last executing test programs: 14m13.724913249s ago: executing program 0 (id=34): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x4, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket(0x2b, 0x80801, 0x1) getdents64(r0, 0xffffffffffffffff, 0x43) 14m8.522698186s ago: executing program 0 (id=47): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=r0, @ANYBLOB="170900000000f100000001000000"], 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 14m8.259247733s ago: executing program 0 (id=48): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 14m7.715085376s ago: executing program 0 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000180)='[]\x00', &(0x7f00000001c0)='*}', 0x2) 14m7.460328843s ago: executing program 0 (id=53): futex(0x0, 0x83, 0x2, 0x0, 0x0, 0x400000) 14m7.220957458s ago: executing program 0 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000b00)="0ee7ee0c7cdad9b4b47380c988cafba587da694360b8f89814a704a1aa25534384645b70d160cd2710998b25595c7f941afbf4058adce5c8c4ca215583917f55a2bf84ebb0f26ea8fb138c01bf6f98e68d9f9d276dcfc6ab0e66fe57889aab5f4ed7e56272527ea8b9e5e6e0e3f4a468", 0x70}], 0x1) 13m52.006336801s ago: executing program 32 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000b00)="0ee7ee0c7cdad9b4b47380c988cafba587da694360b8f89814a704a1aa25534384645b70d160cd2710998b25595c7f941afbf4058adce5c8c4ca215583917f55a2bf84ebb0f26ea8fb138c01bf6f98e68d9f9d276dcfc6ab0e66fe57889aab5f4ed7e56272527ea8b9e5e6e0e3f4a468", 0x70}], 0x1) 4m22.689670376s ago: executing program 4 (id=1018): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 4m19.67303875s ago: executing program 4 (id=1024): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x3) socket$rds(0x15, 0x5, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) 4m17.466998664s ago: executing program 4 (id=1026): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, 0x0, 0x0, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123', 0x1b, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 4m13.93651363s ago: executing program 4 (id=1029): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x8, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x938, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffb, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0xfffffffe, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x7, 0xdd, 0x1, 0x1400, 0xc3, 0x6, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0xffffffff, 0x4c, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) 4m6.114148592s ago: executing program 3 (id=1037): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, 0x0, 0x0, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123', 0x1b, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 4m5.920887957s ago: executing program 4 (id=1038): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x198, &(0x7f0000000000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x18, 0xa01, 0x0, 0x25dfdbfd, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @pid=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x80) 4m0.90427944s ago: executing program 4 (id=1041): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x80000000000003) r2 = open(0x0, 0x0, 0x0) getdents(r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) io_uring_setup(0x1b7f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m52.834363457s ago: executing program 3 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3m48.275867589s ago: executing program 3 (id=1045): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x3) socket$rds(0x15, 0x5, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) 3m45.752104671s ago: executing program 33 (id=1041): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x80000000000003) r2 = open(0x0, 0x0, 0x0) getdents(r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) io_uring_setup(0x1b7f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m43.226812753s ago: executing program 3 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3m40.613060197s ago: executing program 3 (id=1055): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 3m38.702455633s ago: executing program 3 (id=1058): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000bc0)="79bcdbd4e305e3e779fc3a33695da747be6e1651a33187fc6fe88f085a194e45faaca7abb73aa204252310f3fd2919bf800a8f4be1733703d861a2c9b031161f6cab2cbdd2fd40ab182b15ef79cb79a4fe8d29cfd328269dd7c6f99e04d4d1d8d02e222a390edb6b7e68b61ab60d976def6772eee5abfc18cd90eb8fe23dd7b0ce34b70e84a26f3dcb318de9ab4f7b", 0x619, r0}, 0x38) utime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=@random={'user.', '\x01'}, &(0x7f0000000440)='%$-#*..[#\x006\'\xd2\xe39\x1a\xcb\xa8\x93\x02V\xea\x1a\x92B\x13\x05}\xdd\x89\xb6\xd0\xec\xa4\x89\xf3\f\x03a\\\xb2\x82\x92\xfd\x12\xad\r\xfb\x8e\xf7L\x8b\x98\xcc\xed^\xe3', 0x8b, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000100001082cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe1c1002e3d8a3da56e457001bf671"], 0x28}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x401, &(0x7f0000000340)={[], [{@obj_type={'obj_type', 0x3d, '\x00'}}], 0x2e}, 0x84, 0x46a, &(0x7f00000004c0)="$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") 3m23.241951292s ago: executing program 34 (id=1058): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000bc0)="79bcdbd4e305e3e779fc3a33695da747be6e1651a33187fc6fe88f085a194e45faaca7abb73aa204252310f3fd2919bf800a8f4be1733703d861a2c9b031161f6cab2cbdd2fd40ab182b15ef79cb79a4fe8d29cfd328269dd7c6f99e04d4d1d8d02e222a390edb6b7e68b61ab60d976def6772eee5abfc18cd90eb8fe23dd7b0ce34b70e84a26f3dcb318de9ab4f7b", 0x619, r0}, 0x38) utime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=@random={'user.', '\x01'}, &(0x7f0000000440)='%$-#*..[#\x006\'\xd2\xe39\x1a\xcb\xa8\x93\x02V\xea\x1a\x92B\x13\x05}\xdd\x89\xb6\xd0\xec\xa4\x89\xf3\f\x03a\\\xb2\x82\x92\xfd\x12\xad\r\xfb\x8e\xf7L\x8b\x98\xcc\xed^\xe3', 0x8b, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000100001082cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe1c1002e3d8a3da56e457001bf671"], 0x28}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x401, &(0x7f0000000340)={[], [{@obj_type={'obj_type', 0x3d, '\x00'}}], 0x2e}, 0x84, 0x46a, &(0x7f00000004c0)="$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") 2m44.333996855s ago: executing program 1 (id=1118): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x198, &(0x7f0000000000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) 2m41.477768305s ago: executing program 1 (id=1121): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2m38.641956534s ago: executing program 1 (id=1123): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2m37.929338112s ago: executing program 1 (id=1125): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r4, 0x0) r5 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) get_robust_list(r5, 0x0, 0x0) 2m36.210427764s ago: executing program 1 (id=1126): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@local, 0x40}) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m34.341222029s ago: executing program 1 (id=1129): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x198, &(0x7f0000000000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) 2m19.036949165s ago: executing program 35 (id=1129): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x198, &(0x7f0000000000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) 36.997265004s ago: executing program 7 (id=1324): r0 = fsopen(&(0x7f0000000440)='fuseblk\x00', 0x0) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f00000f7000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0), &(0x7f00000004c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00 \x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\x04\x00\x00\x00\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xc1\xfbVC\xd2\x81\x98\x02H\xda\xbd0\xf8\nZ\xf8\x8d\x19\x8e\xe0\x06\x00}\xc4|\xa7{ \xfa+\x89\xaa\n\x84\x17z\t\xc1\xb7}\x9d{*4Q\xbb^>\xc3\xd5\xa1\xc9\xc7\xe3\xfbP\x1d\r\xd7Nw,~\xe6\x06\xf3\xceU}\xa9,:\xcc\xa7\xa84\xe6\x1b\xd9\\7u\x1d @\x8a\xf4\x0e\x85S\r\x1e\xff\xde:<\x00\x00\x00\x00\x00\xf2\x04T\xd1\'\xf6\xf8\xbe>^\xcb\xd3\x9f\xf0~i&\x82\xbdZ\x80\x11\x94\xb2\x1f\xa7}Z@n\x0f\x9d\xf8s*\xa0l\xea\xd0\xb5\x80\x93\b\xea\xb3&\xf0\t}|\x8a\xae\xa3_\"fc\x94\xbc\xc4I\xc1M\x16U5\xf53|(AErb\xee\x10\xa9\xcbN\xaf\x8e\xacY!=u\xefc\x0e\x96\xd0\x16\xd0)x\t<\xb6\xa3+wY\xed\x11\xe0\x17\x91\xaf*4\xfa\xe4n\xa1P<\xec\xf7V\x1c\xbd\xb3\xd6O\x84I\x91[\xf6{\xc7\'5\x9eZB\xe0\x8a\x17\t Y\x84\xc6\xa5\x899\xf9\x1c)(T\xc9e9\x8d\x13\xe4Q\xc5Y\xe5\xf6\x1d\xd7\xa1Oz+\xceH\xdfG_\xf3T\xd7\x18\xab\x9e\xf3w\xc3\x93\x10\nq.\x06qi\x9eT;\f\xcc\xdf\x86^\xc7\x82h\x14\x827\x12h{\a>\xf6\x02\xb7=\xe2\xe5%\xb5\x9f\n\x18N\xff\xbe5\xca\xb7G\xd8) \x7f\xf6\f\xca\xa9\xd0\xd5\x18f\xf8\xfa\xc8\x92We\xff\xca\xbd\xdfg\xb2~\x0f\xf6\xf72)k\x8f=\xfdb\xc3\xe0\xcf\xbaJ\xdfi\xa7\xad\x84\x1f\xcc\x10SV\xcc/o\xad\xa4s@\xd0Mw\x7fsM\x03\\\xa8\xa0k\x8d', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x5, r4}) 36.275979381s ago: executing program 7 (id=1327): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4807e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) fallocate(r0, 0x20, 0x0, 0x8000) 35.654073187s ago: executing program 7 (id=1328): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) close(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000000010600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r5, 0x0, 0x40000d1) sendmsg$NFT_BATCH(r5, 0x0, 0x4004000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 35.020062742s ago: executing program 7 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 31.654785274s ago: executing program 7 (id=1336): open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0xd, 0x0, 0x1}, &(0x7f0000000300)=[{}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setneightbl={0x3c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0x18, 0x6, 0x0, 0x1, [@NDTPA_BASE_REACHABLE_TIME={0xc}, @NDTPA_APP_PROBES={0x8, 0x9, 0x3}]}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 31.144951797s ago: executing program 6 (id=1341): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat(0xffffffffffffffff, 0x0, 0x400001, 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "6fdbc8d56c8375fc", "607772c6ef3166b62c65f1250cd12bfb", "34db218d", "c6a1f16f240b0c21"}, 0x28) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) socket$inet6(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0xc) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x5c, 0x160, 0x138, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x84}, 0x5002, 0x118, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x2, 0x80000000, 0x8, 0x5, 0x3, 0x0, 0x4}}, @common=@hl={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x8000, 0xfffffffe, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x20000000}) poll(&(0x7f00000000c0)=[{r9, 0x8283}], 0x1, 0x50c00000) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x2) 29.607796305s ago: executing program 7 (id=1343): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010400, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646f74732c4b6d61736b3d303030303030303030303030303030303008000000000000007365667265652c6e6f646f74732c666c7573682c646f74732c646f74732c6769643dff8490d9b97049932e037f72189513e2c8803afb231bcf600a291ae559accb5e41558612", @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") fallocate(0xffffffffffffffff, 0x0, 0x9, 0x5) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x2, @none, 0x5, 0x2}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) capget(&(0x7f00000001c0)={0x20080522, r0}, &(0x7f0000000040)={0x5, 0x8, 0x5, 0x0, 0xfffffffc, 0x7ff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./bus\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002380)='net/vlan/config\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) 29.108921207s ago: executing program 6 (id=1345): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x8008, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60142, 0x10) write(r3, &(0x7f0000000500)='p:s/_ ./', 0x8) 28.111716541s ago: executing program 6 (id=1346): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f00000007c0)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f00000002c0)=@can={{0x2}, 0x5, 0x3, 0x0, 0x0, "9dc72295efd895df"}, 0x10}, 0x1, 0x0, 0x0, 0x40095}, 0x48811) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x2c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r7, &(0x7f0000000180)='1', 0x1) 26.895345381s ago: executing program 6 (id=1349): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, 0x0, 0x0) 26.685079767s ago: executing program 6 (id=1350): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@local, 0x40}) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 24.08466326s ago: executing program 6 (id=1355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 13.86370538s ago: executing program 36 (id=1343): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010400, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646f74732c4b6d61736b3d303030303030303030303030303030303008000000000000007365667265652c6e6f646f74732c666c7573682c646f74732c646f74732c6769643dff8490d9b97049932e037f72189513e2c8803afb231bcf600a291ae559accb5e41558612", @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") fallocate(0xffffffffffffffff, 0x0, 0x9, 0x5) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x2, @none, 0x5, 0x2}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) capget(&(0x7f00000001c0)={0x20080522, r0}, &(0x7f0000000040)={0x5, 0x8, 0x5, 0x0, 0xfffffffc, 0x7ff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./bus\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002380)='net/vlan/config\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) 11.996899956s ago: executing program 5 (id=1370): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@noinit_itable}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r2, 0x1, 0x7, 0x8010004) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x3, 0x3, 0x1000000000001}) 11.01981569s ago: executing program 5 (id=1372): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) r4 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) get_robust_list(r4, 0x0, 0x0) 10.396657306s ago: executing program 5 (id=1375): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x8008, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60142, 0x10) write(r3, &(0x7f0000000500)='p:s/_ ./file', 0xc) 9.40806223s ago: executing program 5 (id=1378): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x10001, 0x28, 0x1}, 0x50) 8.15968218s ago: executing program 37 (id=1355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 7.680858792s ago: executing program 5 (id=1380): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$packet(0x11, 0x3, 0x300) timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x1a04447, &(0x7f0000000640)=ANY=[], 0x18, 0x1e6, &(0x7f0000000400)="$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") listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x6c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140), 0x0, 0xe7c) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6.96051221s ago: executing program 5 (id=1381): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x20000000000001cd, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.948453274s ago: executing program 2 (id=1382): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) r4 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) get_robust_list(r4, 0x0, 0x0) 4.598610727s ago: executing program 2 (id=1383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x404, 0x8, 0x4, 0x8}]}) copy_file_range(r3, 0x0, r1, 0x0, 0x400000000d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000500)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c844}, 0x8000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) 3.2476581s ago: executing program 2 (id=1384): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000100)="9ec4", 0x2}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.584592497s ago: executing program 2 (id=1385): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x8008, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60142, 0x10) write(r3, &(0x7f0000000500)='p:s/_ ./file', 0xc) 1.568317602s ago: executing program 2 (id=1386): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x10001, 0x28, 0x1}, 0x50) 0s ago: executing program 2 (id=1387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nombcache}, {@minixdf}, {@lazytime}, {@nouid32}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@block_validity}]}, 0x1, 0x48a, &(0x7f0000000180)="$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") ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x8aba, 0x7, 0x4, 0x24, 0x7, 0xb, 0x0, 0x5, 0x0, 0xf0b, 0x8000000000000000, 0x2, 0x2, 0x2, 0x4, 0x3], 0x8000000, 