][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1198.711207][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1198.732708][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1198.742529][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1198.764258][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1199.437848][T11740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 1200.729339][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.741456][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.756114][ T6017] bond0 (unregistering): Released all slaves [ 1200.779696][T11369] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1200.878112][T11374] Bluetooth: hci1: command tx timeout [ 1201.017416][T11609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.033851][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.093794][T11609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.142594][ T6017] hsr_slave_0: left promiscuous mode [ 1201.160802][ T6017] hsr_slave_1: left promiscuous mode [ 1201.175677][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.207741][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.608486][T11769] loop2: detected capacity change from 0 to 40427 [ 1202.620333][T11767] loop5: detected capacity change from 0 to 256 [ 1202.656398][T11767] FAT-fs (loop5): Directory bread(block 64) failed [ 1202.663005][T11767] FAT-fs (loop5): Directory bread(block 65) failed [ 1202.669856][T11767] FAT-fs (loop5): Directory bread(block 66) failed [ 1202.676495][T11767] FAT-fs (loop5): Directory bread(block 67) failed [ 1202.683146][T11767] FAT-fs (loop5): Directory bread(block 68) failed [ 1202.689852][T11767] FAT-fs (loop5): Directory bread(block 69) failed [ 1202.697567][T11767] FAT-fs (loop5): Directory bread(block 70) failed [ 1202.704601][T11767] FAT-fs (loop5): Directory bread(block 71) failed [ 1202.711253][T11767] FAT-fs (loop5): Directory bread(block 72) failed [ 1202.718201][T11767] FAT-fs (loop5): Directory bread(block 73) failed [ 1202.761099][T11769] F2FS-fs (loop2): invalid crc value [ 1202.957199][T11374] Bluetooth: hci1: command tx timeout [ 1203.112233][T11769] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1203.264393][T11769] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1203.464962][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 1203.620084][ T30] audit: type=1800 audit(1752633305.692:21): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1176" name="file1" dev="loop2" ino=14 res=0 errno=0 [ 1204.964003][T11782] loop5: detected capacity change from 0 to 1024 [ 1205.042623][T11374] Bluetooth: hci1: command tx timeout [ 1205.082948][T11782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1205.308763][ T5855] syz-executor: attempt to access beyond end of device [ 1205.308763][ T5855] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1205.411020][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1205.411086][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1205.411114][ T5855] Call Trace: [ 1205.411129][ T5855] [ 1205.411145][ T5855] dump_stack_lvl+0x16c/0x1f0 [ 1205.411221][ T5855] f2fs_handle_critical_error+0x621/0x9f0 [ 1205.411280][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.411335][ T5855] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1205.411392][ T5855] f2fs_write_end_io+0x785/0xc20 [ 1205.411455][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1205.411521][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.411585][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1205.411642][ T5855] bio_endio+0x70d/0x850 [ 1205.411689][ T5855] submit_bio_noacct+0x56d/0x1eb0 [ 1205.411757][ T5855] __submit_merged_bio+0x33c/0x770 [ 1205.411829][ T5855] __submit_merged_write_cond+0x319/0x3f0 [ 1205.411901][ T5855] f2fs_write_cache_pages+0x2067/0x2570 [ 1205.412000][ T5855] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1205.412077][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.412128][ T5855] ? __lock_acquire+0x622/0x1c90 [ 1205.412232][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.412285][ T5855] ? __lock_acquire+0x622/0x1c90 [ 1205.412376][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.412428][ T5855] ? lock_acquire+0x179/0x350 [ 1205.412509][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.412560][ T5855] ? mod_memcg_lruvec_state+0x394/0x610 [ 1205.412641][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.412702][ T5855] f2fs_write_data_pages+0x4ad/0xd90 [ 1205.412780][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1205.412852][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.412918][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.412977][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1205.413049][ T5855] do_writepages+0x27a/0x600 [ 1205.413127][ T5855] ? __pfx_do_writepages+0x10/0x10 [ 1205.413194][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1205.413245][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.413297][ T5855] ? _raw_spin_unlock+0x28/0x50 [ 1205.413360][ T5855] filemap_fdatawrite_wbc+0x104/0x160 [ 1205.413436][ T5855] __filemap_fdatawrite_range+0xb2/0xf0 [ 1205.413491][ T5855] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1205.413608][ T5855] ? find_held_lock+0x2b/0x80 [ 1205.413668][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.413720][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1205.413770][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.413836][ T5855] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1205.413930][ T5855] block_operations+0x2a3/0xfd0 [ 1205.414003][ T5855] ? __pfx___schedule+0x10/0x10 [ 1205.414067][ T5855] ? __pfx_block_operations+0x10/0x10 [ 1205.414197][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.414249][ T5855] ? down_write+0x14d/0x200 [ 1205.414290][ T5855] ? __pfx_down_write+0x10/0x10 [ 1205.414334][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.414385][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1205.414472][ T5855] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1205.414553][ T5855] ? kthread_stop+0x120/0x650 [ 1205.414594][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.414645][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1205.414700][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.414751][ T5855] ? kthread_stop+0x273/0x650 [ 1205.414802][ T5855] kill_f2fs_super+0x3c2/0x470 [ 1205.414844][ T5855] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1205.414907][ T5855] deactivate_locked_super+0xc1/0x1a0 [ 1205.414954][ T5855] deactivate_super+0xde/0x100 [ 1205.415001][ T5855] cleanup_mnt+0x225/0x450 [ 1205.415052][ T5855] task_work_run+0x150/0x240 [ 1205.415102][ T5855] ? __pfx_task_work_run+0x10/0x10 [ 1205.415165][ T5855] exit_to_user_mode_loop+0xeb/0x110 [ 1205.415219][ T5855] do_syscall_64+0x3f6/0x4c0 [ 1205.415292][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.415336][ T5855] RIP: 0033:0x7f705218fc57 [ 1205.415371][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1205.415415][ T5855] RSP: 002b:00007ffea50bfc48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1205.415456][ T5855] RAX: 0000000000000000 RBX: 00007f7052210925 RCX: 00007f705218fc57 [ 1205.415485][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea50bfd00 [ 1205.415513][ T5855] RBP: 00007ffea50bfd00 R08: 0000000000000000 R09: 0000000000000000 [ 1205.415540][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea50c0d90 [ 1205.415569][ T5855] R13: 00007f7052210925 R14: 0000000000126182 R15: 00007ffea50c0dd0 [ 1205.415625][ T5855] [ 1206.324003][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1206.331105][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1206.331165][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1206.331193][ T5855] Call Trace: [ 1206.331207][ T5855] [ 1206.331224][ T5855] dump_stack_lvl+0x16c/0x1f0 [ 1206.331297][ T5855] f2fs_handle_critical_error+0x621/0x9f0 [ 1206.331355][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.331408][ T5855] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1206.331465][ T5855] f2fs_write_end_io+0x785/0xc20 [ 1206.331535][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1206.331599][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.331663][ T5855] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1206.331719][ T5855] bio_endio+0x70d/0x850 [ 1206.331766][ T5855] submit_bio_noacct+0x56d/0x1eb0 [ 1206.331832][ T5855] __submit_merged_bio+0x33c/0x770 [ 1206.331897][ T5855] __submit_merged_write_cond+0x319/0x3f0 [ 1206.331970][ T5855] f2fs_write_cache_pages+0x2067/0x2570 [ 1206.332068][ T5855] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1206.332144][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.332196][ T5855] ? __lock_acquire+0x622/0x1c90 [ 1206.332301][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.332352][ T5855] ? __lock_acquire+0x622/0x1c90 [ 1206.332442][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.332493][ T5855] ? lock_acquire+0x179/0x350 [ 1206.332578][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.332629][ T5855] ? mod_memcg_lruvec_state+0x394/0x610 [ 1206.332712][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.332772][ T5855] f2fs_write_data_pages+0x4ad/0xd90 [ 1206.332848][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1206.332912][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.332975][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.333033][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1206.333103][ T5855] do_writepages+0x27a/0x600 [ 1206.333185][ T5855] ? __pfx_do_writepages+0x10/0x10 [ 1206.333251][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1206.333302][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.333354][ T5855] ? _raw_spin_unlock+0x28/0x50 [ 1206.333418][ T5855] filemap_fdatawrite_wbc+0x104/0x160 [ 1206.333494][ T5855] __filemap_fdatawrite_range+0xb2/0xf0 [ 1206.333554][ T5855] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1206.333674][ T5855] ? find_held_lock+0x2b/0x80 [ 1206.333729][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.333779][ T5855] ? do_raw_spin_unlock+0x172/0x230 [ 1206.333828][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.333886][ T5855] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1206.333979][ T5855] block_operations+0x2a3/0xfd0 [ 1206.334054][ T5855] ? __pfx___schedule+0x10/0x10 [ 1206.334120][ T5855] ? __pfx_block_operations+0x10/0x10 [ 1206.334250][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.334301][ T5855] ? down_write+0x14d/0x200 [ 1206.334343][ T5855] ? __pfx_down_write+0x10/0x10 [ 1206.334387][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.334438][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1206.334535][ T5855] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1206.334617][ T5855] ? kthread_stop+0x120/0x650 [ 1206.334659][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.334710][ T5855] ? rcu_is_watching+0x12/0xc0 [ 1206.334766][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1206.334817][ T5855] ? kthread_stop+0x273/0x650 [ 1206.334862][ T5855] kill_f2fs_super+0x3c2/0x470 [ 1206.334903][ T5855] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1206.334966][ T5855] deactivate_locked_super+0xc1/0x1a0 [ 1206.335014][ T5855] deactivate_super+0xde/0x100 [ 1206.335061][ T5855] cleanup_mnt+0x225/0x450 [ 1206.335114][ T5855] task_work_run+0x150/0x240 [ 1206.335164][ T5855] ? __pfx_task_work_run+0x10/0x10 [ 1206.335228][ T5855] exit_to_user_mode_loop+0xeb/0x110 [ 1206.335282][ T5855] do_syscall_64+0x3f6/0x4c0 [ 1206.335355][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.335399][ T5855] RIP: 0033:0x7f705218fc57 [ 1206.335433][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1206.335474][ T5855] RSP: 002b:00007ffea50bfc48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1206.335515][ T5855] RAX: 0000000000000000 RBX: 00007f7052210925 RCX: 00007f705218fc57 [ 1206.335548][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea50bfd00 [ 1206.335576][ T5855] RBP: 00007ffea50bfd00 R08: 0000000000000000 R09: 0000000000000000 [ 1206.335604][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea50c0d90 [ 1206.335633][ T5855] R13: 00007f7052210925 R14: 0000000000126182 R15: 00007ffea50c0dd0 [ 1206.335690][ T5855] [ 1206.817933][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1206.994640][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1207.006253][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 1207.006618][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1207.037778][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1207.050632][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1207.059278][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1207.114148][ T5870] Bluetooth: hci1: command tx timeout [ 1207.469457][ T5858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.598075][ T119] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1208.962875][ T119] usb 6-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 1209.069555][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.136789][ T5870] Bluetooth: hci5: command tx timeout [ 1209.294889][ T119] usb 6-1: config 0 descriptor?? [ 1209.390909][ T119] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1209.701208][ T119] gspca_spca505: reg write: error -71 [ 1209.733995][ T119] spca505 6-1:0.0: probe with driver spca505 failed with error -5 [ 1209.818456][T11609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.843821][ T119] usb 6-1: USB disconnect, device number 4 [ 1209.866699][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.251859][T11609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.433055][T11802] loop1: detected capacity change from 0 to 40427 [ 1211.020159][T11802] F2FS-fs (loop1): invalid crc value [ 1211.064500][T11802] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1211.317840][ T5870] Bluetooth: hci5: command tx timeout [ 1211.507647][T11802] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1213.200416][ T30] audit: type=1800 audit(1752633315.252:22): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1184" name="file1" dev="loop1" ino=14 res=0 errno=0 [ 1213.354050][ T5870] Bluetooth: hci5: command tx timeout [ 1213.612598][T11609] hsr_slave_0: entered promiscuous mode [ 1215.443929][ T5870] Bluetooth: hci5: command tx timeout [ 1215.485496][T11609] hsr_slave_1: entered promiscuous mode [ 1215.492160][T11609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1215.657322][T11822] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input30 [ 1216.489239][T11609] Cannot create hsr debugfs directory [ 1216.596148][ T5849] syz-executor: attempt to access beyond end of device [ 1216.596148][ T5849] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1216.650457][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1216.650525][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1216.650563][ T5849] Call Trace: [ 1216.650579][ T5849] [ 1216.650597][ T5849] dump_stack_lvl+0x16c/0x1f0 [ 1216.650677][ T5849] f2fs_handle_critical_error+0x621/0x9f0 [ 1216.650738][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.650794][ T5849] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1216.650855][ T5849] f2fs_write_end_io+0x785/0xc20 [ 1216.650922][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1216.650991][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.651060][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1216.651119][ T5849] bio_endio+0x70d/0x850 [ 1216.651170][ T5849] submit_bio_noacct+0x56d/0x1eb0 [ 1216.651244][ T5849] __submit_merged_bio+0x33c/0x770 [ 1216.651313][ T5849] __submit_merged_write_cond+0x319/0x3f0 [ 1216.651391][ T5849] f2fs_write_cache_pages+0x2067/0x2570 [ 1216.651499][ T5849] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1216.651591][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.651643][ T5849] ? __lock_acquire+0x622/0x1c90 [ 1216.651731][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.651897][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.651951][ T5849] ? mod_memcg_lruvec_state+0x394/0x610 [ 1216.652033][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.652098][ T5849] f2fs_write_data_pages+0x4ad/0xd90 [ 1216.652179][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1216.652245][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.652312][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.652373][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1216.652445][ T5849] do_writepages+0x27a/0x600 [ 1216.652525][ T5849] ? __pfx_do_writepages+0x10/0x10 [ 1216.652605][ T5849] ? do_raw_spin_unlock+0x172/0x230 [ 1216.652658][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.652710][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 1216.652776][ T5849] filemap_fdatawrite_wbc+0x104/0x160 [ 1216.652855][ T5849] __filemap_fdatawrite_range+0xb2/0xf0 [ 1216.652913][ T5849] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1216.653045][ T5849] ? find_held_lock+0x2b/0x80 [ 1216.653105][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.653160][ T5849] ? do_raw_spin_unlock+0x172/0x230 [ 1216.653213][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.653276][ T5849] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1216.653375][ T5849] block_operations+0x2a3/0xfd0 [ 1216.653453][ T5849] ? __pfx___schedule+0x10/0x10 [ 1216.653518][ T5849] ? __pfx_block_operations+0x10/0x10 [ 1216.653677][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.653729][ T5849] ? down_write+0x14d/0x200 [ 1216.653768][ T5849] ? __pfx_down_write+0x10/0x10 [ 1216.653814][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.653865][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1216.653930][ T5849] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1216.654010][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.654058][ T5849] ? kfree+0x2b4/0x4d0 [ 1216.654093][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.654150][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.654201][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1216.654256][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.654307][ T5849] ? kthread_stop+0x273/0x650 [ 1216.654355][ T5849] kill_f2fs_super+0x3c2/0x470 [ 1216.654398][ T5849] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1216.654437][ T5849] ? lockdep_hardirqs_on+0x7c/0x110 [ 1216.654589][ T5849] deactivate_locked_super+0xc1/0x1a0 [ 1216.654638][ T5849] deactivate_super+0xde/0x100 [ 1216.654688][ T5849] cleanup_mnt+0x225/0x450 [ 1216.654743][ T5849] task_work_run+0x150/0x240 [ 1216.654794][ T5849] ? __pfx_task_work_run+0x10/0x10 [ 1216.654840][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1216.654898][ T5849] ? __pfx___x64_sys_umount+0x10/0x10 [ 1216.654967][ T5849] exit_to_user_mode_loop+0xeb/0x110 [ 1216.655023][ T5849] do_syscall_64+0x3f6/0x4c0 [ 1216.655096][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.655140][ T5849] RIP: 0033:0x7f1a81d8fc57 [ 1216.655175][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1216.655219][ T5849] RSP: 002b:00007ffe67f04458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1216.655260][ T5849] RAX: 0000000000000000 RBX: 00007f1a81e10925 RCX: 00007f1a81d8fc57 [ 1216.655289][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe67f04510 [ 1216.655316][ T5849] RBP: 00007ffe67f04510 R08: 0000000000000000 R09: 0000000000000000 [ 1216.655343][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe67f055a0 [ 1216.655372][ T5849] R13: 00007f1a81e10925 R14: 0000000000128728 R15: 00007ffe67f055e0 [ 1216.655434][ T5849] [ 1217.189539][ T5849] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1217.200116][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1217.200179][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1217.200206][ T5849] Call Trace: [ 1217.200220][ T5849] [ 1217.200237][ T5849] dump_stack_lvl+0x16c/0x1f0 [ 1217.200312][ T5849] f2fs_handle_critical_error+0x621/0x9f0 [ 1217.200370][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.200423][ T5849] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1217.200482][ T5849] f2fs_write_end_io+0x785/0xc20 [ 1217.200553][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1217.200619][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.200685][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1217.200743][ T5849] bio_endio+0x70d/0x850 [ 1217.200791][ T5849] submit_bio_noacct+0x56d/0x1eb0 [ 1217.200861][ T5849] __submit_merged_bio+0x33c/0x770 [ 1217.200929][ T5849] __submit_merged_write_cond+0x319/0x3f0 [ 1217.201005][ T5849] f2fs_write_cache_pages+0x2067/0x2570 [ 1217.201111][ T5849] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1217.201190][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.201242][ T5849] ? __lock_acquire+0x622/0x1c90 [ 1217.201329][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.201491][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.201547][ T5849] ? mod_memcg_lruvec_state+0x394/0x610 [ 1217.201630][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.201691][ T5849] f2fs_write_data_pages+0x4ad/0xd90 [ 1217.201770][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1217.201834][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.201901][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.201959][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1217.202030][ T5849] do_writepages+0x27a/0x600 [ 1217.202110][ T5849] ? __pfx_do_writepages+0x10/0x10 [ 1217.202177][ T5849] ? do_raw_spin_unlock+0x172/0x230 [ 1217.202229][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.202279][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 1217.202347][ T5849] filemap_fdatawrite_wbc+0x104/0x160 [ 1217.202433][ T5849] __filemap_fdatawrite_range+0xb2/0xf0 [ 1217.202490][ T5849] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1217.202625][ T5849] ? find_held_lock+0x2b/0x80 [ 1217.202685][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.202738][ T5849] ? do_raw_spin_unlock+0x172/0x230 [ 1217.202789][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.202849][ T5849] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1217.202949][ T5849] block_operations+0x2a3/0xfd0 [ 1217.203025][ T5849] ? __pfx___schedule+0x10/0x10 [ 1217.203089][ T5849] ? __pfx_block_operations+0x10/0x10 [ 1217.203229][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.203281][ T5849] ? down_write+0x14d/0x200 [ 1217.203322][ T5849] ? __pfx_down_write+0x10/0x10 [ 1217.203367][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.203419][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1217.203485][ T5849] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1217.203571][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.203622][ T5849] ? kfree+0x2b4/0x4d0 [ 1217.203663][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.203716][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.203762][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1217.203818][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.203869][ T5849] ? kthread_stop+0x273/0x650 [ 1217.203916][ T5849] kill_f2fs_super+0x3c2/0x470 [ 1217.203958][ T5849] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1217.203997][ T5849] ? lockdep_hardirqs_on+0x7c/0x110 [ 1217.204088][ T5849] deactivate_locked_super+0xc1/0x1a0 [ 1217.204136][ T5849] deactivate_super+0xde/0x100 [ 1217.204183][ T5849] cleanup_mnt+0x225/0x450 [ 1217.204235][ T5849] task_work_run+0x150/0x240 [ 1217.204286][ T5849] ? __pfx_task_work_run+0x10/0x10 [ 1217.204329][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.204385][ T5849] ? __pfx___x64_sys_umount+0x10/0x10 [ 1217.204453][ T5849] exit_to_user_mode_loop+0xeb/0x110 [ 1217.204523][ T5849] do_syscall_64+0x3f6/0x4c0 [ 1217.204595][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.204639][ T5849] RIP: 0033:0x7f1a81d8fc57 [ 1217.204674][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1217.204718][ T5849] RSP: 002b:00007ffe67f04458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1217.204761][ T5849] RAX: 0000000000000000 RBX: 00007f1a81e10925 RCX: 00007f1a81d8fc57 [ 1217.204788][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe67f04510 [ 1217.204816][ T5849] RBP: 00007ffe67f04510 R08: 0000000000000000 R09: 0000000000000000 [ 1217.204844][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe67f055a0 [ 1217.204872][ T5849] R13: 00007f1a81e10925 R14: 0000000000128728 R15: 00007ffe67f055e0 [ 1217.204935][ T5849] [ 1217.729511][ T5849] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1220.292532][T11861] loop5: detected capacity change from 0 to 256 [ 1220.736328][T11861] FAT-fs (loop5): Directory bread(block 64) failed [ 1220.743218][T11861] FAT-fs (loop5): Directory bread(block 65) failed [ 1220.774237][T11861] FAT-fs (loop5): Directory bread(block 66) failed [ 1220.781212][T11861] FAT-fs (loop5): Directory bread(block 67) failed [ 1220.839764][T11861] FAT-fs (loop5): Directory bread(block 68) failed [ 1220.880414][T11861] FAT-fs (loop5): Directory bread(block 69) failed [ 1220.930474][T11861] FAT-fs (loop5): Directory bread(block 70) failed [ 1221.010762][T11861] FAT-fs (loop5): Directory bread(block 71) failed [ 1221.047637][T11861] FAT-fs (loop5): Directory bread(block 72) failed [ 1221.074654][T11861] FAT-fs (loop5): Directory bread(block 73) failed [ 1221.530938][T11788] chnl_net:caif_netlink_parms(): no params data found [ 1224.290250][T11886] loop1: detected capacity change from 0 to 164 [ 1224.344725][T11886] Unable to read rock-ridge attributes [ 1224.396777][T11886] Unable to read rock-ridge attributes [ 1224.510798][T11887] Unable to read rock-ridge attributes [ 1224.583112][T11887] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1224.682647][T11887] Unable to read rock-ridge attributes [ 1224.689392][T11887] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1224.724789][T11887] Unable to read rock-ridge attributes [ 1226.144424][T11730] chnl_net:caif_netlink_parms(): no params data found [ 1226.409909][T11788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.451223][T11788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.726245][T11788] bridge_slave_0: entered allmulticast mode [ 1226.740488][T11788] bridge_slave_0: entered promiscuous mode [ 1226.922543][T11901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input31 [ 1227.830945][T11788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.862963][T11788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.954204][T11788] bridge_slave_1: entered allmulticast mode [ 1228.011241][T11788] bridge_slave_1: entered promiscuous mode [ 1228.338718][T11910] loop2: detected capacity change from 0 to 2048 [ 1228.414043][T11910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1228.753115][T11912] loop1: detected capacity change from 0 to 40427 [ 1228.830737][T11912] F2FS-fs (loop1): invalid crc value [ 1228.868748][T11912] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1228.957526][T11912] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1229.296931][ T30] audit: type=1800 audit(1752633331.372:23): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1202" name="file1" dev="loop1" ino=14 res=0 errno=0 [ 1229.901077][ T5849] syz-executor: attempt to access beyond end of device [ 1229.901077][ T5849] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1230.459023][T11788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.484263][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1230.484323][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1230.484347][ T5849] Call Trace: [ 1230.484361][ T5849] [ 1230.484377][ T5849] dump_stack_lvl+0x16c/0x1f0 [ 1230.484450][ T5849] f2fs_handle_critical_error+0x621/0x9f0 [ 1230.484507][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.484559][ T5849] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1230.484628][ T5849] f2fs_write_end_io+0x785/0xc20 [ 1230.484689][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1230.484753][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.484816][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1230.484871][ T5849] bio_endio+0x70d/0x850 [ 1230.484917][ T5849] submit_bio_noacct+0x56d/0x1eb0 [ 1230.484985][ T5849] __submit_merged_bio+0x33c/0x770 [ 1230.485047][ T5849] __submit_merged_write_cond+0x319/0x3f0 [ 1230.485117][ T5849] f2fs_write_cache_pages+0x2067/0x2570 [ 1230.485210][ T5849] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1230.485286][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.485337][ T5849] ? __lock_acquire+0x622/0x1c90 [ 1230.485419][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.485513][ T5849] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1230.485636][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.485686][ T5849] ? mod_memcg_lruvec_state+0x394/0x610 [ 1230.485763][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.485812][ T5849] ? __mod_zone_page_state+0xcc/0x1a0 [ 1230.485880][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.485939][ T5849] f2fs_write_data_pages+0x4ad/0xd90 [ 1230.486016][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1230.486095][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.486147][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1230.486213][ T5849] do_writepages+0x27a/0x600 [ 1230.486292][ T5849] ? __pfx_do_writepages+0x10/0x10 [ 1230.486356][ T5849] ? do_raw_spin_unlock+0x172/0x230 [ 1230.486406][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.486456][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 1230.486517][ T5849] filemap_fdatawrite_wbc+0x104/0x160 [ 1230.486607][ T5849] __filemap_fdatawrite_range+0xb2/0xf0 [ 1230.486660][ T5849] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1230.486771][ T5849] ? find_held_lock+0x2b/0x80 [ 1230.486828][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.486879][ T5849] ? do_raw_spin_unlock+0x172/0x230 [ 1230.486929][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.486987][ T5849] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1230.487080][ T5849] block_operations+0x2a3/0xfd0 [ 1230.487154][ T5849] ? __pfx___schedule+0x10/0x10 [ 1230.487217][ T5849] ? __pfx_block_operations+0x10/0x10 [ 1230.487345][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.487397][ T5849] ? down_write+0x14d/0x200 [ 1230.487438][ T5849] ? __pfx_down_write+0x10/0x10 [ 1230.487481][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.487533][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1230.487607][ T5849] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1230.487684][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.487736][ T5849] ? kfree+0x2b4/0x4d0 [ 1230.487771][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.487826][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.487877][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1230.487931][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.487981][ T5849] ? kthread_stop+0x273/0x650 [ 1230.488027][ T5849] kill_f2fs_super+0x3c2/0x470 [ 1230.488069][ T5849] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1230.488107][ T5849] ? lockdep_hardirqs_on+0x7c/0x110 [ 1230.488192][ T5849] deactivate_locked_super+0xc1/0x1a0 [ 1230.488241][ T5849] deactivate_super+0xde/0x100 [ 1230.488288][ T5849] cleanup_mnt+0x225/0x450 [ 1230.488340][ T5849] task_work_run+0x150/0x240 [ 1230.488390][ T5849] ? __pfx_task_work_run+0x10/0x10 [ 1230.488434][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.488488][ T5849] ? __pfx___x64_sys_umount+0x10/0x10 [ 1230.488553][ T5849] exit_to_user_mode_loop+0xeb/0x110 [ 1230.488615][ T5849] do_syscall_64+0x3f6/0x4c0 [ 1230.488687][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.488731][ T5849] RIP: 0033:0x7f1a81d8fc57 [ 1230.488765][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1230.488808][ T5849] RSP: 002b:00007ffe67f04458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1230.488850][ T5849] RAX: 0000000000000000 RBX: 00007f1a81e10925 RCX: 00007f1a81d8fc57 [ 1230.488880][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe67f04510 [ 1230.488908][ T5849] RBP: 00007ffe67f04510 R08: 0000000000000000 R09: 0000000000000000 [ 1230.488936][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe67f055a0 [ 1230.488966][ T5849] R13: 00007f1a81e10925 R14: 000000000012c146 R15: 00007ffe67f055e0 [ 1230.489023][ T5849] [ 1230.489041][ T5849] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1230.694234][T10516] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1230.894071][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1230.894131][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1230.894158][ T5849] Call Trace: [ 1230.894174][ T5849] [ 1230.894190][ T5849] dump_stack_lvl+0x16c/0x1f0 [ 1230.894268][ T5849] f2fs_handle_critical_error+0x621/0x9f0 [ 