last executing test programs: 12m21.77302127s ago: executing program 32 (id=1081): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="a2", 0x1}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x4000804) 10m52.342864683s ago: executing program 33 (id=1897): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f00000001c0)="0f73", 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x14, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x200000000000017b}}, 0x40) 10m20.195094717s ago: executing program 34 (id=2065): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) ioctl$TCXONC(r0, 0x540a, 0x1) 9m44.294646691s ago: executing program 35 (id=2266): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb13d, 0x1000, 0x6, 0x196}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 9m34.850871847s ago: executing program 36 (id=2310): timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)) 5m25.944911915s ago: executing program 37 (id=4131): syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000640)={r2, 0xffff0000, 0x10}, 0xc) 5m11.722818429s ago: executing program 38 (id=4234): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x48, 0xffffffffffffffff, {0x2}}, './file1\x00'}) 4m5.699063064s ago: executing program 39 (id=4726): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) unshare(0x2a020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='- 1 0 1', 0x7) 2m37.581885271s ago: executing program 40 (id=5449): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000020c0)=""/4080, 0xff0}], 0x1, 0x1, 0x9) 2m1.029580494s ago: executing program 1 (id=5733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xc1, 0xffffffff, 0x0, 0x5, 0x85, 0x0, 0x3d38, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x5, 0xd, 0x6, 0x6, 0x0, 0x6, 0x800, 0x4, 0xa, 0x7, 0xd, 0x3, 0x1, 0x80f, 0x4, 0x6, 0xed, 0x8000, 0x200, 0x3, 0x3, 0x8, 0xb, 0xfffffffa, 0x5, 0xd, 0xffff92e1, 0x2, 0x7, 0x8, 0x8, 0xfff, 0x101, 0xfffffff8, 0xfffffffc, 0x2, 0xa, 0xfffffffd, 0x8, 0x3, 0x6, 0xffff, 0xf0b, 0x6, 0x7, 0x8, 0x0, 0x9, 0x7, 0x9a, 0xe, 0x7fffffff, 0x8, 0xf9, 0x6, 0x6, 0xfffffffc, 0x7a132062, 0x7fff, 0x5, 0x7fff, 0x200, 0xc, 0x6, 0x60000000, 0x1, 0x200, 0x86f0, 0x2, 0x1, 0x3, 0x8, 0x9, 0x7, 0x3, 0x1, 0x7, 0x4e6, 0x4, 0x0, 0x40000, 0x2, 0x4, 0x2, 0x3, 0x8, 0x8, 0x3, 0x9, 0x3, 0x8, 0x7ff, 0x100, 0x5, 0x4, 0x10, 0x4, 0x40000000, 0xffffffee, 0x7ff, 0x2, 0x5, 0x64, 0x2, 0x6, 0xffff, 0x800, 0x8000, 0x2, 0xffffffff, 0x7de, 0x3, 0xe, 0x0, 0x1, 0x6a9, 0x2d, 0x5, 0x9, 0x200, 0x800, 0x6ac, 0x5d1, 0x7, 0x8, 0xd8c, 0x4, 0xfffffedb, 0x9, 0x8, 0xf, 0x6b, 0x6, 0x3, 0x1, 0x1ff, 0x40, 0x584, 0x800, 0x9, 0x5, 0x8, 0xffffffff, 0x4, 0x2, 0x1, 0x7, 0x4ee, 0x1, 0x0, 0x432, 0x62, 0x5, 0xc, 0xacd, 0x31, 0x2, 0x2, 0x7, 0x3, 0x2, 0x0, 0x6, 0x4, 0x0, 0x5, 0x4, 0x786a, 0x3, 0x8, 0x0, 0xfffffffa, 0x1000, 0x3, 0x6, 0x7, 0x6, 0x2, 0x7, 0xadf7, 0x9, 0x10000, 0x8, 0x8, 0x2, 0x7, 0xc, 0x200, 0x3, 0x0, 0xfffffffd, 0x1, 0x3, 0x1, 0x2, 0x7, 0x5, 0x4, 0x8aa, 0x3, 0x55, 0x80000001, 0x2, 0x9, 0x8, 0x7, 0xfff, 0x101, 0x5, 0x9, 0xd16, 0x4, 0x7f, 0x8001, 0x77a3, 0x1, 0xc1, 0x7f, 0x2, 0x7, 0x7, 0x3, 0x81, 0x3, 0x6, 0x9, 0x4, 0x10001, 0x1, 0x9, 0x5, 0x5a, 0x5, 0x0, 0x4a, 0x5, 0x4, 0x1, 0xe7, 0x5, 0x1, 0xec, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) 2m0.523660577s ago: executing program 1 (id=5738): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$eJzs3UFsHNd9B+D/G+2KSxmtmDhRndQuNm2RyorlypJiKlbhrGqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESAng8XMvqVWNGnToihR0vfZ0m939r2Z9+atZ2hBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/+/K5E8+l+90KAOBeujD21RMn3f8B4JFyyf//AwAAAAAAAAAAAADAfpeiiMcjxdyFtTRRve9qnO/Ub9wcHxndutpgqmoeqMqXvxrPnTx1+ovPD5/p5fnOzIfUv9s+G6+OXTrXfGn2+tz81MLC1GRzfKZzZXZyasd72G39zY5VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dOxWkUZ/+dodN6RruxkeB6OI45Hime/9LLUjoojdn4vGvR37zQarThyrOjE+Mlp1ZLrTnlksP7zYOxFFRLOvUqt3jrYei6jV72kftteKWCqbXzb4WNm9sbn2fPvy9FTzYnt+sbPYmZ25mLqtLfvTjCLOpIjliFgd+ODu6lFELVJ85/BauhwRB3rn4QvVxODt21HsYR93oGxnsx6xXDwAY7aPDUQRr0SKn799NK7k60x1rfl8xCtl/jDizTJfjEjlF+N0xLtbfI94MNWiiL8ox//sWpqsrge968r5rzW/MnN1tq9s77ryMe8PH7hS3Kf7w+CmvDf2+bWpEUW0qyv+WrrzH3YAAAAAAAAAAAAAAAAAuNsGo4jPRIqX/+2PqnnFUc1LP3x2+PeGfql/zvgTH7GfsuyzEbFU7GxO7sE8MfBiupjSfZ5L/ChrRBF/nOf/fet+NwYAAAAAAAAAAAAAAAAAAOCRVsRPI8UL7xxNy9G/pnhn5lrzUvvydHdV2N7av70109fX19ebqZutnBM5l3Iu51zJudrNat5/Vb/I9XNO5FzKuZxzJedqzjiQ6+ds5ZzIuZRzOedKztWcUcv1c7ZyTuRcyrmccyXnas7YJ2v3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TIoo4v1I8e1vrKVIEdGKmIhurgzc79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMT3I0Xz91sb22oRkap/u46Wv52O1sEyPxmt4TJfjNa5nO0qa61v3Yf2szv1VMRPIsVA462NAc/jX+++2/gaxJvfvPXus7VuHuh9OPTewGNHDp8dHv21J7Z7nbZqwLHznZkbN5vjI6OjY32ba/non+zbNpSPW9ydrhMRC6+/8Vp7enpq/s5flF+BbT5aX1//0/Iouz3EPnmRatv29JF8UQ7tPmjGHnawtqPC9X3Q1D0ZXB525f3/3Ujx2+/8R++GX93/axslNu7w8Ys/uXX/f2HzjnZ4/69trpfv/+U9fav7/+N9217IP43UaxGNxetz9SMRjYXX3zjeud6+NnVtaub0iRNfGh7+0qkT9YMRjaud6am+V7s/VwAAAAAAAAAAAAAAAAD3VCriy5Gi/ZO11IyIm9V8raGzw08ff+pAHKjmW902b/vVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu30cI1qutf4yOiedOYjDe5x+wcbL83OvT7fufYHi1t+fqhx7vLC4nz7ytYfx2AUEa3+LceqBo+PjFaNnu60Z6qqF7ecTP/x1VMR/xkprpxups/lbXn+/+YZ/rfN/1/avKM9mv//ib5t5TFTKuIXkeK3/vKJ+FzVzkPxgXOWy/1tpDh25slcLg6W5Xpt6D5XoDszsCz7v5HiH99/cqm/bG8+5OO3yj634xP7gCjH/3Ck+P6ffzd+PW+7/fkPW4//oc072qPx/1TftkO3Pa9g110nj//xSPHi42/Fb+RtH/b8j96zN47mwhvP59ij8f9037ahfNzfvDtdBwAAAAAAAAAAeKDVUxF/Fyl+NFpLz+dtO/n7f5Obd7RHf//rV/q2Td6d9Yo+8sWuTyoAAAAA7BP1VMRPI8W1xbc25lDfPv+7b/7n79ya/zmSNn1a/TnfL1fPDbibf/7Xbygfd2L33QYAAAAAAAAAAAAAAAAAAIB9JaUins/rqU9U8/knt11PfSVSvPzfz+Ry6UhZrrcO/FD1e+PC7Mzxc9PTs1fai+3L01PNsbn2lamy7qcixdrfPJnrFtX66r315rtrvDdqEVGtxT4fKUb/vle2uxZ7b23y7nrg3bXYy7KfiBT/9Q+3l+2tY/3pW2VPlmX/OlJ8/Z+2LnvkVtlTZdnvRooff73ZK3uoLNt7Pmr3maSNP4yIZ6/MFnswKgAAAAAAAAAAAAAAAAAAADxq6qmIP4sU/3N9eWMuf17/v973tvLmN/vW+9/kZrXO/1C1/v92r+9k/f/quQJL2x0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTimKeCNSzF1YSysD5fuuxvnOzI2b4yOjW1cbTFXNA1X58lfjuZOnTn/x+eEzvfzw+nfbZ+LVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu14D9vXb9xRi45VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dKyvTK1+R0feUtpm+8Eo4q8ixTPf+1n60UBEER96LnbkI747e22w6sSxqhPjI6NVR6Y77ZnF8sOLvRNRRDT7KrV65+gejMWutCIGyuaXDT5Wdm9srj3fvjw91bzYnl/sLHZmZy6mbmvL/jSjiDMpYjkiVgc+uLt6FPFapPjO4bX0zwMRB3rn4QsXxr564uT27Sj2sI87ULazWY9YLh6AMdvHBqKIH0SKn799NP5lIKIW3V/x+YhXyvxhxJvRHe9UfjFOR7y7xfeIB1Mtivi/cvzPrqW3B8rrQe+6cv5rza/MXJ3tK9u7ruyr+8MP/v3j1hi8G4fd5Mvb/pCwz69NjSjix9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41UrzwztFUzQ/emFPcmbnWvNS+PN2d1teb+9ebM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMA7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjH0ydw8AAAAAAAAAAAAAAAAAAHi4FNU/Kb79jbW0PtBdX3oiurliPdCH3v8HAAD//z/B9Iw=") syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x1c3, 0x2) 1m59.937577197s ago: executing program 1 (id=5745): r0 = inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x281) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m59.271337904s ago: executing program 1 (id=5751): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m58.153146639s ago: executing program 1 (id=5761): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m57.189884036s ago: executing program 1 (id=5779): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4, @private=0xa010102}, 0x10) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1m56.520339515s ago: executing program 41 (id=5779): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4, @private=0xa010102}, 0x10) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1m51.845889185s ago: executing program 7 (id=5807): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) 1m51.286601513s ago: executing program 7 (id=5811): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 1m50.583850299s ago: executing program 7 (id=5814): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') 1m49.880339758s ago: executing program 7 (id=5819): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m49.095668669s ago: executing program 8 (id=5834): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x10) 1m48.890358827s ago: executing program 7 (id=5825): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 1m48.566830094s ago: executing program 8 (id=5828): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) fallocate(r0, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x800, 0x0, 0xfffffffffdffffff}) 1m47.896500362s ago: executing program 7 (id=5832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 1m47.863918263s ago: executing program 8 (id=5835): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r0) 1m47.379266604s ago: executing program 42 (id=5832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 1m47.280452284s ago: executing program 8 (id=5839): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m46.356775548s ago: executing program 8 (id=5843): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000600), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff0a, 0x0) 1m45.359932959s ago: executing program 8 (id=5846): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20055}, 0x0) 1m45.062052912s ago: executing program 43 (id=5846): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20055}, 0x0) 53.768120658s ago: executing program 0 (id=6233): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000980)=""/4128, 0x1020, 0x0) 52.840354374s ago: executing program 0 (id=6240): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 51.562377526s ago: executing program 0 (id=6248): setreuid(0xffffffffffffffff, 0xee01) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 51.206254427s ago: executing program 0 (id=6250): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 50.764654285s ago: executing program 0 (id=6254): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000240)=0x100, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f00000004c0)={0x2c, 0x1, r3, 0x3c, r2}, 0x10) 50.160302319s ago: executing program 0 (id=6261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f00000003c0)=0x3f9, 0x2) 49.509197452s ago: executing program 44 (id=6261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f00000003c0)=0x3f9, 0x2) 11.876541576s ago: executing program 5 (id=6536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44000) 11.052888726s ago: executing program 5 (id=6542): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@local, 0x40, r3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xfe, r3}, [@IFA_FLAGS={0x8, 0x8, 0x608}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) 10.8605118s ago: executing program 5 (id=6545): mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./tracefs\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracefs/dynamic_events\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000002980)='e:my', 0x4) 10.58978566s ago: executing program 5 (id=6548): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 10.311434181s ago: executing program 5 (id=6550): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noflush_merge}, {}, {@acl}, {@alloc_mode_reuse}, {@errors_continue}, {@disable_roll_forward}, {@background_gc_on}, {@noinline_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@errors_remount}, {@noinline_dentry}]}, 0x1, 0x550e, &(0x7f00000079c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658a"], 0xcc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2001, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 10.229160688s ago: executing program 3 (id=6552): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x0, 0xf, 0x69, "38d463c3c8480d42dc104fb7a3beb8c07ab2c52405934f90f272e40c56021eb60c92f5fa85bb23326694e068583de2f6baa56e2f814b43bbff249a206d9e959ea010e98fc1da8ea9b693ccd4bf1b2b7569b48e6b9b58f962448803559ec716106d016fe79ace7fd77b"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x81, 0x2, '\ai'}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "bf"}, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x1, '6'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "5a9b3e"}}) 6.639442709s ago: executing program 3 (id=6569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000000280)='27', 0x2) fsopen(&(0x7f0000000240)='erofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 6.631657731s ago: executing program 5 (id=6570): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000003c0), &(0x7f0000001500)=@udp6=r1, 0x1}, 0x20) 6.452325246s ago: executing program 4 (id=6572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000004500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.973570742s ago: executing program 45 (id=6570): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000003c0), &(0x7f0000001500)=@udp6=r1, 0x1}, 0x20) 5.944896302s ago: executing program 4 (id=6577): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) write(r0, 0x0, 0x0) 5.517467689s ago: executing program 3 (id=6580): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 5.382979966s ago: executing program 4 (id=6582): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r2 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) inotify_rm_watch(r2, r1) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) 4.785594106s ago: executing program 4 (id=6587): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xf72, 0x30, 0x2, 0x7, 0x20d, 0xe, 0xa, 0xaf, 0x200, 0x8, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.318651286s ago: executing program 3 (id=6588): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002b00)={0x1, &(0x7f0000002b40)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002b80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002bc0)='./dev\x00', &(0x7f0000002c00)='devtmpfs\x00', 0x1000000, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000002c40)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000002c80)='./dev/ttyUSB0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.899834221s ago: executing program 2 (id=6590): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x1, 0x2, 0x2, 0x7}], 0x10, 0xffff4fb5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 3.52116484s ago: executing program 2 (id=6592): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xff, 0x5e3, &(0x7f0000000ac0)="$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") link(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$security_evm(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001300), 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000300), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 2.88874607s ago: executing program 2 (id=6595): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000040)=ANY=[], 0x1, 0x1522, &(0x7f00000002c0)="$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") unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000005c0)=""/201, 0xc9}], 0x2) 2.559876848s ago: executing program 6 (id=6597): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}}) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x5, 0x18e, &(0x7f0000000700)="$eJzs299ummAYx/EfCurcZtzcTpYdkOxgO5lOzf54tt3DbsAoM0ZcTe2JpknTi+gF9KwXV5P2BmoDERqxTRMrYPX7OeLHI/CivviQiADsLVu2DBmyvPCxUD6pGGkPCUBC5pJu5gD2U/bq3rXetQHATpv9kUaSLq+PO8pa0fbgrCTpd1DP5FZeMDuVPpiLupFXIdpfnEufg+2NF6sNSFkqhvXiStnb/5dPwfFf6pVeqyTvHuWN3i7q3XD7909th4C9YqgazUsrMvrXd51vYbb8XA9zzs+NSG6GOe/naufA7cZ1CgDWlHlk/mcj89+MzH8Az9d4Mh20Xdc53N4Fw5S2YBiT6SDJYeQkxX8sO8n30FY6H1xw15n692ejC+ZG9nNhPVRK+cIEIHa1o+GoNp5Mv/aH7Z7Tc/43fjVaP5rf6z9bNb/zz2up/wewO+5+9NMeCQAAAAAAAAAAAAAAWFdF79IeAgAAAICE+P///RvvE0tpnyMAAAAAAAAAAAAAAAAAAACwK24DAAD//3/aFdo=") ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./debug\x00', 0x1ff) 2.350523155s ago: executing program 9 (id=6598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20) 2.234025196s ago: executing program 2 (id=6599): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x3) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400640) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x20100a, 0x0, 0x38000}) 2.055254001s ago: executing program 6 (id=6600): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0xa8d1) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 2.051347356s ago: executing program 9 (id=6601): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) 1.854389736s ago: executing program 2 (id=6602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="15", 0x1}], 0x1}}], 0x2, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 1.847895425s ago: executing program 6 (id=6603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44000) 1.589063182s ago: executing program 4 (id=6604): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xffffffff, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 1.588646128s ago: executing program 9 (id=6605): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x2, 0xc6, 0xc701}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r2, &(0x7f0000000500)}, 0x20) 1.527830816s ago: executing program 6 (id=6606): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000880)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) 1.273299943s ago: executing program 4 (id=6607): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.273040572s ago: executing program 9 (id=6608): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000001080)={{&(0x7f00005a0000/0x1000)=nil, 0x1000}, 0x1}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r1, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) 1.224422536s ago: executing program 3 (id=6609): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) 965.730855ms ago: executing program 6 (id=6610): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1df) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0xf000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 