last executing test programs: 15m53.051344005s ago: executing program 32 (id=22): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x3, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x4, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x8, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 12m51.189617108s ago: executing program 33 (id=984): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r1, 0x8000000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x42000004, 0x0, 0x0) 12m47.745460027s ago: executing program 34 (id=994): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xfa5, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba0000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x15) 11m45.207017683s ago: executing program 35 (id=1231): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 8m42.82356134s ago: executing program 36 (id=2158): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000040000000c001a8008000580040003"], 0x2c}}, 0x800) 8m0.786754434s ago: executing program 37 (id=2381): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc000, 0xe) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2\x00', 0x1000) 7m1.533258773s ago: executing program 38 (id=2824): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x0) 6m9.002576756s ago: executing program 39 (id=3184): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m39.206002557s ago: executing program 40 (id=4554): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, &(0x7f0000004b00)) unshare(0x2040400) getdents(r0, &(0x7f0000000380)=""/171, 0xab) read$FUSE(r0, 0x0, 0x0) 2m8.599388072s ago: executing program 41 (id=4650): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xf, 0x6, 0xdeac, 0x38000, 0x2, "1039db8d79bea18f23015ae9ae8501313cf326"}) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000080)={0x0, 0x801, 0x0, 0x0, 0x9}) syz_open_dev$ptys(0xc, 0x3, 0x0) 1m47.733850434s ago: executing program 0 (id=4805): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000feb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68812300000004000000010000b441bf", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 1m46.926085174s ago: executing program 0 (id=4811): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/4073, 0xff75}], 0x1) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) 1m46.454650623s ago: executing program 0 (id=4814): unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m46.057085119s ago: executing program 0 (id=4816): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xae4, &(0x7f0000000340)="$eJzs3UuMHEfBAOCa2Z31bh6/1/kdsjghDwJJeGQdrxfzsMCObCFhxRHighRxsRwnWBgjERAQRcL2iRuJIiNx4iFOuUThIZELssKFSyRiKULKAQUOHLCMiMQhGOxBO1s121M7k57Zx/TOzvdJPTXV1d1VPdPT06+qCsDYqrdeFxfnaiFcfPXFo39/4G8zS2MOtaeYbb1OFmKNEEItxiez5b09sRxef+e5k93CWlhovaZ4ePxqe96bQwjnakuLng17Ll5+4fWFx46fP3bhvjdeOnhlc9YeAADGyxcvHVy8/S9/vHPXtZfvPhx2tMen4/PZGL8lHvcfjgf+6fi/HjrjtcJQNJVNNxmH+kzndBNdpivm08imm+yR/1SWf6PHdDvCe+c/URjXbb1hlKXteDbU6vMd8Xp9fn75nDy0zuunavNnT5956pmKCgpsuH/dE0K4tzAcudAZ32rDoS1QhjUOzY1eZv7dbdfh8PDyutZcVvk69zPU3l0u7DqW0dxZ9R4IYFl+v3CVc/mVhfVpL22yv/yvPlrvPj9sgGFv/wPlP1Vx/kH+vzhvj8PG2a5bU1qv9Du6Jcbz+wj580u9f3/5nY7Osfn9iEaf5ex1H2FU7i/0KufEkMuxVr3Kn28X29VnY5g+h89l6cXfT/6djsp3DHT37rhcQzasHpKqy7HZw5+32Xp2rktjPctqVrDPAUZD/txcM90fjfLn+vL0HSXp0yXpM4X0emGSlH5Tyfw3l6TDOPvVt34Ynq+tnOfn5/SDXg9P19lujeH/DVie/HrkoPnnz/0Oar35588Tw1b22xPh3KeefOLy8vP/tfb2fyNu7+l0Yzb+ti7FCdL1wvy6evvZ/1hxYCpLz6e7LSvPrV2mb73f3TldbffKckJhP7OqHHOd8+3sNd1dndPNZtPNxGE6K2/x+CQUjkfSfOn4I+1X0+c1ma1vI1uPqawcab+yK4Z5OWAt0vbY6/n/tH3OhUbtqdNnTj0S42k7/cNEY8fS+H1DLjewfv3W/5kLnfV/bmmPb9SL+4WdK+Nry/uFV+LyOscvtPPpHL8/xtP/3FcnZlrj509+48yTG7/6MNae+d6zXztx5sypb3qz5jef3xrFGORNOm1Zw+zNygvvzTDeVLxjAjbd3u8vHwQ8fPrrJ54+9fSps/sPHNi/sHDg0/sX97aO6/cWj+6LzlVQWmAjrfzpV10SAAAAAAAAAAAAoF/fOXb08puvffKt5fr/K/X/Uv3/9ORvqv//g6z+f0c9+fpKPfhUD3BX6Jy+Xd8+a2A1byegEYf/z8q7u7CcJbdn870vhu1+/GL9/5Rd3q5rKs8d2fhGj2jWnMCq9lKmsjZI8v4CPxjDCzH8eYAK1Wa6j45hWfvWaVtP7VMU2qVoah94dKTvLW0NqR2TVP+7a7tOhS971xDKyMYbRnXCqtcR6O4fY9X+9z9XVrzyshh6D5PDze/H47tNNHsepffqwWa79hgEVKvZbj63qv4/03XPFJ793Reml4Y02dVHO/eXefulMIg/vdkZ3+r9T252/nm/fcPOv+r1H3b/n+3+7/re/2U95s2uLd9//+TKW4Vsw55+88/XP7UDvXuw/K/F/NPaPBj6y7/5syz//IZQn/6T5X9Tn/mvWv+71pb/f2P+6WN76P5+818uca3eWY78unG6/5dfN06uZ+uf2vZ8j/y/9Gy39V9jR403Yv4wzkaln9lBZccR7YP2Vf3//v7XHfMN+v+/3v5/24XNdmv5cxifiPHpmEd6ziHv72TQ8qfnK9L/QHqeIi2/VvL/pv/f0faZGJb1h536/03b42z8yy/EW59lije6fLbbdV8Do+rtEbn/1zoB2QLlGMIwvQXKYOh/aE6sYb72he6Ky99sNiu9oeduYrWq/vyrPk+oOv+qP/8yef+/+TF83v9vnp73/5un5/3/5ukz8RvqlZ6uN377eudy8lOZWliV3nJHtty8f+C5kvT3l6Tv6Z7ePm2/s2T+u0rSP1CSfl87/VDHFCn97pL57ylJv60k/f6S9A+VpH+4JP2BkvSHCunFPqBT+kdK5t/uUn2UcV1/GGd5/Ty/fxgf6f5Pr9//7pJ0YHT96OV9R5745Vdml+v/T7Wvh6T7eIdjvBHPn74b4/l971CIL6W9FuN/zdK3+vUOGCd5+xn5//uDJenA6ErPefl9wxiqTXcfHcOydqt6HeczWj4aw4/F8OMxfDiG8zHcG8N9MVwYUvnYHEde+c3B52sr5/s7s/R+nyfP6wN1tBMVQtjfZ3ny6wODPs+et+M3qPXmv8bqYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJWpt14XF+dqIVx89cWjXz5+eu/SmEPtKWZbr5OFWKM9XwiPxHAihj+Nb66/89zJYngjhrWwEGqh1h4fHr/azunmEMK5cG+4FGbDnouXX3h94bHj549duO+Nlw5e2bxPAAAAALa//wUAAP//t1MTvA==") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 1m45.141245092s ago: executing program 0 (id=4822): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd27, 0x25dfcbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x2, 0x3}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m43.133376689s ago: executing program 0 (id=4831): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e21, 0x2080000, @private0, 0x10}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts={{0x12, 0x29, 0x36, {0x3a}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x1d}}}], 0x30}, 0x440e0) 1m42.408472815s ago: executing program 42 (id=4831): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e21, 0x2080000, @private0, 0x10}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts={{0x12, 0x29, 0x36, {0x3a}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x1d}}}], 0x30}, 0x440e0) 1m21.700768134s ago: executing program 3 (id=4893): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1080006, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81, 0x108) 1m20.495691145s ago: executing program 3 (id=4900): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000400)={0x0, 0x186a0}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0) 1m20.155104981s ago: executing program 3 (id=4904): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1m19.813901416s ago: executing program 3 (id=4905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0) 1m19.488673051s ago: executing program 3 (id=4906): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='tcp 2', 0x5) 1m19.154432622s ago: executing program 3 (id=4908): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) 1m14.63863544s ago: executing program 4 (id=4929): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 1m14.411657257s ago: executing program 4 (id=4930): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1m13.376395298s ago: executing program 4 (id=4933): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 1m13.37103709s ago: executing program 2 (id=4945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1}}], 0x2, 0x6085094) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) 1m13.123008634s ago: executing program 2 (id=4936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x500, 0x400) r3 = fcntl$dupfd(r1, 0x406, r1) fanotify_mark(r2, 0x241, 0x40000019, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.519302019s ago: executing program 2 (id=4940): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x800) 1m12.105389055s ago: executing program 2 (id=4942): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x7, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7ffffffffffdfffe}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r3}) 1m11.927294157s ago: executing program 2 (id=4944): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='tcp 2', 0x5) 1m11.369850266s ago: executing program 2 (id=4949): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="00aa97c4e34e7f390bacfc13400000000000000021ca919fdd77ce62bfdc79dae0dd13d99836e3e0d10575cb1b1c881817216e5d684c6aa6f988295228b1d76ccda451a263087b479582a4d43026b82a9dc5b7547c89547ab32125ffd6c015c884b14926c5d789ddbaf267268b48b3f0b91b0d2808ed02"], 0x0, 0x55d, &(0x7f0000000540)="$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") mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 1m10.00015995s ago: executing program 4 (id=4955): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x9) 1m9.549793438s ago: executing program 4 (id=4959): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='tcp 2', 0x5) 1m9.247542056s ago: executing program 4 (id=4960): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 1m3.844021017s ago: executing program 43 (id=4908): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) 56.200601014s ago: executing program 44 (id=4949): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="00aa97c4e34e7f390bacfc13400000000000000021ca919fdd77ce62bfdc79dae0dd13d99836e3e0d10575cb1b1c881817216e5d684c6aa6f988295228b1d76ccda451a263087b479582a4d43026b82a9dc5b7547c89547ab32125ffd6c015c884b14926c5d789ddbaf267268b48b3f0b91b0d2808ed02"], 0x0, 0x55d, &(0x7f0000000540)="$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") mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 54.153396456s ago: executing program 45 (id=4960): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 6.196054148s ago: executing program 8 (id=5287): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) 5.815627264s ago: executing program 8 (id=5292): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg$unix(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) 5.622338366s ago: executing program 1 (id=5293): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff00070581020002000705020200020007058303400009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2, 