0x152f01}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000680)=@x86={0x2, 0x6, 0xd, 0x0, 0x2000f, 0x3, 0x7, 0x5, 0x9, 0x3, 0x4, 0x6, 0x0, 0x8, 0x2, 0x80, 0xb, 0x62, 0xb, '\x00', 0x3, 0xe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): privheads(): Cannot find PRIVHEAD 1. [ 614.697345][ T5141] loop0: [ 616.323064][ T9629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.897'. [ 618.025947][ T9640] loop1: detected capacity change from 0 to 8 [ 622.007359][ T9654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.066094][ T9654] serio: Serial port ttyS3 [ 622.141684][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 622.240046][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 622.271511][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 622.278805][ T5141] loop0: [ 624.548927][ T9668] loop3: detected capacity change from 0 to 8 [ 624.728681][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.745375][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.030032][ T9561] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 629.409016][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 629.448165][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 629.489432][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 629.496178][ T5141] loop0: [ 632.281001][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 636.536789][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 636.546198][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 636.585434][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 636.606976][ T5141] loop0: [ 641.830358][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 643.980340][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 643.997162][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 644.018033][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 644.039334][ T5141] loop0: [ 645.444555][ T9776] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 645.454603][ T9776] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 647.088622][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 647.098744][ T9784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.878464][ T9784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.600281][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 654.626755][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 654.694635][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 654.713895][ T5141] loop0: [ 655.784303][ T9824] loop3: detected capacity change from 0 to 8 [ 655.871784][ T9816] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 662.790564][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 662.799992][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 662.823214][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 662.848956][ T5141] loop0: [ 666.534363][ T9873] FAULT_INJECTION: forcing a failure. [ 666.534363][ T9873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.547862][ T9873] CPU: 1 PID: 9873 Comm: syz.2.967 Not tainted syzkaller #0 [ 666.555161][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 666.565222][ T9873] Call Trace: [ 666.568508][ T9873] [ 666.571443][ T9873] dump_stack_lvl+0x18c/0x250 [ 666.576144][ T9873] ? show_regs_print_info+0x20/0x20 [ 666.581356][ T9873] ? load_image+0x420/0x420 [ 666.585875][ T9873] ? __might_fault+0xaa/0x120 [ 666.590572][ T9873] ? __lock_acquire+0x7eb0/0x7eb0 [ 666.595628][ T9873] should_fail_ex+0x394/0x4c0 [ 666.600336][ T9873] strncpy_from_user+0x36/0x2f0 [ 666.605203][ T9873] getname_flags+0xf6/0x500 [ 666.609720][ T9873] do_sys_openat2+0xda/0x1d0 [ 666.614328][ T9873] ? do_sys_open+0xe0/0xe0 [ 666.618764][ T9873] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 666.624759][ T9873] ? lock_chain_count+0x20/0x20 [ 666.629651][ T9873] __x64_sys_openat+0x139/0x160 [ 666.634523][ T9873] do_syscall_64+0x55/0xb0 [ 666.638970][ T9873] ? clear_bhb_loop+0x40/0x90 [ 666.643681][ T9873] ? clear_bhb_loop+0x40/0x90 [ 666.648369][ T9873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.654286][ T9873] RIP: 0033:0x7fe91c15e9ce [ 666.658733][ T9873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 666.678368][ T9873] RSP: 002b:00007fe91a3f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 666.686811][ T9873] RAX: ffffffffffffffda RBX: 00007fe91a3f66c0 RCX: 00007fe91c15e9ce [ 666.694823][ T9873] RDX: 0000000000000002 RSI: 00007fe91a3f5f90 RDI: ffffffffffffff9c [ 666.702826][ T9873] RBP: 00007fe91c2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 666.710806][ T9873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.718805][ T9873] R13: 00007fe91c426038 R14: 00007fe91c425fa0 R15: 00007ffe267a31b8 [ 666.726818][ T9873] [ 668.894481][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 668.931484][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 668.966789][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 668.973632][ T5141] loop0: [ 669.167507][ T9884] loop3: detected capacity change from 0 to 8 [ 672.768604][ T9903] FAULT_INJECTION: forcing a failure. [ 672.768604][ T9903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.783055][ T9903] CPU: 1 PID: 9903 Comm: syz.2.976 Not tainted syzkaller #0 [ 672.790395][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 672.800453][ T9903] Call Trace: [ 672.803755][ T9903] [ 672.806715][ T9903] dump_stack_lvl+0x18c/0x250 [ 672.811501][ T9903] ? show_regs_print_info+0x20/0x20 [ 672.816727][ T9903] ? load_image+0x420/0x420 [ 672.821255][ T9903] ? __might_fault+0xaa/0x120 [ 672.825945][ T9903] ? __lock_acquire+0x7eb0/0x7eb0 [ 672.830988][ T9903] should_fail_ex+0x394/0x4c0 [ 672.835721][ T9903] strncpy_from_user+0x36/0x2f0 [ 672.840590][ T9903] getname_flags+0xf6/0x500 [ 672.845121][ T9903] do_sys_openat2+0xda/0x1d0 [ 672.849754][ T9903] ? do_sys_open+0xe0/0xe0 [ 672.854184][ T9903] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 672.860172][ T9903] ? lock_chain_count+0x20/0x20 [ 672.865049][ T9903] __x64_sys_openat+0x139/0x160 [ 672.870015][ T9903] do_syscall_64+0x55/0xb0 [ 672.874441][ T9903] ? clear_bhb_loop+0x40/0x90 [ 672.879135][ T9903] ? clear_bhb_loop+0x40/0x90 [ 672.883816][ T9903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.889722][ T9903] RIP: 0033:0x7fe91c15e9ce [ 672.894136][ T9903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 672.913742][ T9903] RSP: 002b:00007fe91a3f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 672.922160][ T9903] RAX: ffffffffffffffda RBX: 00007fe91a3f66c0 RCX: 00007fe91c15e9ce [ 672.930144][ T9903] RDX: 0000000000000002 RSI: 00007fe91a3f5f90 RDI: ffffffffffffff9c [ 672.938126][ T9903] RBP: 00007fe91c2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 672.946114][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.954089][ T9903] R13: 00007fe91c426038 R14: 00007fe91c425fa0 R15: 00007ffe267a31b8 [ 672.962074][ T9903] [ 672.992363][ T9906] loop1: detected capacity change from 0 to 512 [ 673.074194][ T9906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.461952][ T9916] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4207338235 (538539294080 ns) > initial count (4757903616 ns). Using initial count to start timer. [ 674.423991][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.469797][ T9909] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 675.542502][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.973890][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 676.294497][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 676.476761][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 676.512506][ T5141] loop0: [ 678.753545][ T9950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.561528][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 680.797023][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 680.804369][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 680.814880][ T5141] loop0: [ 681.234746][ T9962] FAULT_INJECTION: forcing a failure. [ 681.234746][ T9962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.248547][ T9962] CPU: 1 PID: 9962 Comm: syz.3.986 Not tainted syzkaller #0 [ 681.255863][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 681.265948][ T9962] Call Trace: [ 681.269270][ T9962] [ 681.272200][ T9962] dump_stack_lvl+0x18c/0x250 [ 681.276902][ T9962] ? show_regs_print_info+0x20/0x20 [ 681.282139][ T9962] ? load_image+0x420/0x420 [ 681.286674][ T9962] ? __might_fault+0xaa/0x120 [ 681.291385][ T9962] ? __lock_acquire+0x7eb0/0x7eb0 [ 681.296419][ T9962] should_fail_ex+0x394/0x4c0 [ 681.301114][ T9962] strncpy_from_user+0x36/0x2f0 [ 681.305976][ T9962] getname_flags+0xf6/0x500 [ 681.310497][ T9962] do_sys_openat2+0xda/0x1d0 [ 681.315101][ T9962] ? do_sys_open+0xe0/0xe0 [ 681.319533][ T9962] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 681.325524][ T9962] ? lock_chain_count+0x20/0x20 [ 681.330384][ T9962] __x64_sys_openat+0x139/0x160 [ 681.335243][ T9962] do_syscall_64+0x55/0xb0 [ 681.339664][ T9962] ? clear_bhb_loop+0x40/0x90 [ 681.344362][ T9962] ? clear_bhb_loop+0x40/0x90 [ 681.349057][ T9962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.354977][ T9962] RIP: 0033:0x7fd8ac55e9ce [ 681.359399][ T9962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 681.379009][ T9962] RSP: 002b:00007fd8ad43aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 681.387420][ T9962] RAX: ffffffffffffffda RBX: 00007fd8ad43b6c0 RCX: 00007fd8ac55e9ce [ 681.395406][ T9962] RDX: 0000000000000002 RSI: 00007fd8ad43af90 RDI: ffffffffffffff9c [ 681.403394][ T9962] RBP: 00007fd8ac6358e0 R08: 0000000000000000 R09: 0000000000000000 [ 681.411396][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.419420][ T9962] R13: 00007fd8ac826038 R14: 00007fd8ac825fa0 R15: 00007fff5d011eb8 [ 681.427466][ T9962] [ 681.773172][ T9967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.794736][ T9967] serio: Serial port ttyS3 [ 686.123715][ T9983] loop3: detected capacity change from 0 to 512 [ 686.142327][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.158913][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.238728][ T9983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.251609][ T9983] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.784899][ T9992] process 'syz.3.1000' launched './file1' with NULL argv: empty string added [ 689.103864][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.125033][ T9997] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 689.217086][ T9997] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 689.225167][ T9997] page_type: 0xffffffff() [ 689.267763][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 689.296748][ T9997] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 689.305430][ T9997] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 689.316506][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 689.348604][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 689.355435][ T5141] loop0: [ 689.377023][ T9997] page dumped because: unmovable page [ 689.382686][ T9997] page_owner info is not present (never set?) [ 689.436688][T10000] page:ffffea0001c00000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70000 [ 689.466938][T10000] head:ffffea0001c00000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 689.476151][T10000] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 689.505404][T10000] page_type: 0xffffffff() [ 689.510880][T10000] raw: 00fff00000000840 ffff888017c42140 dead000000000122 0000000000000000 [ 689.537244][T10000] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 689.546050][T10000] page dumped because: unmovable page [ 689.606719][T10000] page_owner tracks the page as allocated [ 689.612610][T10000] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9816, tgid 9816 (udevd), ts 655433048224, free_ts 655301885933 [ 689.709044][T10000] post_alloc_hook+0x1c1/0x200 [ 689.764700][T10000] get_page_from_freelist+0x2181/0x22a0 [ 689.770479][T10000] __alloc_pages+0x1f0/0x460 [ 689.803631][T10000] alloc_slab_page+0x5d/0x180 [ 689.826691][T10000] new_slab+0x87/0x2d0 [ 689.841215][T10000] ___slab_alloc+0xc5c/0x12f0 [ 691.243853][T10000] __kmem_cache_alloc_node+0x11f/0x250 [ 691.273592][T10000] __kmalloc+0xa7/0x240 [ 691.336894][T10000] tomoyo_realpath_from_path+0xe6/0x5c0 [ 691.376792][T10000] tomoyo_path_perm+0x282/0x560 [ 691.396757][T10000] security_file_truncate+0x62/0x90 [ 691.416716][T10000] path_openat+0x29fe/0x3270 [ 691.421498][T10000] do_filp_open+0x1f2/0x430 [ 691.426056][T10000] do_sys_openat2+0x134/0x1d0 [ 691.466689][T10000] __x64_sys_openat+0x139/0x160 [ 691.471641][T10000] do_syscall_64+0x55/0xb0 [ 691.476118][T10000] page last free stack trace: [ 691.482699][T10000] free_unref_page_prepare+0x7d7/0x8f0 [ 691.496715][T10000] free_unref_page+0x32/0x2e0 [ 692.613470][T10000] __unfreeze_partials+0x1cf/0x210 [ 692.656906][T10000] put_cpu_partial+0x17c/0x250 [ 692.676720][T10000] __slab_free+0x319/0x400 [ 692.686688][T10000] qlist_free_all+0x75/0xd0 [ 692.716785][T10000] kasan_quarantine_reduce+0x143/0x160 [ 692.722547][T10000] __kasan_slab_alloc+0x22/0x80 [ 692.743446][T10000] slab_post_alloc_hook+0x6a/0x4d0 [ 692.756915][T10000] __kmem_cache_alloc_node+0x194/0x250 [ 692.766959][T10000] __kmalloc_node+0xa6/0x240 [ 692.777017][T10000] memcg_alloc_slab_cgroups+0x85/0x120 [ 692.796751][T10000] new_slab+0xc3/0x2d0 [ 692.806711][T10000] ___slab_alloc+0xc5c/0x12f0 [ 692.826782][T10000] kmem_cache_alloc+0x109/0x2c0 [ 692.836267][T10000] vm_area_alloc+0x24/0x1d0 [ 696.839127][T10037] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 696.849046][T10037] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 698.724828][T10051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.744781][T10051] serio: Serial port ttyS3 [ 701.029718][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 701.066659][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 701.105623][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 701.132530][ T5141] loop0: [ 704.334480][T10075] loop3: detected capacity change from 0 to 4096 [ 704.757430][T10077] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 706.548244][T10089] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 706.657069][T10089] Remounting filesystem read-only [ 706.663494][T10091] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 709.412306][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 709.447870][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 709.455131][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 709.512242][ T5141] loop0: [ 710.618450][T10101] loop2: detected capacity change from 0 to 8 [ 712.738256][T10107] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1028'. [ 713.398915][ T5781] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 713.429935][ T5781] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 713.437765][ T5781] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 713.445354][ T5781] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 713.477923][ T5781] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 713.485291][ T5781] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 713.512841][ T5781] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 713.523593][ T5781] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 713.555749][ T5781] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 718.792307][T10132] loop4: detected capacity change from 0 to 8 [ 719.247629][T10137] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 721.064456][T10141] syz.4.1038 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 721.075354][T10141] CPU: 0 PID: 10141 Comm: syz.4.1038 Not tainted syzkaller #0 [ 721.082825][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 721.092878][T10141] Call Trace: [ 721.096164][T10141] [ 721.099110][T10141] dump_stack_lvl+0x18c/0x250 [ 721.103814][T10141] ? show_regs_print_info+0x20/0x20 [ 721.109044][T10141] ? load_image+0x420/0x420 [ 721.113547][T10141] ? ___ratelimit+0x478/0x610 [ 721.118228][T10141] ? radix_tree_cpu_dead+0x160/0x160 [ 721.123557][T10141] dump_header+0xd8/0x820 [ 721.127918][T10141] oom_kill_process+0x390/0x580 [ 721.132810][T10141] out_of_memory+0xe0e/0x1200 [ 721.137529][T10141] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 721.143202][T10141] ? mutex_lock_nested+0x20/0x20 [ 721.148181][T10141] ? unregister_oom_notifier+0x20/0x20 [ 721.153670][T10141] mem_cgroup_out_of_memory+0x2c2/0x390 [ 721.159247][T10141] ? try_charge_memcg+0xc91/0x17c0 [ 721.164386][T10141] ? drain_local_stock+0x630/0x630 [ 721.169519][T10141] ? do_raw_spin_unlock+0x121/0x230 [ 721.174741][T10141] try_charge_memcg+0xca1/0x17c0 [ 721.179702][T10141] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 721.185542][T10141] ? folio_flags+0x120/0x120 [ 721.190154][T10141] ? shmem_alloc_folio+0x1f4/0x2a0 [ 721.195289][T10141] ? percpu_ref_tryget+0x15/0x180 [ 721.200344][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 721.205827][T10141] charge_memcg+0x11b/0x3b0 [ 721.210362][T10141] ? __mem_cgroup_charge+0x80/0x80 [ 721.215492][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 721.220966][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 721.226443][T10141] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 721.232014][T10141] __mem_cgroup_charge+0x25/0x80 [ 721.236981][T10141] shmem_add_to_page_cache+0x8d3/0x1b80 [ 721.242546][T10141] ? xas_load+0x12b/0x140 [ 721.246920][T10141] ? shmem_alloc_folio+0x2a0/0x2a0 [ 721.252056][T10141] shmem_get_folio_gfp+0x1037/0x2b40 [ 721.257374][T10141] shmem_write_begin+0xf2/0x430 [ 721.262238][T10141] generic_perform_write+0x2fe/0x5c0 [ 721.267559][T10141] ? generic_file_direct_write+0x3e0/0x3e0 [ 721.273374][T10141] ? down_write+0x16e/0x200 [ 721.277906][T10141] ? file_update_time+0x98/0x1a0 [ 721.282880][T10141] shmem_file_write_iter+0xfb/0x120 [ 721.288095][T10141] __kernel_write_iter+0x29f/0x6d0 [ 721.293232][T10141] ? vfs_read+0x990/0x990 [ 721.297578][T10141] ? get_dump_page+0x156/0x200 [ 721.302405][T10141] ? __asan_memset+0x22/0x40 [ 721.307022][T10141] ? iov_iter_bvec+0xd4/0x1b0 [ 721.311732][T10141] dump_user_range+0x418/0x840 [ 721.316527][T10141] ? dump_skip+0x40/0x40 [ 721.320788][T10141] ? dump_emit+0x78/0xe0 [ 721.325058][T10141] ? dump_emit+0xa6/0xe0 [ 721.329310][T10141] ? elf_core_dump+0x2dbb/0x37c0 [ 721.334262][T10141] elf_core_dump+0x320e/0x37c0 [ 721.339070][T10141] ? load_elf_binary+0x2850/0x2850 [ 721.344211][T10141] ? verify_lock_unused+0x140/0x140 [ 721.349439][T10141] ? __lock_acquire+0x7eb0/0x7eb0 [ 721.354495][T10141] ? mas_next_slot+0x94c/0x980 [ 721.359317][T10141] ? rcu_read_lock_any_held+0xb4/0x140 [ 721.364796][T10141] ? 