965.581875ms ago: executing program 9 (id=6611): r0 = open(&(0x7f0000000900)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000940), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = landlock_create_ruleset(&(0x7f0000000a80)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) 793.227341ms ago: executing program 2 (id=6612): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}}) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x5, 0x18e, &(0x7f0000000700)="$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") ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./debug\x00', 0x1ff) 643.366475ms ago: executing program 3 (id=6613): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xffffffffffffff6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40009}, 0x10) 595.211429ms ago: executing program 9 (id=6614): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$P9_RGETLOCK(r2, 0x0, 0xffffff20) write(r2, &(0x7f0000000100)="af", 0xfffffe00) write(r0, 0x0, 0x0) 0s ago: executing program 6 (id=6615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a9", 0x1}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000002c0)=""/187, 0xbb}], 0x1}, 0x9}], 0x1, 0x40000000, 0x0) kernel console output (not intermixed with test programs): : 0 PID: 24083 Comm: syz.0.5848 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 888.793769][T24083] Tainted: [L]=SOFTLOCKUP [ 888.793783][T24083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 888.793812][T24083] Call Trace: [ 888.793826][T24083] [ 888.793841][T24083] dump_stack_lvl+0x100/0x190 [ 888.793901][T24083] should_fail_ex.cold+0x5/0xa [ 888.793943][T24083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 888.793997][T24083] should_failslab+0xc2/0x120 [ 888.794049][T24083] __kmalloc_noprof+0xfc/0x840 [ 888.794087][T24083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 888.794135][T24083] ? lsm_blob_alloc+0x68/0x90 [ 888.794201][T24083] lsm_blob_alloc+0x68/0x90 [ 888.794260][T24083] security_sk_alloc+0x2d/0x290 [ 888.794303][T24083] sk_prot_alloc+0x1d1/0x2a0 [ 888.794365][T24083] sk_alloc+0x36/0xe80 [ 888.794411][T24083] pn_socket_create+0x22d/0x560 [ 888.794478][T24083] __sock_create+0x339/0x860 [ 888.794549][T24083] __sys_socket+0x14d/0x260 [ 888.794612][T24083] ? __pfx___sys_socket+0x10/0x10 [ 888.794690][T24083] __x64_sys_socket+0x72/0xb0 [ 888.794723][T24083] ? lockdep_hardirqs_on+0x7d/0x110 [ 888.794762][T24083] do_syscall_64+0x123/0x790 [ 888.794810][T24083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.794851][T24083] RIP: 0033:0x7f741779e559 [ 888.794880][T24083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.794918][T24083] RSP: 002b:00007f7418612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 888.794955][T24083] RAX: ffffffffffffffda RBX: 00007f7417a25fa0 RCX: 00007f741779e559 [ 888.794982][T24083] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 888.795005][T24083] RBP: 00007f7417835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 888.795030][T24083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.795055][T24083] R13: 00007f7417a26038 R14: 00007f7417a25fa0 R15: 00007ffd4176ad18 [ 888.795112][T24083] [ 888.909745][ T1383] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.043590][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5850'. [ 889.047995][T18644] Bluetooth: hci1: command tx timeout [ 889.112875][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5850'. [ 889.193576][ T1383] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.338627][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 889.345418][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 889.347065][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 889.372678][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 889.374991][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 889.449554][T23834] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 889.488288][T23834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.604107][ T1383] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.653453][T23834] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 889.673408][T23834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.676022][T23834] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 889.702353][T23834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.703390][T23834] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 889.747512][T23834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.926361][ T1383] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.971850][T24118] input: syz0 as /devices/virtual/input/input49 [ 890.032583][T24054] rxe_eth0 speed is unknown, defaulting to 1000 [ 890.426167][T23834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.547584][T23834] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.629938][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.630055][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.759750][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.759875][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.786897][ T1383] bond1: left allmulticast mode [ 890.786987][ T1383] bond1: left promiscuous mode [ 890.787234][ T1383] bridge0: port 3(bond1) entered disabled state [ 890.821676][ T1383] bridge_slave_1: left allmulticast mode [ 890.821707][ T1383] bridge_slave_1: left promiscuous mode [ 890.821896][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.836056][ T1383] bridge_slave_0: left allmulticast mode [ 890.836085][ T1383] bridge_slave_0: left promiscuous mode [ 890.836309][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.129877][T18644] Bluetooth: hci1: command tx timeout [ 891.451874][T18644] Bluetooth: hci3: command tx timeout [ 891.464235][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.467246][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.487396][ T1383] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 891.500907][ T1383] bond0 (unregistering): (slave vlan1): Releasing backup interface [ 891.502567][ T1383] bond0 (unregistering): Released all slaves [ 891.510648][ T1383] bond1 (unregistering): Released all slaves [ 892.089685][T24096] rxe_eth0 speed is unknown, defaulting to 1000 [ 892.583776][T24180] syz.0.5871 (24180): attempted to duplicate a private mapping with mremap. This is not supported. [ 893.207731][T18644] Bluetooth: hci1: command tx timeout [ 893.267264][T24198] ip6gretap1: entered allmulticast mode [ 893.276554][T24198] batman_adv: batadv0: Adding interface: ip6gretap1 [ 893.276576][T24198] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.276627][T24198] batman_adv: batadv0: Interface activated: ip6gretap1 [ 893.333051][T24054] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.333160][T24054] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.333316][T24054] bridge_slave_0: entered allmulticast mode [ 893.414266][T24054] bridge_slave_0: entered promiscuous mode [ 893.418742][T24054] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.418857][T24054] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.419048][T24054] bridge_slave_1: entered allmulticast mode [ 893.494919][T24054] bridge_slave_1: entered promiscuous mode [ 893.533626][T18644] Bluetooth: hci3: command tx timeout [ 893.737514][T24204] syzkaller1: entered promiscuous mode [ 893.737548][T24204] syzkaller1: entered allmulticast mode [ 893.894047][T24054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.953871][ T1383] hsr_slave_0: left promiscuous mode [ 893.963970][ T1383] hsr_slave_1: left promiscuous mode [ 893.964675][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.964696][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.966890][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.966916][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.027671][ T1383] veth1_macvtap: left promiscuous mode [ 894.027716][ T1383] veth0_macvtap: left promiscuous mode [ 894.027855][ T1383] veth1_vlan: left promiscuous mode [ 894.027896][ T1383] veth0_vlan: left promiscuous mode [ 894.192348][T24220] loop3: detected capacity change from 0 to 40427 [ 894.194956][T24220] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 894.194985][T24220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 894.196550][T24220] F2FS-fs (loop3): invalid crc value [ 894.458663][T24220] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 894.522363][T24220] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 894.522402][T24220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 894.539190][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 894.574379][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 894.622369][T12863] syz-executor: attempt to access beyond end of device [ 894.622369][T12863] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 894.627127][T12863] CPU: 0 UID: 0 PID: 12863 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(lazy) [ 894.627186][T12863] Tainted: [L]=SOFTLOCKUP [ 894.627201][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 894.627225][T12863] Call Trace: [ 894.627239][T12863] [ 894.627258][T12863] dump_stack_lvl+0x100/0x190 [ 894.627328][T12863] f2fs_stop_checkpoint+0x5e6/0xb30 [ 894.627390][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.627440][T12863] ? errseq_set+0xe3/0x150 [ 894.627481][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.627537][T12863] f2fs_write_end_bio+0xef9/0x12d0 [ 894.627590][T12863] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 894.627637][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.627678][T12863] ? find_held_lock+0x2b/0x80 [ 894.627721][T12863] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 894.627757][T12863] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 894.627792][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.627836][T12863] f2fs_write_end_io+0xc8/0x240 [ 894.627882][T12863] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 894.627928][T12863] bio_endio+0x7ba/0x9c0 [ 894.627968][T12863] submit_bio_noacct+0x22a/0x2130 [ 894.628046][T12863] f2fs_submit_write_bio+0x133/0x330 [ 894.628108][T12863] __submit_merged_bio+0x330/0x7b0 [ 894.628155][T12863] ? rcu_is_watching+0x13/0xc0 [ 894.628201][T12863] __submit_merged_write_cond+0x3fe/0x510 [ 894.628258][T12863] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 894.628322][T12863] ? __pfx___might_resched+0x10/0x10 [ 894.628368][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.628403][T12863] ? folio_clear_dirty_for_io+0x178/0x960 [ 894.628455][T12863] f2fs_write_cache_pages+0x20e9/0x2630 [ 894.628510][T12863] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 894.628545][T12863] ? __kasan_check_byte+0x13/0x50 [ 894.628581][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.628618][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.628653][T12863] ? rcu_is_watching+0x13/0xc0 [ 894.628695][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.628730][T12863] ? __kasan_check_byte+0x13/0x50 [ 894.628766][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.628803][T12863] ? is_bpf_text_address+0x8a/0x1a0 [ 894.628838][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.628872][T12863] ? rcu_is_watching+0x13/0xc0 [ 894.628924][T12863] ? kernel_text_address+0x8d/0x100 [ 894.628969][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.629004][T12863] ? __kernel_text_address+0xd/0x30 [ 894.629100][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.629148][T12863] ? check_prev_add+0x354/0xe60 [ 894.629193][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.629235][T12863] ? rcu_is_watching+0x13/0xc0 [ 894.629281][T12863] f2fs_write_data_pages+0x799/0x16d0 [ 894.629330][T12863] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 894.629363][T12863] ? lock_acquire+0x1d1/0x380 [ 894.629401][T12863] ? do_writepages+0x4b5/0x600 [ 894.629445][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.629485][T12863] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 894.629522][T12863] do_writepages+0x278/0x600 [ 894.629573][T12863] ? __pfx_do_writepages+0x10/0x10 [ 894.629618][T12863] ? do_raw_spin_unlock+0x145/0x1e0 [ 894.629657][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.629692][T12863] ? _raw_spin_unlock+0x28/0x50 [ 894.629741][T12863] filemap_writeback+0x22d/0x2e0 [ 894.629791][T12863] ? __pfx_filemap_writeback+0x10/0x10 [ 894.629885][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.629919][T12863] ? find_held_lock+0x2b/0x80 [ 894.629961][T12863] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 894.629996][T12863] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 894.630029][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.630075][T12863] f2fs_sync_dirty_inodes+0x452/0x960 [ 894.630123][T12863] block_operations+0x2a6/0xfc0 [ 894.630168][T12863] ? __pfx_block_operations+0x10/0x10 [ 894.630260][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.630320][T12863] ? ktime_get+0x22c/0x320 [ 894.630358][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.630393][T12863] ? rcu_is_watching+0x13/0xc0 [ 894.630439][T12863] f2fs_write_checkpoint+0x58b/0x53e0 [ 894.630477][T12863] ? _raw_spin_unlock_irq+0x23/0x50 [ 894.630523][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.630558][T12863] ? _raw_spin_unlock_irq+0x2e/0x50 [ 894.630601][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.630636][T12863] ? __wait_for_common+0x1f3/0x4c0 [ 894.630663][T12863] ? __pfx_schedule_timeout+0x10/0x10 [ 894.630711][T12863] ? __pfx___wait_for_common+0x10/0x10 [ 894.630741][T12863] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 894.630776][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.630813][T12863] ? mark_held_locks+0x40/0x70 [ 894.630849][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.630884][T12863] ? rcu_is_watching+0x13/0xc0 [ 894.630924][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.630960][T12863] ? kthread_stop+0x280/0x630 [ 894.631003][T12863] kill_f2fs_super+0x3f1/0x4a0 [ 894.631037][T12863] ? __pfx_kill_f2fs_super+0x10/0x10 [ 894.631089][T12863] ? lockdep_hardirqs_on+0x7d/0x110 [ 894.631118][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.631154][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.631202][T12863] deactivate_locked_super+0xbd/0x130 [ 894.631252][T12863] deactivate_super+0xea/0x110 [ 894.631304][T12863] cleanup_mnt+0xb7/0x160 [ 894.631358][T12863] task_work_run+0x150/0x240 [ 894.631420][T12863] ? __pfx_task_work_run+0x10/0x10 [ 894.631477][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.631519][T12863] exit_to_user_mode_loop+0x1d8/0x700 [ 894.631555][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.631590][T12863] ? rcu_is_watching+0x13/0xc0 [ 894.631635][T12863] do_syscall_64+0x661/0x790 [ 894.631669][T12863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.631699][T12863] RIP: 0033:0x7ffaf3b9f797 [ 894.631723][T12863] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 894.631752][T12863] RSP: 002b:00007ffcc7d50c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 894.631781][T12863] RAX: 0000000000000000 RBX: 00007ffaf3c34efb RCX: 00007ffaf3b9f797 [ 894.631801][T12863] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc7d50cd0 [ 894.631821][T12863] RBP: 00007ffcc7d50cd0 R08: 00007ffcc7d51cd0 R09: 00000000ffffffff [ 894.631841][T12863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc7d51d60 [ 894.631860][T12863] R13: 00007ffaf3c34efb R14: 00000000000da697 R15: 00007ffcc7d51da0 [ 894.631902][T12863] [ 894.637610][T12863] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 895.287644][T18644] Bluetooth: hci1: command tx timeout [ 895.309911][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 895.317068][T24054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.391097][T24230] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 895.496850][T24054] team0: Port device team_slave_0 added [ 895.513823][T24054] team0: Port device team_slave_1 added [ 895.610287][T18644] Bluetooth: hci3: command tx timeout [ 895.666679][T24054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.666707][T24054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.666756][T24054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.712036][T24054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.712060][T24054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.712107][T24054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.141630][ T1383] IPVS: stop unused estimator thread 0... [ 896.170890][T24054] hsr_slave_0: entered promiscuous mode [ 896.176721][T24054] hsr_slave_1: entered promiscuous mode [ 896.194958][T24054] debugfs: 'hsr0' already exists in 'hsr' [ 896.194988][T24054] Cannot create hsr debugfs directory [ 896.225082][T23834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.068071][T24096] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.068253][T24096] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.068425][T24096] bridge_slave_0: entered allmulticast mode [ 897.072245][T24096] bridge_slave_0: entered promiscuous mode [ 897.085381][T24096] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.087355][T24096] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.087525][T24096] bridge_slave_1: entered allmulticast mode [ 897.092084][T24096] bridge_slave_1: entered promiscuous mode [ 897.377867][T13021] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 897.424500][T24096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.431587][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 897.460005][T24096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.533147][T13021] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 