1230.894325][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.894378][ T5849] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1230.894436][ T5849] f2fs_write_end_io+0x785/0xc20 [ 1230.894526][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1230.894597][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.894660][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1230.894716][ T5849] bio_endio+0x70d/0x850 [ 1230.894763][ T5849] submit_bio_noacct+0x56d/0x1eb0 [ 1230.894830][ T5849] __submit_merged_bio+0x33c/0x770 [ 1230.894893][ T5849] __submit_merged_write_cond+0x319/0x3f0 [ 1230.894965][ T5849] f2fs_write_cache_pages+0x2067/0x2570 [ 1230.895063][ T5849] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1230.895137][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.895187][ T5849] ? __lock_acquire+0x622/0x1c90 [ 1230.895268][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.895368][ T5849] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1230.895474][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.895524][ T5849] ? mod_memcg_lruvec_state+0x394/0x610 [ 1230.895604][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.895654][ T5849] ? __mod_zone_page_state+0xcc/0x1a0 [ 1230.895722][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.895782][ T5849] f2fs_write_data_pages+0x4ad/0xd90 [ 1230.895857][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1230.895941][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.895992][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1230.896061][ T5849] do_writepages+0x27a/0x600 [ 1230.896136][ T5849] ? __pfx_do_writepages+0x10/0x10 [ 1230.896200][ T5849] ? do_raw_spin_unlock+0x172/0x230 [ 1230.896251][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.896301][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 1230.896365][ T5849] filemap_fdatawrite_wbc+0x104/0x160 [ 1230.896438][ T5849] __filemap_fdatawrite_range+0xb2/0xf0 [ 1230.896492][ T5849] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1230.896615][ T5849] ? find_held_lock+0x2b/0x80 [ 1230.896670][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.896722][ T5849] ? do_raw_spin_unlock+0x172/0x230 [ 1230.896772][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.896829][ T5849] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1230.896921][ T5849] block_operations+0x2a3/0xfd0 [ 1230.896993][ T5849] ? __pfx___schedule+0x10/0x10 [ 1230.897056][ T5849] ? __pfx_block_operations+0x10/0x10 [ 1230.897184][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.897234][ T5849] ? down_write+0x14d/0x200 [ 1230.897274][ T5849] ? __pfx_down_write+0x10/0x10 [ 1230.897317][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.897367][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1230.897430][ T5849] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1230.897506][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.897565][ T5849] ? kfree+0x2b4/0x4d0 [ 1230.897599][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.897655][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.897705][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1230.897758][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.897808][ T5849] ? kthread_stop+0x273/0x650 [ 1230.897853][ T5849] kill_f2fs_super+0x3c2/0x470 [ 1230.897894][ T5849] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1230.897932][ T5849] ? lockdep_hardirqs_on+0x7c/0x110 [ 1230.898017][ T5849] deactivate_locked_super+0xc1/0x1a0 [ 1230.898063][ T5849] deactivate_super+0xde/0x100 [ 1230.898110][ T5849] cleanup_mnt+0x225/0x450 [ 1230.898162][ T5849] task_work_run+0x150/0x240 [ 1230.898210][ T5849] ? __pfx_task_work_run+0x10/0x10 [ 1230.898253][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.898306][ T5849] ? __pfx___x64_sys_umount+0x10/0x10 [ 1230.898371][ T5849] exit_to_user_mode_loop+0xeb/0x110 [ 1230.898425][ T5849] do_syscall_64+0x3f6/0x4c0 [ 1230.898497][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.898555][ T5849] RIP: 0033:0x7f1a81d8fc57 [ 1230.898591][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1230.898633][ T5849] RSP: 002b:00007ffe67f04458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1230.898675][ T5849] RAX: 0000000000000000 RBX: 00007f1a81e10925 RCX: 00007f1a81d8fc57 [ 1230.898704][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe67f04510 [ 1230.898732][ T5849] RBP: 00007ffe67f04510 R08: 0000000000000000 R09: 0000000000000000 [ 1230.898759][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe67f055a0 [ 1230.898787][ T5849] R13: 00007f1a81e10925 R14: 000000000012c146 R15: 00007ffe67f055e0 [ 1230.898844][ T5849] [ 1230.898860][ T5849] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1231.211266][T11788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.552456][T11929] loop2: detected capacity change from 0 to 256 [ 1231.605370][T11929] FAT-fs (loop2): Directory bread(block 64) failed [ 1231.612364][T11929] FAT-fs (loop2): Directory bread(block 65) failed [ 1231.619597][T11929] FAT-fs (loop2): Directory bread(block 66) failed [ 1231.626274][T11929] FAT-fs (loop2): Directory bread(block 67) failed [ 1231.633045][T11929] FAT-fs (loop2): Directory bread(block 68) failed [ 1231.639672][T11929] FAT-fs (loop2): Directory bread(block 69) failed [ 1231.646405][T11929] FAT-fs (loop2): Directory bread(block 70) failed [ 1231.653051][T11929] FAT-fs (loop2): Directory bread(block 71) failed [ 1231.659794][T11929] FAT-fs (loop2): Directory bread(block 72) failed [ 1231.667062][T11929] FAT-fs (loop2): Directory bread(block 73) failed [ 1231.835041][T10516] usb 6-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 1231.853745][T10516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.896586][T10516] usb 6-1: config 0 descriptor?? [ 1231.922662][T10516] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1232.213809][T10516] gspca_spca505: reg write: error -71 [ 1232.222574][T10516] spca505 6-1:0.0: probe with driver spca505 failed with error -5 [ 1232.307122][T10516] usb 6-1: USB disconnect, device number 5 [ 1232.380457][T11788] team0: Port device team_slave_0 added [ 1232.500012][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.538444][T11730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.572164][T11730] bridge_slave_0: entered allmulticast mode [ 1232.657112][T11730] bridge_slave_0: entered promiscuous mode [ 1232.782280][T11788] team0: Port device team_slave_1 added [ 1233.036065][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.043448][T11730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.092276][T11730] bridge_slave_1: entered allmulticast mode [ 1233.106083][T11730] bridge_slave_1: entered promiscuous mode [ 1233.271153][T11943] loop5: detected capacity change from 0 to 1024 [ 1233.342919][T11943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.732758][T11938] loop2: detected capacity change from 0 to 32768 [ 1234.104987][T11788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.112080][T11788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.139237][T11938] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1206 (11938) [ 1234.245122][T11949] overlayfs: missing 'lowerdir' [ 1234.264937][T11788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.285940][T11938] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1234.593966][T11938] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 1234.622335][T11788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.631674][T11788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.669689][T11938] BTRFS info (device loop2): using free-space-tree [ 1234.684050][T11788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.987372][T11730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.168444][T11730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.622695][T11974] 9pnet_fd: Insufficient options for proto=fd [ 1236.098738][T11938] BTRFS error (device loop2): open_ctree failed: -4 [ 1236.108128][T11609] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1236.111224][ T5858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.935189][T11788] hsr_slave_0: entered promiscuous mode [ 1236.942426][T11788] hsr_slave_1: entered promiscuous mode [ 1236.965059][T11788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1236.972724][T11788] Cannot create hsr debugfs directory [ 1237.161479][T11730] team0: Port device team_slave_0 added [ 1237.201721][T11730] team0: Port device team_slave_1 added [ 1237.399287][T11730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.418048][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.463893][T11730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.501786][T11730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.512346][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.558745][T11730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.485840][T11996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input32 [ 1239.556054][T11730] hsr_slave_0: entered promiscuous mode [ 1239.586431][T11730] hsr_slave_1: entered promiscuous mode [ 1239.648011][T11992] loop5: detected capacity change from 0 to 4096 [ 1239.766058][T11730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1239.773826][T11730] Cannot create hsr debugfs directory [ 1239.964564][ T6017] bridge_slave_1: left allmulticast mode [ 1239.970309][ T6017] bridge_slave_1: left promiscuous mode [ 1240.234292][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.313998][ T6017] bridge_slave_0: left allmulticast mode [ 1240.325999][ T6017] bridge_slave_0: left promiscuous mode [ 1241.114129][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.191395][T11374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1241.264054][T11374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1241.268111][T11992] ntfs3(loop5): failed to convert "0000" to iso8859-9 [ 1241.273159][T11374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1241.290699][T11374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1241.304525][T11374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1241.389101][T11993] ntfs3(loop5): failed to convert "0000" to iso8859-9 [ 1241.413790][ T6017] bridge_slave_1: left allmulticast mode [ 1241.419556][ T6017] bridge_slave_1: left promiscuous mode [ 1241.499002][T11992] ntfs3(loop5): failed to convert name for inode 1e. [ 1241.507719][T11993] ntfs3(loop5): failed to convert name for inode 1e. [ 1241.524007][T11993] ntfs3(loop5): ino=1f, mi_enum_attr [ 1241.536605][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.540711][T11993] ntfs3(loop5): ino=1f, mi_enum_attr [ 1241.622558][T12014] loop1: detected capacity change from 0 to 2048 [ 1241.654642][T11992] ntfs3(loop5): ino=1f, mi_enum_attr [ 1241.671183][T12014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1241.692881][ T6017] bridge_slave_0: left allmulticast mode [ 1241.710237][T11992] ntfs3(loop5): ino=1f, mi_enum_attr [ 1241.731054][ T6017] bridge_slave_0: left promiscuous mode [ 1241.752455][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.144941][ T9398] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1242.314613][ T9398] usb 6-1: Using ep0 maxpacket: 8 [ 1242.325469][ T9398] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1242.369196][ T9398] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1242.380087][ T9398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1242.403323][ T9398] usb 6-1: SerialNumber: syz [ 1242.435561][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.467205][ T9398] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1242.544547][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.581929][ T6017] bond0 (unregistering): Released all slaves [ 1242.708165][ T5770] usb 6-1: USB disconnect, device number 6 [ 1243.042055][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.102354][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.162213][ T6017] bond0 (unregistering): Released all slaves [ 1243.442585][T11374] Bluetooth: hci0: command tx timeout [ 1243.916041][T12030] loop5: detected capacity change from 0 to 256 [ 1244.462694][T12030] FAT-fs (loop5): Directory bread(block 64) failed [ 1244.738133][T12030] FAT-fs (loop5): Directory bread(block 65) failed [ 1244.746980][ T6017] hsr_slave_0: left promiscuous mode [ 1244.757131][T12030] FAT-fs (loop5): Directory bread(block 66) failed [ 1244.767338][ T6017] hsr_slave_1: left promiscuous mode [ 1244.774205][T12030] FAT-fs (loop5): Directory bread(block 67) failed [ 1244.819214][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.522421][T11374] Bluetooth: hci0: command tx timeout [ 1245.617671][T12030] FAT-fs (loop5): Directory bread(block 68) failed [ 1245.656613][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.673806][T12030] FAT-fs (loop5): Directory bread(block 69) failed [ 1245.723939][T12030] FAT-fs (loop5): Directory bread(block 70) failed [ 1245.763842][T12030] FAT-fs (loop5): Directory bread(block 71) failed [ 1245.794225][ T6017] hsr_slave_0: left promiscuous mode [ 1245.810147][T12030] FAT-fs (loop5): Directory bread(block 72) failed [ 1245.840074][ T6017] hsr_slave_1: left promiscuous mode [ 1245.843918][T12030] FAT-fs (loop5): Directory bread(block 73) failed [ 1245.873609][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.906957][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.929015][T12041] loop2: detected capacity change from 0 to 512 [ 1246.964790][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1219'. [ 1247.030061][T12041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.153945][T12041] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.753011][T11374] Bluetooth: hci0: command tx timeout [ 1248.479356][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.009067][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.806386][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 1249.853857][T11374] Bluetooth: hci0: command tx timeout [ 1250.417248][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 1250.650694][T12061] loop1: detected capacity change from 0 to 164 [ 1250.679322][T12061] Unable to read rock-ridge attributes [ 1250.696278][T12061] Unable to read rock-ridge attributes [ 1250.731162][T12061] Unable to read rock-ridge attributes [ 1250.746953][T12061] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1250.926865][T12062] Unable to read rock-ridge attributes [ 1251.872904][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 1251.910823][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 1252.341288][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.681041][T12084] loop2: detected capacity change from 0 to 4096 [ 1255.248282][T12084] ntfs3(loop2): failed to convert "0000" to iso8859-9 [ 1255.265513][T12084] ntfs3(loop2): failed to convert name for inode 1e. [ 1255.308803][T12096] ntfs3(loop2): failed to convert "0000" to iso8859-9 [ 1255.316145][T12084] ntfs3(loop2): ino=1f, mi_enum_attr [ 1255.322332][T12084] ntfs3(loop2): ino=1f, mi_enum_attr [ 1255.359924][T12096] ntfs3(loop2): failed to convert name for inode 1e. [ 1255.375468][T12096] ntfs3(loop2): ino=1f, mi_enum_attr [ 1255.381435][T12096] ntfs3(loop2): ino=1f, mi_enum_attr [ 1255.547755][T11788] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1255.591652][T12008] chnl_net:caif_netlink_parms(): no params data found [ 1255.662172][T11788] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1255.775660][T11788] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1255.840693][T11788] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1255.964352][ T9398] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1256.164052][ T9398] usb 3-1: Using ep0 maxpacket: 8 [ 1256.175985][T12008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.211306][ T9398] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1256.244608][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.262757][T12008] bridge_slave_0: entered allmulticast mode [ 1256.293808][ T9398] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1256.306204][T12008] bridge_slave_0: entered promiscuous mode [ 1256.320611][ T9398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1256.349359][ T9398] usb 3-1: SerialNumber: syz [ 1256.358201][T12008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.372026][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.383121][ T9398] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1256.394105][T12008] bridge_slave_1: entered allmulticast mode [ 1256.402688][T12008] bridge_slave_1: entered promiscuous mode [ 1256.666172][ T119] usb 3-1: USB disconnect, device number 2 [ 1256.816332][T12008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.527342][T12008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.652023][T12125] loop1: detected capacity change from 0 to 1024 [ 1257.819818][T12125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1257.960254][T12134] loop5: detected capacity change from 0 to 164 [ 1258.104245][T12134] Unable to read rock-ridge attributes [ 1258.221070][T12134] Unable to read rock-ridge attributes [ 1258.268254][T12134] Unable to read rock-ridge attributes [ 1258.307050][T12134] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1258.498336][T12134] Unable to read rock-ridge attributes [ 1258.507934][T12134] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1258.618493][T12134] Unable to read rock-ridge attributes [ 1258.969604][T12008] team0: Port device team_slave_0 added [ 1259.752875][T12008] team0: Port device team_slave_1 added [ 1260.209055][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1260.228546][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1260.238720][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1260.496200][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1260.507064][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1261.401353][T12008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.425707][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.577027][T12008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.053532][T12008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.060758][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.204044][T12008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.316277][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.638393][ T5870] Bluetooth: hci1: command tx timeout [ 1262.670992][T12008] hsr_slave_0: entered promiscuous mode [ 1262.705356][T12008] hsr_slave_1: entered promiscuous mode [ 1262.777260][ T6017] bridge_slave_1: left allmulticast mode [ 1262.783025][ T6017] bridge_slave_1: left promiscuous mode [ 1262.808669][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.828730][ T6017] bridge_slave_0: left allmulticast mode [ 1262.841224][ T6017] bridge_slave_0: left promiscuous mode [ 1262.861399][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.122801][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.152098][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.167706][ T6017] bond0 (unregistering): Released all slaves [ 1263.347087][ T6017] hsr_slave_0: left promiscuous mode [ 1263.371998][ T6017] hsr_slave_1: left promiscuous mode [ 1263.380750][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.399371][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.245118][T12183] binfmt_misc: register: failed to install interpreter file ./file2 [ 1264.987070][ T5870] Bluetooth: hci1: command tx timeout [ 1265.387622][T12190] loop5: detected capacity change from 0 to 164 [ 1265.431456][T12190] Unable to read rock-ridge attributes [ 1265.469252][T12190] Unable to read rock-ridge attributes [ 1265.482933][T12190] Unable to read rock-ridge attributes [ 1265.545355][T12190] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1265.620988][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 1265.649536][T12192] Unable to read rock-ridge attributes [ 1265.655363][T12192] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1265.723274][T12192] Unable to read rock-ridge attributes [ 1265.819449][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 1266.597949][T11374] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1266.636870][T11374] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1266.648088][T11374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1266.666296][T11374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1266.686088][T11374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1266.867639][T12198] loop5: detected capacity change from 0 to 2048 [ 1267.010082][T12198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1267.043828][T11374] Bluetooth: hci1: command tx timeout [ 1268.717987][T11374] Bluetooth: hci5: command tx timeout [ 1269.130700][T11374] Bluetooth: hci1: command tx timeout [ 1269.876044][T12230] loop1: detected capacity change from 0 to 1024 [ 1270.793833][T11374] Bluetooth: hci5: command tx timeout [ 1272.873851][T11374] Bluetooth: hci5: command tx timeout [ 1273.026302][T12230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1274.953934][T11374] Bluetooth: hci5: command tx timeout [ 1275.677036][T12248] syzkaller0: entered promiscuous mode [ 1275.692728][T12248] syzkaller0: entered allmulticast mode [ 1276.271480][T12262] loop1: detected capacity change from 0 to 164 [ 1276.343596][T12262] Unable to read rock-ridge attributes [ 1276.422750][T12262] Unable to read rock-ridge attributes [ 1276.465498][T12262] Unable to read rock-ridge attributes [ 1276.481169][T12262] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1276.559136][T12144] chnl_net:caif_netlink_parms(): no params data found [ 1276.772046][T12262] Unable to read rock-ridge attributes [ 1276.778107][T12262] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1277.634334][T12262] Unable to read rock-ridge attributes [ 1279.274466][T12281] binfmt_misc: register: failed to install interpreter file ./file2 [ 1281.237707][T12291] trusted_key: encrypted_key: insufficient parameters specified [ 1283.015183][T12144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.032898][T12144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.064487][T12144] bridge_slave_0: entered allmulticast mode [ 1283.085987][T12144] bridge_slave_0: entered promiscuous mode [ 1283.104923][T12195] chnl_net:caif_netlink_parms(): no params data found [ 1283.254144][T12144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.261380][T12144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.293979][T12144] bridge_slave_1: entered allmulticast mode [ 1283.303523][T12144] bridge_slave_1: entered promiscuous mode [ 1283.366655][T12303] loop2: detected capacity change from 0 to 2048 [ 1283.970677][T12144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.199307][T12144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.390491][T12317] loop2: detected capacity change from 0 to 1024 [ 1284.421469][T12317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1287.219282][T12144] team0: Port device team_slave_0 added [ 1287.310106][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.333929][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.341365][T12195] bridge_slave_0: entered allmulticast mode [ 1287.596594][T12195] bridge_slave_0: entered promiscuous mode [ 1287.607794][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.625659][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.633092][T12195] bridge_slave_1: entered allmulticast mode [ 1287.650535][T12195] bridge_slave_1: entered promiscuous mode [ 1288.092488][T12335] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input33 [ 1289.612225][T12008] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1290.306242][T12144] team0: Port device team_slave_1 added [ 1291.638675][T12344] loop2: detected capacity change from 0 to 1024 [ 1291.744676][T12344] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1292.326901][T12348] loop1: detected capacity change from 0 to 512 [ 1292.509405][T12008] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1292.538435][T12348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1292.605427][T12348] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.617948][T12008] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1297.569310][T12144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.581373][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.620112][T12144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.662277][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.700093][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.710489][T12008] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1297.731915][T12372] loop2: detected capacity change from 0 to 8 [ 1298.607712][T12144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.632762][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.707722][T12144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.778922][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.857778][ T6017] bridge_slave_1: left allmulticast mode [ 1298.863550][ T6017] bridge_slave_1: left promiscuous mode [ 1298.869932][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.901952][ T6017] bridge_slave_0: left allmulticast mode [ 1298.909166][ T6017] bridge_slave_0: left promiscuous mode [ 1298.915761][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.935998][ T6017] bridge_slave_1: left allmulticast mode [ 1298.941755][ T6017] bridge_slave_1: left promiscuous mode [ 1298.949113][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.965138][ T6017] bridge_slave_0: left allmulticast mode [ 1298.970936][ T6017] bridge_slave_0: left promiscuous mode [ 1298.984029][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.203149][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.218040][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.231870][ T6017] bond0 (unregistering): Released all slaves [ 1299.373224][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.393257][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.407495][ T6017] bond0 (unregistering): Released all slaves [ 1299.443553][T12195] team0: Port device team_slave_0 added [ 1299.457985][T12195] team0: Port device team_slave_1 added [ 1299.645834][ T6017] hsr_slave_0: left promiscuous mode [ 1299.661199][ T6017] hsr_slave_1: left promiscuous mode [ 1299.670070][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.685031][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.727733][ T6017] hsr_slave_0: left promiscuous mode [ 1299.751754][ T6017] hsr_slave_1: left promiscuous mode [ 1299.758264][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.773417][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.110145][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 1300.140674][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 1300.622214][T12384] loop5: detected capacity change from 0 to 512 [ 1302.262109][T12384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.380158][T12384] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.540715][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 1305.182637][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1305.197097][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1305.208446][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1305.221522][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 1305.233409][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1305.241971][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1306.101613][T12195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.127429][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.187400][T12195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.291201][T12144] hsr_slave_0: entered promiscuous mode [ 1306.325936][T12144] hsr_slave_1: entered promiscuous mode [ 1306.358112][T12144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.386717][T12144] Cannot create hsr debugfs directory [ 1306.431737][T12195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.466110][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.528078][ T5858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.539194][T12195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.907113][T12426] loop2: detected capacity change from 0 to 512 [ 1308.091707][ T5870] Bluetooth: hci0: command tx timeout [ 1308.131968][T12426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.237017][T12426] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.228367][T12438] binfmt_misc: register: failed to install interpreter file ./file2 [ 1310.776344][ T5870] Bluetooth: hci0: command tx timeout [ 1310.785140][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.808385][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.898170][ T5870] Bluetooth: hci0: command tx timeout [ 1312.918873][T12195] hsr_slave_0: entered promiscuous mode [ 1312.926243][T12195] hsr_slave_1: entered promiscuous mode [ 1312.933051][T12195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1312.940841][T12195] Cannot create hsr debugfs directory [ 1313.215069][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.089299][ T5870] Bluetooth: hci0: command tx timeout [ 1319.122491][T12418] chnl_net:caif_netlink_parms(): no params data found [ 1319.378919][T12418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.387347][T12418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.400455][T12418] bridge_slave_0: entered allmulticast mode [ 1319.409157][T12418] bridge_slave_0: entered promiscuous mode [ 1319.419411][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.433096][T12418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.441332][T12418] bridge_slave_1: entered allmulticast mode [ 1319.449969][T12418] bridge_slave_1: entered promiscuous mode [ 1319.559667][T12418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.578200][T12418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.702101][T12418] team0: Port device team_slave_0 added [ 1319.715855][T12418] team0: Port device team_slave_1 added [ 1319.836466][T12418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.845794][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.875143][T12418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.890159][T12418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.897360][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.924762][T12418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.982417][T12195] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1319.996304][T12195] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1320.007480][ T13] bridge_slave_1: left allmulticast mode [ 1320.013219][ T13] bridge_slave_1: left promiscuous mode [ 1320.021054][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.033017][ T13] bridge_slave_0: left allmulticast mode [ 1320.039244][ T13] bridge_slave_0: left promiscuous mode [ 1320.045534][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.584140][T12479] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1298'. [ 1321.254083][T12484] binfmt_misc: register: failed to install interpreter file ./file2 [ 1321.848193][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.903779][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.011259][ T13] bond0 (unregistering): Released all slaves [ 1322.600824][T12195] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1323.546200][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1323.557443][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1323.575992][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1323.616428][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1323.625879][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1323.726379][ T13] hsr_slave_0: left promiscuous mode [ 1323.999452][ T13] hsr_slave_1: left promiscuous mode [ 1324.014834][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.955241][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.385153][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1325.484663][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1325.683203][ T5870] Bluetooth: hci1: command tx timeout [ 1326.022681][T12418] hsr_slave_0: entered promiscuous mode [ 1326.030381][T12418] hsr_slave_1: entered promiscuous mode [ 1326.046622][T12195] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1326.724377][T12507] loop2: detected capacity change from 0 to 512 [ 1327.006358][T12507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.124961][T12507] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.154093][ T13] bridge_slave_1: left allmulticast mode [ 1327.164622][ T13] bridge_slave_1: left promiscuous mode [ 1327.173390][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.307686][ T13] bridge_slave_0: left allmulticast mode [ 1327.363913][ T13] bridge_slave_0: left promiscuous mode [ 1327.369982][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.679047][T12518] binfmt_misc: register: failed to install interpreter file ./file2 [ 1327.814138][ T5870] Bluetooth: hci1: command tx timeout [ 1329.903913][ T5870] Bluetooth: hci1: command tx timeout [ 1331.931284][ T5870] Bluetooth: hci1: command tx timeout [ 1335.018991][T11374] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1335.029014][T11374] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1335.038614][T11374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1335.048773][T11374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1335.059187][T11374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1335.677022][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.709736][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.682277][ T13] bond0 (unregistering): Released all slaves [ 1337.131686][ T5870] Bluetooth: hci5: command tx timeout [ 1337.561365][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1313'. [ 1337.711427][ T13] hsr_slave_0: left promiscuous mode [ 1337.732975][ T13] hsr_slave_1: left promiscuous mode [ 1337.756289][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.788181][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.921559][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.242947][ T5870] Bluetooth: hci5: command tx timeout [ 1339.887296][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1340.068760][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1341.353863][ T5870] Bluetooth: hci5: command tx timeout [ 1343.434008][ T5870] Bluetooth: hci5: command tx timeout [ 1343.771296][T12588] loop2: detected capacity change from 0 to 2048 [ 1344.042166][T12593] loop5: detected capacity change from 0 to 2048 [ 1344.155189][T12492] chnl_net:caif_netlink_parms(): no params data found [ 1344.439092][T12595] loop1: detected capacity change from 0 to 4096 [ 1344.648088][T12418] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1344.712905][T12595] ntfs3(loop1): failed to convert "0000" to iso8859-9 [ 1344.798768][T12604] ntfs3(loop1): failed to convert "0000" to iso8859-9 [ 1345.330746][T12604] ntfs3(loop1): failed to convert name for inode 1e. [ 1345.554600][T12595] ntfs3(loop1): failed to convert name for inode 1e. [ 1345.615945][T12595] ntfs3(loop1): ino=1f, mi_enum_attr [ 1345.621777][T12595] ntfs3(loop1): ino=1f, mi_enum_attr [ 1345.628533][T12418] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1345.628650][T12604] ntfs3(loop1): ino=1f, mi_enum_attr [ 1345.641684][T12604] ntfs3(loop1): ino=1f, mi_enum_attr [ 1345.745429][T12418] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1345.803036][T12418] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1346.896377][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.905630][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.913126][T12492] bridge_slave_0: entered allmulticast mode [ 1346.922810][T12492] bridge_slave_0: entered promiscuous mode [ 1347.977490][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.991513][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.002839][T12492] bridge_slave_1: entered allmulticast mode [ 1348.054529][T12492] bridge_slave_1: entered promiscuous mode [ 1351.501967][T12541] chnl_net:caif_netlink_parms(): no params data found [ 1351.613522][T12492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.047465][T12492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.452036][T12492] team0: Port device team_slave_0 added [ 1353.578258][T12492] team0: Port device team_slave_1 added [ 1354.167215][T12492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.210558][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.375225][T12652] loop5: detected capacity change from 0 to 1024 [ 1354.503778][T12652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1354.541061][T12492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.869047][T12492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.927915][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1355.149191][T12492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.540317][T12541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.632101][T12541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.659814][T12541] bridge_slave_0: entered allmulticast mode [ 1355.672605][T12541] bridge_slave_0: entered promiscuous mode [ 1355.814517][T12541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.852424][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.939638][T12541] bridge_slave_1: entered allmulticast mode [ 1356.035929][T12541] bridge_slave_1: entered promiscuous mode [ 1356.363100][T12659] loop5: detected capacity change from 0 to 4096 [ 1356.433450][T12541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.647277][T12492] hsr_slave_0: entered promiscuous mode [ 1356.667262][T12659] ntfs3(loop5): failed to convert "0000" to iso8859-9 [ 1356.669912][T12492] hsr_slave_1: entered promiscuous mode [ 1356.714295][T12492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1356.716789][T12659] ntfs3(loop5): failed to convert name for inode 1e. [ 1356.721936][T12492] Cannot create hsr debugfs directory [ 1356.802104][T12659] ntfs3(loop5): ino=1f, mi_enum_attr [ 1356.811138][T12659] ntfs3(loop5): ino=1f, mi_enum_attr [ 1356.978194][T12541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.119680][T12662] loop1: detected capacity change from 0 to 2048 [ 1357.188039][T12662] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1359.001926][T12541] team0: Port device team_slave_0 added [ 1359.727718][ T7433] bridge_slave_1: left allmulticast mode [ 1359.733471][ T7433] bridge_slave_1: left promiscuous mode [ 1359.800415][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.895422][ T7433] bridge_slave_0: left allmulticast mode [ 1359.901291][ T7433] bridge_slave_0: left promiscuous mode [ 1359.953957][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.311373][T12677] loop5: detected capacity change from 0 to 256 [ 1361.782146][T12679] loop2: detected capacity change from 0 to 256 [ 1361.830278][T12679] FAT-fs (loop2): Directory bread(block 64) failed [ 1361.837273][T12679] FAT-fs (loop2): Directory bread(block 65) failed [ 1361.844055][T12679] FAT-fs (loop2): Directory bread(block 66) failed [ 1361.850618][T12679] FAT-fs (loop2): Directory bread(block 67) failed [ 1361.857928][T12679] FAT-fs (loop2): Directory bread(block 68) failed [ 1361.864552][T12679] FAT-fs (loop2): Directory bread(block 69) failed [ 1361.871199][T12679] FAT-fs (loop2): Directory bread(block 70) failed [ 1361.877827][T12679] FAT-fs (loop2): Directory bread(block 71) failed [ 1361.884504][T12679] FAT-fs (loop2): Directory bread(block 72) failed [ 1361.891094][T12679] FAT-fs (loop2): Directory bread(block 73) failed [ 1361.940074][T12677] FAT-fs (loop5): Directory bread(block 64) failed [ 1361.965795][T12677] FAT-fs (loop5): Directory bread(block 65) failed [ 1361.972538][T12677] FAT-fs (loop5): Directory bread(block 66) failed [ 1362.045707][T12677] FAT-fs (loop5): Directory bread(block 67) failed [ 1362.103825][T12677] FAT-fs (loop5): Directory bread(block 68) failed [ 1362.155084][T12677] FAT-fs (loop5): Directory bread(block 69) failed [ 1362.174650][T12677] FAT-fs (loop5): Directory bread(block 70) failed [ 1362.184591][T12677] FAT-fs (loop5): Directory bread(block 71) failed [ 1362.196960][T12677] FAT-fs (loop5): Directory bread(block 72) failed [ 1362.204028][T12677] FAT-fs (loop5): Directory bread(block 73) failed [ 1362.270997][ T7433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.334562][ T7433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.404815][ T7433] bond0 (unregistering): Released all slaves [ 1362.557475][T12541] team0: Port device team_slave_1 added [ 1362.695418][ T7433] hsr_slave_0: left promiscuous mode [ 1362.702072][ T7433] hsr_slave_1: left promiscuous mode [ 1362.725393][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.734932][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.055562][ T7433] team0 (unregistering): Port device team_slave_1 removed [ 1363.090683][ T7433] team0 (unregistering): Port device team_slave_0 removed [ 1363.428966][T12541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.437231][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.474639][T12541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.494473][T12541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.501528][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.529585][T12541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.772886][T12541] hsr_slave_0: entered promiscuous mode [ 1365.404224][T12541] hsr_slave_1: entered promiscuous mode [ 1365.412495][T12541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1366.619859][T12541] Cannot create hsr debugfs directory [ 1370.921638][T11374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1370.940220][T11374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1370.958381][T11374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1370.983174][T11374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1371.001932][T11374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1371.362115][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.368873][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.692803][T12492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1371.997587][T12492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1373.133923][T11374] Bluetooth: hci0: command tx timeout [ 1373.216349][T12492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1375.138393][T12492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1375.263980][T11374] Bluetooth: hci0: command tx timeout [ 1376.984164][T12740] loop5: detected capacity change from 0 to 1024 [ 1377.274060][ T5870] Bluetooth: hci0: command tx timeout [ 1378.345542][T12740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.355395][ T5870] Bluetooth: hci0: command tx timeout [ 1379.432055][T12761] loop2: detected capacity change from 0 to 2048 [ 1379.457267][T12761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1380.127914][T12767] openvswitch: netlink: Missing valid actions attribute. [ 1380.136122][T12767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1381.322447][ T5858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.413959][ T7433] bridge_slave_1: left allmulticast mode [ 1381.419715][ T7433] bridge_slave_1: left promiscuous mode [ 1381.449750][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.479746][ T7433] bridge_slave_0: left allmulticast mode [ 1381.495368][ T7433] bridge_slave_0: left promiscuous mode [ 1381.509381][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.878715][ T7433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.892114][ T7433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.906714][ T7433] bond0 (unregistering): Released all slaves [ 1381.992362][T12712] chnl_net:caif_netlink_parms(): no params data found [ 1382.052482][ T7433] hsr_slave_0: left promiscuous mode [ 1382.059911][ T7433] hsr_slave_1: left promiscuous mode [ 1382.067371][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.078096][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.331215][ T7433] team0 (unregistering): Port device team_slave_1 removed [ 1382.382617][ T7433] team0 (unregistering): Port device team_slave_0 removed [ 1382.680978][T12541] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1382.716870][T12541] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1382.789200][T12541] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1382.801645][T12541] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1382.877696][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.885246][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.896277][T12712] bridge_slave_0: entered allmulticast mode [ 1382.904558][T12712] bridge_slave_0: entered promiscuous mode [ 1382.914345][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.922189][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.944746][T12712] bridge_slave_1: entered allmulticast mode [ 1383.001675][T12712] bridge_slave_1: entered promiscuous mode [ 1384.685174][T12794] loop2: detected capacity change from 0 to 40427 [ 1384.737999][T12794] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1384.745278][T12794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1384.819163][T12794] F2FS-fs (loop2): invalid crc value [ 1385.032419][T12794] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1385.039766][T12794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1385.562644][T12806] loop5: detected capacity change from 0 to 1024 [ 1385.777613][T12806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1386.850910][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.953007][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.194558][T11374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1387.212555][T11374] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1387.223001][T11374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1387.232130][T11374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1387.243093][T11374] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1387.280746][T12712] team0: Port device team_slave_0 added [ 1387.379507][T12712] team0: Port device team_slave_1 added [ 1387.537668][ T5858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.838369][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.869753][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.943978][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.983448][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.000095][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.045803][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.481250][T12712] hsr_slave_0: entered promiscuous mode [ 1388.523188][T12712] hsr_slave_1: entered promiscuous mode [ 1389.764510][T11374] Bluetooth: hci1: command tx timeout [ 1389.892919][T12839] loop1: detected capacity change from 0 to 1024 [ 1391.833718][T11374] Bluetooth: hci1: command tx timeout [ 1393.905103][T12839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1393.915002][T11374] Bluetooth: hci1: command tx timeout [ 1394.948992][T12851] loop5: detected capacity change from 0 to 2048 [ 1394.991258][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1395.006702][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1395.017784][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1395.034648][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1395.046622][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1395.401828][T12851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1396.123193][ T5870] Bluetooth: hci1: command tx timeout [ 1396.444169][T12850] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1397.261888][T12873] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1397.692678][ T5870] Bluetooth: hci5: command tx timeout [ 1397.890519][ T7433] bridge_slave_1: left allmulticast mode [ 1397.899660][ T7433] bridge_slave_1: left promiscuous mode [ 1397.915078][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.938569][ T7433] bridge_slave_0: left allmulticast mode [ 1397.964423][ T43] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1397.974784][ T7433] bridge_slave_0: left promiscuous mode [ 1397.980703][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.123792][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1398.176759][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1398.190885][ T43] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1398.475724][ T43] usb 6-1: can't read configurations, error -71 [ 1398.607880][T12879] openvswitch: netlink: Missing valid actions attribute. [ 1398.615579][T12879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1399.714793][ T36] ------------[ cut here ]------------ [ 1399.720756][ T36] kernel BUG at fs/ext4/inode.c:2747! [ 1399.742226][ T36] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1399.748744][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1399.760971][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1399.771095][ T36] Workqueue: writeback wb_workfn (flush-7:5) [ 1399.777163][ T36] RIP: 0010:ext4_do_writepages+0x2638/0x3490 [ 1399.783224][ T36] Code: a5 18 ff ff ff 48 c1 ea 03 80 3c 02 00 0f 84 33 ed ff ff 48 8b bd 20 ff ff ff e8 a3 28 a9 ff e9 22 ed ff ff e8 39 44 43 ff 90 <0f> 0b e8 31 44 43 ff 90 0f 0b 90 e9 04 eb ff ff e8 23 44 43 ff 90 [ 1399.794558][T11374] Bluetooth: hci5: command tx timeout [ 1399.802909][ T36] RSP: 0018:ffffc90000ac72c0 EFLAGS: 00010293 [ 1399.814406][ T36] RAX: 0000000000000000 RBX: ffff8880795b9370 RCX: ffffffff827897fd [ 1399.822420][ T36] RDX: ffff888143ae9e00 RSI: ffffffff8278ad97 RDI: 0000000000000007 [ 1399.830416][ T36] RBP: ffffc90000ac7490 R08: 0000000000000007 R09: 0000000000000000 [ 1399.838435][ T36] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 1399.846432][ T36] R13: ffff8880795b97d8 R14: 0000000000000080 R15: ffffc90000ac74e8 [ 1399.854433][ T36] FS: 0000000000000000(0000) GS:ffff88812481a000(0000) knlGS:0000000000000000 [ 1399.863460][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1399.870085][ T36] CR2: 0000200000023000 CR3: 000000006a273000 CR4: 0000000000350ef0 [ 1399.878178][ T36] Call Trace: [ 1399.881476][ T36] [ 1399.884427][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.890198][ T36] ? look_up_lock_class+0x6b/0x150 [ 1399.895373][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.901069][ T36] ? register_lock_class+0x41/0x4c0 [ 1399.906357][ T36] ? __lock_acquire+0xb8a/0x1c90 [ 1399.911360][ T36] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1399.917051][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.922735][ T36] ? ext4_writepages+0x37a/0x7d0 [ 1399.927724][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.933395][ T36] ext4_writepages+0x37a/0x7d0 [ 1399.938216][ T36] ? __pfx_ext4_writepages+0x10/0x10 [ 1399.943579][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.949268][ T36] ? __pfx_ext4_writepages+0x10/0x10 [ 1399.954633][ T36] do_writepages+0x27a/0x600 [ 1399.959322][ T36] ? __pfx_do_writepages+0x10/0x10 [ 1399.964499][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.970355][ T36] ? reacquire_held_locks+0xcd/0x1f0 [ 1399.975682][ T36] ? writeback_sb_inodes+0x3a4/0xf90 [ 1399.981029][ T36] __writeback_single_inode+0x160/0xfb0 [ 1399.986635][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 1399.992760][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.998439][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 1400.003681][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.009374][ T36] writeback_sb_inodes+0x601/0xf90 [ 1400.014672][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1400.020397][ T36] ? __lock_acquire+0xb8a/0x1c90 [ 1400.025447][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.031130][ T36] ? rcu_is_watching+0x12/0xc0 [ 1400.035962][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.041637][ T36] ? queue_io+0x3f6/0x520 [ 1400.046157][ T36] wb_writeback+0x419/0xb70 [ 1400.050727][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1400.055814][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.061500][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.067181][ T36] ? mark_held_locks+0x49/0x80 [ 1400.072007][ T36] wb_workfn+0x14d/0xbe0 [ 1400.076286][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1400.082412][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1400.087211][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.092881][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.098678][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.104448][ T36] ? rcu_is_watching+0x12/0xc0 [ 1400.109270][ T36] process_one_work+0x9cf/0x1b70 [ 1400.114266][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1400.119674][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.125351][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.131025][ T36] ? assign_work+0x1a0/0x250 [ 1400.135654][ T36] worker_thread+0x6c8/0xf10 [ 1400.140292][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1400.145443][ T36] kthread+0x3c5/0x780 [ 1400.149548][ T36] ? __pfx_kthread+0x10/0x10 [ 1400.154168][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.159852][ T36] ? rcu_is_watching+0x12/0xc0 [ 1400.164659][ T36] ? __pfx_kthread+0x10/0x10 [ 1400.169281][ T36] ret_from_fork+0x5d7/0x6f0 [ 1400.173928][ T36] ? __pfx_kthread+0x10/0x10 [ 1400.178550][ T36] ret_from_fork_asm+0x1a/0x30 [ 1400.183361][ T36] [ 1400.186924][ T36] Modules linked in: [ 1400.192466][ T36] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1400.272179][ T36] RIP: 0010:ext4_do_writepages+0x2638/0x3490 [ 1400.332534][ T36] Code: a5 18 ff ff ff 48 c1 ea 03 80 3c 02 00 0f 84 33 ed ff ff 48 8b bd 20 ff ff ff e8 a3 28 a9 ff e9 22 ed ff ff e8 39 44 43 ff 90 <0f> 0b e8 31 44 43 ff 90 0f 0b 90 e9 04 eb ff ff e8 23 44 43 ff 90 [ 1400.528475][ T36] RSP: 0018:ffffc90000ac72c0 EFLAGS: 00010293 [ 1400.572311][ T36] RAX: 0000000000000000 RBX: ffff8880795b9370 RCX: ffffffff827897fd [ 1400.589403][ T7433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.594003][ T36] RDX: ffff888143ae9e00 RSI: ffffffff8278ad97 RDI: 0000000000000007 [ 1400.629509][ T36] RBP: ffffc90000ac7490 R08: 0000000000000007 R09: 0000000000000000 [ 1400.641511][ T7433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.656483][ T36] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 1400.665305][ T36] R13: ffff8880795b97d8 R14: 0000000000000080 R15: ffffc90000ac74e8 [ 1400.673544][ T36] FS: 0000000000000000(0000) GS:ffff88812481a000(0000) knlGS:0000000000000000 [ 1400.682725][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1400.689638][ T36] CR2: 000020000000a038 CR3: 000000006a273000 CR4: 0000000000350ef0 [ 1400.697809][ T36] Kernel panic - not syncing: Fatal exception [ 1400.704826][ T36] Kernel Offset: disabled [ 1400.709207][ T36] Rebooting in 86400 seconds..