0xffffffffff600000 [ 721.368960][T10141] ? do_raw_spin_unlock+0x121/0x230 [ 721.374205][T10141] do_coredump+0x1791/0x24a0 [ 721.378830][T10141] ? nfs_stat_to_errno+0x170/0x170 [ 721.383976][T10141] ? lock_chain_count+0x20/0x20 [ 721.388854][T10141] ? _raw_spin_unlock_irq+0x23/0x50 [ 721.394084][T10141] ? lockdep_hardirqs_on+0x98/0x150 [ 721.399307][T10141] get_signal+0x10da/0x1390 [ 721.403851][T10141] arch_do_signal_or_restart+0xc2/0x7b0 [ 721.409451][T10141] ? get_sigframe_size+0x20/0x20 [ 721.414417][T10141] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 721.420422][T10141] ? exit_to_user_mode_loop+0x3b/0x110 [ 721.425909][T10141] exit_to_user_mode_loop+0x70/0x110 [ 721.431222][T10141] exit_to_user_mode_prepare+0xee/0x180 [ 721.436806][T10141] irqentry_exit_to_user_mode+0x9/0x30 [ 721.442302][T10141] exc_page_fault+0x8c/0x100 [ 721.446927][T10141] asm_exc_page_fault+0x26/0x30 [ 721.451813][T10141] RIP: 0033:0x7fac6ff9e1a1 [ 721.456248][T10141] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 721.475879][T10141] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 721.481987][T10141] RAX: 0000000000000000 RBX: 00007fac70225fa0 RCX: 00007fac6ff9e199 [ 721.489980][T10141] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 721.497964][T10141] RBP: 00007fac700358e0 R08: 0000000000000000 R09: 0000000000000000 [ 721.505949][T10141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 721.513944][T10141] R13: 00007fac70226038 R14: 00007fac70225fa0 R15: 00007fff54e290a8 [ 721.521945][T10141] [ 721.527585][T10141] memory: usage 307200kB, limit 307200kB, failcnt 24572 [ 721.534564][T10141] memory+swap: usage 432056kB, limit 9007199254740988kB, failcnt 0 [ 721.542824][T10141] kmem: usage 3180kB, limit 9007199254740988kB, failcnt 0 [ 721.549973][T10141] Memory cgroup stats for /syz4: [ 721.550599][T10141] cache 309379072 [ 721.559255][T10141] rss 1921024 [ 721.562557][T10141] rss_huge 0 [ 721.565751][T10141] shmem 309379072 [ 721.569413][T10141] mapped_file 110514176 [ 721.573580][T10141] dirty 0 [ 721.576555][T10141] writeback 0 [ 721.579933][T10141] workingset_refault_anon 148 [ 721.584632][T10141] workingset_refault_file 0 [ 721.590062][T10141] swap 127852544 [ 721.593726][T10141] pgpgin 1245308 [ 721.597340][T10141] pgpgout 1169303 [ 721.601006][T10141] pgfault 424271 [ 721.604569][T10141] pgmajfault 60 [ 721.608778][T10141] inactive_anon 69836800 [ 721.613052][T10141] active_anon 240619520 [ 721.617267][T10141] inactive_file 0 [ 721.620909][T10141] active_file 0 [ 721.624370][T10141] unevictable 0 [ 721.627858][T10141] hierarchical_memory_limit 314572800 [ 721.633309][T10141] hierarchical_memsw_limit 9223372036854771712 [ 721.639508][T10141] total_cache 309379072 [ 721.643653][T10141] total_rss 1921024 [ 721.647478][T10141] total_rss_huge 0 [ 721.651212][T10141] total_shmem 309379072 [ 721.655360][T10141] total_mapped_file 110514176 [ 721.660164][T10141] total_dirty 0 [ 721.663620][T10141] total_writeback 0 [ 721.667437][T10141] total_workingset_refault_anon 148 [ 721.672631][T10141] total_workingset_refault_file 0 [ 721.677675][T10141] total_swap 127852544 [ 721.681733][T10141] total_pgpgin 1245308 [ 721.685795][T10141] total_pgpgout 1169303 [ 721.690641][T10141] total_pgfault 424271 [ 721.694812][T10141] total_pgmajfault 60 [ 721.698812][T10141] total_inactive_anon 69836800 [ 721.703571][T10141] total_active_anon 240619520 [ 721.708283][T10141] total_inactive_file 0 [ 721.712428][T10141] total_active_file 0 [ 721.716404][T10141] total_unevictable 0 [ 721.720419][T10141] anon_cost 0 [ 721.723699][T10141] file_cost 0 [ 721.727020][T10141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.948,pid=9821,uid=0 [ 721.742354][T10141] Memory cgroup out of memory: Killed process 9821 (syz.4.948) total-vm:202608kB, anon-rss:1416kB, file-rss:20480kB, shmem-rss:107776kB, UID:0 pgtables:320kB oom_score_adj:1000 [ 722.910649][T10140] loop2: detected capacity change from 0 to 4096 [ 724.035351][ T30] oom_reaper: reaped process 9821 (syz.4.948), now anon-rss:32kB, file-rss:20480kB, shmem-rss:107776kB [ 726.932161][T10141] syz.4.1038 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 726.942184][T10141] CPU: 0 PID: 10141 Comm: syz.4.1038 Not tainted syzkaller #0 [ 726.949677][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 726.959731][T10141] Call Trace: [ 726.963010][T10141] [ 726.965950][T10141] dump_stack_lvl+0x18c/0x250 [ 726.970645][T10141] ? show_regs_print_info+0x20/0x20 [ 726.975852][T10141] ? load_image+0x420/0x420 [ 726.980384][T10141] ? ___ratelimit+0x478/0x610 [ 726.985065][T10141] ? radix_tree_cpu_dead+0x160/0x160 [ 726.990365][T10141] dump_header+0xd8/0x820 [ 726.994703][T10141] oom_kill_process+0x390/0x580 [ 726.999565][T10141] out_of_memory+0xe0e/0x1200 [ 727.004259][T10141] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 727.009916][T10141] ? print_unlock_imbalance_bug+0x160/0x160 [ 727.015830][T10141] ? mutex_lock_nested+0x20/0x20 [ 727.020781][T10141] ? unregister_oom_notifier+0x20/0x20 [ 727.026272][T10141] mem_cgroup_out_of_memory+0x2c2/0x390 [ 727.031827][T10141] ? try_charge_memcg+0xc91/0x17c0 [ 727.036961][T10141] ? drain_local_stock+0x630/0x630 [ 727.042080][T10141] ? do_raw_spin_unlock+0x121/0x230 [ 727.047298][T10141] try_charge_memcg+0xca1/0x17c0 [ 727.052293][T10141] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 727.058112][T10141] ? folio_flags+0x120/0x120 [ 727.062714][T10141] ? shmem_alloc_folio+0x1f4/0x2a0 [ 727.067838][T10141] ? percpu_ref_tryget+0x15/0x180 [ 727.072864][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 727.078349][T10141] charge_memcg+0x11b/0x3b0 [ 727.082864][T10141] ? __mem_cgroup_charge+0x80/0x80 [ 727.087981][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 727.093449][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 727.098928][T10141] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 727.104488][T10141] __mem_cgroup_charge+0x25/0x80 [ 727.109428][T10141] shmem_add_to_page_cache+0x8d3/0x1b80 [ 727.114983][T10141] ? xas_load+0x12b/0x140 [ 727.119327][T10141] ? shmem_alloc_folio+0x2a0/0x2a0 [ 727.124442][T10141] ? mark_lock+0x94/0x320 [ 727.128788][T10141] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 727.134767][T10141] ? __lock_acquire+0x7eb0/0x7eb0 [ 727.139794][T10141] ? lock_chain_count+0x20/0x20 [ 727.144648][T10141] shmem_get_folio_gfp+0x1037/0x2b40 [ 727.149974][T10141] shmem_write_begin+0xf2/0x430 [ 727.154837][T10141] generic_perform_write+0x2fe/0x5c0 [ 727.160153][T10141] ? generic_file_direct_write+0x3e0/0x3e0 [ 727.165974][T10141] ? file_update_time+0x192/0x1a0 [ 727.171012][T10141] shmem_file_write_iter+0xfb/0x120 [ 727.176219][T10141] __kernel_write_iter+0x29f/0x6d0 [ 727.181370][T10141] ? vfs_read+0x990/0x990 [ 727.185760][T10141] ? get_dump_page+0x156/0x200 [ 727.190542][T10141] ? __asan_memset+0x22/0x40 [ 727.195137][T10141] ? iov_iter_bvec+0xd4/0x1b0 [ 727.199826][T10141] dump_user_range+0x418/0x840 [ 727.204608][T10141] ? dump_skip+0x40/0x40 [ 727.208861][T10141] ? dump_emit+0x78/0xe0 [ 727.213168][T10141] ? dump_emit+0xa6/0xe0 [ 727.217421][T10141] ? elf_core_dump+0x2dbb/0x37c0 [ 727.222407][T10141] elf_core_dump+0x320e/0x37c0 [ 727.227212][T10141] ? load_elf_binary+0x2850/0x2850 [ 727.232359][T10141] ? verify_lock_unused+0x140/0x140 [ 727.237581][T10141] ? __lock_acquire+0x7eb0/0x7eb0 [ 727.242627][T10141] ? mas_next_slot+0x94c/0x980 [ 727.247427][T10141] ? rcu_read_lock_any_held+0xb4/0x140 [ 727.252891][T10141] ? 0xffffffffff600000 [ 727.257054][T10141] ? do_raw_spin_unlock+0x121/0x230 [ 727.262270][T10141] do_coredump+0x1791/0x24a0 [ 727.266970][T10141] ? nfs_stat_to_errno+0x170/0x170 [ 727.272106][T10141] ? lock_chain_count+0x20/0x20 [ 727.276981][T10141] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.282180][T10141] ? lockdep_hardirqs_on+0x98/0x150 [ 727.287378][T10141] get_signal+0x10da/0x1390 [ 727.291895][T10141] arch_do_signal_or_restart+0xc2/0x7b0 [ 727.297464][T10141] ? get_sigframe_size+0x20/0x20 [ 727.302426][T10141] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 727.308427][T10141] ? exit_to_user_mode_loop+0x3b/0x110 [ 727.313893][T10141] exit_to_user_mode_loop+0x70/0x110 [ 727.319198][T10141] exit_to_user_mode_prepare+0xee/0x180 [ 727.324763][T10141] irqentry_exit_to_user_mode+0x9/0x30 [ 727.330245][T10141] exc_page_fault+0x8c/0x100 [ 727.334841][T10141] asm_exc_page_fault+0x26/0x30 [ 727.339719][T10141] RIP: 0033:0x7fac6ff9e1a1 [ 727.344151][T10141] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 727.363759][T10141] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 727.369824][T10141] RAX: 0000000000000000 RBX: 00007fac70225fa0 RCX: 00007fac6ff9e199 [ 727.377821][T10141] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 727.385802][T10141] RBP: 00007fac700358e0 R08: 0000000000000000 R09: 0000000000000000 [ 727.393787][T10141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 727.401758][T10141] R13: 00007fac70226038 R14: 00007fac70225fa0 R15: 00007fff54e290a8 [ 727.409744][T10141] [ 727.414841][T10141] memory: usage 307200kB, limit 307200kB, failcnt 45323 [ 727.421866][T10141] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 727.430394][T10141] kmem: usage 3132kB, limit 9007199254740988kB, failcnt 0 [ 727.437533][T10141] Memory cgroup stats for /syz4: [ 727.437662][T10141] cache 309551104 [ 727.446222][T10141] rss 1806336 [ 727.449547][T10141] rss_huge 0 [ 727.452754][T10141] shmem 309551104 [ 727.456385][T10141] mapped_file 110514176 [ 727.460562][T10141] dirty 0 [ 727.463492][T10141] writeback 0 [ 727.466838][T10141] workingset_refault_anon 148 [ 727.471561][T10141] workingset_refault_file 0 [ 727.476059][T10141] swap 127995904 [ 727.479624][T10141] pgpgin 1245382 [ 727.483159][T10141] pgpgout 1169367 [ 727.486835][T10141] pgfault 424280 [ 727.490417][T10141] pgmajfault 60 [ 727.493868][T10141] inactive_anon 69836800 [ 727.498135][T10141] active_anon 241516544 [ 727.502286][T10141] inactive_file 0 [ 727.505914][T10141] active_file 0 [ 727.509396][T10141] unevictable 0 [ 727.512844][T10141] hierarchical_memory_limit 314572800 [ 727.518248][T10141] hierarchical_memsw_limit 9223372036854771712 [ 727.524404][T10141] total_cache 309551104 [ 727.529172][T10141] total_rss 1806336 [ 727.532975][T10141] total_rss_huge 0 [ 727.536761][T10141] total_shmem 309551104 [ 727.540956][T10141] total_mapped_file 110514176 [ 727.545627][T10141] total_dirty 0 [ 727.549128][T10141] total_writeback 0 [ 727.552925][T10141] total_workingset_refault_anon 148 [ 727.558156][T10141] total_workingset_refault_file 0 [ 727.563177][T10141] total_swap 127995904 [ 727.567272][T10141] total_pgpgin 1245382 [ 727.571337][T10141] total_pgpgout 1169367 [ 727.575481][T10141] total_pgfault 424280 [ 727.579561][T10141] total_pgmajfault 60 [ 727.583533][T10141] total_inactive_anon 69836800 [ 727.588311][T10141] total_active_anon 241516544 [ 727.592978][T10141] total_inactive_file 0 [ 727.597149][T10141] total_active_file 0 [ 727.601125][T10141] total_unevictable 0 [ 727.605124][T10141] anon_cost 0 [ 727.608433][T10141] file_cost 0 [ 727.611712][T10141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.948,pid=9826,uid=0 [ 727.626703][T10141] Memory cgroup out of memory: Killed process 9826 (syz.4.948) total-vm:202608kB, anon-rss:1376kB, file-rss:20460kB, shmem-rss:107520kB, UID:0 pgtables:324kB oom_score_adj:1000 [ 729.658874][ T30] oom_reaper: reaped process 9826 (syz.4.948), now anon-rss:0kB, file-rss:20460kB, shmem-rss:107520kB [ 729.931037][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 729.941723][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 729.949346][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 729.956029][ T5141] loop0: [ 732.931427][T10141] syz.4.1038 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 732.941774][T10141] CPU: 0 PID: 10141 Comm: syz.4.1038 Not tainted syzkaller #0 [ 732.949271][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 732.959349][T10141] Call Trace: [ 732.962683][T10141] [ 732.965647][T10141] dump_stack_lvl+0x18c/0x250 [ 732.970389][T10141] ? show_regs_print_info+0x20/0x20 [ 732.975603][T10141] ? load_image+0x420/0x420 [ 732.980116][T10141] ? ___ratelimit+0x478/0x610 [ 732.984798][T10141] ? radix_tree_cpu_dead+0x160/0x160 [ 732.990104][T10141] dump_header+0xd8/0x820 [ 732.994446][T10141] oom_kill_process+0x390/0x580 [ 732.999347][T10141] out_of_memory+0xe0e/0x1200 [ 733.004041][T10141] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 733.009679][T10141] ? print_unlock_imbalance_bug+0x160/0x160 [ 733.015574][T10141] ? mutex_lock_nested+0x20/0x20 [ 733.020521][T10141] ? unregister_oom_notifier+0x20/0x20 [ 733.025998][T10141] mem_cgroup_out_of_memory+0x2c2/0x390 [ 733.031587][T10141] ? try_charge_memcg+0xc91/0x17c0 [ 733.036722][T10141] ? drain_local_stock+0x630/0x630 [ 733.041851][T10141] ? do_raw_spin_unlock+0x121/0x230 [ 733.047073][T10141] try_charge_memcg+0xca1/0x17c0 [ 733.052074][T10141] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 733.057948][T10141] ? folio_flags+0x120/0x120 [ 733.062552][T10141] ? shmem_alloc_folio+0x1f4/0x2a0 [ 733.067684][T10141] ? percpu_ref_tryget+0x15/0x180 [ 733.072740][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 733.078225][T10141] charge_memcg+0x11b/0x3b0 [ 733.082754][T10141] ? __mem_cgroup_charge+0x80/0x80 [ 733.087867][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 733.093327][T10141] ? get_mem_cgroup_from_mm+0x38/0x290 [ 733.098795][T10141] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 733.104347][T10141] __mem_cgroup_charge+0x25/0x80 [ 733.109300][T10141] shmem_add_to_page_cache+0x8d3/0x1b80 [ 733.114847][T10141] ? xas_load+0x12b/0x140 [ 733.119183][T10141] ? shmem_alloc_folio+0x2a0/0x2a0 [ 733.124309][T10141] shmem_get_folio_gfp+0x1037/0x2b40 [ 733.129676][T10141] shmem_write_begin+0xf2/0x430 [ 733.134539][T10141] generic_perform_write+0x2fe/0x5c0 [ 733.139832][T10141] ? generic_file_direct_write+0x3e0/0x3e0 [ 733.145667][T10141] ? down_write+0x16e/0x200 [ 733.150179][T10141] ? file_update_time+0x98/0x1a0 [ 733.155119][T10141] shmem_file_write_iter+0xfb/0x120 [ 733.160327][T10141] __kernel_write_iter+0x29f/0x6d0 [ 733.165457][T10141] ? vfs_read+0x990/0x990 [ 733.169786][T10141] ? get_dump_page+0x156/0x200 [ 733.174559][T10141] ? __asan_memset+0x22/0x40 [ 733.179154][T10141] ? iov_iter_bvec+0xd4/0x1b0 [ 733.183833][T10141] dump_user_range+0x418/0x840 [ 733.188601][T10141] ? dump_skip+0x40/0x40 [ 733.192836][T10141] ? dump_emit+0x78/0xe0 [ 733.197114][T10141] ? dump_emit+0xa6/0xe0 [ 733.201375][T10141] ? elf_core_dump+0x2dbb/0x37c0 [ 733.206349][T10141] elf_core_dump+0x320e/0x37c0 [ 733.211136][T10141] ? load_elf_binary+0x2850/0x2850 [ 733.216276][T10141] ? verify_lock_unused+0x140/0x140 [ 733.221482][T10141] ? __lock_acquire+0x7eb0/0x7eb0 [ 733.226512][T10141] ? mas_next_slot+0x94c/0x980 [ 733.231315][T10141] ? rcu_read_lock_any_held+0xb4/0x140 [ 733.236793][T10141] ? 