897.537804][T13021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 897.537847][T13021] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 897.541513][T13021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 897.541551][T13021] usb 1-1: Product: syz [ 897.541579][T13021] usb 1-1: Manufacturer: syz [ 897.557869][T13021] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 897.561594][T24096] team0: Port device team_slave_0 added [ 897.590635][T13021] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 897.687629][T18644] Bluetooth: hci3: command tx timeout [ 897.831010][T24285] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode 7 is invalid [ 897.850837][ T1569] usb 1-1: USB disconnect, device number 36 [ 897.926282][ T1569] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 897.936501][ T1569] iuu_phoenix 1-1:1.0: device disconnected [ 897.974686][T24096] team0: Port device team_slave_1 added [ 898.198364][T24096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.198389][T24096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.198433][T24096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.272820][T24306] FAULT_INJECTION: forcing a failure. [ 898.272820][T24306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.273016][T24306] CPU: 0 UID: 0 PID: 24306 Comm: syz.3.5897 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 898.273074][T24306] Tainted: [L]=SOFTLOCKUP [ 898.273088][T24306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 898.273112][T24306] Call Trace: [ 898.273125][T24306] [ 898.273141][T24306] dump_stack_lvl+0x100/0x190 [ 898.273202][T24306] should_fail_ex.cold+0x5/0xa [ 898.273254][T24306] _copy_to_user+0x32/0xd0 [ 898.273298][T24306] __do_sys_mincore+0x2c2/0x6c0 [ 898.273362][T24306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.273420][T24306] do_syscall_64+0x123/0x790 [ 898.273468][T24306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.273508][T24306] RIP: 0033:0x7ffaf3b9e559 [ 898.273540][T24306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.273578][T24306] RSP: 002b:00007ffaf4a48028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 898.273615][T24306] RAX: ffffffffffffffda RBX: 00007ffaf3e25fa0 RCX: 00007ffaf3b9e559 [ 898.273643][T24306] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 898.273669][T24306] RBP: 00007ffaf3c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 898.273695][T24306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.273720][T24306] R13: 00007ffaf3e26038 R14: 00007ffaf3e25fa0 R15: 00007ffcc7d519a8 [ 898.273773][T24306] [ 898.608834][T24096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.608860][T24096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.608905][T24096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.699952][T23834] veth0_vlan: entered promiscuous mode [ 898.905126][T24096] hsr_slave_0: entered promiscuous mode [ 898.916759][T24096] hsr_slave_1: entered promiscuous mode [ 898.917797][T24096] debugfs: 'hsr0' already exists in 'hsr' [ 898.917825][T24096] Cannot create hsr debugfs directory [ 898.919824][T23834] veth1_vlan: entered promiscuous mode [ 899.213365][T24326] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 899.523203][T23834] veth0_macvtap: entered promiscuous mode [ 899.526717][T24054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 899.555792][T24054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 899.602471][T24054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 899.624758][T24054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 899.638283][T23834] veth1_macvtap: entered promiscuous mode [ 899.703990][T24054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 899.742607][T24054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 899.745748][T24054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 899.779192][T24054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 899.932629][T23834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.057096][T14002] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 900.136627][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5912'. [ 900.201402][T14002] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 900.206125][T14002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.365782][T24364] team0: Port device team_slave_0 removed [ 900.402396][T23834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.590101][ T1383] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.590356][ T1383] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.866199][ C1] usb 1-1: NFC: Received an invalid frame [ 900.922361][T14002] usb 1-1: NFC: Unable to get FW version [ 900.951157][T14002] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -5 [ 901.080999][T24386] usb 1-1: USB disconnect, device number 37 [ 901.190365][ T1383] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.197208][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.197238][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.197495][ T1472] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.429490][T24054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.473027][ T1374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.473054][ T1374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.594879][T24386] kernel read not supported for file /trace_pipe (pid: 24386 comm: kworker/1:6) [ 901.676427][T24054] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.825430][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.825562][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.068357][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.068485][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.116350][T24096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 902.165771][T24096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.209254][T24096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 902.260832][T24096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.281437][T24096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 902.312431][T24096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 902.337471][T24096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 902.380456][T24096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 902.472353][T24428] loop9: detected capacity change from 0 to 1024 [ 902.473650][T24428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 902.509260][T24428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0102] [ 902.509411][T24428] System zones: 0-1, 3-12 [ 902.539050][T24428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.596900][T24438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5931'. [ 902.645047][T24438] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.719863][T23834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.722726][T24438] bridge_slave_1 (unregistering): left allmulticast mode [ 902.722762][T24438] bridge_slave_1 (unregistering): left promiscuous mode [ 902.722967][T24438] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.802918][T24437] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 903.181491][T24096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.245008][T24096] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.279992][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.280085][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.333855][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.333972][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.525756][T24496] FAULT_INJECTION: forcing a failure. [ 904.525756][T24496] name failslab, interval 1, probability 0, space 0, times 0 [ 904.525818][T24496] CPU: 1 UID: 0 PID: 24496 Comm: syz.9.5945 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 904.525880][T24496] Tainted: [L]=SOFTLOCKUP [ 904.525896][T24496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 904.525921][T24496] Call Trace: [ 904.525935][T24496] [ 904.525951][T24496] dump_stack_lvl+0x100/0x190 [ 904.526015][T24496] should_fail_ex.cold+0x5/0xa [ 904.526061][T24496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 904.526117][T24496] should_failslab+0xc2/0x120 [ 904.526168][T24496] __kmalloc_noprof+0xfc/0x840 [ 904.526208][T24496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 904.526261][T24496] ? udp_init_sock+0x24e/0x450 [ 904.526317][T24496] udp_init_sock+0x24e/0x450 [ 904.526361][T24496] ? __pfx_udp_init_sock+0x10/0x10 [ 904.526412][T24496] inet_create+0x94c/0x1060 [ 904.526453][T24496] ? inet_create+0x94/0x1060 [ 904.526501][T24496] __sock_create+0x339/0x860 [ 904.526574][T24496] __sys_socket+0x14d/0x260 [ 904.526640][T24496] ? __pfx___sys_socket+0x10/0x10 [ 904.526722][T24496] __x64_sys_socket+0x72/0xb0 [ 904.526763][T24496] ? lockdep_hardirqs_on+0x7d/0x110 [ 904.526804][T24496] do_syscall_64+0x123/0x790 [ 904.526856][T24496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.526900][T24496] RIP: 0033:0x7f6df159e559 [ 904.526932][T24496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.526973][T24496] RSP: 002b:00007f6df23a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 904.527012][T24496] RAX: ffffffffffffffda RBX: 00007f6df1825fa0 RCX: 00007f6df159e559 [ 904.527040][T24496] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 904.527065][T24496] RBP: 00007f6df1635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 904.527091][T24496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.527117][T24496] R13: 00007f6df1826038 R14: 00007f6df1825fa0 R15: 00007ffd18f04538 [ 904.527171][T24496] [ 904.636068][T24054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.579025][T24096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.618886][T24527] use of bytesused == 0 is deprecated and will be removed in the future, [ 905.618911][T24527] use the actual size instead. [ 905.625343][T24531] FAULT_INJECTION: forcing a failure. [ 905.625343][T24531] name failslab, interval 1, probability 0, space 0, times 0 [ 905.625402][T24531] CPU: 0 UID: 0 PID: 24531 Comm: syz.3.5955 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 905.625455][T24531] Tainted: [L]=SOFTLOCKUP [ 905.625469][T24531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 905.625492][T24531] Call Trace: [ 905.625504][T24531] [ 905.625519][T24531] dump_stack_lvl+0x100/0x190 [ 905.625577][T24531] should_fail_ex.cold+0x5/0xa [ 905.625620][T24531] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.625681][T24531] should_failslab+0xc2/0x120 [ 905.625741][T24531] __kmalloc_noprof+0xfc/0x840 [ 905.625786][T24531] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.625833][T24531] ? trace_kmalloc+0xeb/0x110 [ 905.625880][T24531] ? lsm_blob_alloc+0x68/0x90 [ 905.625954][T24531] lsm_blob_alloc+0x68/0x90 [ 905.626015][T24531] security_sk_alloc+0x2d/0x290 [ 905.626062][T24531] sk_prot_alloc+0x12a/0x2a0 [ 905.626126][T24531] sk_alloc+0x36/0xe80 [ 905.626173][T24531] tun_chr_open+0x82/0x5e0 [ 905.626210][T24531] ? __pfx_misc_open+0x10/0x10 [ 905.626274][T24531] ? __pfx_tun_chr_open+0x10/0x10 [ 905.626321][T24531] misc_open+0x26d/0x450 [ 905.626358][T24531] ? __pfx_misc_open+0x10/0x10 [ 905.626423][T24531] chrdev_open+0x234/0x6a0 [ 905.626470][T24531] ? __pfx_apparmor_file_open+0x10/0x10 [ 905.626526][T24531] ? __pfx_chrdev_open+0x10/0x10 [ 905.626575][T24531] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.626623][T24531] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 905.626695][T24531] do_dentry_open+0x6ab/0x14d0 [ 905.626734][T24531] ? __pfx_chrdev_open+0x10/0x10 [ 905.626783][T24531] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.626838][T24531] vfs_open+0x82/0x3f0 [ 905.626888][T24531] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.626944][T24531] path_openat+0x1a23/0x2450 [ 905.627000][T24531] ? __pfx_path_openat+0x10/0x10 [ 905.627063][T24531] do_file_open+0x20e/0x430 [ 905.627116][T24531] ? __pfx_do_file_open+0x10/0x10 [ 905.627200][T24531] ? _raw_spin_unlock+0x28/0x50 [ 905.627258][T24531] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.627306][T24531] ? alloc_fd+0x471/0x7a0 [ 905.627376][T24531] do_sys_openat2+0x10f/0x1e0 [ 905.627429][T24531] ? __pfx_do_sys_openat2+0x10/0x10 [ 905.627485][T24531] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 905.627544][T24531] __x64_sys_openat+0x12d/0x210 [ 905.627599][T24531] ? __pfx___x64_sys_openat+0x10/0x10 [ 905.627663][T24531] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.627721][T24531] do_syscall_64+0x123/0x790 [ 905.627766][T24531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.627807][T24531] RIP: 0033:0x7ffaf3b9e559 [ 905.627838][T24531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.627876][T24531] RSP: 002b:00007ffaf4a48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 905.627915][T24531] RAX: ffffffffffffffda RBX: 00007ffaf3e25fa0 RCX: 00007ffaf3b9e559 [ 905.627942][T24531] RDX: 0000000000002241 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 905.627968][T24531] RBP: 00007ffaf3c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 905.627994][T24531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.628019][T24531] R13: 00007ffaf3e26038 R14: 00007ffaf3e25fa0 R15: 00007ffcc7d519a8 [ 905.628073][T24531] [ 906.201329][T24096] veth0_vlan: entered promiscuous mode [ 906.348679][T24096] veth1_vlan: entered promiscuous mode [ 906.466360][T24538] loop3: detected capacity change from 0 to 256 [ 906.549547][T24054] veth0_vlan: entered promiscuous mode [ 906.673660][T24054] veth1_vlan: entered promiscuous mode [ 906.700227][T24096] veth0_macvtap: entered promiscuous mode [ 906.751502][T24096] veth1_macvtap: entered promiscuous mode [ 906.781580][T24096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.799143][T24096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.937245][ T9339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.003779][ T1506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.039419][ T1045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.067401][ T9339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.076501][T24054] veth0_macvtap: entered promiscuous mode [ 907.250255][T24054] veth1_macvtap: entered promiscuous mode [ 907.381567][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.381601][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.499267][T24054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.542116][T24054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.690695][ T1472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.691735][ T1472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.691800][ T1472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.691860][ T1472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.701025][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.701052][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.084873][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.084908][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.177374][ T5858] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 908.246746][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.246780][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.338288][ T5858] usb 10-1: Using ep0 maxpacket: 8 [ 908.339220][ T5858] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 908.343485][ T5858] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 908.343538][ T5858] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 908.343582][ T5858] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 908.343623][ T5858] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.343685][ T5858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.591377][ T5858] usb 10-1: GET_CAPABILITIES returned 0 [ 908.591441][ T5858] usbtmc 10-1:16.0: can't read capabilities [ 908.843892][T24385] usb 10-1: USB disconnect, device number 20 [ 908.979205][ T31] audit: type=1326 audit(1700000852.410:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24595 comm="syz.4.5836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25d019e559 code=0x0 [ 909.142177][T24604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5970'. [ 909.492555][T24618] loop2: detected capacity change from 0 to 128 [ 909.515009][T24618] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 910.255077][T24629] loop3: detected capacity change from 0 to 40427 [ 910.265642][T24629] F2FS-fs (loop3): invalid crc value [ 910.535133][T24629] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 910.609643][T24629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 910.728040][ T5858] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 910.763017][T24659] loop9: detected capacity change from 0 to 2048 [ 910.802263][T24659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.880073][ T5858] usb 3-1: not running at top speed; connect to a high speed hub [ 910.880120][ T5858] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 910.881384][ T5858] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 910.881440][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.918630][ T5858] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 910.936681][T12863] syz-executor: attempt to access beyond end of device [ 910.936681][T12863] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 910.953889][T12863] CPU: 1 UID: 0 PID: 12863 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(lazy) [ 910.953946][T12863] Tainted: [L]=SOFTLOCKUP [ 910.953960][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 910.953982][T12863] Call Trace: [ 910.953996][T12863] [ 910.954011][T12863] dump_stack_lvl+0x100/0x190 [ 910.954073][T12863] f2fs_stop_checkpoint+0x5e6/0xb30 [ 910.954134][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.954182][T12863] ? errseq_set+0xe3/0x150 [ 910.954223][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.954277][T12863] f2fs_write_end_bio+0xef9/0x12d0 [ 910.954353][T12863] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 910.954416][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.954470][T12863] ? find_held_lock+0x2b/0x80 [ 910.954528][T12863] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 910.954576][T12863] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 910.954623][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.954679][T12863] f2fs_write_end_io+0xc8/0x240 [ 910.954740][T12863] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 910.954803][T12863] bio_endio+0x7ba/0x9c0 [ 910.954856][T12863] submit_bio_noacct+0x22a/0x2130 [ 910.954936][T12863] f2fs_submit_write_bio+0x133/0x330 [ 910.954997][T12863] __submit_merged_bio+0x330/0x7b0 [ 910.955060][T12863] ? rcu_is_watching+0x13/0xc0 [ 910.955122][T12863] __submit_merged_write_cond+0x3fe/0x510 [ 910.955197][T12863] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 910.955276][T12863] ? __pfx___might_resched+0x10/0x10 [ 910.955352][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.955400][T12863] ? folio_clear_dirty_for_io+0x178/0x960 [ 910.955459][ T5858] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 910.955469][T12863] f2fs_write_cache_pages+0x20e9/0x2630 [ 910.955540][T12863] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 910.955586][T12863] ? __kasan_check_byte+0x13/0x50 [ 910.955635][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.955685][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.955731][T12863] ? rcu_is_watching+0x13/0xc0 [ 910.955791][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.955841][T12863] ? __kasan_check_byte+0x13/0x50 [ 910.955888][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.955936][T12863] ? is_bpf_text_address+0x8a/0x1a0 [ 910.955982][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.956029][T12863] ? rcu_is_watching+0x13/0xc0 [ 910.956097][T12863] ? kernel_text_address+0x8d/0x100 [ 910.956157][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.956203][T12863] ? __kernel_text_address+0xd/0x30 [ 910.956331][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.956379][T12863] ? check_prev_add+0x354/0xe60 [ 910.956423][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.956470][T12863] ? rcu_is_watching+0x13/0xc0 [ 910.956531][T12863] f2fs_write_data_pages+0x799/0x16d0 [ 910.956593][T12863] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 910.956638][T12863] ? lock_acquire+0x1d1/0x380 [ 910.956688][T12863] ? do_writepages+0x4b5/0x600 [ 910.956748][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.956802][T12863] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 910.956852][T12863] do_writepages+0x278/0x600 [ 910.956920][T12863] ? __pfx_do_writepages+0x10/0x10 [ 910.956982][T12863] ? do_raw_spin_unlock+0x145/0x1e0 [ 910.957036][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.957085][T12863] ? _raw_spin_unlock+0x28/0x50 [ 910.957149][T12863] filemap_writeback+0x22d/0x2e0 [ 910.957218][T12863] ? __pfx_filemap_writeback+0x10/0x10 [ 910.957348][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.957397][T12863] ? find_held_lock+0x2b/0x80 [ 910.957453][T12863] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 910.957503][T12863] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 910.957549][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.957610][T12863] f2fs_sync_dirty_inodes+0x452/0x960 [ 910.957675][T12863] block_operations+0x2a6/0xfc0 [ 910.957733][T12863] ? __pfx_block_operations+0x10/0x10 [ 910.957835][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.957887][T12863] ? ktime_get+0x22c/0x320 [ 910.957933][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.957981][T12863] ? rcu_is_watching+0x13/0xc0 [ 910.958043][T12863] f2fs_write_checkpoint+0x58b/0x53e0 [ 910.958094][T12863] ? _raw_spin_unlock_irq+0x23/0x50 [ 910.958155][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.958199][T12863] ? _raw_spin_unlock_irq+0x2e/0x50 [ 910.958255][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.958302][T12863] ? __wait_for_common+0x1f3/0x4c0 [ 910.958345][T12863] ? __pfx_schedule_timeout+0x10/0x10 [ 910.958407][T12863] ? __pfx___wait_for_common+0x10/0x10 [ 910.958447][T12863] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 910.958495][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.958542][T12863] ? mark_held_locks+0x40/0x70 [ 910.958591][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.958639][T12863] ? rcu_is_watching+0x13/0xc0 [ 910.958692][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.958740][T12863] ? kthread_stop+0x280/0x630 [ 910.958791][T12863] kill_f2fs_super+0x3f1/0x4a0 [ 910.958834][T12863] ? __pfx_kill_f2fs_super+0x10/0x10 [ 910.958895][T12863] ? lockdep_hardirqs_on+0x7d/0x110 [ 910.958930][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.958975][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.959035][T12863] deactivate_locked_super+0xbd/0x130 [ 910.959103][T12863] deactivate_super+0xea/0x110 [ 910.959168][T12863] cleanup_mnt+0xb7/0x160 [ 910.959229][T12863] task_work_run+0x150/0x240 [ 910.959290][T12863] ? __pfx_task_work_run+0x10/0x10 [ 910.959360][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.959417][T12863] exit_to_user_mode_loop+0x1d8/0x700 [ 910.959465][T12863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.959517][T12863] ? rcu_is_watching+0x13/0xc0 [ 910.959577][T12863] do_syscall_64+0x661/0x790 [ 910.959623][T12863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.959664][T12863] RIP: 0033:0x7ffaf3b9f797 [ 910.959696][T12863] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 910.959734][T12863] RSP: 002b:00007ffcc7d50c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 910.959772][T12863] RAX: 0000000000000000 RBX: 00007ffaf3c34efb RCX: 00007ffaf3b9f797 [ 910.959798][T12863] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc7d50cd0 [ 910.959823][T12863] RBP: 00007ffcc7d50cd0 R08: 00007ffcc7d51cd0 R09: 00000000ffffffff [ 910.959850][T12863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc7d51d60 [ 910.959875][T12863] R13: 00007ffaf3c34efb R14: 00000000000de5a6 R15: 00007ffcc7d51da0 [ 910.959928][T12863] [ 911.096515][T12863] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 911.446003][ T5858] usb 3-1: USB disconnect, device number 32 [ 911.601608][ T5858] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 911.602456][ T5858] cyberjack 3-1:1.0: device disconnected [ 911.970391][ T31] audit: type=1326 audit(1700000855.400:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24678 comm="syz.9.5992" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6df159e559 code=0x0 [ 912.474853][T24385] hid_parser_main: 79 callbacks suppressed [ 912.474892][T24385] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 912.504986][T24385] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 913.738983][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6014'. [ 913.741782][T24747] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.812388][T24747] bridge_slave_1 (unregistering): left allmulticast mode [ 913.812426][T24747] bridge_slave_1 (unregistering): left promiscuous mode [ 913.812522][T24747] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.951941][T24772] loop3: detected capacity change from 0 to 256 [ 915.419722][T24783] netlink: 'syz.3.6026': attribute type 10 has an invalid length. [ 915.472753][T24783] syz_tun: entered promiscuous mode [ 915.898416][T24793] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6030'. [ 915.904065][T24793] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.941620][T24793] bridge_slave_1 (unregistering): left allmulticast mode [ 915.941673][T24793] bridge_slave_1 (unregistering): left promiscuous mode [ 915.951073][T24793] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.775383][T24823] loop9: detected capacity change from 0 to 32768 [ 916.780569][T24823] (syz.9.6038,24823,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 916.780906][T24823] (syz.9.6038,24823,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 916.802400][T24823] JBD2: Ignoring recovery information on journal [ 916.853133][T24823] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 917.424012][T23834] ocfs2: Unmounting device (7,9) on (node local) [ 918.096245][T24857] loop9: detected capacity change from 0 to 4096 [ 918.222156][T24866] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 918.297733][T24860] can0: slcan on pts0. [ 918.743320][T24855] can0 (unregistered): slcan off pts0. [ 918.866659][T24882] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6057'. [ 919.099247][T24893] fuse: fd is not a fuse device [ 919.231639][ T5858] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 919.377059][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 919.380375][ T5858] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 919.385550][ T5858] usb 3-1: config 32 has an invalid interface number: 85 but max is 0 [ 919.385587][ T5858] usb 3-1: config 32 has no interface number 0 [ 919.385640][ T5858] usb 3-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 919.385685][ T5858] usb 3-1: config 32 interface 85 has no altsetting 0 [ 919.446882][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.447907][ T5858] usb 3-1: Product: syz [ 919.447962][ T5858] usb 3-1: Manufacturer: syz [ 919.447991][ T5858] usb 3-1: SerialNumber: syz [ 920.157565][T24385] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 920.255485][ T5858] appletouch 3-1:32.85: Geyser mode initialized. [ 920.266754][ T5858] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.85/input/input50 [ 920.284728][ C1] appletouch 3-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 920.311317][T24385] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 920.317893][T24385] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.317943][T24385] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 920.323886][T24385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.323926][T24385] usb 4-1: Product: syz [ 920.323970][T24385] usb 4-1: Manufacturer: syz [ 920.323997][T24385] usb 4-1: SerialNumber: syz [ 920.330050][T24920] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 920.343596][T24385] symbolserial 4-1:1.0: symbol converter detected [ 920.368876][T24385] usb 4-1: symbol converter now attached to ttyUSB0 [ 920.641281][T24386] usb 4-1: USB disconnect, device number 49 [ 920.657281][T24386] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 920.657935][T24386] symbolserial 4-1:1.0: device disconnected [ 920.851131][T24946] ecryptfs_get_tree: kern_path() failed [ 920.875753][T24946] Reading sb failed; rc = [-2] [ 921.055471][T24386] usb 3-1: USB disconnect, device number 33 [ 921.102473][T24386] appletouch 3-1:32.85: input: appletouch disconnected [ 921.182780][T24959] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 921.184821][ T5858] team_slave_0: entered promiscuous mode [ 921.184866][ T5858] team_slave_1: entered promiscuous mode [ 921.200366][T24957] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 921.200391][T24957] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 921.200424][T24957] CIFS mount error: No usable UNC path provided in device string! [ 921.200424][T24957] [ 921.200654][T24957] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 921.434581][T24964] FAULT_INJECTION: forcing a failure. [ 921.434581][T24964] name failslab, interval 1, probability 0, space 0, times 0 [ 921.434638][T24964] CPU: 1 UID: 0 PID: 24964 Comm: syz.9.6082 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 921.434694][T24964] Tainted: [L]=SOFTLOCKUP [ 921.434710][T24964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 921.434734][T24964] Call Trace: [ 921.434747][T24964] [ 921.434763][T24964] dump_stack_lvl+0x100/0x190 [ 921.434831][T24964] should_fail_ex.cold+0x5/0xa [ 921.434878][T24964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.434934][T24964] should_failslab+0xc2/0x120 [ 921.434985][T24964] __kmalloc_cache_noprof+0x91/0x6d0 [ 921.435049][T24964] ? copy_net_ns+0x135/0x7a0 [ 921.435116][T24964] copy_net_ns+0x135/0x7a0 [ 921.435171][T24964] ? copy_cgroup_ns+0x71/0x970 [ 921.435230][T24964] create_new_namespaces+0x3ea/0xac0 [ 921.435287][T24964] unshare_nsproxy_namespaces+0xf2/0x220 [ 921.435352][T24964] ksys_unshare+0x4a2/0xb30 [ 921.435402][T24964] ? __pfx_ksys_unshare+0x10/0x10 [ 921.435450][T24964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.435521][T24964] __x64_sys_unshare+0x31/0x40 [ 921.435567][T24964] do_syscall_64+0x123/0x790 [ 921.435614][T24964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.435655][T24964] RIP: 0033:0x7f6df159e559 [ 921.435687][T24964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.435726][T24964] RSP: 002b:00007f6df23a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 921.435765][T24964] RAX: ffffffffffffffda RBX: 00007f6df1825fa0 RCX: 00007f6df159e559 [ 921.435793][T24964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 921.435827][T24964] RBP: 00007f6df1635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 921.435853][T24964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.435878][T24964] R13: 00007f6df1826038 R14: 00007f6df1825fa0 R15: 00007ffd18f04538 [ 921.435932][T24964] [ 922.569237][ T31] audit: type=1326 audit(1700000866.000:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.573311][ T31] audit: type=1326 audit(1700000866.000:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.574148][ T31] audit: type=1326 audit(1700000866.000:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.574457][ T31] audit: type=1326 audit(1700000866.000:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.574766][ T31] audit: type=1326 audit(1700000866.000:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.575083][ T31] audit: type=1326 audit(1700000866.000:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.575723][ T31] audit: type=1326 audit(1700000866.000:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.654994][ T31] audit: type=1326 audit(1700000866.000:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.655074][ T31] audit: type=1326 audit(1700000866.000:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741779e559 code=0x0 [ 922.732480][T24996] macvtap0: entered allmulticast mode [ 922.732507][T24996] vlan0: entered allmulticast mode [ 922.732528][T24996] veth0_vlan: entered allmulticast mode [ 922.791634][ T31] audit: type=1326 audit(1700000866.220:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.0.6099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741779e559 code=0x7ffc0000 [ 922.871677][T25003] team0 (unregistering): Port device team_slave_0 removed [ 922.977728][T25003] team0 (unregistering): Port device team_slave_1 removed [ 923.190496][T25023] loop3: detected capacity change from 0 to 16 [ 923.209282][T25023] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 923.258383][T24543] udevd[24543]: incorrect cramfs checksum on /dev/loop3 [ 923.361717][T24543] udevd[24543]: incorrect cramfs checksum on /dev/loop3 [ 923.535939][T25030] loop2: detected capacity change from 0 to 32768 [ 923.554404][T25030] (syz.2.6107,25030,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 923.554795][T25030] (syz.2.6107,25030,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 923.589678][ T5276] 8021q: adding VLAN 0 to HW filter on device eth17 [ 923.606124][T25030] JBD2: Ignoring recovery information on journal [ 923.676303][T25030] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 923.677303][T14002] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 923.845279][T25042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6111'. [ 923.859579][T14002] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 923.862234][T14002] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.876794][T14002] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 923.876843][T14002] usb 10-1: Product: syz [ 923.876872][T14002] usb 10-1: Manufacturer: syz [ 923.876900][T14002] usb 10-1: SerialNumber: syz [ 923.918392][T14002] usb 10-1: config 0 descriptor?? [ 923.972384][T14002] keyspan 10-1:0.0: Keyspan 4 port adapter converter detected [ 923.972682][T14002] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81 [ 923.972763][T14002] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 88 [ 923.973293][T25044] input: syz0 as /devices/virtual/input/input51 [ 924.008938][T14002] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1 [ 924.022797][T14002] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 924.025780][T14002] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2 [ 924.047029][T14002] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 924.056525][T14002] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4 [ 924.075056][T14002] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 924.106453][T14002] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6 [ 924.116882][T14002] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 924.430128][T24096] ocfs2: Unmounting device (7,2) on (node local) [ 924.541443][T24385] usb 10-1: USB disconnect, device number 21 [ 924.563701][T24385] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 924.610497][T24385] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 924.626877][T24385] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 924.669471][T24385] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 924.670339][T24385] keyspan 10-1:0.0: device disconnected [ 925.152481][T25079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6120'. [ 