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='hello', 0x5) 3.843235405s ago: executing program 8 (id=5306): r0 = fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) unlink(0x0) 3.700120862s ago: executing program 6 (id=5308): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000040)='\b', 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x392fc000) 3.425546924s ago: executing program 8 (id=5310): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.196766282s ago: executing program 8 (id=5312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe030100070581020002000705020200020007058303400001"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1:1.0/bInterfaceClass\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0x100) 2.999798454s ago: executing program 6 (id=5314): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x90, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.82872053s ago: executing program 5 (id=5315): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.828251352s ago: executing program 7 (id=5316): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_io_uring_setup(0x664e, &(0x7f0000000280)={0x0, 0x2, 0x1000, 0x2, 0x3}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000240)={0x1, 0xffffffffffffffff, 0x11, {0x7, 0x7}, 0xb}, 0x1) 2.670830751s ago: executing program 6 (id=5317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.604374928s ago: executing program 9 (id=5318): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @any, 0xfffc, 0x2}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.492707917s ago: executing program 5 (id=5319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x16d, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.421853516s ago: executing program 1 (id=5320): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r0) 2.343266695s ago: executing program 6 (id=5321): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.285426932s ago: executing program 7 (id=5322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 2.122830894s ago: executing program 5 (id=5323): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) 2.095297332s ago: executing program 7 (id=5324): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1.958579884s ago: executing program 9 (id=5325): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="401608ef", 0x4}, {&(0x7f0000001480)="6e2bef2e13be20ee61be98b3d42da326", 0x10}], 0x2, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}], 0x1, 0x4001) recvmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/30, 0x1e}], 0x1}, 0x41) 1.957102058s ago: executing program 1 (id=5326): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./bus/file0/file0\x00', 0x4) 1.794940876s ago: executing program 7 (id=5327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.662314439s ago: executing program 9 (id=5328): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x3, 0x10000002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) 1.62921787s ago: executing program 1 (id=5329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.623412744s ago: executing program 5 (id=5330): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) read$usbmon(r1, &(0x7f0000000340)=""/100, 0x64) 1.362207093s ago: executing program 1 (id=5331): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$l2tp6(r1, 0x0, 0x0, 0x20, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.204751665s ago: executing program 6 (id=5332): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) 1.190595865s ago: executing program 7 (id=5333): close(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 808.862954ms ago: executing program 9 (id=5334): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250900000028000280080002000200008008000100002000001400038008"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 661.906934ms ago: executing program 5 (id=5335): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', 'dir0/tracing_on/file0', [], 0xa, "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"}, 0xfd7) 590.983906ms ago: executing program 6 (id=5336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6e, 0x100, @void}}}}}}}}, 0x32) 477.952858ms ago: executing program 9 (id=5337): setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x1, r2}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 476.639514ms ago: executing program 5 (id=5338): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='mountinfo\x00') 262.93446ms ago: executing program 1 (id=5339): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x100000006, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 260.907621ms ago: executing program 9 (id=5340): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xe}, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 71.912267ms ago: executing program 8 (id=5341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000280)="8bcceb216f624c06f5ff84087509000000000800", 0x14}, {&(0x7f0000000180)="c04b89ae", 0x4}], 0x2) 0s ago: executing program 7 (id=5342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): 932][T11566] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 940.552038][T11566] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 940.560356][T11566] usb 8-1: Product: syz [ 940.564536][T11566] usb 8-1: Manufacturer: syz [ 940.569142][T11566] usb 8-1: SerialNumber: syz [ 940.580475][T11566] usb 8-1: config 0 descriptor?? [ 940.601276][T14545] bond1 (unregistering): (slave gre1): Releasing backup interface [ 940.609112][T14545] gre1 (unregistering): left promiscuous mode [ 940.681888][T14545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.704310][T14545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.714863][T14545] bond0 (unregistering): Released all slaves [ 940.729112][T14545] bond1 (unregistering): Released all slaves [ 940.789355][T11566] ch341 8-1:0.0: ch341-uart converter detected [ 941.013624][T11566] usb 8-1: failed to receive control message: -71 [ 941.020157][T11566] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 941.066388][T11566] usb 8-1: USB disconnect, device number 11 [ 941.074292][T11566] ch341 8-1:0.0: device disconnected [ 941.643714][T21206] loop7: detected capacity change from 0 to 32768 [ 941.808649][T21206] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 941.816864][T21206] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 942.015904][T21206] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 942.084081][T11566] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 942.090894][T11566] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 942.238883][T11566] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 147ms [ 942.246701][T11566] gfs2: fsid=syz:syz.0: jid=0: Done [ 942.308540][T21206] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 943.302533][ T5736] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 943.457892][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.465324][T14545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.622466][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.629899][T14545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.712223][T14545] veth1_macvtap: left promiscuous mode [ 943.717743][T14545] veth0_macvtap: left promiscuous mode [ 943.723353][T14545] veth1_vlan: left promiscuous mode [ 943.728634][T14545] veth0_vlan: left promiscuous mode [ 944.258397][ T30] audit: type=1326 audit(1785510797.642:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.366448][ T30] audit: type=1326 audit(1785510797.642:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.432986][ T30] audit: type=1326 audit(1785510797.642:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.556854][T21277] dummy_hcd dummy_hcd.0: remove, state 1 [ 944.568894][T21277] usb usb1: USB disconnect, device number 1 [ 944.574999][ T30] audit: type=1326 audit(1785510797.642:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.611064][ T30] audit: type=1326 audit(1785510797.642:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.643634][ T30] audit: type=1326 audit(1785510797.642:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.689711][ T30] audit: type=1326 audit(1785510797.642:252): auid=4294967295 uid=384 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.715617][ T5736] usb 1-1: string descriptor 0 read error: -19 [ 944.715760][ T5736] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 944.715801][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.753420][ T5736] usb 1-1: USB disconnect, device number 5 [ 944.768984][T21279] loop3: detected capacity change from 0 to 1024 [ 944.777111][T21279] EXT4-fs: inline encryption not supported [ 944.792423][ T30] audit: type=1326 audit(1785510797.642:253): auid=4294967295 uid=384 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.890878][T21277] dummy_hcd dummy_hcd.0: stopped [ 944.895864][T21277] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 944.943682][ T30] audit: type=1326 audit(1785510797.642:254): auid=4294967295 uid=384 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.969037][ T30] audit: type=1326 audit(1785510797.712:255): auid=4294967295 uid=384 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.4779" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74499e019 code=0x7ffc0000 [ 944.998087][T21279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.030050][T21280] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 945.038276][T21280] dummy_hcd dummy_hcd.0: Dummy host controller [ 945.064845][T21280] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 945.100658][T21280] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 945.142654][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4783'. [ 945.195123][T21280] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 945.231907][T21280] usb usb1: Product: Dummy host controller [ 945.237738][T21280] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 945.244340][T21280] usb usb1: SerialNumber: dummy_hcd.0 [ 945.363255][T14910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.365112][T21280] hub 1-0:1.0: USB hub found [ 945.379370][T21280] hub 1-0:1.0: 1 port detected [ 946.403825][ T5736] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 946.612670][T21308] loop7: detected capacity change from 0 to 32768 [ 946.798463][T21319] netlink: 'syz.2.4791': attribute type 1 has an invalid length. [ 946.806247][T21319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4791'. [ 946.976592][T21308] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 946.984787][T21308] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 947.050467][T21308] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 947.059931][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 947.066700][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 947.445033][T14545] team0 (unregistering): Port device team_slave_1 removed [ 947.644652][T21328] loop0: detected capacity change from 0 to 2048 [ 947.843466][T21328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 947.852263][T14545] team0 (unregistering): Port device team_slave_0 removed [ 947.892046][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 825ms [ 947.899698][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 947.904930][T21308] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 948.092449][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4798'. [ 949.891469][ T5736] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 951.008148][T21397] loop0: detected capacity change from 0 to 2048 [ 951.027454][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 951.173794][T21397] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 951.191958][T21404] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 951.231644][T21397] NILFS (loop0): failed to count free inodes: err=-34 [ 951.241434][T21397] overlayfs: upper fs does not support tmpfile. [ 951.253424][T21397] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 951.277194][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.288670][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.298437][ T5736] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 951.307484][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.346985][T21397] overlayfs: failed to set xattr on upper [ 951.352734][T21397] overlayfs: ...falling back to redirect_dir=nofollow. [ 951.360167][ T5736] usb 4-1: config 0 descriptor?? [ 951.385853][T21397] overlayfs: ...falling back to index=off. [ 951.391828][T21397] overlayfs: ...falling back to uuid=null. [ 951.480104][T21397] NILFS (loop0): failed to count free inodes: err=-34 [ 951.709764][T21412] loop2: detected capacity change from 0 to 512 [ 951.752422][T21404] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 951.763128][T21404] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 951.778708][T21404] Remounting filesystem read-only [ 951.810946][T13442] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 951.865198][T11566] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 951.887144][T13442] NILFS error (device loop0): nilfs_readdir: bad page in #18 [ 951.923518][T13442] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=13) [ 951.957493][T13442] NILFS error (device loop0): nilfs_readdir: bad page in #13 [ 951.980586][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 951.980607][ T30] audit: type=1800 audit(1785510805.382:258): pid=21412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4821" name="bus" dev="loop2" ino=1048772 res=0 errno=0 [ 951.987431][T13442] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 952.021479][T13442] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 952.223120][T21421] loop2: detected capacity change from 0 to 1024 [ 952.356770][T21421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.537101][T11566] usb 8-1: Using ep0 maxpacket: 8 [ 952.551889][T21421] EXT4-fs warning (device loop2): empty_inline_dir:1765: bad inline directory (dir #12) - no `..' [ 952.690234][ T5626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.763083][T20991] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 952.811301][T20991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.867371][T20991] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 952.914059][ T5736] hid-led 0003:27B8:01ED.003C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 952.934545][ T5736] hid-led 0003:27B8:01ED.003C: ThingM blink(1) initialized [ 952.961643][T20991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.969905][T20991] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 953.022997][T20991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 953.051939][T20991] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 953.126572][T20991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 953.221548][T11566] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 953.230094][T11566] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 953.238194][T11566] usb 8-1: config 0 has no interface number 0 [ 953.244305][T11566] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 953.255886][T11566] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59219, setting to 1024 [ 953.386067][ T5748] usb 4-1: USB disconnect, device number 21 [ 953.559807][T13442] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 953.755901][T21454] loop2: detected capacity change from 0 to 40427 [ 953.765083][T21454] F2FS-fs (loop2): Image doesn't support compression [ 953.772067][T21454] F2FS-fs (loop2): build fault injection rate: 690 [ 953.820016][T21454] F2FS-fs (loop2): invalid crc value [ 953.971093][T21454] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 953.988115][T11566] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 953.997260][T11566] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 954.005255][T11566] usb 8-1: Product: syz [ 954.024534][T21454] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 954.097710][ T30] audit: type=1800 audit(1785510807.442:259): pid=21454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4830" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 954.119629][T11566] usb 8-1: config 0 descriptor?? [ 954.266656][T21406] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 954.323409][T14545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.389388][T14545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.522033][ T5626] syz-executor: attempt to access beyond end of device [ 954.522033][ T5626] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 954.637274][T11566] usb 8-1: can't set config #0, error -71 [ 954.664378][T11566] usb 8-1: USB disconnect, device number 12 [ 954.668207][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 954.668262][ T5626] Tainted: [L]=SOFTLOCKUP [ 954.668277][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 954.668300][ T5626] Call Trace: [ 954.668313][ T5626] [ 954.668327][ T5626] dump_stack_lvl+0x100/0x190 [ 954.668376][ T5626] f2fs_stop_checkpoint+0x5e6/0xb30 [ 954.668438][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.668485][ T5626] ? errseq_set+0xe3/0x150 [ 954.668549][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.668603][ T5626] f2fs_write_end_bio+0xf53/0x1340 [ 954.668648][ T5626] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 954.668695][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.668752][ T5626] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 954.668791][ T5626] bio_endio+0x778/0x8e0 [ 954.668839][ T5626] submit_bio_noacct+0x64c/0x1ff0 [ 954.668911][ T5626] f2fs_submit_write_bio+0x133/0x330 [ 954.668975][ T5626] __submit_merged_bio+0x330/0x7b0 [ 954.669014][ T5626] ? rcu_is_watching+0x12/0xc0 [ 954.669076][ T5626] __submit_merged_write_cond+0x3fe/0x510 [ 954.669127][ T5626] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 954.669180][ T5626] ? __pfx___might_resched+0x10/0x10 [ 954.669222][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.669267][ T5626] ? folio_clear_dirty_for_io+0x178/0x960 [ 954.669336][ T5626] f2fs_write_cache_pages+0x20e9/0x2630 [ 954.669407][ T5626] ? find_held_lock+0x2b/0x80 [ 954.669464][ T5626] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 954.669511][ T5626] ? is_bpf_text_address+0x8a/0x1a0 [ 954.669559][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.669605][ T5626] ? __kasan_check_byte+0x13/0x50 [ 954.669645][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.669691][ T5626] ? unwind_next_frame+0x3be/0x2090 [ 954.669751][ T5626] ? rcu_is_watching+0x12/0xc0 [ 954.669804][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.669852][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.669898][ T5626] ? __kasan_check_byte+0x13/0x50 [ 954.669938][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.670001][ T5626] ? is_bpf_text_address+0x94/0x1a0 [ 954.670041][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.670087][ T5626] ? kernel_text_address+0x8d/0x100 [ 954.670192][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.670238][ T5626] ? check_prev_add+0x354/0xe60 [ 954.670278][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.670326][ T5626] ? rcu_is_watching+0x12/0xc0 [ 954.670387][ T5626] f2fs_write_data_pages+0x799/0x16d0 [ 954.670449][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 954.670507][ T5626] ? do_writepages+0x4b5/0x600 [ 954.670572][ T5626] ? do_writepages+0x4b5/0x600 [ 954.670629][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.670680][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.670725][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 954.670777][ T5626] do_writepages+0x278/0x600 [ 954.670844][ T5626] ? __pfx_do_writepages+0x10/0x10 [ 954.670902][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 954.670955][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.671000][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 954.671048][ T5626] filemap_writeback+0x22d/0x2e0 [ 954.671089][ T5626] ? __pfx_filemap_writeback+0x10/0x10 [ 954.671151][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.671252][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.671297][ T5626] ? find_held_lock+0x2b/0x80 [ 954.671352][ T5626] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 954.671402][ T5626] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 954.671449][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.671508][ T5626] f2fs_sync_dirty_inodes+0x46a/0x970 [ 954.671582][ T5626] block_operations+0x2a6/0xfc0 [ 954.671642][ T5626] ? __pfx_block_operations+0x10/0x10 [ 954.671748][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.671798][ T5626] ? ktime_get+0x22c/0x320 [ 954.671840][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.671885][ T5626] ? rcu_is_watching+0x12/0xc0 [ 954.671947][ T5626] f2fs_write_checkpoint+0x58b/0x53d0 [ 954.672027][ T5626] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 954.672089][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.672134][ T5626] ? rcu_is_watching+0x12/0xc0 [ 954.672188][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.672233][ T5626] ? kthread_stop+0x280/0x630 [ 954.672296][ T5626] kill_f2fs_super+0x3f1/0x4a0 [ 954.672345][ T5626] ? __pfx_kill_f2fs_super+0x10/0x10 [ 954.672416][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 954.672464][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.672511][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.672577][ T5626] deactivate_locked_super+0xc1/0x1b0 [ 954.672626][ T5626] deactivate_super+0xe7/0x110 [ 954.672675][ T5626] cleanup_mnt+0x21f/0x450 [ 954.672733][ T5626] task_work_run+0x150/0x240 [ 954.672773][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 954.672816][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.672871][ T5626] exit_to_user_mode_loop+0x1d8/0x6f0 [ 954.672917][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.672963][ T5626] ? rcu_is_watching+0x12/0xc0 [ 954.673021][ T5626] do_syscall_64+0x666/0x870 [ 954.673078][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.673118][ T5626] RIP: 0033:0x7f06bd79f257 [ 954.673149][ T5626] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 954.673186][ T5626] RSP: 002b:00007ffe36703f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 954.673222][ T5626] RAX: 0000000000000000 RBX: 00007f06bd83445c RCX: 00007f06bd79f257 [ 954.673248][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe36703fc0 [ 954.673271][ T5626] RBP: 00007ffe36703fc0 R08: 00007ffe36704fc0 R09: 00000000ffffffff [ 954.673296][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe36705050 [ 954.673321][ T5626] R13: 00007f06bd83445c R14: 00000000000e8f7c R15: 00007ffe36705090 [ 954.673373][ T5626] [ 954.673387][ T5626] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 955.097650][T20991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.110762][T20991] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.316724][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 955.316780][ T5626] Tainted: [L]=SOFTLOCKUP [ 955.316795][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 955.316817][ T5626] Call Trace: [ 955.316830][ T5626] [ 955.316845][ T5626] dump_stack_lvl+0x100/0x190 [ 955.316893][ T5626] f2fs_stop_checkpoint+0x5e6/0xb30 [ 955.316956][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.317004][ T5626] ? errseq_set+0xe3/0x150 [ 955.317062][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.317116][ T5626] f2fs_write_end_bio+0xf53/0x1340 [ 955.317161][ T5626] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 955.317209][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.317265][ T5626] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 955.317305][ T5626] bio_endio+0x778/0x8e0 [ 955.317353][ T5626] submit_bio_noacct+0x64c/0x1ff0 [ 955.317425][ T5626] f2fs_submit_write_bio+0x133/0x330 [ 955.317488][ T5626] __submit_merged_bio+0x330/0x7b0 [ 955.317533][ T5626] ? rcu_is_watching+0x12/0xc0 [ 955.317595][ T5626] __submit_merged_write_cond+0x3fe/0x510 [ 955.317647][ T5626] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 955.317700][ T5626] ? __pfx___might_resched+0x10/0x10 [ 955.317741][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.317787][ T5626] ? folio_clear_dirty_for_io+0x178/0x960 [ 955.317856][ T5626] f2fs_write_cache_pages+0x20e9/0x2630 [ 955.317927][ T5626] ? find_held_lock+0x2b/0x80 [ 955.317983][ T5626] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 955.318030][ T5626] ? is_bpf_text_address+0x8a/0x1a0 [ 955.318074][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.318120][ T5626] ? __kasan_check_byte+0x13/0x50 [ 955.318160][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.318207][ T5626] ? unwind_next_frame+0x3be/0x2090 [ 955.318266][ T5626] ? rcu_is_watching+0x12/0xc0 [ 955.318320][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.318367][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.318413][ T5626] ? __kasan_check_byte+0x13/0x50 [ 955.318452][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.318515][ T5626] ? is_bpf_text_address+0x94/0x1a0 [ 955.318561][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.318606][ T5626] ? kernel_text_address+0x8d/0x100 [ 955.318712][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.318758][ T5626] ? check_prev_add+0x354/0xe60 [ 955.318799][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.318844][ T5626] ? rcu_is_watching+0x12/0xc0 [ 955.318904][ T5626] f2fs_write_data_pages+0x799/0x16d0 [ 955.318966][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 955.319024][ T5626] ? do_writepages+0x4b5/0x600 [ 955.319082][ T5626] ? do_writepages+0x4b5/0x600 [ 955.319140][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.319190][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.319236][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 955.319289][ T5626] do_writepages+0x278/0x600 [ 955.319355][ T5626] ? __pfx_do_writepages+0x10/0x10 [ 955.319414][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 955.319466][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.319511][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 955.319562][ T5626] filemap_writeback+0x22d/0x2e0 [ 955.319603][ T5626] ? __pfx_filemap_writeback+0x10/0x10 [ 955.319665][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.319766][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.319811][ T5626] ? find_held_lock+0x2b/0x80 [ 955.319866][ T5626] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 955.319915][ T5626] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 955.319963][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.320022][ T5626] f2fs_sync_dirty_inodes+0x46a/0x970 [ 955.320092][ T5626] block_operations+0x2a6/0xfc0 [ 955.320153][ T5626] ? __pfx_block_operations+0x10/0x10 [ 955.320258][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.320308][ T5626] ? ktime_get+0x22c/0x320 [ 955.320350][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.320397][ T5626] ? rcu_is_watching+0x12/0xc0 [ 955.320458][ T5626] f2fs_write_checkpoint+0x58b/0x53d0 [ 955.320542][ T5626] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 955.320604][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.320650][ T5626] ? rcu_is_watching+0x12/0xc0 [ 955.320703][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.320748][ T5626] ? kthread_stop+0x280/0x630 [ 955.320811][ T5626] kill_f2fs_super+0x3f1/0x4a0 [ 955.320862][ T5626] ? __pfx_kill_f2fs_super+0x10/0x10 [ 955.320932][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 955.320980][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.321027][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.321089][ T5626] deactivate_locked_super+0xc1/0x1b0 [ 955.321138][ T5626] deactivate_super+0xe7/0x110 [ 955.321186][ T5626] cleanup_mnt+0x21f/0x450 [ 955.321244][ T5626] task_work_run+0x150/0x240 [ 955.321284][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 955.321327][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.321382][ T5626] exit_to_user_mode_loop+0x1d8/0x6f0 [ 955.321429][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.321474][ T5626] ? rcu_is_watching+0x12/0xc0 [ 955.321539][ T5626] do_syscall_64+0x666/0x870 [ 955.321595][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.321635][ T5626] RIP: 0033:0x7f06bd79f257 [ 955.321664][ T5626] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 955.321702][ T5626] RSP: 002b:00007ffe36703f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 955.321738][ T5626] RAX: 0000000000000000 RBX: 00007f06bd83445c RCX: 00007f06bd79f257 [ 955.321763][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe36703fc0 [ 955.321787][ T5626] RBP: 00007ffe36703fc0 R08: 00007ffe36704fc0 R09: 00000000ffffffff [ 955.321812][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe36705050 [ 955.321837][ T5626] R13: 00007f06bd83445c R14: 00000000000e8f7c R15: 00007ffe36705090 [ 955.321889][ T5626] [ 955.321903][ T5626] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 955.606955][T21485] loop7: detected capacity change from 0 to 2048 [ 955.621859][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 955.780143][T21485] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 955.805466][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 956.061512][T21485] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 956.071120][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 956.084745][T21485] UDF-fs: Scanning with blocksize 512 failed [ 956.089333][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 956.103756][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 956.177744][ T5354] loop2: lost filesystem error report for type 5 error -108 [ 956.182495][T21485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.403836][ T30] audit: type=1800 audit(1785510809.752:260): pid=21485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4836" name="file1" dev="loop7" ino=838 res=0 errno=0 [ 956.520812][T16114] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.530607][T16114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.728901][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18 [ 956.873858][T14545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.884179][T14545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.115300][T16114] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.122480][T16114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.637535][T20991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 957.736038][T20991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.016102][T14545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.026423][T14545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.291210][T20437] Bluetooth: hci3: command tx timeout [ 958.847205][T14545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.877567][T14545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.512590][T14545] bridge_slave_1: left allmulticast mode [ 959.518289][T14545] bridge_slave_1: left promiscuous mode [ 959.524070][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.594658][T14545] bridge_slave_0: left allmulticast mode [ 959.600324][T14545] bridge_slave_0: left promiscuous mode [ 959.614178][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.037985][T14545] gretap0 (unregistering): left promiscuous mode [ 960.084995][T14545] bond2 (unregistering): (slave gre2): Releasing backup interface [ 960.092828][T14545] gre2 (unregistering): left promiscuous mode [ 960.113212][T14545] bond1 (unregistering): (slave geneve2): Releasing active interface [ 960.161129][T14545] bond0 (unregistering): left promiscuous mode [ 960.167314][T14545] bond_slave_0: left promiscuous mode [ 960.172987][T14545] bond_slave_1: left promiscuous mode [ 960.180833][T14545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.193272][T14545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.203351][T14545] bond0 (unregistering): Released all slaves [ 960.215663][T14545] bond1 (unregistering): Released all slaves [ 960.236825][T14545] bond2 (unregistering): Released all slaves [ 960.371870][T20437] Bluetooth: hci3: command tx timeout [ 960.426696][T20991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.222459][T21478] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.232525][T21478] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.239712][T21478] bridge_slave_0: entered allmulticast mode [ 961.250664][T21478] bridge_slave_0: entered promiscuous mode [ 961.259591][T21478] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.269596][T21478] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.277065][T21478] bridge_slave_1: entered allmulticast mode [ 961.287854][T21478] bridge_slave_1: entered promiscuous mode [ 961.398168][T21478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.431231][T21478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.446151][T20991] veth0_vlan: entered promiscuous mode [ 961.480657][T20991] veth1_vlan: entered promiscuous mode [ 961.512310][T21478] team0: Port device team_slave_0 added [ 961.521367][T21478] team0: Port device team_slave_1 added [ 961.611330][T21478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.621368][T21478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.665463][T21478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.701912][T21478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.708862][T21478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.739925][T21478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.752557][ T5283] 8021q: adding VLAN 0 to HW filter on device eth19 [ 961.816652][T20991] veth0_macvtap: entered promiscuous mode [ 961.828742][T14545] veth0_to_bridge: left promiscuous mode [ 961.838724][T14545] hsr_slave_0: left promiscuous mode [ 961.846551][T14545] hsr_slave_1: left promiscuous mode [ 961.852401][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.859765][T14545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.871024][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.878403][T14545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.897113][T14545] veth1_macvtap: left promiscuous mode [ 961.905977][T14545] veth0_macvtap: left promiscuous mode [ 961.911500][T14545] veth1_vlan: left promiscuous mode [ 961.916752][T14545] veth0_vlan: left promiscuous mode [ 962.415067][T20991] veth1_macvtap: entered promiscuous mode [ 962.450964][T20437] Bluetooth: hci3: command tx timeout [ 962.509702][T21478] hsr_slave_0: entered promiscuous mode [ 962.517198][T21478] hsr_slave_1: entered promiscuous mode [ 962.523557][T21478] debugfs: 'hsr0' already exists in 'hsr' [ 962.529277][T21478] Cannot create hsr debugfs directory [ 962.537853][T20991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.655615][T20991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.780855][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.860048][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.897717][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.051991][T14554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.060221][T14554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.106133][ T33] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.124416][ T33] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.405215][T21581] loop2: detected capacity change from 0 to 256 [ 963.461082][T21581] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 963.511023][ T33] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.526049][T21581] FAT-fs (loop2): Filesystem has been set read-only [ 963.591743][T21581] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 963.614236][T21581] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 963.625850][ T30] audit: type=1800 audit(1785510817.022:261): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4858" name="file1" dev="loop2" ino=1048778 res=0 errno=0 [ 963.657157][T14545] IPVS: stop unused estimator thread 0... [ 964.261545][T21592] loop7: detected capacity change from 0 to 40427 [ 964.374465][T21592] F2FS-fs (loop7): Image doesn't support compression [ 964.381243][T21592] F2FS-fs (loop7): build fault injection rate: 690 [ 964.394453][T21592] F2FS-fs (loop7): invalid crc value [ 964.511398][T20437] Bluetooth: hci3: command tx timeout [ 964.548385][T21595] loop5: detected capacity change from 0 to 32768 [ 964.553354][T21592] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 964.573753][T21592] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 964.585810][T21595] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 964.593976][T21595] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 964.666575][ T30] audit: type=1800 audit(1785510818.052:262): pid=21592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4846" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 964.711823][T21595] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 964.721368][T11568] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 964.728142][T11568] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 964.911057][T20434] syz-executor: attempt to access beyond end of device [ 964.911057][T20434] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 964.970894][T20434] CPU: 0 UID: 0 PID: 20434 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 964.970953][T20434] Tainted: [L]=SOFTLOCKUP [ 964.970968][T20434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 964.970991][T20434] Call Trace: [ 964.971005][T20434] [ 964.971020][T20434] dump_stack_lvl+0x100/0x190 [ 964.971070][T20434] f2fs_stop_checkpoint+0x5e6/0xb30 [ 964.971135][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.971184][T20434] ? errseq_set+0xe3/0x150 [ 964.971244][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.971300][T20434] f2fs_write_end_bio+0xf53/0x1340 [ 964.971346][T20434] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 964.971394][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.971453][T20434] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 964.971494][T20434] bio_endio+0x778/0x8e0 [ 964.971549][T20434] submit_bio_noacct+0x64c/0x1ff0 [ 964.971623][T20434] f2fs_submit_write_bio+0x133/0x330 [ 964.971690][T20434] __submit_merged_bio+0x330/0x7b0 [ 964.971729][T20434] ? rcu_is_watching+0x12/0xc0 [ 964.971797][T20434] __submit_merged_write_cond+0x3fe/0x510 [ 964.971850][T20434] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 964.971909][T20434] ? __pfx___might_resched+0x10/0x10 [ 964.971959][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.972016][T20434] ? folio_clear_dirty_for_io+0x178/0x960 [ 964.972094][T20434] f2fs_write_cache_pages+0x20e9/0x2630 [ 964.972169][T20434] ? __bfs+0xef/0x2a0 [ 964.972225][T20434] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 964.972275][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.972319][T20434] ? __kasan_check_byte+0x13/0x50 [ 964.972358][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.972402][T20434] ? unwind_next_frame+0x3be/0x2090 [ 964.972461][T20434] ? rcu_is_watching+0x12/0xc0 [ 964.972513][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.972562][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.972606][T20434] ? __kasan_check_byte+0x13/0x50 [ 964.972644][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.972704][T20434] ? is_bpf_text_address+0x94/0x1a0 [ 964.972744][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.972788][T20434] ? kernel_text_address+0x8d/0x100 [ 964.972886][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.972931][T20434] ? check_prev_add+0x354/0xe60 [ 964.972970][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.973014][T20434] ? rcu_is_watching+0x12/0xc0 [ 964.973072][T20434] f2fs_write_data_pages+0x799/0x16d0 [ 964.973132][T20434] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 964.973187][T20434] ? do_writepages+0x4b5/0x600 [ 964.973245][T20434] ? do_writepages+0x4b5/0x600 [ 964.973301][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.973349][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.973393][T20434] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 964.973444][T20434] do_writepages+0x278/0x600 [ 964.973508][T20434] ? __pfx_do_writepages+0x10/0x10 [ 964.973568][T20434] ? do_raw_spin_unlock+0x145/0x1e0 [ 964.973618][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.973662][T20434] ? _raw_spin_unlock+0x28/0x50 [ 964.973708][T20434] filemap_writeback+0x22d/0x2e0 [ 964.973747][T20434] ? __pfx_filemap_writeback+0x10/0x10 [ 964.973880][T20434] f2fs_sync_dirty_inodes+0x46a/0x970 [ 964.973947][T20434] block_operations+0x2a6/0xfc0 [ 964.974005][T20434] ? __pfx_block_operations+0x10/0x10 [ 964.974106][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.974153][T20434] ? ktime_get+0x22c/0x320 [ 964.974193][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.974237][T20434] ? rcu_is_watching+0x12/0xc0 [ 964.974296][T20434] f2fs_write_checkpoint+0x58b/0x53d0 [ 964.974372][T20434] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 964.974432][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.974477][T20434] ? rcu_is_watching+0x12/0xc0 [ 964.974528][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.974576][T20434] ? kthread_stop+0x280/0x630 [ 964.974637][T20434] kill_f2fs_super+0x3f1/0x4a0 [ 964.974684][T20434] ? __pfx_kill_f2fs_super+0x10/0x10 [ 964.974752][T20434] ? lockdep_hardirqs_on+0x78/0x100 [ 964.974798][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.974843][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.974902][T20434] deactivate_locked_super+0xc1/0x1b0 [ 964.974949][T20434] deactivate_super+0xe7/0x110 [ 964.974996][T20434] cleanup_mnt+0x21f/0x450 [ 964.975051][T20434] task_work_run+0x150/0x240 [ 964.975089][T20434] ? __pfx_task_work_run+0x10/0x10 [ 964.975130][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.975183][T20434] exit_to_user_mode_loop+0x1d8/0x6f0 [ 964.975227][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.975271][T20434] ? rcu_is_watching+0x12/0xc0 [ 964.975327][T20434] do_syscall_64+0x666/0x870 [ 964.975381][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.975419][T20434] RIP: 0033:0x7f4652b9f257 [ 964.975448][T20434] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 964.975484][T20434] RSP: 002b:00007ffca789bda8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 964.975519][T20434] RAX: 0000000000000000 RBX: 00007f4652c3445c RCX: 00007f4652b9f257 [ 964.975547][T20434] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca789be60 [ 964.975570][T20434] RBP: 00007ffca789be60 R08: 00007ffca789ce60 R09: 00000000ffffffff [ 964.975595][T20434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca789cef0 [ 964.975618][T20434] R13: 00007f4652c3445c R14: 00000000000eb845 R15: 00007ffca789cf30 [ 964.975668][T20434] [ 964.979784][T20434] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 965.292685][T11568] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 564ms [ 965.612511][T11568] gfs2: fsid=syz:syz.0: jid=0: Done [ 965.617757][T21595] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 965.635804][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20 [ 965.729746][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'. [ 965.739966][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4859'. [ 965.749855][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'. [ 965.758715][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4859'. [ 966.087264][T21613] syzkaller1: entered allmulticast mode [ 967.756421][T21657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4866'. [ 967.858005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.890416][T21665] loop5: detected capacity change from 0 to 1024 [ 967.904088][ T187] IPVS: starting estimator thread 0... [ 967.905857][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.918526][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.927047][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.929320][T21665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 967.935534][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.950167][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.983366][ T29] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 968.020553][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.030439][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.051241][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.059800][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.080394][T21666] IPVS: using max 25 ests per chain, 60000 per kthread [ 968.229355][T21665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.416444][T21478] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 968.475145][T21478] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 968.488237][T21478] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 968.495180][T20991] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.517750][T21478] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 968.534933][T21478] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 968.631690][T21478] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 968.675090][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 968.683088][T21478] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 968.719290][T21478] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 968.995984][T21478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.088232][T21478] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.102515][T14564] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.109650][T14564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.216329][T14564] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.223509][T14564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.365248][ T29] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 969.373377][ T29] usb 8-1: config 0 has no interface number 0 [ 969.379489][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 969.390438][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 969.402010][ T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 969.412978][ T29] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 969.481796][T21706] netlink: 'syz.3.4887': attribute type 4 has an invalid length. [ 969.532686][ T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 969.574051][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.681298][ T29] usb 8-1: config 0 descriptor?? [ 969.959742][ T29] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 970.370396][T21722] loop2: detected capacity change from 0 to 40427 [ 970.378027][T21722] F2FS-fs: heap/no_heap options were deprecated [ 970.412921][T21722] F2FS-fs (loop2): build fault injection rate: 19 [ 970.419383][T21722] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 970.431009][T21722] F2FS-fs (loop2): invalid crc value [ 970.577428][T21722] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x10a0 [ 970.660984][T21722] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe15/0x1710 [ 970.679735][T21722] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 970.693714][T21722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 970.776653][T21722] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x114c/0x3020 [ 970.782861][ T5354] usb 8-1: USB disconnect, device number 13 [ 970.827445][T21740] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe15/0x1710 [ 970.839013][T21740] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x292/0xa40 [ 970.915362][T21722] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x237/0x1160 [ 970.956026][ T5354] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 971.304141][ T5626] syz-executor: attempt to access beyond end of device [ 971.304141][ T5626] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 971.385627][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 971.385687][ T5626] Tainted: [L]=SOFTLOCKUP [ 971.385702][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 971.385726][ T5626] Call Trace: [ 971.385738][ T5626] [ 971.385754][ T5626] dump_stack_lvl+0x100/0x190 [ 971.385806][ T5626] f2fs_stop_checkpoint+0x5e6/0xb30 [ 971.385872][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.385922][ T5626] ? errseq_set+0xe3/0x150 [ 971.385982][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.386039][ T5626] f2fs_write_end_bio+0xf53/0x1340 [ 971.386086][ T5626] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 971.386135][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.386193][ T5626] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 971.386234][ T5626] bio_endio+0x778/0x8e0 [ 971.386285][ T5626] submit_bio_noacct+0x64c/0x1ff0 [ 971.386361][ T5626] f2fs_submit_write_bio+0x133/0x330 [ 971.386428][ T5626] __submit_merged_bio+0x330/0x7b0 [ 971.386469][ T5626] ? rcu_is_watching+0x12/0xc0 [ 971.386539][ T5626] __submit_merged_write_cond+0x3fe/0x510 [ 971.386594][ T5626] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 971.386650][ T5626] ? __pfx___might_resched+0x10/0x10 [ 971.386697][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.386745][ T5626] ? folio_clear_dirty_for_io+0x178/0x960 [ 971.386817][ T5626] f2fs_write_cache_pages+0x20e9/0x2630 [ 971.386891][ T5626] ? find_held_lock+0x2b/0x80 [ 971.386951][ T5626] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 971.387001][ T5626] ? is_bpf_text_address+0x8a/0x1a0 [ 971.387047][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.387095][ T5626] ? __kasan_check_byte+0x13/0x50 [ 971.387137][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.387187][ T5626] ? unwind_next_frame+0x3be/0x2090 [ 971.387250][ T5626] ? rcu_is_watching+0x12/0xc0 [ 971.387307][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.387356][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.387404][ T5626] ? __kasan_check_byte+0x13/0x50 [ 971.387445][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.387511][ T5626] ? is_bpf_text_address+0x94/0x1a0 [ 971.387559][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.387608][ T5626] ? kernel_text_address+0x8d/0x100 [ 971.387715][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.387764][ T5626] ? check_prev_add+0x354/0xe60 [ 971.387806][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.387855][ T5626] ? rcu_is_watching+0x12/0xc0 [ 971.387919][ T5626] f2fs_write_data_pages+0x799/0x16d0 [ 971.387986][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 971.388047][ T5626] ? do_writepages+0x4b5/0x600 [ 971.388111][ T5626] ? do_writepages+0x4b5/0x600 [ 971.388172][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.388225][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.388273][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 971.388328][ T5626] do_writepages+0x278/0x600 [ 971.388397][ T5626] ? __pfx_do_writepages+0x10/0x10 [ 971.388460][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 971.388515][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.388571][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 971.388619][ T5626] filemap_writeback+0x22d/0x2e0 [ 971.388662][ T5626] ? __pfx_filemap_writeback+0x10/0x10 [ 971.388785][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.388833][ T5626] ? find_held_lock+0x2b/0x80 [ 971.388891][ T5626] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 971.388944][ T5626] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 971.388994][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.389055][ T5626] f2fs_sync_dirty_inodes+0x46a/0x970 [ 971.389128][ T5626] block_operations+0x2a6/0xfc0 [ 971.389192][ T5626] ? __pfx_block_operations+0x10/0x10 [ 971.389301][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.389353][ T5626] ? ktime_get+0x22c/0x320 [ 971.389399][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.389446][ T5626] ? rcu_is_watching+0x12/0xc0 [ 971.389510][ T5626] f2fs_write_checkpoint+0x58b/0x53d0 [ 971.389571][ T5626] ? _raw_spin_unlock_irq+0x23/0x50 [ 971.389618][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.389665][ T5626] ? _raw_spin_unlock_irq+0x2e/0x50 [ 971.389708][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.389755][ T5626] ? __wait_for_common+0x1f3/0x4c0 [ 971.389805][ T5626] ? __pfx_schedule_timeout+0x10/0x10 [ 971.389853][ T5626] ? __pfx___wait_for_common+0x10/0x10 [ 971.389905][ T5626] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 971.389971][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.390018][ T5626] ? rcu_is_watching+0x12/0xc0 [ 971.390075][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.390123][ T5626] ? kthread_stop+0x280/0x630 [ 971.390189][ T5626] kill_f2fs_super+0x3f1/0x4a0 [ 971.390242][ T5626] ? __pfx_kill_f2fs_super+0x10/0x10 [ 971.390316][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 971.390367][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.390417][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.390481][ T5626] deactivate_locked_super+0xc1/0x1b0 [ 971.390538][ T5626] deactivate_super+0xe7/0x110 [ 971.390588][ T5626] cleanup_mnt+0x21f/0x450 [ 971.390649][ T5626] task_work_run+0x150/0x240 [ 971.390691][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 971.390736][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.390793][ T5626] exit_to_user_mode_loop+0x1d8/0x6f0 [ 971.390842][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.390891][ T5626] ? rcu_is_watching+0x12/0xc0 [ 971.390954][ T5626] do_syscall_64+0x666/0x870 [ 971.391013][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.391054][ T5626] RIP: 0033:0x7f06bd79f257 [ 971.391086][ T5626] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 971.391125][ T5626] RSP: 002b:00007ffe36703f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 971.391162][ T5626] RAX: 0000000000000000 RBX: 00007f06bd83445c RCX: 00007f06bd79f257 [ 971.391188][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe36703fc0 [ 971.391213][ T5626] RBP: 00007ffe36703fc0 R08: 00007ffe36704fc0 R09: 00000000ffffffff [ 971.391240][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe36705050 [ 971.391266][ T5626] R13: 00007f06bd83445c R14: 00000000000ed0c7 R15: 00007ffe36705090 [ 971.391320][ T5626] [ 972.139968][ T5626] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 972.619332][T21478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.709955][T21742] loop5: detected capacity change from 0 to 40427 [ 972.823326][T21742] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 972.850364][T21742] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 973.481396][T21742] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 973.641357][T21742] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 973.653546][T21742] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 973.895287][T21478] veth0_vlan: entered promiscuous mode [ 974.044241][T21478] veth1_vlan: entered promiscuous mode [ 974.105847][T21478] veth0_macvtap: entered promiscuous mode [ 974.169686][T21478] veth1_macvtap: entered promiscuous mode [ 974.290196][T21478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.358817][T21478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.451398][T21797] loop3: detected capacity change from 0 to 1024 [ 974.502077][T21797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 974.740663][T21797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.880920][T14564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.893423][T14564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.912656][T14564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.941788][T14549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.145083][T21808] binder: 21807:21808 ioctl 5000943f 0 returned -22 [ 975.168274][T14564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.197661][T14564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.289926][T14545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.365720][T14545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.470512][T14910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.992917][T21824] overlayfs: failed to resolve './file0': -2 [ 976.459132][T21840] loop2: detected capacity change from 0 to 512 [ 976.606186][T11566] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 976.788069][T21850] loop3: detected capacity change from 0 to 2048 [ 976.842931][T21850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 977.001119][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 977.240870][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 977.260101][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.280621][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 977.289035][T11566] usb 6-1: Using ep0 maxpacket: 32 [ 977.321829][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 977.361810][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.409048][ T10] usb 3-1: config 0 descriptor?? [ 977.914686][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 977.976419][T11566] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.987333][T11566] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 977.988376][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003D/input/input38 [ 978.097297][ T10] microsoft 0003:045E:07DA.003D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 978.892101][T11566] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 978.901191][T11566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.909361][T11566] usb 6-1: Product: syz [ 978.913540][T11566] usb 6-1: Manufacturer: syz [ 978.918125][T11566] usb 6-1: SerialNumber: syz [ 979.290791][ T9] usb 3-1: USB disconnect, device number 53 [ 979.467816][T11566] cdc_ncm 6-1:1.0: bind() failure [ 979.480552][T11566] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 979.487363][T11566] cdc_ncm 6-1:1.1: bind() failure [ 979.608948][T11566] usb 6-1: USB disconnect, device number 27 [ 980.534517][T21907] /dev/loop4: Can't open blockdev [ 982.342072][ T30] audit: type=1800 audit(1785510835.722:263): pid=21955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4929" name="iface_name" dev="configfs" ino=60344 res=0 errno=0 [ 982.929560][T21960] netlink: 'syz.4.4930': attribute type 10 has an invalid length. [ 983.068099][T21960] syz_tun: entered promiscuous mode [ 983.166776][T21960] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 983.900992][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 984.120527][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 984.148699][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.162765][T21980] syz_tun: entered allmulticast mode [ 984.198841][T21982] netlink: 'syz.7.4938': attribute type 1 has an invalid length. [ 984.204649][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 984.239792][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 984.264073][T21982] netlink: 'syz.7.4938': attribute type 2 has an invalid length. [ 984.271818][T21982] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4938'. [ 984.273958][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.288472][T21980] pim6reg: entered allmulticast mode [ 984.309845][T21980] pim6reg: left allmulticast mode [ 984.315753][T21980] syz_tun: left allmulticast mode [ 984.451003][ T10] usb 5-1: config 0 descriptor?? [ 984.911640][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 984.984708][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003E/input/input39 [ 985.206189][ T10] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 985.376241][T22007] netlink: 'syz.5.4946': attribute type 10 has an invalid length. [ 985.459101][T22007] syz_tun: entered promiscuous mode [ 985.536909][T22007] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 986.110471][ T5768] usb 5-1: USB disconnect, device number 11 [ 986.489065][T22022] syzkaller1: entered allmulticast mode [ 991.233796][T22091] loop7: detected capacity change from 0 to 128 [ 