0xffffffffff600000 [ 733.240971][T10141] ? do_raw_spin_unlock+0x121/0x230 [ 733.246196][T10141] do_coredump+0x1791/0x24a0 [ 733.250807][T10141] ? nfs_stat_to_errno+0x170/0x170 [ 733.255943][T10141] ? lock_chain_count+0x20/0x20 [ 733.260820][T10141] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.266052][T10141] ? lockdep_hardirqs_on+0x98/0x150 [ 733.271259][T10141] get_signal+0x10da/0x1390 [ 733.275787][T10141] arch_do_signal_or_restart+0xc2/0x7b0 [ 733.281350][T10141] ? get_sigframe_size+0x20/0x20 [ 733.286295][T10141] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 733.292299][T10141] ? exit_to_user_mode_loop+0x3b/0x110 [ 733.297787][T10141] exit_to_user_mode_loop+0x70/0x110 [ 733.303085][T10141] exit_to_user_mode_prepare+0xee/0x180 [ 733.308636][T10141] irqentry_exit_to_user_mode+0x9/0x30 [ 733.314093][T10141] exc_page_fault+0x8c/0x100 [ 733.318689][T10141] asm_exc_page_fault+0x26/0x30 [ 733.323551][T10141] RIP: 0033:0x7fac6ff9e1a1 [ 733.327964][T10141] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 733.347653][T10141] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 733.353717][T10141] RAX: 0000000000000000 RBX: 00007fac70225fa0 RCX: 00007fac6ff9e199 [ 733.361688][T10141] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 733.369660][T10141] RBP: 00007fac700358e0 R08: 0000000000000000 R09: 0000000000000000 [ 733.377635][T10141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 733.385606][T10141] R13: 00007fac70226038 R14: 00007fac70225fa0 R15: 00007fff54e290a8 [ 733.393598][T10141] [ 733.397581][T10141] memory: usage 307200kB, limit 307200kB, failcnt 66459 [ 733.404524][T10141] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 733.412436][T10141] kmem: usage 3116kB, limit 9007199254740988kB, failcnt 0 [ 733.419566][T10141] Memory cgroup stats for /syz4: [ 733.419656][T10141] cache 309747712 [ 733.428217][T10141] rss 1634304 [ 733.431493][T10141] rss_huge 0 [ 733.434679][T10141] shmem 309747712 [ 733.438330][T10141] mapped_file 110514176 [ 733.442489][T10141] dirty 0 [ 733.445422][T10141] writeback 0 [ 733.448732][T10141] workingset_refault_anon 148 [ 733.453401][T10141] workingset_refault_file 0 [ 733.457931][T10141] swap 127995904 [ 733.461476][T10141] pgpgin 1245431 [ 733.465880][T10141] pgpgout 1169410 [ 733.469544][T10141] pgfault 424283 [ 733.473086][T10141] pgmajfault 60 [ 733.476539][T10141] inactive_anon 69836800 [ 733.480831][T10141] active_anon 241545216 [ 733.484977][T10141] inactive_file 0 [ 733.488656][T10141] active_file 0 [ 733.492108][T10141] unevictable 0 [ 733.495556][T10141] hierarchical_memory_limit 314572800 [ 733.500938][T10141] hierarchical_memsw_limit 9223372036854771712 [ 733.507121][T10141] total_cache 309747712 [ 733.511285][T10141] total_rss 1634304 [ 733.515091][T10141] total_rss_huge 0 [ 733.518845][T10141] total_shmem 309747712 [ 733.522987][T10141] total_mapped_file 110514176 [ 733.527671][T10141] total_dirty 0 [ 733.531123][T10141] total_writeback 0 [ 733.534918][T10141] total_workingset_refault_anon 148 [ 733.540136][T10141] total_workingset_refault_file 0 [ 733.545148][T10141] total_swap 127995904 [ 733.549235][T10141] total_pgpgin 1245431 [ 733.553293][T10141] total_pgpgout 1169410 [ 733.557481][T10141] total_pgfault 424283 [ 733.561542][T10141] total_pgmajfault 60 [ 733.565510][T10141] total_inactive_anon 69836800 [ 733.570944][T10141] total_active_anon 241545216 [ 733.575624][T10141] total_inactive_file 0 [ 733.579824][T10141] total_active_file 0 [ 733.583807][T10141] total_unevictable 0 [ 733.587813][T10141] anon_cost 0 [ 733.591098][T10141] file_cost 0 [ 733.594408][T10141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1038,pid=10141,uid=0 [ 733.609571][T10141] Memory cgroup out of memory: Killed process 10141 (syz.4.1038) total-vm:102252kB, anon-rss:1416kB, file-rss:58752kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 733.662932][T10141] syz.4.1038 (10141) used greatest stack depth: 18936 bytes left [ 733.686192][T10027] syz.4.1003 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 733.698618][T10027] CPU: 1 PID: 10027 Comm: syz.4.1003 Not tainted syzkaller #0 [ 733.706121][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 733.716188][T10027] Call Trace: [ 733.719485][T10027] [ 733.722450][T10027] dump_stack_lvl+0x18c/0x250 [ 733.727181][T10027] ? show_regs_print_info+0x20/0x20 [ 733.732426][T10027] ? load_image+0x420/0x420 [ 733.736968][T10027] ? ___ratelimit+0x478/0x610 [ 733.741698][T10027] ? radix_tree_cpu_dead+0x160/0x160 [ 733.747023][T10027] dump_header+0xd8/0x820 [ 733.751402][T10027] oom_kill_process+0x390/0x580 [ 733.756312][T10027] out_of_memory+0xe0e/0x1200 [ 733.761034][T10027] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 733.766695][T10027] ? print_unlock_imbalance_bug+0x160/0x160 [ 733.772625][T10027] ? mutex_lock_nested+0x20/0x20 [ 733.777597][T10027] ? unregister_oom_notifier+0x20/0x20 [ 733.783092][T10027] mem_cgroup_out_of_memory+0x2c2/0x390 [ 733.788656][T10027] ? try_charge_memcg+0xc91/0x17c0 [ 733.793790][T10027] ? drain_local_stock+0x630/0x630 [ 733.798961][T10027] ? do_raw_spin_unlock+0x121/0x230 [ 733.804182][T10027] try_charge_memcg+0xca1/0x17c0 [ 733.809589][T10027] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 733.815446][T10027] ? folio_flags+0x120/0x120 [ 733.820094][T10027] ? shmem_alloc_folio+0x1f4/0x2a0 [ 733.825247][T10027] ? percpu_ref_tryget+0x15/0x180 [ 733.830305][T10027] ? get_mem_cgroup_from_mm+0x38/0x290 [ 733.835801][T10027] charge_memcg+0x11b/0x3b0 [ 733.840346][T10027] ? __mem_cgroup_charge+0x80/0x80 [ 733.845486][T10027] ? get_mem_cgroup_from_mm+0x38/0x290 [ 733.850969][T10027] ? get_mem_cgroup_from_mm+0x38/0x290 [ 733.856458][T10027] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 733.862059][T10027] __mem_cgroup_charge+0x25/0x80 [ 733.867028][T10027] shmem_add_to_page_cache+0x8d3/0x1b80 [ 733.872595][T10027] ? xas_load+0x12b/0x140 [ 733.876972][T10027] ? shmem_alloc_folio+0x2a0/0x2a0 [ 733.882128][T10027] shmem_get_folio_gfp+0x1037/0x2b40 [ 733.887445][T10027] shmem_write_begin+0xf2/0x430 [ 733.892329][T10027] generic_perform_write+0x2fe/0x5c0 [ 733.897643][T10027] ? generic_file_direct_write+0x3e0/0x3e0 [ 733.903462][T10027] ? down_write+0x16e/0x200 [ 733.907989][T10027] ? file_update_time+0x98/0x1a0 [ 733.912940][T10027] shmem_file_write_iter+0xfb/0x120 [ 733.918168][T10027] __kernel_write_iter+0x29f/0x6d0 [ 733.923404][T10027] ? vfs_read+0x990/0x990 [ 733.927752][T10027] ? get_dump_page+0x156/0x200 [ 733.932544][T10027] ? __asan_memset+0x22/0x40 [ 733.937164][T10027] ? iov_iter_bvec+0xd4/0x1b0 [ 733.941867][T10027] dump_user_range+0x418/0x840 [ 733.946666][T10027] ? dump_skip+0x40/0x40 [ 733.950930][T10027] ? dump_emit+0x78/0xe0 [ 733.955206][T10027] ? dump_emit+0xa6/0xe0 [ 733.959465][T10027] ? elf_core_dump+0x2dbb/0x37c0 [ 733.964435][T10027] elf_core_dump+0x320e/0x37c0 [ 733.969232][T10027] ? load_elf_binary+0x2850/0x2850 [ 733.974366][T10027] ? verify_lock_unused+0x140/0x140 [ 733.979586][T10027] ? __lock_acquire+0x7eb0/0x7eb0 [ 733.984644][T10027] ? mas_next_slot+0x94c/0x980 [ 733.989453][T10027] ? rcu_read_lock_any_held+0xb4/0x140 [ 733.994930][T10027] ? 0xffffffffff600000 [ 733.999107][T10027] do_coredump+0x1791/0x24a0 [ 734.003728][T10027] ? nfs_stat_to_errno+0x170/0x170 [ 734.008866][T10027] ? lock_chain_count+0x20/0x20 [ 734.013751][T10027] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.018970][T10027] ? lockdep_hardirqs_on+0x98/0x150 [ 734.024189][T10027] get_signal+0x10da/0x1390 [ 734.028726][T10027] arch_do_signal_or_restart+0xc2/0x7b0 [ 734.034305][T10027] ? get_sigframe_size+0x20/0x20 [ 734.039272][T10027] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 734.045275][T10027] ? exit_to_user_mode_loop+0x3b/0x110 [ 734.050758][T10027] exit_to_user_mode_loop+0x70/0x110 [ 734.056075][T10027] exit_to_user_mode_prepare+0xee/0x180 [ 734.061652][T10027] irqentry_exit_to_user_mode+0x9/0x30 [ 734.067136][T10027] exc_page_fault+0x8c/0x100 [ 734.071755][T10027] asm_exc_page_fault+0x26/0x30 [ 734.076651][T10027] RIP: 0033:0x7fac6ff9e1a1 [ 734.081094][T10027] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 734.100711][T10027] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 734.106803][T10027] RAX: 0000000000000000 RBX: 00007fac70226090 RCX: 00007fac6ff9e199 [ 734.114818][T10027] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 734.122802][T10027] RBP: 00007fac700358e0 R08: 0000000000000000 R09: 0000000000000000 [ 734.130791][T10027] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 734.138801][T10027] R13: 00007fac70226128 R14: 00007fac70226090 R15: 00007fff54e290a8 [ 734.146824][T10027] [ 734.520724][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 735.576798][T10027] memory: usage 303672kB, limit 307200kB, failcnt 66518 [ 735.836212][T10027] memory+swap: usage 425920kB, limit 9007199254740988kB, failcnt 0 [ 736.126798][T10027] kmem: usage 2504kB, limit 9007199254740988kB, failcnt 0 [ 736.236812][T10027] Memory cgroup stats for /syz4: [ 736.236966][T10027] cache 297000960 [ 736.245577][T10027] rss 1482752 [ 736.490774][T10027] rss_huge 0 [ 736.498290][T10027] shmem 297000960 [ 736.811795][T10027] mapped_file 45649920 [ 737.227034][T10027] dirty 0 [ 737.230064][T10027] writeback 0 [ 737.233345][T10027] workingset_refault_anon 148 [ 737.345758][T10027] workingset_refault_file 0 [ 737.386934][T10027] swap 123764736 [ 737.390533][T10027] pgpgin 1245659 [ 737.394080][T10027] pgpgout 1172778 [ 737.490710][T10027] pgfault 424297 [ 737.494332][T10027] pgmajfault 60 [ 737.586028][T10027] inactive_anon 69836800 [ 737.621777][T10027] active_anon 228683776 [ 737.625960][T10027] inactive_file 0 [ 737.696675][T10027] active_file 0 [ 737.700176][T10027] unevictable 0 [ 737.760534][T10170] loop1: detected capacity change from 0 to 8192 [ 737.782490][T10027] hierarchical_memory_limit 314572800 [ 737.941739][T10027] hierarchical_memsw_limit 9223372036854771712 [ 738.071840][T10027] total_cache 297000960 [ 738.146626][T10027] total_rss 1482752 [ 738.372404][T10027] total_rss_huge 0 [ 738.376184][T10027] total_shmem 297000960 [ 738.466804][T10027] total_mapped_file 45649920 [ 738.486112][T10027] total_dirty 0 [ 738.931232][T10027] total_writeback 0 [ 738.996338][T10027] total_workingset_refault_anon 148 [ 739.084023][T10027] total_workingset_refault_file 0 [ 740.656695][T10027] total_swap 123764736 [ 740.660819][T10027] total_pgpgin 1245659 [ 740.664880][T10027] total_pgpgout 1172778 [ 741.070557][T10027] total_pgfault 424297 [ 741.117072][T10027] total_pgmajfault 60 [ 741.121087][T10027] total_inactive_anon 69836800 [ 741.189581][T10187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.199875][T10187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.207886][T10187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.216133][T10187] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.235452][T10187] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 741.243221][T10187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.404923][T10027] total_active_anon 228683776 [ 741.506698][T10027] total_inactive_file 0 [ 741.512085][T10027] total_active_file 0 [ 741.516060][T10027] total_unevictable 0 [ 741.657568][T10027] anon_cost 0 [ 741.769649][T10027] file_cost 0 [ 741.772977][T10027] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1003,pid=10027,uid=0 [ 742.094011][T10185] chnl_net:caif_netlink_parms(): no params data found [ 742.119761][T10027] Memory cgroup out of memory: Killed process 10027 (syz.4.1003) total-vm:102384kB, anon-rss:1420kB, file-rss:49920kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 743.281988][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.289262][T10185] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.297518][T10185] bridge_slave_0: entered allmulticast mode [ 743.304832][T10185] bridge_slave_0: entered promiscuous mode [ 743.315005][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.322282][T10185] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.329479][T10185] bridge_slave_1: entered allmulticast mode [ 743.337143][T10185] bridge_slave_1: entered promiscuous mode [ 743.372008][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.384618][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.393912][ T51] Bluetooth: hci0: command tx timeout [ 743.640285][T10185] team0: Port device team_slave_0 added [ 743.688262][T10185] team0: Port device team_slave_1 added [ 743.877633][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.884660][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.052128][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.221141][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.232920][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.295029][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.323488][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 744.521079][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 744.588664][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 744.619261][ T5141] loop0: [ 744.789068][T10185] hsr_slave_0: entered promiscuous mode [ 744.804619][T10185] hsr_slave_1: entered promiscuous mode [ 745.416742][ T51] Bluetooth: hci0: command tx timeout [ 745.840831][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 745.854537][T10216] loop3: detected capacity change from 0 to 512 [ 745.863295][T10216] ext4: Unknown parameter 'obj_type' [ 747.206463][T10185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 747.319238][T10185] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 748.260114][ T51] Bluetooth: hci0: command tx timeout [ 748.266141][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.272549][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.338020][T10185] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 748.543418][T10185] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 748.596695][T10082] syz.4.1024 (10082) used greatest stack depth: 18824 bytes left [ 749.280210][T10185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.894027][ T51] Bluetooth: hci0: command tx timeout [ 751.123571][ T6036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.843963][T10185] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.976030][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.983232][T10111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.058581][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.066750][T10111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.323805][ T6036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.349035][ T9821] syz.4.948 (9821) used greatest stack depth: 17928 bytes left [ 753.554162][ T6036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.925856][ T6036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.062637][T10236] loop2: detected capacity change from 0 to 512 [ 754.113719][T10236] EXT4-fs (loop2): 1 truncate cleaned up [ 754.158369][T10236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.383203][T10236] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1064: bg 0: block 465: padding at end of block bitmap is not set [ 754.468833][T10236] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 754.528378][T10236] EXT4-fs (loop2): This should not happen!! Data will be lost [ 754.528378][T10236] [ 754.588978][T10236] EXT4-fs (loop2): Total free blocks count 0 [ 754.595033][T10236] EXT4-fs (loop2): Free/Dirty block details [ 754.669632][T10236] EXT4-fs (loop2): free_blocks=0 [ 754.702190][T10236] EXT4-fs (loop2): dirty_blocks=66 [ 754.728583][T10236] EXT4-fs (loop2): Block reservation details [ 754.799888][T10236] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 755.104830][ T6041] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 755.308775][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.869361][T10185] veth0_vlan: entered promiscuous mode [ 758.933661][T10185] veth1_vlan: entered promiscuous mode [ 759.017451][ T9826] syz.4.948 (9826) used greatest stack depth: 17288 bytes left [ 759.049666][T10185] veth0_macvtap: entered promiscuous mode [ 759.171389][T10185] veth1_macvtap: entered promiscuous mode [ 759.253615][ T6036] hsr_slave_0: left promiscuous mode [ 759.278389][ T6036] hsr_slave_1: left promiscuous mode [ 759.328510][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.335955][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.384176][ T6036] bridge_slave_1: left allmulticast mode [ 759.401757][ T6036] bridge_slave_1: left promiscuous mode [ 759.427205][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.467862][ T6036] bridge_slave_0: left allmulticast mode [ 759.473560][ T6036] bridge_slave_0: left promiscuous mode [ 759.504018][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.646913][ T6036] veth1_macvtap: left promiscuous mode [ 759.652478][ T6036] veth0_macvtap: left promiscuous mode [ 759.690961][ T6036] veth1_vlan: left promiscuous mode [ 759.696327][ T6036] veth0_vlan: left promiscuous mode [ 761.059465][T10310] loop2: detected capacity change