925.401659][T25090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6124'. [ 925.401717][T25090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6124'. [ 925.716579][ T5276] 8021q: adding VLAN 0 to HW filter on device eth18 [ 925.974502][T25106] netlink: 'syz.9.6128': attribute type 2 has an invalid length. [ 926.444451][T25120] tipc: Started in network mode [ 926.444498][T25120] tipc: Node identity 7f000001, cluster identity 4711 [ 926.445546][T25120] tipc: Enabling of bearer rejected, failed to enable media [ 926.558383][T25124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 926.775635][T25134] loop3: detected capacity change from 0 to 512 [ 926.797464][T25134] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 927.147012][T25150] 9p: Bad value for 'rfdno' [ 927.255663][T25141] loop3: detected capacity change from 0 to 32768 [ 927.274506][T25141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6144 (25141) [ 927.305433][T25141] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 927.305484][T25141] BTRFS info (device loop3): using crc32c checksum algorithm [ 927.443936][T25141] BTRFS info (device loop3): enabling ssd optimizations [ 927.443976][T25141] BTRFS info (device loop3): turning on flush-on-commit [ 927.444008][T25141] BTRFS info (device loop3): enabling free space tree [ 927.444038][T25141] BTRFS info (device loop3): enabling auto defrag [ 927.444069][T25141] BTRFS info (device loop3): use lzo compression, level 1 [ 927.444106][T25141] BTRFS info (device loop3): max_inline set to 4096 [ 927.781956][T25178] loop2: detected capacity change from 0 to 512 [ 927.844568][T25178] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 927.912540][T25178] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.6147: bad orphan inode 13 [ 927.912587][T25178] loop2: lost filesystem error report for type 5 error -117 [ 927.916983][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 927.917016][ C0] EXT4-fs (loop2): last error at time 1700000871: ext4_orphan_get:1429 [ 927.917782][T25178] ext4_test_bit(bit=12, block=18) = 1 [ 927.917808][T25178] is_bad_inode(inode)=0 [ 927.917824][T25178] NEXT_ORPHAN(inode)=0 [ 927.917839][T25178] max_ino=32 [ 927.917853][T25178] i_nlink=1 [ 927.938983][T25178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 928.102394][ T5276] 8021q: adding VLAN 0 to HW filter on device eth19 [ 928.195207][T12863] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 928.840646][T14002] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 928.987530][T24385] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 928.989271][T14002] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 928.995753][T14002] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 928.995803][T14002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.995858][T14002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 928.995899][T14002] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 928.995966][T14002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.077314][T14002] usb 4-1: config 0 descriptor?? [ 929.161371][T24385] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 929.162886][T24385] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.186464][T24385] usb 10-1: config 0 descriptor?? [ 929.424028][T24385] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 929.512896][T14002] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 929.658798][T24385] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 929.658842][T24385] [drm] Initialized udl on minor 1 [ 930.131123][ T5276] 8021q: adding VLAN 0 to HW filter on device eth20 [ 930.278167][T25227] jffs2: notice: (25227) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 930.816253][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.816336][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.295023][T25182] EXT4-fs error (device loop2): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 931.584572][T14002] usb 4-1: USB disconnect, device number 50 [ 932.166598][T24096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 932.762101][T25295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6182'. [ 932.924598][T25303] batadv_slave_1: entered promiscuous mode [ 932.935333][T25302] batadv_slave_1: left promiscuous mode [ 933.187381][T25310] FAULT_INJECTION: forcing a failure. [ 933.187381][T25310] name failslab, interval 1, probability 0, space 0, times 0 [ 933.187433][T25310] CPU: 0 UID: 0 PID: 25310 Comm: syz.0.6187 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 933.187486][T25310] Tainted: [L]=SOFTLOCKUP [ 933.187500][T25310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 933.187523][T25310] Call Trace: [ 933.187535][T25310] [ 933.187550][T25310] dump_stack_lvl+0x100/0x190 [ 933.187607][T25310] should_fail_ex.cold+0x5/0xa [ 933.187650][T25310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.187701][T25310] should_failslab+0xc2/0x120 [ 933.187748][T25310] __kmalloc_cache_noprof+0x91/0x6d0 [ 933.187805][T25310] ? fuse_chan_new+0x40/0x320 [ 933.187876][T25310] fuse_chan_new+0x40/0x320 [ 933.187932][T25310] fuse_dev_chan_new+0x14/0x2b0 [ 933.187993][T25310] ? kobject_get_unless_zero+0x156/0x200 [ 933.188054][T25310] cuse_channel_open+0x1f/0x8f0 [ 933.188128][T25310] ? __pfx_cuse_channel_open+0x10/0x10 [ 933.188195][T25310] misc_open+0x26d/0x450 [ 933.188233][T25310] ? __pfx_misc_open+0x10/0x10 [ 933.188298][T25310] chrdev_open+0x234/0x6a0 [ 933.188343][T25310] ? __pfx_apparmor_file_open+0x10/0x10 [ 933.188398][T25310] ? __pfx_chrdev_open+0x10/0x10 [ 933.188446][T25310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.188494][T25310] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 933.188566][T25310] do_dentry_open+0x6ab/0x14d0 [ 933.188606][T25310] ? __pfx_chrdev_open+0x10/0x10 [ 933.188655][T25310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.188710][T25310] vfs_open+0x82/0x3f0 [ 933.188759][T25310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.188814][T25310] path_openat+0x1a23/0x2450 [ 933.188876][T25310] ? __pfx_path_openat+0x10/0x10 [ 933.188939][T25310] do_file_open+0x20e/0x430 [ 933.188992][T25310] ? __pfx_do_file_open+0x10/0x10 [ 933.189076][T25310] ? _raw_spin_unlock+0x28/0x50 [ 933.189134][T25310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.189181][T25310] ? alloc_fd+0x471/0x7a0 [ 933.189246][T25310] do_sys_openat2+0x10f/0x1e0 [ 933.189301][T25310] ? __pfx_do_sys_openat2+0x10/0x10 [ 933.189357][T25310] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 933.189415][T25310] __x64_sys_openat+0x12d/0x210 [ 933.189478][T25310] ? __pfx___x64_sys_openat+0x10/0x10 [ 933.189556][T25310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.189627][T25310] do_syscall_64+0x123/0x790 [ 933.189677][T25310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.189723][T25310] RIP: 0033:0x7f741779e559 [ 933.189753][T25310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.189789][T25310] RSP: 002b:00007f7418612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 933.189831][T25310] RAX: ffffffffffffffda RBX: 00007f7417a25fa0 RCX: 00007f741779e559 [ 933.189857][T25310] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 933.189882][T25310] RBP: 00007f7417835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 933.189907][T25310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.189931][T25310] R13: 00007f7417a26038 R14: 00007f7417a25fa0 R15: 00007ffd4176ad18 [ 933.189982][T25310] [ 933.647477][T25323] bond0: invalid NS target ff00:: specified for addition [ 933.647520][T25323] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 934.730622][T24385] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 934.731077][T24385] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 934.733956][T14002] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 934.736255][T14002] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 934.736490][T14002] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 934.742172][T13021] usb 10-1: USB disconnect, device number 22 [ 935.042572][T25362] loop2: detected capacity change from 0 to 256 [ 935.057245][T25362] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 935.106981][T25362] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 935.554043][T25375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.769930][T25381] ecryptfs_get_tree: kern_path() failed [ 936.113977][T25385] loop9: detected capacity change from 0 to 131072 [ 936.115658][T14002] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 936.148383][T25381] Reading sb failed; rc = [-2] [ 936.162677][T25385] F2FS-fs (loop9): invalid crc value [ 936.253956][T25385] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 936.259070][T14002] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 936.261065][T14002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.269113][T14002] usb 3-1: config 0 descriptor?? [ 936.297590][T25385] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 936.804187][T25395] loop3: detected capacity change from 0 to 131072 [ 936.902541][T25395] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 936.902587][T25395] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 936.921428][T25395] F2FS-fs (loop3): invalid crc value [ 936.930039][T14002] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 937.026221][T25395] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 937.045036][T25395] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 937.045071][T25395] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 937.156422][T25395] F2FS-fs (loop3): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 937.168741][T25395] F2FS-fs (loop3): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 937.266296][T14002] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 937.266344][T14002] [drm] Initialized udl on minor 1 [ 938.931210][T25426] loop3: detected capacity change from 0 to 131072 [ 938.932410][T25426] xfs: Deprecated parameter 'ikeep' [ 938.932438][T25426] XFS: ikeep mount option is deprecated. [ 939.008375][T25426] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 939.110558][T25426] XFS (loop3): Starting recovery (logdev: internal) [ 939.135643][T25426] XFS (loop3): Ending recovery (logdev: internal) [ 939.563371][T12863] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 940.185531][T25469] netlink: 'syz.6.6235': attribute type 19 has an invalid length. [ 941.086612][T25489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6239'. [ 941.187046][T25488] loop4: detected capacity change from 0 to 32768 [ 941.223458][T25488] JBD2: Ignoring recovery information on journal [ 941.225423][T25488] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 941.225814][T25488] JBD2: bad block at offset 32 [ 941.237376][T25488] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 941.315706][T25488] OCFS2: ERROR (device loop4): ocfs2_claim_suballoc_bits: Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 941.315809][T25488] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 941.315826][T25488] OCFS2: File system is now read-only. [ 941.315846][T25488] (syz.4.6241,25488,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 941.315882][T25488] (syz.4.6241,25488,0):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 941.315946][T25488] (syz.4.6241,25488,0):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 941.315986][T25488] (syz.4.6241,25488,0):ocfs2_add_clusters_in_btree:4847 ERROR: status = -30 [ 941.316026][T25488] (syz.4.6241,25488,0):ocfs2_write_cluster:1134 ERROR: status = -30 [ 941.316060][T25488] (syz.4.6241,25488,0):ocfs2_write_cluster_by_desc:1228 ERROR: status = -30 [ 941.316096][T25488] (syz.4.6241,25488,0):ocfs2_write_begin_nolock:1800 ERROR: status = -30 [ 941.318145][T25488] (syz.4.6241,25488,0):ocfs2_write_begin:1888 ERROR: status = -30 [ 941.686033][T24054] ocfs2: Unmounting device (7,4) on (node local) [ 942.339535][T14002] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 942.339954][T14002] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 942.346157][T24385] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 942.346883][T24385] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 942.347150][T24385] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 942.384925][T14002] usb 3-1: USB disconnect, device number 34 [ 942.797018][T25524] loop2: detected capacity change from 0 to 128 [ 942.834555][T25524] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 944.659129][T25566] jffs2: notice: (25566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 944.721024][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.737833][ T4932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.742018][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.762722][ T4932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.777045][ T4932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 945.185819][T25581] loop4: detected capacity change from 0 to 512 [ 945.255624][T25581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.562533][T25581] EXT4-fs error (device loop4): ext4_validate_block_bitmap:444: comm syz.4.6270: bg 0: block 67: padding at end of block bitmap is not set [ 945.592599][T25581] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 945.711529][T24054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.006214][T25607] loop4: detected capacity change from 0 to 2048 [ 946.092658][T25607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 946.449863][T25569] rxe_eth0 speed is unknown, defaulting to 1000 [ 946.728554][T25627] jffs2: notice: (25627) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 946.841320][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057127c00: rx timeout, send abort [ 946.863317][T25632] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6285'. [ 946.888408][T18644] Bluetooth: hci0: command tx timeout [ 947.343218][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057127c00: abort rx timeout. Force session deactivation [ 947.758559][T24385] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 947.843930][T25569] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.844140][T25569] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.844290][T25569] bridge_slave_0: entered allmulticast mode [ 947.846510][T25569] bridge_slave_0: entered promiscuous mode [ 947.855019][T25569] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.855143][T25569] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.855289][T25569] bridge_slave_1: entered allmulticast mode [ 947.860283][T25569] bridge_slave_1: entered promiscuous mode [ 947.921630][T25569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.940488][T25569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.977834][T24385] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 947.979160][T24385] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.979222][T24385] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 947.982154][T24385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.982194][T24385] usb 3-1: Product: syz [ 947.982222][T24385] usb 3-1: Manufacturer: syz [ 947.982249][T24385] usb 3-1: SerialNumber: syz [ 948.046621][T25569] team0: Port device team_slave_0 added [ 948.067701][T25569] team0: Port device team_slave_1 added [ 948.138535][T25672] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 948.196009][T25569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.196034][T25569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.196079][T25569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.204987][T25569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.205008][T25569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.205051][T25569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.388132][T25569] hsr_slave_0: entered promiscuous mode [ 948.389291][T25569] hsr_slave_1: entered promiscuous mode [ 948.393394][T25569] debugfs: 'hsr0' already exists in 'hsr' [ 948.393424][T25569] Cannot create hsr debugfs directory [ 948.534222][T14002] usb 3-1: USB disconnect, device number 35 [ 948.924627][T25693] bridge0: entered allmulticast mode [ 948.971308][T18644] Bluetooth: hci0: command tx timeout [ 949.529282][T25697] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 949.581604][T25710] overlayfs: failed to clone upperpath [ 949.639545][T25706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.711186][T25706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.765297][T25715] FAULT_INJECTION: forcing a failure. [ 949.765297][T25715] name failslab, interval 1, probability 0, space 0, times 0 [ 949.765338][T25715] CPU: 0 UID: 0 PID: 25715 Comm: syz.2.6307 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 949.765382][T25715] Tainted: [L]=SOFTLOCKUP [ 949.765395][T25715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 949.765416][T25715] Call Trace: [ 949.765427][T25715] [ 949.765442][T25715] dump_stack_lvl+0x100/0x190 [ 949.765496][T25715] should_fail_ex.cold+0x5/0xa [ 949.765550][T25715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.765595][T25715] should_failslab+0xc2/0x120 [ 949.765632][T25715] __kmalloc_cache_noprof+0x91/0x6d0 [ 949.765679][T25715] ? do_seccomp+0xc90/0x27c0 [ 949.765731][T25715] do_seccomp+0xc90/0x27c0 [ 949.765785][T25715] ? __pfx_do_seccomp+0x10/0x10 [ 949.765830][T25715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.765872][T25715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.765908][T25715] ? xfd_validate_state+0x129/0x190 [ 949.765945][T25715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.765988][T25715] do_syscall_64+0x123/0x790 [ 949.766023][T25715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.766054][T25715] RIP: 0033:0x7f35dbb9e559 [ 949.766078][T25715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.766112][T25715] RSP: 002b:00007f35dcafd028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 949.766151][T25715] RAX: ffffffffffffffda RBX: 00007f35dbe25fa0 RCX: 00007f35dbb9e559 [ 949.766178][T25715] RDX: 0000200000000040 RSI: 000000000000001d RDI: 0000000000000001 [ 949.766197][T25715] RBP: 00007f35dbc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 949.766216][T25715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.766235][T25715] R13: 00007f35dbe26038 R14: 00007f35dbe25fa0 R15: 00007fff2e20bcc8 [ 949.766276][T25715] [ 949.818646][T25706] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 949.936457][T25706] bond0 (unregistering): Released all slaves [ 950.064437][T25721] loop4: detected capacity change from 0 to 2640 [ 950.065102][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065154][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065198][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065243][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065288][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065349][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065409][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065455][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065512][T25721] ldm_validate_partition_table(): Disk read failed. [ 950.065557][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065602][T25721] Buffer I/O error on dev loop4, logical block 0, async page read [ 950.065667][T25721] Dev loop4: unable to read RDB block 0 [ 950.065878][T25721] loop4: unable to read partition table [ 950.066148][T25721] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 950.788424][T25743] loop2: detected capacity change from 0 to 512 [ 950.861958][T25743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 950.862110][T25743] System zones: 1-12 [ 950.863730][T25743] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.6318: missing EA_INODE flag [ 950.863772][T25743] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 950.864147][T25743] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.6318: error while reading EA inode 12 err=-117 [ 950.864192][T25743] loop2: lost filesystem error report for type 5 error -117 [ 950.864525][T25743] EXT4-fs (loop2): 1 orphan inode deleted [ 950.934924][T25743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.047657][T18644] Bluetooth: hci0: command tx timeout [ 951.073746][T24096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.233319][T25569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 951.248266][T25569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.249480][T25569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 951.255678][T25569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 951.256630][T25569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 951.291311][T25569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.292653][T25569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 951.314280][T25569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 951.440640][T25569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.468979][T25569] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.487755][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.487876][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.515029][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.515143][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.592430][T25569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.994885][T18644] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 953.128518][T18644] Bluetooth: hci0: command tx timeout [ 953.353887][T25569] veth0_vlan: entered promiscuous mode [ 953.383929][T25569] veth1_vlan: entered promiscuous mode [ 953.480437][T25569] veth0_macvtap: entered promiscuous mode [ 953.490275][T25569] veth1_macvtap: entered promiscuous mode [ 953.546103][T25569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.562572][T25569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.600662][ T1045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.600746][ T1045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.600820][ T1045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.600887][ T1045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.253457][T25856] Bluetooth: MGMT ver 1.23 [ 955.541175][T25861] loop3: detected capacity change from 0 to 4096 [ 955.712757][T25861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.814427][T25861] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 955.872973][T12863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.098977][T25879] 9p: Bad value for 'rfdno' [ 956.285738][T25815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 956.501535][T25886] loop2: detected capacity change from 0 to 128 [ 956.566423][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.566453][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.644789][T25886] syz.2.6342: attempt to access beyond end of device [ 956.644789][T25886] loop2: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 956.646873][T25886] syz.2.6342: attempt to access beyond end of device [ 956.646873][T25886] loop2: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 956.778331][ T133] kworker/u8:5: attempt to access beyond end of device [ 956.778331][ T133] loop2: rw=1, sector=138, nr_sectors = 16 limit=128 [ 956.820421][T25892] loop4: detected capacity change from 0 to 2640 [ 956.820943][T25892] buffer_io_error: 13 callbacks suppressed [ 956.820965][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821009][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821049][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821089][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821129][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821184][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821240][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821280][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821306][T25892] ldm_validate_partition_table(): Disk read failed. [ 956.821342][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821382][T25892] Buffer I/O error on dev loop4, logical block 0, async page read [ 956.821444][T25892] Dev loop4: unable to read RDB block 0 [ 956.841938][T25892] loop4: unable to read partition table [ 956.842178][T25892] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 956.849198][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.849225][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.049766][T18644] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 957.049832][T18644] Bluetooth: hci5: Injecting HCI hardware error event [ 957.053257][T18644] Bluetooth: hci5: hardware error 0x00 [ 958.091835][T25922] loop2: detected capacity change from 0 to 32768 [ 958.104968][T25922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6351 (25922) [ 958.138978][T25922] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 958.139026][T25922] BTRFS info (device loop2): using crc32c checksum algorithm [ 958.444835][T25922] BTRFS info (device loop2): enabling ssd optimizations [ 958.444881][T25922] BTRFS info (device loop2): turning on flush-on-commit [ 958.444911][T25922] BTRFS info (device loop2): enabling free space tree [ 958.444938][T25922] BTRFS info (device loop2): enabling auto defrag [ 958.444967][T25922] BTRFS info (device loop2): use lzo compression, level 1 [ 958.445001][T25922] BTRFS info (device loop2): max_inline set to 4096 [ 959.108025][T24096] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 959.210581][T18644] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 959.612394][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6362'. [ 960.103241][T25999] netlink: 'syz.6.6371': attribute type 4 has an invalid length. [ 960.105331][T25999] netlink: 'syz.6.6371': attribute type 4 has an invalid length. [ 960.407500][T18644] Bluetooth: hci6: command 0x1003 tx timeout [ 960.408045][ T4932] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 960.875034][T26021] netlink: 'syz.5.6373': attribute type 4 has an invalid length. [ 961.250434][T13021] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 961.399273][T13021] usb 6-1: unable to get BOS descriptor or descriptor too short [ 961.399928][T13021] usb 6-1: not running at top speed; connect to a high speed hub [ 961.399968][T13021] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 961.401280][T13021] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 961.401328][T13021] usb 6-1: config 1 interface 0 has no altsetting 0 [ 961.404378][T13021] usb 6-1: string descriptor 0 read error: -22 [ 961.404515][T13021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.472865][T26028] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 961.891639][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891683][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891719][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891754][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891790][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891825][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891860][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891922][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891957][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.891992][T13021] zydacron 0003:13EC:0006.003F: unknown main item tag 0x0 [ 961.997985][T13021] zydacron 0003:13EC:0006.003F: hidraw0: USB HID v0.05 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 962.108734][T13021] usb 6-1: USB disconnect, device number 53 [ 962.854541][T26075] gadgetfs: bound to dummy_udc driver [ 963.264637][T26094] eCryptfs: maximum fs stacking depth exceeded [ 963.269520][T26094] Reading sb failed; rc = [-22] [ 964.102987][T26118] FAULT_INJECTION: forcing a failure. [ 964.102987][T26118] name failslab, interval 1, probability 0, space 0, times 0 [ 964.103039][T26118] CPU: 0 UID: 0 PID: 26118 Comm: syz.2.6394 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 964.103094][T26118] Tainted: [L]=SOFTLOCKUP [ 964.103110][T26118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 964.103137][T26118] Call Trace: [ 964.103154][T26118] [ 964.103172][T26118] dump_stack_lvl+0x100/0x190 [ 964.103245][T26118] should_fail_ex.cold+0x5/0xa [ 964.103290][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.103351][T26118] ? __pfx_ucma_event_handler+0x10/0x10 [ 964.103405][T26118] should_failslab+0xc2/0x120 [ 964.103453][T26118] ? __pfx_ucma_event_handler+0x10/0x10 [ 964.103506][T26118] __kmalloc_cache_noprof+0x91/0x6d0 [ 964.103565][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.103613][T26118] ? lock_acquire+0x1d1/0x380 [ 964.103656][T26118] ? __rdma_create_id+0x5b/0x8f0 [ 964.103712][T26118] ? __pfx_ucma_event_handler+0x10/0x10 [ 964.103764][T26118] __rdma_create_id+0x5b/0x8f0 [ 964.103811][T26118] ? __pfx_ucma_event_handler+0x10/0x10 [ 964.103868][T26118] rdma_create_user_id+0x7d/0xe0 [ 964.103925][T26118] ucma_create_id+0x189/0x380 [ 964.103976][T26118] ? __pfx_ucma_create_id+0x10/0x10 [ 964.104025][T26118] ? __might_fault+0xc5/0x140 [ 964.104080][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.104145][T26118] ? __pfx_ucma_create_id+0x10/0x10 [ 964.104198][T26118] ucma_write+0x1fb/0x330 [ 964.104241][T26118] ? __pfx_ucma_write+0x10/0x10 [ 964.104285][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.104333][T26118] ? security_file_permission+0x76/0x210 [ 964.104394][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.104443][T26118] ? rw_verify_area+0xce/0x6d0 [ 964.104508][T26118] vfs_write+0x2aa/0x1050 [ 964.104547][T26118] ? __pfx_ucma_write+0x10/0x10 [ 964.104588][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.104637][T26118] ? lock_acquire+0x1d1/0x380 [ 964.104679][T26118] ? __fget_files+0x34/0x3d0 [ 964.104726][T26118] ? __pfx_vfs_write+0x10/0x10 [ 964.104761][T26118] ? find_held_lock+0x2b/0x80 [ 964.104818][T26118] ? __fget_files+0x215/0x3d0 [ 964.104863][T26118] ? __fget_files+0x215/0x3d0 [ 964.104907][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.104964][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.105012][T26118] ? __fget_files+0x21f/0x3d0 [ 964.105073][T26118] ksys_write+0x1f8/0x250 [ 964.105110][T26118] ? __pfx_ksys_write+0x10/0x10 [ 964.105152][T26118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.105208][T26118] do_syscall_64+0x123/0x790 [ 964.105254][T26118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.105296][T26118] RIP: 0033:0x7f35dbb9e559 [ 964.105326][T26118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.105371][T26118] RSP: 002b:00007f35dcafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 964.105409][T26118] RAX: ffffffffffffffda RBX: 00007f35dbe25fa0 RCX: 00007f35dbb9e559 [ 964.105437][T26118] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000003 [ 964.105463][T26118] RBP: 00007f35dbc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 964.105488][T26118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.105513][T26118] R13: 00007f35dbe26038 R14: 00007f35dbe25fa0 R15: 00007fff2e20bcc8 [ 964.105567][T26118] [ 964.204127][T26123] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6396'. [ 965.227598][T13021] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 965.393011][T13021] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 965.396503][T13021] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.396554][T13021] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 965.396602][T13021] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 965.396665][T13021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.456290][T26150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 965.659917][T26161] overlayfs: failed to clone upperpath [ 966.365587][T26172] overlayfs: failed to resolve './file0': -2 [ 967.065017][T13021] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 967.080789][T13021] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input53 [ 967.141526][T13021] usb 6-1: USB disconnect, device number 54 [ 967.141644][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 967.402511][T26213] xt_hashlimit: size too large, truncated to 1048576 [ 967.443253][T26209] loop3: detected capacity change from 0 to 4096 [ 967.444568][T26209] EXT4-fs: Ignoring removed bh option [ 967.444600][T26209] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.444628][T26209] EXT4-fs: Ignoring removed nobh option [ 967.464270][T26209] EXT4-fs (loop3): Test dummy encryption mode enabled [ 967.513935][T26209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.691560][T26207] loop4: detected capacity change from 0 to 32768 [ 967.713411][T26207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6421 (26207) [ 967.791341][T26207] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 967.791396][T26207] BTRFS info (device loop4): using crc32c checksum algorithm [ 968.039150][T26207] BTRFS info (device loop4): enabling ssd optimizations [ 968.039188][T26207] BTRFS info (device loop4): turning on async discard [ 968.039216][T26207] BTRFS info (device loop4): enabling free space tree [ 968.836783][T26207] BTRFS info (device loop4): balance: start -dconvert=raid0 -mconvert=raid0 [ 969.100757][T26207] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 969.245665][T12863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.749173][T26285] loop5: detected capacity change from 0 to 32768 [ 969.776289][T26285] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 969.898717][T26290] FAULT_INJECTION: forcing a failure. [ 969.898717][T26290] name failslab, interval 1, probability 0, space 0, times 0 [ 969.898769][T26290] CPU: 0 UID: 0 PID: 26290 Comm: syz.2.6441 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 969.898818][T26290] Tainted: [L]=SOFTLOCKUP [ 969.898832][T26290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 969.898853][T26290] Call Trace: [ 969.898866][T26290] [ 969.898880][T26290] dump_stack_lvl+0x100/0x190 [ 969.898939][T26290] should_fail_ex.cold+0x5/0xa [ 969.898979][T26290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.899028][T26290] should_failslab+0xc2/0x120 [ 969.899072][T26290] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 969.899107][T26290] ? d_alloc_parallel+0x9f6/0x14c0 [ 969.899143][T26290] ? proc_alloc_inode+0x25/0x200 [ 969.899198][T26290] ? __pfx_proc_alloc_inode+0x10/0x10 [ 969.899255][T26290] proc_alloc_inode+0x25/0x200 [ 969.899308][T26290] alloc_inode+0x68/0x250 [ 969.899372][T26290] new_inode+0x22/0x1c0 [ 969.899433][T26290] proc_pid_make_inode+0x22/0x160 [ 969.899488][T26290] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 969.899553][T26290] proc_task_instantiate+0x51/0x1e0 [ 969.899614][T26290] proc_fill_cache+0x2a3/0x3a0 [ 969.899667][T26290] ? __pfx_proc_task_instantiate+0x10/0x10 [ 969.899731][T26290] ? __pfx_proc_fill_cache+0x10/0x10 [ 969.899787][T26290] ? __task_pid_nr_ns+0x1ca/0x510 [ 969.899854][T26290] proc_task_readdir+0x55b/0xee0 [ 969.899912][T26290] ? proc_task_readdir+0x409/0xee0 [ 969.899971][T26290] ? __pfx_proc_task_readdir+0x10/0x10 [ 969.900031][T26290] ? __pfx_down_read_killable+0x10/0x10 [ 969.900078][T26290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.900140][T26290] iterate_dir+0x2ba/0xc10 [ 969.900187][T26290] __x64_sys_getdents64+0x13b/0x2c0 [ 969.900226][T26290] ? __x64_sys_futex+0x358/0x4d0 [ 969.900284][T26290] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 