from 0 to 128 [ 762.840721][T10187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.849647][T10187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.877058][T10187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.885309][T10187] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.893443][T10187] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 762.901249][T10187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 764.648085][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 764.755279][ T6036] team0 (unregistering): Port device team_slave_0 removed [ 764.860806][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.937157][ T51] Bluetooth: hci4: command tx timeout [ 764.984736][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.156772][ T5830] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 765.409162][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 765.441548][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.453694][ T5830] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 765.463149][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.477411][ T5830] usb 2-1: config 0 descriptor?? [ 765.783134][ T6036] bond0 (unregistering): Released all slaves [ 765.853827][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.866213][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.877953][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.888482][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.899238][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.914988][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.929715][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.939083][ T5830] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 765.956413][ T5830] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 765.963782][ T5830] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 765.990471][ T5830] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 766.017017][ T5830] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 766.047970][ T5830] elan 0003:04F3:0755.0004: failed to start in urb: -90 [ 766.098856][ T5830] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 766.193799][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.239744][ T23] usb 2-1: USB disconnect, device number 5 [ 766.266054][T10185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.299409][T10185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.304080][T10325] fido_id[10325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 766.316731][T10185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.349621][T10185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.809585][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.830696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.843980][ T6036] IPVS: stop unused estimator thread 0... [ 766.866799][T10315] chnl_net:caif_netlink_parms(): no params data found [ 767.026923][ T51] Bluetooth: hci4: command tx timeout [ 767.049019][T10111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.077442][T10111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.702222][ T6036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.828623][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.835847][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.884439][T10315] bridge_slave_0: entered allmulticast mode [ 768.922127][T10315] bridge_slave_0: entered promiscuous mode [ 768.938173][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.945342][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.976856][T10315] bridge_slave_1: entered allmulticast mode [ 768.996985][T10315] bridge_slave_1: entered promiscuous mode [ 769.100906][ T51] Bluetooth: hci4: command tx timeout [ 769.171814][ T6036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.721980][ T6036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.757093][T10370] loop5: detected capacity change from 0 to 512 [ 769.801715][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.831391][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.860917][T10370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.944977][T10370] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.083137][ T6036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.316994][T10315] team0: Port device team_slave_0 added [ 770.326499][T10315] team0: Port device team_slave_1 added [ 770.558077][T10379] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1080'. [ 770.611285][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.631832][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.081840][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.226868][ T51] Bluetooth: hci4: command tx timeout [ 771.270116][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.336806][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.489408][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.751438][T10315] hsr_slave_0: entered promiscuous mode [ 771.785496][T10315] hsr_slave_1: entered promiscuous mode [ 771.806430][T10315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.824528][T10315] Cannot create hsr debugfs directory [ 773.852840][T10185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.380622][T10315] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 777.467301][T10315] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 777.492603][T10315] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 777.542648][T10315] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 780.217187][ T5830] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 780.279294][T10315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.409323][T10315] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.457130][ T5830] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 780.474434][ T5830] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 780.487877][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.516738][ T5830] usb 6-1: Product: syz [ 780.520964][ T5830] usb 6-1: Manufacturer: syz [ 780.525580][ T5830] usb 6-1: SerialNumber: syz [ 780.540201][ T6036] hsr_slave_0: left promiscuous mode [ 780.586994][ T6036] hsr_slave_1: left promiscuous mode [ 780.603262][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.625617][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.647927][ T6036] bridge_slave_1: left allmulticast mode [ 780.660861][ T6036] bridge_slave_1: left promiscuous mode [ 780.682582][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.703540][ T6036] bridge_slave_0: left allmulticast mode [ 780.717685][ T6036] bridge_slave_0: left promiscuous mode [ 780.738410][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.805012][ T5830] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 780.826876][ T5830] usb 6-1: unit 2 not found! [ 780.831689][ T5830] usb 6-1: unit 6 not found! [ 780.863729][ T6036] veth1_macvtap: left promiscuous mode [ 780.890866][ T6036] veth0_macvtap: left promiscuous mode [ 780.909807][T10452] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 780.920114][T10452] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 780.935974][ T5830] usb 6-1: USB disconnect, device number 2 [ 780.944591][ T6036] veth1_vlan: left promiscuous mode [ 780.971742][ T6036] veth0_vlan: left promiscuous mode [ 781.121897][T10251] udevd[10251]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.514478][T10458] loop5: detected capacity change from 0 to 256 [ 784.141366][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 784.225411][ T6036] team0 (unregistering): Port device team_slave_0 removed [ 784.313273][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.529273][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.196823][ T5809] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 786.230875][ T6036] bond0 (unregistering): Released all slaves [ 786.320756][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.327974][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.369602][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.376853][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.401367][ T5809] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 786.421308][ T5809] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 786.432252][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.441165][ T5809] usb 2-1: Product: syz [ 786.445467][ T5809] usb 2-1: Manufacturer: syz [ 786.450411][ T5809] usb 2-1: SerialNumber: syz [ 786.585093][T10315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 786.792421][T10496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.818397][T10496] serio: Serial port ttyS3 [ 787.385989][ T5809] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 787.956717][ T6036] IPVS: stop unused estimator thread 0... [ 788.089739][ T5809] usb 2-1: unit 2 not found! [ 788.094406][ T5809] usb 2-1: unit 6 not found! [ 788.119671][ T5809] usb 2-1: USB disconnect, device number 6 [ 788.414216][T10487] udevd[10487]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.301363][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.505903][T10522] loop5: detected capacity change from 0 to 4096 [ 790.513556][T10522] EXT4-fs: Ignoring removed bh option [ 790.519040][T10522] EXT4-fs: Ignoring removed orlov option [ 790.953205][ T5812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 791.957411][T10522] EXT4-fs (loop5): Test dummy encryption mode enabled [ 792.107073][T10522] EXT4-fs: error -4 creating inode table initialization thread [ 792.115303][T10522] EXT4-fs (loop5): mount failed [ 792.750295][ T5812] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 794.220411][T10534] loop5: detected capacity change from 0 to 8 [ 794.304734][T10527] fido_id[10527]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 794.965604][T10547] ip_tables: iptables: counters copy to user failed while replacing table [ 794.983576][T10315] veth0_vlan: entered promiscuous mode [ 795.039136][T10315] veth1_vlan: entered promiscuous mode [ 795.134123][T10315] veth0_macvtap: entered promiscuous mode [ 795.190824][T10315] veth1_macvtap: entered promiscuous mode [ 795.255942][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.300135][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.342508][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.377846][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.396697][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.416698][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.448478][T10315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.489245][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.517300][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.546690][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 795.559891][T10315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.589406][T10315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.623406][T10315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.646660][T10315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.655411][T10315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.771808][ T5830] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 796.793783][ T5830] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 796.940930][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.070912][ T5830] usb 2-1: Product: syz [ 797.075121][ T5830] usb 2-1: Manufacturer: syz [ 797.109184][ T5830] usb 2-1: SerialNumber: syz [ 797.130695][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.159780][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.269748][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.308903][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.518511][ T5830] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 797.546970][ T5830] usb 2-1: unit 2 not found! [ 797.551631][ T5830] usb 2-1: unit 6 not found! [ 797.598788][ T5830] usb 2-1: USB disconnect, device number 7 [ 797.941929][T10487] udevd[10487]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.702513][T10587] loop1: detected capacity change from 0 to 8 [ 804.846296][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 807.676699][ T5830] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 809.250945][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.257810][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.486182][ T5830] usb 3-1: device descriptor read/all, error -71 [ 814.006851][T10691] loop5: detected capacity change from 0 to 8192 [ 819.300348][T10747] loop1: detected capacity change from 0 to 8 [ 819.410805][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 819.442619][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 819.676597][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 821.973042][ T5141] loop0: [ 824.515084][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 824.583221][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 824.636725][T10779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 824.973931][T10790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1149'. [ 825.116698][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 825.176962][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 825.184218][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 825.246723][ T5141] loop0: [ 825.797686][T10790] veth0_to_bond: entered promiscuous mode [ 825.821622][T10790] veth0_to_bond: entered allmulticast mode [ 826.089295][T10187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 826.121939][T10187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 826.137823][T10187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 826.151825][T10187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 826.167719][T10187] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 826.175075][T10187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 828.268137][T10187] Bluetooth: hci2: command tx timeout [ 829.072815][T10818] loop6: detected capacity change from 0 to 512 [ 829.105150][T10818] EXT4-fs (loop6): Test dummy encryption mode enabled [ 829.118335][T10818] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 829.202235][T10818] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.1148: bad orphan inode 131083 [ 829.230867][T10818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.826807][T10833] ip_tables: iptables: counters copy to user failed while replacing table [ 830.124493][T10818] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 830.250827][T10832] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.302978][T10187] Bluetooth: hci2: command tx timeout [ 832.386824][T10187] Bluetooth: hci2: command tx timeout [ 832.702185][T10804] chnl_net:caif_netlink_parms(): no params data found [ 832.923539][ T6049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.150373][ T6049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.384773][ T6049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.607779][ T6049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.673013][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.726814][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.756758][T10804] bridge_slave_0: entered allmulticast mode [ 833.764067][T10804] bridge_slave_0: entered promiscuous mode [ 833.819064][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.826296][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.843755][T10804] bridge_slave_1: entered allmulticast mode [ 833.855059][T10804] bridge_slave_1: entered promiscuous mode [ 833.864762][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 833.896753][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 833.909460][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 833.961578][ T5141] loop0: [ 834.031209][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.065427][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.316036][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.339597][T10883] serio: Serial port ttyS3 [ 834.456729][T10187] Bluetooth: hci2: command tx timeout [ 834.924776][T10804] team0: Port device team_slave_0 added [ 835.168169][T10877] loop5: detected capacity change from 0 to 1024 [ 835.409412][T10877] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 835.429110][T10804] team0: Port device team_slave_1 added [ 835.638478][T10877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.846865][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.853877][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.892109][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.909660][T10185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.920933][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.945619][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.046652][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.281862][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 836.329596][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 836.373908][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 836.386758][ T5141] loop0: [ 837.414312][T10908] loop5: detected capacity change from 0 to 512 [ 837.448211][T10908] ext4: Unknown parameter 'smackfshat' [ 837.450643][T10804] hsr_slave_0: entered promiscuous mode [ 837.523364][T10804] hsr_slave_1: entered promiscuous mode [ 837.530269][T10697] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 837.548551][T10804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 837.556155][T10804] Cannot create hsr debugfs directory [ 837.687678][T10908] loop5: detected capacity change from 0 to 512 [ 837.705071][T10908] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1169: iget: bad i_size value: 38620345925642 [ 837.747594][T10908] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1169: couldn't read orphan inode 15 (err -117) [ 837.794703][T10908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.499108][ T6036] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:40: bg 0: block 5: invalid block bitmap [ 838.545045][ T6036] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 838.579827][ T6036] EXT4-fs (loop5): This should not happen!! Data will be lost [ 838.579827][ T6036] [ 838.606441][ T6036] EXT4-fs (loop5): Total free blocks count 0 [ 838.637383][ T6036] EXT4-fs (loop5): Free/Dirty block details [ 838.643698][ T6036] EXT4-fs (loop5): free_blocks=0 [ 838.657040][ T6036] EXT4-fs (loop5): dirty_blocks=4 [ 838.662137][ T6036] EXT4-fs (loop5): Block reservation details [ 838.670651][ T6036] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 838.703171][T10185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.883571][T10804] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 839.079300][T10804] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 839.240071][T10804] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 839.311722][T10804] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 839.526486][ T6049] hsr_slave_0: left promiscuous mode [ 839.545090][ T6049] hsr_slave_1: left promiscuous mode [ 841.027096][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.041060][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.077467][ T6049] bridge_slave_1: left allmulticast mode [ 841.083150][ T6049] bridge_slave_1: left promiscuous mode [ 841.131669][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.159100][ T6049] bridge_slave_0: left allmulticast mode [ 841.164783][ T6049] bridge_slave_0: left promiscuous mode [ 841.197026][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.335385][ T6049] veth1_macvtap: left promiscuous mode [ 841.342644][ T6049] veth0_macvtap: left promiscuous mode [ 841.357060][ T6049] veth1_vlan: left promiscuous mode [ 841.376796][ T6049] veth0_vlan: left promiscuous mode [ 842.350944][T10960] loop5: detected capacity change from 0 to 128 [ 842.468893][T10960] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 842.566160][T10960] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.680969][T10185] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 843.013112][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 843.169067][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 843.239133][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.777826][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.395111][ T6049] bond0 (unregistering): Released all slaves [ 845.467762][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1178'. [ 845.478641][T10956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.562053][T10956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.913243][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.966167][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.108835][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.116058][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.432635][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.439883][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.959190][ T6049] IPVS: stop unused estimator thread 0... [ 847.090105][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 847.137625][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 847.177830][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 847.216870][ T5141] loop0: [ 847.262035][T10997] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 847.307918][T11000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.325185][T10998] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 847.560489][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.131150][T11033] loop5: detected capacity change from 0 to 256 [ 850.578432][T11033] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 850.589159][T11033] exFAT-fs (loop5): invalid boot region [ 850.594780][T11033] exFAT-fs (loop5): failed to recognize exfat type [ 853.393052][T10804] veth0_vlan: entered promiscuous mode [ 853.450511][T10804] veth1_vlan: entered promiscuous mode [ 853.461676][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 853.486591][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 853.515786][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 853.539479][T10804] veth0_macvtap: entered promiscuous mode [ 853.547650][ T5141] loop0: [ 853.586373][T10804] veth1_macvtap: entered promiscuous mode [ 853.618586][T11049] loop5: detected capacity change from 0 to 128 [ 853.656399][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.701997][T11049] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 853.716169][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.726892][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.737941][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.745446][T11049] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.748269][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.748287][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.751753][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.792364][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.803423][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.970178][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.000673][T10804] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.046727][T10804] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.055491][T10804] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.104604][T10804] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.159576][T10185] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 854.234634][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1190'. [ 854.503925][ T6018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.595623][ T6018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.227819][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.256829][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.524018][T11099] loop2: detected capacity change from 0 to 128 [ 858.671697][T11099] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 858.747131][T11099] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.018713][T11105] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 859.028861][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 859.045962][T11109] syz.5.1199 (11109): /proc/11108/oom_adj is deprecated, please use /proc/11108/oom_score_adj instead. [ 859.077223][T11106] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 862.896309][T11117] loop5: detected capacity change from 0 to 40427 [ 862.956245][T11117] F2FS-fs (loop5): invalid crc value [ 862.994712][T11117] F2FS-fs (loop5): Found nat_bits in checkpoint [ 863.172734][T11117] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 865.110976][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 865.166131][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 865.217066][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 865.223793][ T5141] loop0: [ 865.922644][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'. [ 866.976747][ T9690] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 867.216676][ T9690] usb 6-1: Using ep0 maxpacket: 32 [ 867.243414][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.293320][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.335474][ T9690] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 867.356623][ T9690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.387532][ T9690] usb 6-1: config 0 descriptor?? [ 867.416662][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 867.421314][ T9690] hub 6-1:0.0: USB hub found [ 867.624379][ T9690] hub 6-1:0.0: 1 port detected [ 868.333130][ T9690] hub 6-1:0.0: activate --> -90 [ 868.540289][ T5810] usb 6-1: USB disconnect, device number 3 [ 868.554362][ T9690] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 870.476908][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.483398][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.152798][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 872.176609][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 872.183878][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 872.191270][ T5141] loop0: [ 873.780305][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1225'. [ 873.789432][T11228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.715890][T11221] loop5: detected capacity change from 0 to 8192 [ 874.834442][T11228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.556990][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 877.596873][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 877.604510][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 877.657313][ T5141] loop0: [ 877.760760][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1233'. [ 885.051013][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1237'. [ 885.060000][T11300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.189584][T11300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.342731][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 886.416712][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 886.444324][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 886.466787][ T5141] loop0: [ 887.982617][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 892.186762][T11342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.870103][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 892.926643][ T5141] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 892.933982][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 892.940775][ T5141] loop0: [ 894.554710][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 895.709814][T11373] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 895.719954][T11373] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 904.171254][T11448] overlayfs: missing 'lowerdir' [ 906.179614][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1263'. [ 907.203003][T11468] loop7: detected capacity change from 0 to 1024 [ 907.240939][T11468] EXT4-fs: Ignoring removed bh option [ 907.334894][T11468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.366259][T11475] loop2: detected capacity change from 0 to 1024 [ 907.374980][T11475] EXT4-fs: Ignoring removed orlov option [ 907.481360][T11475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.793101][T11483] overlayfs: missing 'workdir' [ 908.688688][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.743200][T10804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.062310][T11493] loop2: detected capacity change from 0 to 1024 [ 909.115679][T11493] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 909.255951][T11493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.119342][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.410146][T11567] loop5: detected capacity change from 0 to 1024 [ 916.428032][T11567] EXT4-fs: Ignoring removed bh option [ 916.578801][T11567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.867612][T11545] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 916.892710][T11545] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 916.915826][T11545] page_type: 0xffffffff() [ 916.925947][T11545] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 916.964466][T11545] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 917.002292][T11545] page dumped because: unmovable page [ 917.046441][T11545] page_owner info is not present (never set?) [ 917.268716][T10185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.307721][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1291'. [ 917.513123][T11589] loop5: detected capacity change from 0 to 1024 [ 917.560512][T11589] journal_path: Lookup failure for './file0' [ 917.593861][T11589] EXT4-fs: error: could not find journal device path [ 917.627870][T11589] netlink: 'syz.5.1292': attribute type 4 has an invalid length. [ 919.594583][T11617] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1297'. [ 920.863566][T11633] loop7: detected capacity change from 0 to 1024 [ 920.887761][T11633] EXT4-fs: Ignoring removed bh option [ 920.970158][T11633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.258807][T11644] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1303'. [ 921.493717][T11629] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 921.538536][T11629] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 921.576852][T11629] page_type: 0xffffffff() [ 921.581264][T11629] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 921.612817][T11629] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 921.622113][T11629] page dumped because: unmovable page [ 921.627878][T11629] page_owner info is not present (never set?) [ 921.738545][T10804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.024775][T11665] loop7: detected capacity change from 0 to 512 [ 922.100893][T11665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 922.185672][T10804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.399275][T11693] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 923.410089][T11693] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 924.247093][T11693] page_type: 0xffffffff() [ 924.267331][T11693] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 924.275973][T11693] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 924.370283][T11693] page dumped because: unmovable page [ 924.375731][T11693] page_owner info is not present (never set?) [ 924.489610][T11697] page:ffffea0001c00000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70000 [ 924.555076][T11697] head:ffffea0001c00000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 924.666895][T11697] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 924.717060][T11697] page_type: 0xffffffff() [ 924.777925][T11697] raw: 00fff00000000840 ffff888017c42140 0000000000000000 dead000000000001 [ 924.821940][T11697] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 924.865305][T11697] page dumped because: unmovable page [ 924.886761][T11713] loop5: detected capacity change from 0 to 1024 [ 924.905687][T11697] page_owner tracks the page as allocated [ 924.926473][T11697] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6049, tgid 6049 (kworker/u4:51), ts 867757619551, free_ts 867647027728 [ 924.963714][T11713] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 925.997805][T11713] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 926.016619][T11697] post_alloc_hook+0x1c1/0x200 [ 926.021664][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1320'. [ 926.043204][T11713] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 926.051509][T11697] get_page_from_freelist+0x2181/0x22a0 [ 926.093836][T11697] __alloc_pages+0x1f0/0x460 [ 926.110127][T11713] System zones: 0-1, 3-36 [ 926.125368][T11697] alloc_slab_page+0x5d/0x180 [ 926.226461][T11697] new_slab+0x87/0x2d0 [ 926.246688][T11697] ___slab_alloc+0xc5c/0x12f0 [ 926.249168][T11713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.251421][T11697] __kmem_cache_alloc_node+0x11f/0x250 [ 926.336614][T11697] __kmalloc_node_track_caller+0xa4/0x230 [ 926.342424][T11697] kmalloc_reserve+0x116/0x240 [ 926.380070][T11697] __alloc_skb+0x138/0x2c0 [ 926.406760][T11697] nsim_dev_trap_report_work+0x253/0xa90 [ 926.422956][T11697] process_scheduled_works+0xa60/0x1600 [ 926.446744][T11697] worker_thread+0xa5e/0xfe0 [ 926.451778][T11697] kthread+0x2fa/0x390 [ 926.455917][T11697] ret_from_fork+0x48/0x80 [ 926.476643][T11697] ret_from_fork_asm+0x11/0x20 [ 926.481696][T11697] page last free stack trace: [ 926.491814][T11697] free_unref_page_prepare+0x7d7/0x8f0 [ 926.498420][T11729] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1321: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 926.517241][T11697] free_unref_page+0x32/0x2e0 [ 926.526781][T11697] __unfreeze_partials+0x1cf/0x210 [ 926.535845][T11697] put_cpu_partial+0x17c/0x250 [ 926.543289][T11697] __slab_free+0x319/0x400 [ 926.552395][T11697] qlist_free_all+0x75/0xd0 [ 