969.900325][T26290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.900379][T26290] ? __pfx_filldir64+0x10/0x10 [ 969.900425][T26290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.900477][T26290] do_syscall_64+0x123/0x790 [ 969.900521][T26290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.900562][T26290] RIP: 0033:0x7f35dbb9e559 [ 969.900592][T26290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.900629][T26290] RSP: 002b:00007f35dcafd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 969.900666][T26290] RAX: ffffffffffffffda RBX: 00007f35dbe25fa0 RCX: 00007f35dbb9e559 [ 969.900692][T26290] RDX: 0000000000000ffa RSI: 00002000000022c0 RDI: 0000000000000004 [ 969.900715][T26290] RBP: 00007f35dbc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 969.900740][T26290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.900765][T26290] R13: 00007f35dbe26038 R14: 00007f35dbe25fa0 R15: 00007fff2e20bcc8 [ 969.900817][T26290] [ 970.143657][T26207] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 970.228002][ T31] kauditd_printk_skb: 293 callbacks suppressed [ 970.228032][ T31] audit: type=1326 audit(1700001169.649:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.262430][ T31] audit: type=1326 audit(1700001169.649:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.289029][ T31] audit: type=1326 audit(1700001169.699:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.289102][ T31] audit: type=1326 audit(1700001169.699:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.289169][ T31] audit: type=1326 audit(1700001169.699:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.306430][ T31] audit: type=1326 audit(1700001169.729:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.306505][ T31] audit: type=1326 audit(1700001169.729:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.308385][ T31] audit: type=1326 audit(1700001169.729:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.322702][ T31] audit: type=1326 audit(1700001169.729:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.353008][ T31] audit: type=1326 audit(1700001169.779:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26291 comm="syz.9.6442" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df159e559 code=0x7ffc0000 [ 970.786637][T25569] ocfs2: Unmounting device (7,5) on (node local) [ 971.008089][T26207] BTRFS info (device loop4): balance: canceled [ 971.229008][T24054] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 971.237297][T14002] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 971.390307][T14002] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 971.394661][T14002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.398154][T14002] usb 6-1: config 0 descriptor?? [ 971.405780][T14002] cp210x 6-1:0.0: cp210x converter detected [ 971.773952][T26326] overlayfs: failed lookup in lower (newroot/50, name='file0', err=-40): overlapping layers [ 971.827697][T14002] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 971.836093][T14002] usb 6-1: cp210x converter now attached to ttyUSB0 [ 972.045407][ T5750] usb 6-1: USB disconnect, device number 55 [ 972.066667][ T5750] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 972.075343][ T5750] cp210x 6-1:0.0: device disconnected [ 972.145424][T26334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 972.145453][T26334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6452'. [ 972.193527][T26334] macvtap1: entered allmulticast mode [ 972.193558][T26334] dummy0: entered allmulticast mode [ 972.197218][T26334] dummy0: entered promiscuous mode [ 972.219249][T26335] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6452'. [ 972.219281][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6452'. [ 972.443714][T26335] macvtap2: entered allmulticast mode [ 973.087150][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 973.246090][ T9] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 973.259309][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.498223][ T9] dln2 3-1:1.0: USB write failed: -110 [ 973.498708][ T9] dln2 3-1:1.0: failed to initialize hardware [ 973.503219][ T9] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 973.532275][T26369] loop5: detected capacity change from 0 to 32768 [ 973.541437][T26369] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 973.541462][T26369] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 973.616032][T26369] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 973.618677][T24386] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 973.618700][T24386] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 973.642691][T26377] fuse: fd is not a fuse device [ 973.711750][T13021] usb 3-1: USB disconnect, device number 36 [ 973.989473][T24386] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 370ms [ 973.989713][T24386] gfs2: fsid=syz:syz.0: jid=0: Done [ 973.989760][T26369] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 974.243826][T26392] loop3: detected capacity change from 0 to 256 [ 974.391043][T26392] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ×3½qNV· í×õùæ2lÞÿ@ù[¢f' [ 974.936760][T26407] ip_tables: iptables: counters copy to user failed while replacing table [ 975.580002][T26424] FAULT_INJECTION: forcing a failure. [ 975.580002][T26424] name failslab, interval 1, probability 0, space 0, times 0 [ 975.580059][T26424] CPU: 0 UID: 0 PID: 26424 Comm: syz.2.6475 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 975.580115][T26424] Tainted: [L]=SOFTLOCKUP [ 975.580131][T26424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 975.580155][T26424] Call Trace: [ 975.580169][T26424] [ 975.580184][T26424] dump_stack_lvl+0x100/0x190 [ 975.580246][T26424] should_fail_ex.cold+0x5/0xa [ 975.580292][T26424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.580349][T26424] should_failslab+0xc2/0x120 [ 975.580406][T26424] kmem_cache_alloc_noprof+0x92/0x6a0 [ 975.580449][T26424] ? alloc_vfsmnt+0x25/0x840 [ 975.580521][T26424] alloc_vfsmnt+0x25/0x840 [ 975.580582][T26424] ? copy_tree+0x550/0xc50 [ 975.580642][T26424] clone_mnt+0x4b/0x9c0 [ 975.580704][T26424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.580759][T26424] copy_tree+0x327/0xc50 [ 975.580825][T26424] copy_mnt_ns+0x3fa/0x1180 [ 975.580893][T26424] ? __pfx_copy_mnt_ns+0x10/0x10 [ 975.580954][T26424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.581007][T26424] ? create_new_namespaces+0x30/0xac0 [ 975.581058][T26424] create_new_namespaces+0xd3/0xac0 [ 975.581096][T26424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.581141][T26424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.581189][T26424] ? security_capable+0x80/0x260 [ 975.581262][T26424] unshare_nsproxy_namespaces+0xf2/0x220 [ 975.581313][T26424] ksys_unshare+0x4a2/0xb30 [ 975.581365][T26424] ? __pfx_ksys_unshare+0x10/0x10 [ 975.581409][T26424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.581479][T26424] __x64_sys_unshare+0x31/0x40 [ 975.581523][T26424] do_syscall_64+0x123/0x790 [ 975.581570][T26424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.581610][T26424] RIP: 0033:0x7f35dbb9e559 [ 975.581642][T26424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.581680][T26424] RSP: 002b:00007f35dcafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 975.581720][T26424] RAX: ffffffffffffffda RBX: 00007f35dbe25fa0 RCX: 00007f35dbb9e559 [ 975.581747][T26424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c060200 [ 975.581772][T26424] RBP: 00007f35dbc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 975.581799][T26424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.581824][T26424] R13: 00007f35dbe26038 R14: 00007f35dbe25fa0 R15: 00007fff2e20bcc8 [ 975.581878][T26424] [ 975.981651][T26432] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 976.510602][T26443] syz_tun: entered allmulticast mode [ 976.512771][T26441] syz_tun: left allmulticast mode [ 976.756441][T26455] overlayfs: failed to clone upperpath [ 977.230631][T26476] loop5: detected capacity change from 0 to 512 [ 977.254629][T26476] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.6492: iget: bad i_size value: 38620345925642 [ 977.254714][T26476] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 977.255323][T26476] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.6492: couldn't read orphan inode 15 (err -117) [ 977.255387][T26476] loop5: lost filesystem error report for type 5 error -117 [ 977.318401][T26476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.400564][T26476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:435: comm syz.5.6492: bg 0: block 5: invalid block bitmap [ 977.476601][T26482] FAULT_INJECTION: forcing a failure. [ 977.476601][T26482] name failslab, interval 1, probability 0, space 0, times 0 [ 977.476683][T26482] CPU: 1 UID: 0 PID: 26482 Comm: syz.3.6489 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 977.476735][T26482] Tainted: [L]=SOFTLOCKUP [ 977.476749][T26482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 977.476771][T26482] Call Trace: [ 977.476784][T26482] [ 977.476799][T26482] dump_stack_lvl+0x100/0x190 [ 977.476863][T26482] should_fail_ex.cold+0x5/0xa [ 977.476916][T26482] should_failslab+0xc2/0x120 [ 977.476964][T26482] __kmalloc_cache_noprof+0x91/0x6d0 [ 977.477021][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.477068][T26482] ? sctp_add_bind_addr+0xae/0x3e0 [ 977.477138][T26482] sctp_add_bind_addr+0xae/0x3e0 [ 977.477205][T26482] sctp_copy_local_addr_list+0x349/0x550 [ 977.477254][T26482] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 977.477301][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.477345][T26482] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 977.477390][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.477435][T26482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 977.477485][T26482] sctp_bind_addr_copy+0xe0/0x530 [ 977.477523][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.477574][T26482] sctp_connect_new_asoc+0x1c9/0x770 [ 977.477629][T26482] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 977.477687][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.477732][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.477777][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.477829][T26482] sctp_sendmsg+0x1743/0x22e0 [ 977.477897][T26482] ? __pfx_sctp_sendmsg+0x10/0x10 [ 977.477950][T26482] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 977.477994][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.478046][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.478089][T26482] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 977.478157][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.478203][T26482] ? aa_sock_msg_perm+0x11e/0x200 [ 977.478267][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.478316][T26482] ? __pfx_sctp_sendmsg+0x10/0x10 [ 977.478385][T26482] inet_sendmsg+0x11c/0x140 [ 977.478436][T26482] ____sys_sendmsg+0x9c9/0xbe0 [ 977.478501][T26482] ? __pfx_inet_sendmsg+0x10/0x10 [ 977.478545][T26482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.478615][T26482] ? futex_unqueue+0x133/0x2c0 [ 977.478667][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.478730][T26482] ___sys_sendmsg+0x190/0x1e0 [ 977.478800][T26482] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.478869][T26482] ? __pfx___futex_wait+0x10/0x10 [ 977.478906][T26482] ? __pfx_try_to_wake_up+0x10/0x10 [ 977.478951][T26482] ? futex_hash+0x311/0x400 [ 977.479017][T26482] ? __fget_files+0x34/0x3d0 [ 977.479064][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.479149][T26482] __sys_sendmmsg+0x20c/0x440 [ 977.479207][T26482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 977.479255][T26482] ? file_init_path+0x48e/0x670 [ 977.479321][T26482] ? __pfx_do_futex+0x10/0x10 [ 977.479399][T26482] ? __sys_socket+0xac/0x260 [ 977.479464][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.479514][T26482] ? xfd_validate_state+0x129/0x190 [ 977.479569][T26482] __x64_sys_sendmmsg+0x9c/0x100 [ 977.479618][T26482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.479666][T26482] ? lockdep_hardirqs_on+0x7d/0x110 [ 977.479707][T26482] do_syscall_64+0x123/0x790 [ 977.479752][T26482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.479793][T26482] RIP: 0033:0x7ffaf3b9e559 [ 977.479823][T26482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.479868][T26482] RSP: 002b:00007ffaf4a48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 977.479907][T26482] RAX: ffffffffffffffda RBX: 00007ffaf3e25fa0 RCX: 00007ffaf3b9e559 [ 977.479936][T26482] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 977.479962][T26482] RBP: 00007ffaf3c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 977.479988][T26482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.480013][T26482] R13: 00007ffaf3e26038 R14: 00007ffaf3e25fa0 R15: 00007ffcc7d519a8 [ 977.480067][T26482] [ 977.492885][T26476] fscrypt (loop5, inode 18): Direct key flag not allowed with different contents and filenames modes [ 977.946531][T25569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.232870][T26490] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 978.301862][T26496] input: syz1 as /devices/virtual/input/input54 [ 978.379576][T26502] input: syz0 as /devices/virtual/input/input55 [ 978.935864][T26517] syzkaller1: entered promiscuous mode [ 978.935898][T26517] syzkaller1: entered allmulticast mode [ 979.294169][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6511'. [ 979.294207][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6511'. [ 979.757524][T24386] libceph: connect (1)[c::]:6789 error -101 [ 979.757720][T24386] libceph: mon0 (1)[c::]:6789 connect error [ 979.797169][T24386] libceph: connect (1)[c::]:6789 error -101 [ 979.797369][T24386] libceph: mon0 (1)[c::]:6789 connect error [ 980.019864][T24385] libceph: connect (1)[c::]:6789 error -101 [ 980.020097][T24385] libceph: mon0 (1)[c::]:6789 connect error [ 980.057566][T24385] libceph: connect (1)[c::]:6789 error -101 [ 980.057764][T24385] libceph: mon0 (1)[c::]:6789 connect error [ 980.501700][T26546] ceph: No mds server is up or the cluster is laggy [ 980.518331][T26553] ceph: No mds server is up or the cluster is laggy [ 980.527875][T24386] libceph: connect (1)[c::]:6789 error -101 [ 980.528068][T24386] libceph: mon0 (1)[c::]:6789 connect error [ 980.567587][T24386] libceph: connect (1)[c::]:6789 error -101 [ 980.571192][T24386] libceph: mon0 (1)[c::]:6789 connect error [ 980.751365][T26588] loop3: detected capacity change from 0 to 1024 [ 981.375774][T26611] FAULT_INJECTION: forcing a failure. [ 981.375774][T26611] name failslab, interval 1, probability 0, space 0, times 0 [ 981.375825][T26611] CPU: 1 UID: 0 PID: 26611 Comm: syz.5.6532 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 981.375881][T26611] Tainted: [L]=SOFTLOCKUP [ 981.375894][T26611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 981.375916][T26611] Call Trace: [ 981.375928][T26611] [ 981.375943][T26611] dump_stack_lvl+0x100/0x190 [ 981.375997][T26611] should_fail_ex.cold+0x5/0xa [ 981.376039][T26611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.376088][T26611] should_failslab+0xc2/0x120 [ 981.376135][T26611] __kmalloc_cache_noprof+0x91/0x6d0 [ 981.376191][T26611] ? __might_fault+0xc5/0x140 [ 981.376236][T26611] ? do_signalfd4+0x14e/0x480 [ 981.376279][T26611] do_signalfd4+0x14e/0x480 [ 981.376320][T26611] __x64_sys_signalfd+0x120/0x1a0 [ 981.376358][T26611] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 981.376402][T26611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.376458][T26611] do_syscall_64+0x123/0x790 [ 981.376500][T26611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.376540][T26611] RIP: 0033:0x7f9d4759e559 [ 981.376567][T26611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.376602][T26611] RSP: 002b:00007f9d484d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 981.376637][T26611] RAX: ffffffffffffffda RBX: 00007f9d47825fa0 RCX: 00007f9d4759e559 [ 981.376661][T26611] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 981.376684][T26611] RBP: 00007f9d47635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 981.376706][T26611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.376727][T26611] R13: 00007f9d47826038 R14: 00007f9d47825fa0 R15: 00007ffd9a08ef88 [ 981.376774][T26611] [ 981.645862][T26588] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 981.822372][T26617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6533'. [ 981.822468][T26617] bridge_slave_0: left allmulticast mode [ 981.822499][T26617] bridge_slave_0: left promiscuous mode [ 981.822746][T26617] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.968378][T26687] loop4: detected capacity change from 0 to 16 [ 983.997774][T26687] erofs (device loop4): mounted with root inode @ nid 36. [ 984.647578][T24386] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 984.801325][T24386] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 984.802972][T24386] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.803019][T24386] usb 4-1: config 0 interface 0 has no altsetting 0 [ 984.835301][T24386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.835343][T24386] usb 4-1: Product: syz [ 984.835385][T24386] usb 4-1: Manufacturer: syz [ 984.835412][T24386] usb 4-1: SerialNumber: syz [ 984.861573][T24386] usb 4-1: config 0 descriptor?? [ 984.879793][T24386] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 984.886489][T24386] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 984.905284][T24386] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 984.905335][T24386] usb 4-1: media controller created [ 984.941587][T24386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 985.037176][T24386] DVB: Unable to find symbol tda10046_attach() [ 985.037198][T24386] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 985.037220][T24386] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 986.239211][T24386] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 986.272748][T24386] usb 4-1: USB disconnect, device number 51 [ 986.288996][T24543] udevd[24543]: setting owner of /dev/bus/usb/004/051 to uid=0, gid=0 failed: No such file or directory [ 986.956785][T24386] kernel write not supported for file /vcsu (pid: 24386 comm: kworker/1:6) [ 987.486695][ T1506] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.749401][ T1506] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.875668][T26755] loop2: detected capacity change from 0 to 2048 [ 987.924678][T26755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.080126][ T1506] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.095791][T18644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 988.126999][T18644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 988.128366][T18644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 988.129659][T18644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 988.130921][T18644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 988.531337][T24096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.559981][ T1506] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.986133][ T1506] bridge_slave_1: left allmulticast mode [ 989.986169][ T1506] bridge_slave_1: left promiscuous mode [ 989.986398][ T1506] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.001254][ T1506] bridge_slave_0: left allmulticast mode [ 990.001284][ T1506] bridge_slave_0: left promiscuous mode [ 990.003783][ T1506] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.077683][T20550] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 990.229190][T20550] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 990.236199][T20550] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.236266][T20550] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 990.236314][T20550] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.248522][T18644] Bluetooth: hci0: command tx timeout [ 990.308612][T20550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 990.308652][T20550] usb 4-1: Product: syz [ 990.308678][T20550] usb 4-1: Manufacturer: syz [ 990.350356][T26805] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 990.363714][T20550] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 990.380866][T26821] loop2: detected capacity change from 0 to 1024 [ 990.476608][T20550] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 990.579926][T26821] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 990.868315][T26832] fuse: fd is not a fuse device [ 990.992088][T26835] loop2: detected capacity change from 0 to 256 [ 991.021119][ T1506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.041178][T26835] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d) [ 991.041680][T26835] exFAT-fs (loop2): failed to load alloc-bitmap [ 991.041698][T26835] exFAT-fs (loop2): failed to recognize exfat type [ 991.075741][T24386] usb 4-1: USB disconnect, device number 52 [ 991.088095][T24386] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 991.093449][ T1506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.101368][ T1506] bond0 (unregistering): Released all slaves [ 991.114546][T24386] garmin_gps 4-1:1.0: device disconnected [ 991.372948][T26768] rxe_eth0 speed is unknown, defaulting to 1000 [ 992.254769][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.256400][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.328679][T18644] Bluetooth: hci0: command tx timeout [ 992.602033][T26878] loop4: detected capacity change from 0 to 512 [ 992.622132][T26878] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 992.673148][T26878] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.6607: bad orphan inode 13 [ 992.673189][T26878] loop4: lost filesystem error report for type 5 error -117 [ 992.676949][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 992.676978][ C0] EXT4-fs (loop4): last error at time 1700001192: ext4_orphan_get:1429 [ 992.721752][T26878] ext4_test_bit(bit=12, block=18) = 1 [ 992.721778][T26878] is_bad_inode(inode)=0 [ 992.721792][T26878] NEXT_ORPHAN(inode)=0 [ 992.721806][T26878] max_ino=32 [ 992.721819][T26878] i_nlink=1 [ 992.794072][T26878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 993.013244][ T1506] hsr_slave_0: left promiscuous mode [ 993.021926][ T1506] hsr_slave_1: left promiscuous mode [ 993.022920][ T1506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.022950][ T1506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.030571][ T1506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.030597][ T1506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.102480][ T1506] veth1_macvtap: left promiscuous mode [ 993.102532][ T1506] veth0_macvtap: left promiscuous mode [ 993.102657][ T1506] veth1_vlan: left promiscuous mode [ 993.102747][ T1506] veth0_vlan: left promiscuous mode [ 993.164972][T26887] EXT4-fs error (device loop4): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 993.206304][T26896] loop2: detected capacity change from 0 to 32768 [ 993.219376][T26896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6612 (26896) [ 993.256098][T26896] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 993.256151][T26896] BTRFS info (device loop2): using crc32c checksum algorithm [ 993.442286][T26896] BTRFS info (device loop2): enabling ssd optimizations [ 993.442324][T26896] BTRFS info (device loop2): turning on async discard [ 993.442353][T26896] BTRFS info (device loop2): enabling free space tree [ 993.566408][T26896] BTRFS info (device loop2): balance: start -dconvert=raid0 -mconvert=raid0 [ 993.715065][ T9339] ------------[ cut here ]------------ [ 993.715088][ T9339] btrfs_abort_should_print_stack(__error) [ 993.715108][ T9339] WARNING: fs/btrfs/extent-tree.c:3429 at __btrfs_free_extent.isra.0+0x82e/0x2200, CPU#1: kworker/u8:17/9339 [ 993.739542][ T9339] Modules linked in: [ 993.744289][ T9339] CPU: 1 UID: 0 PID: 9339 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 993.755569][ T9339] Tainted: [L]=SOFTLOCKUP [ 993.759963][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 993.770179][ T9339] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 993.777804][ T9339] RIP: 0010:__btrfs_free_extent.isra.0+0x82e/0x2200 [ 993.784448][ T9339] Code: c6 00 18 49 8c 48 89 fb e8 cf b1 ab fd 8d 43 1e 83 f8 19 77 0f ba 01 00 04 02 48 0f a3 c2 0f 82 b5 55 ce fc e8 e3 b6 ab fd 90 <0f> 0b 90 e9 a7 55 ce fc e8 d5 b6 ab fd 48 8d 7b 60 48 b8 00 00 00 [ 993.804349][ T9339] RSP: 0018:ffffc90004d07640 EFLAGS: 00010293 [ 993.810542][ T9339] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000000000 [ 993.818581][ T9339] RDX: ffff88804c7f5dc0 RSI: ffffffff84607f6d RDI: ffff88804c7f5dc0 [ 993.826564][ T9339] RBP: 0000000000101000 R08: 0000000000000005 R09: fffffffffffffffb [ 993.834612][ T9339] R10: ffffffffffffffe4 R11: 0000000000000000 R12: ffff8880758570b0 [ 993.842642][ T9339] R13: ffff8880298c1720 R14: ffff88804eba8000 R15: 00000000ffffffe4 [ 993.850890][ T9339] FS: 0000000000000000(0000) GS:ffff888122a44000(0000) knlGS:0000000000000000 [ 993.859904][ T9339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.866503][ T9339] CR2: 00007f90cccb7000 CR3: 00000000522d5000 CR4: 0000000000350ef0 [ 993.874526][ T9339] Call Trace: [ 993.877845][ T9339] [ 993.880822][ T9339] ? __pfx___btrfs_free_extent.isra.0+0x10/0x10 [ 993.887249][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.892941][ T9339] ? do_raw_read_unlock+0x3f/0x70 [ 993.898090][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.903758][ T9339] ? btrfs_tree_mod_log_lowest_seq+0x20/0xb0 [ 993.909837][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.915506][ T9339] ? btrfs_merge_delayed_refs+0x102/0xad0 [ 993.921358][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.927094][ T9339] ? find_held_lock+0x2b/0x80 [ 993.931809][ T9339] ? __btrfs_run_delayed_refs+0x569/0x39b0 [ 993.937688][ T9339] ? __btrfs_run_delayed_refs+0x569/0x39b0 [ 993.942612][T26896] BTRFS info (device loop2 state A): balance: canceled [ 993.942720][T26896] BTRFS: error (device loop2 state A) in reset_balance_state:4077: errno=-28 No space left [ 993.942754][T26896] BTRFS info (device loop2 state EA): forced readonly [ 993.967447][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.973120][ T9339] __btrfs_run_delayed_refs+0x9bb/0x39b0 [ 993.978911][ T9339] ? lock_acquire+0x1d1/0x380 [ 993.983623][ T9339] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 993.989767][ T9339] ? join_transaction+0x404/0x11a0 [ 993.994909][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.000685][ T9339] ? join_transaction+0x416/0x11a0 [ 994.005829][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.011627][ T9339] ? lockdep_init_map_type+0x5c/0x250 [ 994.017054][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.022712][ T9339] ? __raw_spin_lock_init+0x3a/0x110 [ 994.027257][T26920] BTRFS: error (device loop2 state EA) in btrfs_create_new_inode:6782: errno=-28 No space left [ 994.038506][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.044194][ T9339] ? btrfs_find_space_info+0xc8/0x100 [ 994.049631][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.055285][ T9339] ? btrfs_record_root_in_trans+0x15b/0x1b0 [ 994.061246][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.067026][ T9339] ? start_transaction+0x279/0x1b20 [ 994.072261][ T9339] btrfs_run_delayed_refs+0x1a5/0x2c0 [ 994.077774][ T9339] flush_space+0xb7e/0xe20 [ 994.082242][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.088103][ T9339] ? lock_acquire+0x1d1/0x380 [ 994.092810][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.098550][ T9339] ? do_raw_spin_lock+0x128/0x260 [ 994.103605][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.109310][ T9339] ? find_held_lock+0x2b/0x80 [ 994.114023][ T9339] ? calc_available_free_space.isra.0+0x119/0x310 [ 994.120556][ T9339] ? __pfx_flush_space+0x10/0x10 [ 994.125528][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.131327][ T9339] ? calc_effective_data_chunk_size+0x1b0/0x210 [ 994.137632][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.143299][ T9339] ? find_held_lock+0x2b/0x80 [ 994.148038][ T9339] ? do_async_reclaim_metadata_space+0x49f/0x4c0 [ 994.154401][ T9339] ? do_async_reclaim_metadata_space+0x49f/0x4c0 [ 994.160831][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.166506][ T9339] do_async_reclaim_metadata_space+0x139/0x4c0 [ 994.172912][ T9339] btrfs_async_reclaim_metadata_space+0xd0/0x170 [ 994.179333][ T9339] process_one_work+0xac7/0x1b10 [ 994.184335][ T9339] ? __pfx_process_one_work+0x10/0x10 [ 994.189811][ T9339] ? lock_acquire+0x1d1/0x380 [ 994.194532][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.200237][ T9339] worker_thread+0x5ef/0xe50 [ 994.204880][ T9339] ? __pfx_worker_thread+0x10/0x10 [ 994.210059][ T9339] ? kthread+0x13a/0x450 [ 994.214329][ T9339] ? __pfx_worker_thread+0x10/0x10 [ 994.219567][ T9339] kthread+0x373/0x450 [ 994.223669][ T9339] ? __pfx_kthread+0x10/0x10 [ 994.228367][ T9339] ret_from_fork+0x730/0xd60 [ 994.232980][ T9339] ? __pfx_ret_from_fork+0x10/0x10 [ 994.238161][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.243825][ T9339] ? __switch_to+0x800/0x10f0 [ 994.248666][ T9339] ? __switch_to_asm+0x39/0x70 [ 994.253449][ T9339] ? __pfx_kthread+0x10/0x10 [ 994.258122][ T9339] ret_from_fork_asm+0x1a/0x30 [ 994.262941][ T9339] [ 994.265970][ T9339] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 994.273259][ T9339] CPU: 1 UID: 0 PID: 9339 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 994.284390][ T9339] Tainted: [L]=SOFTLOCKUP [ 994.288714][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 994.298779][ T9339] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 994.306368][ T9339] Call Trace: [ 994.309643][ T9339] [ 994.312568][ T9339] dump_stack_lvl+0x100/0x190 [ 994.317265][ T9339] vpanic+0x553/0x970 [ 994.321272][ T9339] ? __pfx_vpanic+0x10/0x10 [ 994.325793][ T9339] panic+0xd1/0xe0 [ 994.329523][ T9339] ? __pfx_panic+0x10/0x10 [ 994.333973][ T9339] check_panic_on_warn.cold+0x19/0x34 [ 994.339359][ T9339] ? __btrfs_free_extent.isra.0+0x82e/0x2200 [ 994.345355][ T9339] __warn.cold+0x191/0x318 [ 994.349787][ T9339] __report_bug+0x30f/0x440 [ 994.354292][ T9339] ? __btrfs_free_extent.isra.0+0x82e/0x2200 [ 994.360283][ T9339] ? __pfx___report_bug+0x10/0x10 [ 994.365332][ T9339] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 994.371782][ T9339] ? __btrfs_free_extent.isra.0+0x82e/0x2200 [ 994.377777][ T9339] report_bug+0xb3/0x220 [ 994.382024][ T9339] ? __btrfs_free_extent.isra.0+0x82e/0x2200 [ 994.388018][ T9339] handle_bug+0x16a/0x2a0 [ 994.392367][ T9339] exc_invalid_op+0x17/0x50 [ 994.396888][ T9339] asm_exc_invalid_op+0x1a/0x20 [ 994.401758][ T9339] RIP: 0010:__btrfs_free_extent.isra.0+0x82e/0x2200 [ 994.408362][ T9339] Code: c6 00 18 49 8c 48 89 fb e8 cf b1 ab fd 8d 43 1e 83 f8 19 77 0f ba 01 00 04 02 48 0f a3 c2 0f 82 b5 55 ce fc e8 e3 b6 ab fd 90 <0f> 0b 90 e9 a7 55 ce fc e8 d5 b6 ab fd 48 8d 7b 60 48 b8 00 00 00 [ 994.427982][ T9339] RSP: 0018:ffffc90004d07640 EFLAGS: 00010293 [ 994.434060][ T9339] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000000000 [ 994.442034][ T9339] RDX: ffff88804c7f5dc0 RSI: ffffffff84607f6d RDI: ffff88804c7f5dc0 [ 994.450010][ T9339] RBP: 0000000000101000 R08: 0000000000000005 R09: fffffffffffffffb [ 994.457990][ T9339] R10: ffffffffffffffe4 R11: 0000000000000000 R12: ffff8880758570b0 [ 994.465965][ T9339] R13: ffff8880298c1720 R14: ffff88804eba8000 R15: 00000000ffffffe4 [ 994.473956][ T9339] ? __btrfs_free_extent.isra.0+0x82d/0x2200 [ 994.479977][ T9339] ? __pfx___btrfs_free_extent.isra.0+0x10/0x10 [ 994.486235][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.491891][ T9339] ? do_raw_read_unlock+0x3f/0x70 [ 994.496944][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.502595][ T9339] ? btrfs_tree_mod_log_lowest_seq+0x20/0xb0 [ 994.508592][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.514233][ T9339] ? btrfs_merge_delayed_refs+0x102/0xad0 [ 994.519969][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.525617][ T9339] ? find_held_lock+0x2b/0x80 [ 994.530312][ T9339] ? __btrfs_run_delayed_refs+0x569/0x39b0 [ 994.536127][ T9339] ? __btrfs_run_delayed_refs+0x569/0x39b0 [ 994.541945][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.547605][ T9339] __btrfs_run_delayed_refs+0x9bb/0x39b0 [ 994.553269][ T9339] ? lock_acquire+0x1d1/0x380 [ 994.557956][ T9339] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 994.564029][ T9339] ? join_transaction+0x404/0x11a0 [ 994.569148][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.574801][ T9339] ? join_transaction+0x416/0x11a0 [ 994.579929][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.585580][ T9339] ? lockdep_init_map_type+0x5c/0x250 [ 994.590969][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.596619][ T9339] ? __raw_spin_lock_init+0x3a/0x110 [ 994.601926][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.607573][ T9339] ? btrfs_find_space_info+0xc8/0x100 [ 994.612961][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.618602][ T9339] ? btrfs_record_root_in_trans+0x15b/0x1b0 [ 994.624513][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.630160][ T9339] ? start_transaction+0x279/0x1b20 [ 994.635390][ T9339] btrfs_run_delayed_refs+0x1a5/0x2c0 [ 994.640773][ T9339] flush_space+0xb7e/0xe20 [ 994.645212][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.650855][ T9339] ? lock_acquire+0x1d1/0x380 [ 994.655545][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.661186][ T9339] ? do_raw_spin_lock+0x128/0x260 [ 994.666222][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.671870][ T9339] ? find_held_lock+0x2b/0x80 [ 994.676593][ T9339] ? calc_available_free_space.isra.0+0x119/0x310 [ 994.683032][ T9339] ? __pfx_flush_space+0x10/0x10 [ 994.687990][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.693635][ T9339] ? calc_effective_data_chunk_size+0x1b0/0x210 [ 994.699900][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.705549][ T9339] ? find_held_lock+0x2b/0x80 [ 994.710252][ T9339] ? do_async_reclaim_metadata_space+0x49f/0x4c0 [ 994.716609][ T9339] ? do_async_reclaim_metadata_space+0x49f/0x4c0 [ 994.722955][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.728611][ T9339] do_async_reclaim_metadata_space+0x139/0x4c0 [ 994.734808][ T9339] btrfs_async_reclaim_metadata_space+0xd0/0x170 [ 994.741174][ T9339] process_one_work+0xac7/0x1b10 [ 994.746162][ T9339] ? __pfx_process_one_work+0x10/0x10 [ 994.751563][ T9339] ? lock_acquire+0x1d1/0x380 [ 994.756267][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.761923][ T9339] worker_thread+0x5ef/0xe50 [ 994.766555][ T9339] ? __pfx_worker_thread+0x10/0x10 [ 994.771695][ T9339] ? kthread+0x13a/0x450 [ 994.775958][ T9339] ? __pfx_worker_thread+0x10/0x10 [ 994.781091][ T9339] kthread+0x373/0x450 [ 994.785174][ T9339] ? __pfx_kthread+0x10/0x10 [ 994.789780][ T9339] ret_from_fork+0x730/0xd60 [ 994.794379][ T9339] ? __pfx_ret_from_fork+0x10/0x10 [ 994.799500][ T9339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.805142][ T9339] ? __switch_to+0x800/0x10f0 [ 994.809835][ T9339] ? __switch_to_asm+0x39/0x70 [ 994.814610][ T9339] ? __pfx_kthread+0x10/0x10 [ 994.819218][ T9339] ret_from_fork_asm+0x1a/0x30 [ 994.824006][ T9339] [ 994.827789][ T9339] Kernel Offset: disabled [ 994.832104][ T9339] Rebooting in 86400 seconds..