926.561073][T11697] kasan_quarantine_reduce+0x143/0x160 [ 926.568043][T11697] __kasan_slab_alloc+0x22/0x80 [ 926.573074][T11697] slab_post_alloc_hook+0x6a/0x4d0 [ 926.582942][T11713] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1321: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 926.601503][T11697] __kmem_cache_alloc_node+0x194/0x250 [ 926.608090][T11697] __kmalloc+0xa7/0x240 [ 926.616857][T11697] hub_probe+0x1533/0x37d0 [ 926.623507][T11697] usb_probe_interface+0x6eb/0xcf0 [ 926.629267][T11727] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1321: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 926.646543][T11697] really_probe+0x247/0xae0 [ 926.651236][T11697] __driver_probe_device+0x1f5/0x390 [ 926.657042][T11697] driver_probe_device+0x4f/0x420 [ 926.680554][T11713] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 926.922403][T11738] trusted_key: encrypted_key: insufficient parameters specified [ 927.656199][T11743] loop7: detected capacity change from 0 to 1024 [ 927.720388][T11743] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 927.795699][T11743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 928.320319][T10185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.336926][ T5903] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 928.358323][T10804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.554272][T11781] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 930.589249][T11781] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 930.620754][T11781] page_type: 0xffffffff() [ 930.641362][T11781] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 930.668405][T11781] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 930.711962][T11781] page dumped because: unmovable page [ 930.779695][T11781] page_owner info is not present (never set?) [ 930.861972][T11784] page:ffffea0001c00000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70000 [ 930.903622][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1331'. [ 931.039159][T11784] head:ffffea0001c00000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 931.156923][T11784] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 931.197113][T11784] page_type: 0xffffffff() [ 931.204241][T11784] raw: 00fff00000000840 ffff888017c42140 0000000000000000 dead000000000001 [ 931.268808][T11784] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 931.280017][T11784] page dumped because: unmovable page [ 931.285433][T11784] page_owner tracks the page as allocated [ 931.295077][T11784] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6049, tgid 6049 (kworker/u4:51), ts 867757619551, free_ts 867647027728 [ 931.507310][T11784] post_alloc_hook+0x1c1/0x200 [ 931.512161][T11784] get_page_from_freelist+0x2181/0x22a0 [ 931.523765][T11784] __alloc_pages+0x1f0/0x460 [ 931.528507][T11784] alloc_slab_page+0x5d/0x180 [ 931.533309][T11784] new_slab+0x87/0x2d0 [ 931.543612][T11784] ___slab_alloc+0xc5c/0x12f0 [ 931.558099][T11784] __kmem_cache_alloc_node+0x11f/0x250 [ 931.564610][T11784] __kmalloc_node_track_caller+0xa4/0x230 [ 931.593293][T11784] kmalloc_reserve+0x116/0x240 [ 931.628747][T11784] __alloc_skb+0x138/0x2c0 [ 931.683989][T11784] nsim_dev_trap_report_work+0x253/0xa90 [ 931.733437][T11784] process_scheduled_works+0xa60/0x1600 [ 931.739289][T11784] worker_thread+0xa5e/0xfe0 [ 931.744149][T11784] kthread+0x2fa/0x390 [ 931.748405][T11784] ret_from_fork+0x48/0x80 [ 931.753034][T11784] ret_from_fork_asm+0x11/0x20 [ 931.758066][T11784] page last free stack trace: [ 931.763140][T11784] free_unref_page_prepare+0x7d7/0x8f0 [ 931.768825][T11784] free_unref_page+0x32/0x2e0 [ 931.773669][T11784] __unfreeze_partials+0x1cf/0x210 [ 931.778987][T11784] put_cpu_partial+0x17c/0x250 [ 931.783984][T11784] __slab_free+0x319/0x400 [ 931.788634][T11784] qlist_free_all+0x75/0xd0 [ 931.793317][T11784] kasan_quarantine_reduce+0x143/0x160 [ 931.799047][T11784] __kasan_slab_alloc+0x22/0x80 [ 931.804077][T11784] slab_post_alloc_hook+0x6a/0x4d0 [ 931.809665][T11784] __kmem_cache_alloc_node+0x194/0x250 [ 931.816145][T11784] __kmalloc+0xa7/0x240 [ 931.820624][T11784] hub_probe+0x1533/0x37d0 [ 931.825201][T11784] usb_probe_interface+0x6eb/0xcf0 [ 931.830717][T11784] really_probe+0x247/0xae0 [ 931.835307][T11784] __driver_probe_device+0x1f5/0x390 [ 931.840870][T11784] driver_probe_device+0x4f/0x420 [ 931.903581][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.911446][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.716882][ T5830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 934.070802][ T5830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.109195][ T5830] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.118493][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.141776][ T5830] usb 6-1: Product: syz [ 934.146008][ T5830] usb 6-1: Manufacturer: syz [ 934.176567][ T5830] usb 6-1: SerialNumber: syz [ 934.438873][T11848] loop7: detected capacity change from 0 to 128 [ 934.469260][T11848] FAT-fs (loop7): Unrecognized mount option "Kmask=00000000000000000" or missing value [ 934.703407][T11851] loop2: detected capacity change from 0 to 128 [ 935.309329][ T5830] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 935.328650][ T5830] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 935.336170][ T5830] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 935.559504][ T5830] cdc_ncm 6-1:1.0: setting tx_max = 16384 [ 935.750672][ T5830] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 935.842694][ T5830] usb 6-1: USB disconnect, device number 5 [ 935.883430][ T5830] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 949.481717][T10187] Bluetooth: hci2: command 0x0406 tx timeout [ 950.689078][T11962] loop2: detected capacity change from 0 to 1024 [ 950.779820][T11962] EXT4-fs: Ignoring removed oldalloc option [ 950.886768][T11962] EXT4-fs: Ignoring removed oldalloc option [ 950.908010][T11962] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 951.093119][T11962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.585578][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.660846][T10187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 951.680173][T10187] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 951.697458][T10187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 951.716781][T10187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 951.726842][T10187] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 951.734300][T10187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 951.872652][T11988] loop5: detected capacity change from 0 to 1024 [ 951.914044][T11988] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 951.968703][T11988] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 952.070223][T11988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 952.107453][T11988] System zones: 0-1, 3-36 [ 952.201127][T11988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.289237][T11999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.429413][T11988] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1370: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 952.507790][T12008] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1370: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 952.632738][T11988] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1370: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 952.667362][T12008] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 952.859640][T10185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.794102][T12027] loop2: detected capacity change from 0 to 512 [ 953.817061][T10187] Bluetooth: hci3: command tx timeout [ 953.881024][T12027] EXT4-fs (loop2): Test dummy encryption mode enabled [ 953.968161][T11976] chnl_net:caif_netlink_parms(): no params data found [ 953.990034][T12027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.427976][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.032125][ T6044] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.374496][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.424021][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.469762][T11976] bridge_slave_0: entered allmulticast mode [ 955.538220][T11976] bridge_slave_0: entered promiscuous mode [ 955.735575][ T6044] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.936844][T10187] Bluetooth: hci3: command tx timeout [ 956.086473][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.166667][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.173910][T11976] bridge_slave_1: entered allmulticast mode [ 956.218407][T11976] bridge_slave_1: entered promiscuous mode [ 956.356780][T12048] loop5: detected capacity change from 0 to 16 [ 956.365742][ T6044] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.431480][T12048] erofs: (device loop5): mounted with root inode @ nid 36. [ 956.638684][ T6044] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.749723][T11976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.800092][T11976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.828071][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 956.877340][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 956.886062][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 956.937792][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 956.963079][T12041] loop2: detected capacity change from 0 to 40427 [ 956.976722][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.026546][T12041] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 957.032561][T11976] team0: Port device team_slave_0 added [ 957.039668][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.087578][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.108633][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.118643][T12041] F2FS-fs (loop2): invalid crc value [ 957.119392][T11976] team0: Port device team_slave_1 added [ 957.153489][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.211910][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.226573][T12041] F2FS-fs (loop2): Found nat_bits in checkpoint [ 957.273101][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.319149][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.347363][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.356196][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.358998][T11980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 957.374273][T11980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 957.460663][T11980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 957.473820][T11980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 957.475014][T11976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.488773][T11980] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 957.496187][T11980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 957.514961][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.585518][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.616679][T12041] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 957.644240][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.688075][T11976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.695721][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.742573][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.754055][T11976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.798612][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.807242][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.837557][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.846320][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.918131][T11976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.930644][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.972489][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 957.987271][T11980] Bluetooth: hci3: command tx timeout [ 958.031040][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.091666][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.167610][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.176379][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.261097][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.285320][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.302395][T11976] hsr_slave_0: entered promiscuous mode [ 958.327561][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.337970][T11976] hsr_slave_1: entered promiscuous mode [ 958.354558][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.363781][T11976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.378151][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.397954][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.421068][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.443684][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.452415][T11976] Cannot create hsr debugfs directory [ 958.507425][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.516240][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.575472][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.615230][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.652207][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.680977][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.707473][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.716425][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.767366][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.776192][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.805919][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.859057][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.907624][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.967411][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 958.976284][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.053524][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.088370][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.097705][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.127499][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.136633][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.147918][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.157641][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.167054][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.175853][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.187413][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.229536][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.317523][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.361226][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.415229][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.487569][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.496405][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.577881][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.586071][T11980] Bluetooth: hci2: command tx timeout [ 959.608638][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.637497][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.646430][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.675527][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.741293][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.812748][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 959.862575][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.047879][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.089450][T11980] Bluetooth: hci3: command tx timeout [ 960.245663][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.403617][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.447514][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.456397][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.523554][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.588522][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.617998][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.638354][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.668289][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.697470][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.707770][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.764268][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.819695][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.872038][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 960.966778][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.004021][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.021631][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.039005][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.076112][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.090112][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.114324][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.145304][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.167561][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.197388][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.227173][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.236019][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.283376][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.474888][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.547426][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.556328][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.589096][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.607586][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.629394][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.657940][T11980] Bluetooth: hci2: command tx timeout [ 961.687483][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.696386][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.710781][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.721461][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.730434][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.739923][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.749452][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.758464][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.777035][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.785863][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.809023][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.826380][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.849008][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.864902][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.904284][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.915296][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.948588][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.971848][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.989700][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 961.998907][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.010767][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.043550][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.071475][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.088940][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.098324][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.101401][T12059] chnl_net:caif_netlink_parms(): no params data found [ 962.109187][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.200974][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.231947][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.240829][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.259327][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.269787][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.289606][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.304734][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.338959][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.357385][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.524950][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.557325][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.588069][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.603978][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.681515][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.710928][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.750682][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.788130][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.826056][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.858758][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.902993][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.936721][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 962.978997][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.025299][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.055258][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.088749][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.130824][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.164485][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.224668][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.267395][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.330446][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.359640][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.414091][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.447475][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.497926][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.527177][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.536069][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.593554][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.632444][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.682507][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.727604][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.767408][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.792278][T11980] Bluetooth: hci2: command tx timeout [ 963.888033][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.927079][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 963.935934][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.004717][T11976] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 964.012509][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.093247][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.121038][T12116] loop2: detected capacity change from 0 to 512 [ 964.142057][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.164746][T11976] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 964.182594][T12116] ------------[ cut here ]------------ [ 964.188542][T12116] EA inode 11 i_nlink=0 [ 964.199648][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.213541][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.222570][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.232317][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.252231][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.260541][T12116] WARNING: CPU: 0 PID: 12116 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 964.264292][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.271462][T12116] Modules linked in: [ 964.283631][T12116] CPU: 0 PID: 12116 Comm: syz.2.1387 Not tainted syzkaller #0 [ 964.291273][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 964.301455][T12116] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 964.308363][T12116] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 60 e0 de 8a 44 89 fa e8 ee 04 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 98 5f 4b 08 [ 964.328300][T12116] RSP: 0018:ffffc900033a7360 EFLAGS: 00010246 [ 964.334424][T12116] RAX: f763f2184cf6bf00 RBX: ffff88805d9bd4a8 RCX: 0000000000080000 [ 964.342520][T12116] RDX: ffffc9000d40a000 RSI: 00000000000182e6 RDI: 00000000000182e7 [ 964.348917][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.351327][T12116] RBP: ffffc900033a7450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 964.366849][T12116] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88805d9bd300 [ 964.374929][T12116] R13: ffffc900033a73c0 R14: dffffc0000000000 R15: 0000000000000000 [ 964.383813][T12116] FS: 00007fe91a3f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 964.392954][T12116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.399653][T12116] CR2: 00007fb92720c4e8 CR3: 0000000054e62000 CR4: 00000000003526f0 [ 964.402215][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.407678][T12116] Call Trace: [ 964.407690][T12116] [ 964.407706][T12116] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 964.407740][T12116] ? __ext4_journal_ensure_credits+0x30/0x450 [ 964.433935][T12116] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 964.440020][T12116] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 964.445714][T12116] ? __ext4_journal_ensure_credits+0x450/0x450 [ 964.451995][T12116] ext4_xattr_delete_inode+0xb3b/0xd00 [ 964.457541][T12116] ? ext4_mark_iloc_dirty+0x694/0x1c60 [ 964.459389][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.463038][T12116] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 964.477198][T12116] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 964.483613][T12116] ext4_evict_inode+0xa88/0xe70 [ 964.488687][T12116] ? evict+0x482/0x8a0 [ 964.492816][T12116] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 964.498830][T12116] ? do_raw_spin_unlock+0x121/0x230 [ 964.504080][T12116] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 964.510111][T12116] evict+0x4b7/0x8a0 [ 964.514087][T12116] ? __lock_acquire+0x7eb0/0x7eb0 [ 964.519217][T12116] ? proc_nr_inodes+0x230/0x230 [ 964.524117][T12116] ? do_raw_spin_unlock+0x121/0x230 [ 964.529442][T12116] ? _raw_spin_unlock+0x28/0x40 [ 964.534361][T12116] ext4_orphan_cleanup+0xdff/0x1650 [ 964.539680][T12116] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 964.541978][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.547238][T12116] ? ext4_orphan_del+0xc90/0xc90 [ 964.558975][T12116] ? ext4_register_li_request+0x182/0x930 [ 964.564739][T12116] ? errseq_check_and_advance+0x66/0x120 [ 964.570478][T12116] ext4_fill_super+0x5fb5/0x6870 [ 964.575516][T12116] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 964.582580][T12116] ? __might_sleep+0xe0/0xe0 [ 964.588274][T12116] ? read_lock_is_recursive+0x20/0x20 [ 964.593711][T12116] ? snprintf+0xe9/0x140 [ 964.598063][T12116] ? down_read_killable+0x340/0x340 [ 964.603326][T12116] ? setup_bdev_super+0x56b/0x660 [ 964.608440][T12116] get_tree_bdev+0x3e5/0x520 [ 964.613107][T12116] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 964.619545][T12116] ? setup_bdev_super+0x660/0x660 [ 964.624621][T12116] ? apparmor_capable+0x137/0x1a0 [ 964.629749][T12116] ? bpf_lsm_capable+0x9/0x10 [ 964.634471][T12116] ? security_capable+0x89/0xb0 [ 964.639446][T12116] vfs_get_tree+0x8c/0x280 [ 964.643926][T12116] do_new_mount+0x24a/0xa40 [ 964.648511][T12116] __se_sys_mount+0x2e7/0x3d0 [ 964.653241][T12116] ? __x64_sys_mount+0xc0/0xc0 [ 964.658102][T12116] ? lockdep_hardirqs_on+0x98/0x150 [ 964.658590][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.663322][T12116] ? __x64_sys_mount+0x20/0xc0 [ 964.676156][T12116] do_syscall_64+0x55/0xb0 [ 964.680671][T12116] ? clear_bhb_loop+0x40/0x90 [ 964.686240][T12116] ? clear_bhb_loop+0x40/0x90 [ 964.691144][T12116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 964.697577][T12116] RIP: 0033:0x7fe91c19f40a [ 964.702065][T12116] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.721782][T12116] RSP: 002b:00007fe91a3f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 964.730293][T12116] RAX: ffffffffffffffda RBX: 00007fe91a3f5ee0 RCX: 00007fe91c19f40a [ 964.738363][T12116] RDX: 0000200000000040 RSI: 0000200000000140 RDI: 00007fe91a3f5ea0 [ 964.746376][T12116] RBP: 0000200000000040 R08: 00007fe91a3f5ee0 R09: 0000000000000000 [ 964.754488][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 964.762549][T12116] R13: 00007fe91a3f5ea0 R14: 000000000000048a R15: 0000200000000740 [ 964.768952][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.770767][T12116] [ 964.781634][T12116] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 964.788941][T12116] CPU: 0 PID: 12116 Comm: syz.2.1387 Not tainted syzkaller #0 [ 964.796427][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 964.806524][T12116] Call Trace: [ 964.809841][T12116] [ 964.812800][T12116] dump_stack_lvl+0x18c/0x250 [ 964.817530][T12116] ? show_regs_print_info+0x20/0x20 [ 964.822777][T12116] ? load_image+0x420/0x420 [ 964.827323][T12116] panic+0x2ca/0x720 [ 964.831257][T12116] ? bpf_jit_dump+0xd0/0xd0 [ 964.835832][T12116] __warn+0x2e0/0x470 [ 964.839861][T12116] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 964.845887][T12116] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 964.849328][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.851111][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.853773][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.855614][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.883866][T12116] report_bug+0x2be/0x4f0 [ 964.888236][T12116] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 964.894259][T12116] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 964.900310][T12116] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 964.906333][T12116] handle_bug+0xcf/0x120 [ 964.910618][T12116] exc_invalid_op+0x1a/0x50 [ 964.915180][T12116] asm_exc_invalid_op+0x1a/0x20 [ 964.920079][T12116] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 964.921556][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.923291][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.924957][T10185] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 964.950684][T12116] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 60 e0 de 8a 44 89 fa e8 ee 04 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 98 5f 4b 08 [ 964.970360][T12116] RSP: 0018:ffffc900033a7360 EFLAGS: 00010246 [ 964.976490][T12116] RAX: f763f2184cf6bf00 RBX: ffff88805d9bd4a8 RCX: 0000000000080000 [ 964.984507][T12116] RDX: ffffc9000d40a000 RSI: 00000000000182e6 RDI: 00000000000182e7 [ 964.992519][T12116] RBP: ffffc900033a7450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 965.000569][T12116] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88805d9bd300 [ 965.008577][T12116] R13: ffffc900033a73c0 R14: dffffc0000000000 R15: 0000000000000000 [ 965.016618][T12116] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 965.022307][T12116] ? __ext4_journal_ensure_credits+0x30/0x450 [ 965.028461][T12116] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 965.034531][T12116] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 965.040229][T12116] ? __ext4_journal_ensure_credits+0x450/0x450 [ 965.046444][T12116] ext4_xattr_delete_inode+0xb3b/0xd00 [ 965.051961][T12116] ? ext4_mark_iloc_dirty+0x694/0x1c60 [ 965.057452][T12116] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 965.063576][T12116] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 965.069262][T12116] ext4_evict_inode+0xa88/0xe70 [ 965.074148][T12116] ? evict+0x482/0x8a0 [ 965.078254][T12116] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 965.084176][T12116] ? do_raw_spin_unlock+0x121/0x230 [ 965.089397][T12116] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 965.095318][T12116] evict+0x4b7/0x8a0 [ 965.099242][T12116] ? __lock_acquire+0x7eb0/0x7eb0 [ 965.104300][T12116] ? proc_nr_inodes+0x230/0x230 [ 965.109170][T12116] ? do_raw_spin_unlock+0x121/0x230 [ 965.114399][T12116] ? _raw_spin_unlock+0x28/0x40 [ 965.119280][T12116] ext4_orphan_cleanup+0xdff/0x1650 [ 965.124496][T12116] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 965.130791][T12116] ? ext4_orphan_del+0xc90/0xc90 [ 965.135754][T12116] ? ext4_register_li_request+0x182/0x930 [ 965.141504][T12116] ? errseq_check_and_advance+0x66/0x120 [ 965.147160][T12116] ext4_fill_super+0x5fb5/0x6870 [ 965.152135][T12116] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 965.158391][T12116] ? __might_sleep+0xe0/0xe0 [ 965.162998][T12116] ? read_lock_is_recursive+0x20/0x20 [ 965.168389][T12116] ? snprintf+0xe9/0x140 [ 965.172663][T12116] ? down_read_killable+0x340/0x340 [ 965.177884][T12116] ? setup_bdev_super+0x56b/0x660 [ 965.182926][T12116] get_tree_bdev+0x3e5/0x520 [ 965.187541][T12116] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 965.193812][T12116] ? setup_bdev_super+0x660/0x660 [ 965.198864][T12116] ? apparmor_capable+0x137/0x1a0 [ 965.203910][T12116] ? bpf_lsm_capable+0x9/0x10 [ 965.208631][T12116] ? security_capable+0x89/0xb0 [ 965.213519][T12116] vfs_get_tree+0x8c/0x280 [ 965.217981][T12116] do_new_mount+0x24a/0xa40 [ 965.222512][T12116] __se_sys_mount+0x2e7/0x3d0 [ 965.227220][T12116] ? __x64_sys_mount+0xc0/0xc0 [ 965.231999][T12116] ? lockdep_hardirqs_on+0x98/0x150 [ 965.237212][T12116] ? __x64_sys_mount+0x20/0xc0 [ 965.241992][T12116] do_syscall_64+0x55/0xb0 [ 965.246434][T12116] ? clear_bhb_loop+0x40/0x90 [ 965.251129][T12116] ? clear_bhb_loop+0x40/0x90 [ 965.255836][T12116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.261757][T12116] RIP: 0033:0x7fe91c19f40a [ 965.266191][T12116] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.285842][T12116] RSP: 002b:00007fe91a3f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 965.294288][T12116] RAX: ffffffffffffffda RBX: 00007fe91a3f5ee0 RCX: 00007fe91c19f40a [ 965.302304][T12116] RDX: 0000200000000040 RSI: 0000200000000140 RDI: 00007fe91a3f5ea0 [ 965.310292][T12116] RBP: 0000200000000040 R08: 00007fe91a3f5ee0 R09: 0000000000000000 [ 965.318273][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 965.326276][T12116] R13: 00007fe91a3f5ea0 R14: 000000000000048a R15: 0000200000000740 [ 965.334284][T12116] [ 965.337941][T12116] Kernel Offset: disabled [ 965.342368][T12116] Rebooting in 86400 seconds..