991.236142][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 991.433534][T22091] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 991.503349][T22097] overlayfs: failed to clone upperpath [ 991.507380][T22091] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 991.923232][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 992.267620][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.353718][T20434] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 992.611383][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.622304][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 992.635107][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 992.644155][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.754295][ T24] usb 6-1: config 0 descriptor?? [ 993.479568][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 993.499894][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 993.591191][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 993.602374][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.645680][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 993.660868][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003F/input/input40 [ 993.675397][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.892493][ T24] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 994.946241][ T5768] usb 6-1: USB disconnect, device number 28 [ 995.032801][T22139] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 995.174068][T22139] syz_tun: entered promiscuous mode [ 995.214442][T22139] : (slave syz_tun): Enslaving as an active interface with an up link [ 995.810871][ T50] Bluetooth: hci4: command tx timeout [ 996.248779][T22162] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4981'. [ 996.371932][T22162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4981'. [ 996.893413][T14549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.904067][T14549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.614321][T14549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.624646][T14549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.720069][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 997.881020][ T50] Bluetooth: hci4: command tx timeout [ 998.590207][T22198] overlayfs: invalid redirect (./file0/file1/file0) [ 998.679976][T14549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.850901][T14549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.283707][T22119] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.291355][T22119] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.301618][T22119] bridge_slave_0: entered allmulticast mode [ 999.340132][T22119] bridge_slave_0: entered promiscuous mode [ 999.368729][T22119] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.389839][T22119] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.426125][T22119] bridge_slave_1: entered allmulticast mode [ 999.454335][T22119] bridge_slave_1: entered promiscuous mode [ 999.806236][T22226] overlayfs: failed to resolve './bus': -2 [ 999.843336][T14549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.927751][T14549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.975290][T20437] Bluetooth: hci4: command tx timeout [ 1000.084506][T22119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.099998][T22119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.147827][T22119] team0: Port device team_slave_0 added [ 1000.192362][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1000.279894][T22119] team0: Port device team_slave_1 added [ 1000.412194][T22236] loop7: detected capacity change from 0 to 64 [ 1000.479605][T22236] hfs: unable to locate alternate MDB [ 1000.485346][T22236] hfs: continuing without an alternate MDB [ 1000.637791][T22119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.680010][T22119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.834915][T22119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.887678][T22119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.974591][T22119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.032031][T22119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.269152][T20437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1001.296798][T20437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1001.314987][T20437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1001.324780][T20437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1001.342242][T20437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1001.512088][T22119] hsr_slave_0: entered promiscuous mode [ 1001.518815][T22119] hsr_slave_1: entered promiscuous mode [ 1001.530594][T22119] debugfs: 'hsr0' already exists in 'hsr' [ 1001.536377][T22119] Cannot create hsr debugfs directory [ 1002.051405][ T50] Bluetooth: hci4: command tx timeout [ 1002.468131][T22278] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.5009'. [ 1002.816684][T14549] bridge_slave_1: left allmulticast mode [ 1002.822376][T14549] bridge_slave_1: left promiscuous mode [ 1002.828134][T14549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.886859][T21478] svc: failed to register nfsdv3 RPC service (errno 111). [ 1002.906173][T14549] bridge_slave_0: left allmulticast mode [ 1002.909748][T21478] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1002.920754][T14549] bridge_slave_0: left promiscuous mode [ 1002.926534][T14549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.941859][T21478] failed to unregister tcp with rpcbind [ 1002.959476][T21478] svc: failed to register nfsdv3 RPC service (errno 97). [ 1002.998076][T21478] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1003.023700][T21478] failed to unregister tcp with rpcbind [ 1003.308643][T20437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.354538][T20437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.362610][T20437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.371138][T20437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.378941][T20437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1003.392439][T20437] Bluetooth: hci0: command tx timeout [ 1003.831537][T22303] loop5: detected capacity change from 0 to 16 [ 1003.960163][T22303] erofs (device loop5): mounted with root inode @ nid 36. [ 1004.259705][T14549] gretap0 (unregistering): left promiscuous mode [ 1004.316928][T14549] bond1 (unregistering): (slave gre1): Releasing backup interface [ 1004.331199][T14549] gre1 (unregistering): left promiscuous mode [ 1004.489931][T14549] bond0 (unregistering): left promiscuous mode [ 1004.496153][T14549] bond_slave_0: left promiscuous mode [ 1004.501750][T14549] bond_slave_1: left promiscuous mode [ 1004.531339][T14549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.543341][T14549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.610370][T14549] bond0 (unregistering): Released all slaves [ 1004.631983][T14549] bond1 (unregistering): Released all slaves [ 1004.671479][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1004.773712][T21478] bond0: (slave syz_tun): Releasing backup interface [ 1005.463383][T20437] Bluetooth: hci1: command tx timeout [ 1005.470714][ T50] Bluetooth: hci0: command tx timeout [ 1005.735000][T22348] netlink: 'syz.1.5030': attribute type 11 has an invalid length. [ 1005.964135][T22354] loop5: detected capacity change from 0 to 256 [ 1006.341332][ T5748] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1006.365583][T22364] loop7: detected capacity change from 0 to 512 [ 1006.374227][T22364] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1006.527901][T22364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.582921][T22364] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.605868][ T5748] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1006.621019][ T5748] usb 6-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 1006.667753][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.718534][ T5748] usb 6-1: config 0 descriptor?? [ 1006.774976][T20434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.997714][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1007.076744][T22248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.090497][T22248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.104255][T22248] bridge_slave_0: entered allmulticast mode [ 1007.122604][T22248] bridge_slave_0: entered promiscuous mode [ 1007.170126][T22248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.187162][ T5748] wacom 0003:056A:00DE.0040: ignoring exceeding usage max [ 1007.194771][T22248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.204022][T22248] bridge_slave_1: entered allmulticast mode [ 1007.210527][ T5748] wacom 0003:056A:00DE.0040: ignoring exceeding usage max [ 1007.222902][T22248] bridge_slave_1: entered promiscuous mode [ 1007.229354][ T5748] wacom 0003:056A:00DE.0040: unknown main item tag 0x5 [ 1007.240393][ T5748] wacom 0003:056A:00DE.0040: collection stack underflow [ 1007.247431][ T5748] wacom 0003:056A:00DE.0040: item 0 1 0 12 parsing failed [ 1007.256060][ T5748] wacom 0003:056A:00DE.0040: parse failed [ 1007.264351][ T5748] wacom 0003:056A:00DE.0040: probe with driver wacom failed with error -22 [ 1007.457784][ T9] usb 6-1: USB disconnect, device number 29 [ 1007.463857][T14549] veth0_to_bridge: left promiscuous mode [ 1007.473886][T22390] loop7: detected capacity change from 0 to 512 [ 1007.510618][T14549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.518024][T14549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.538312][T14549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.546169][T20437] Bluetooth: hci1: command tx timeout [ 1007.551622][T20437] Bluetooth: hci0: command tx timeout [ 1007.558532][T14549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.572500][T22390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.615875][T14549] veth1_macvtap: left promiscuous mode [ 1007.621524][T14549] veth0_macvtap: left promiscuous mode [ 1007.628294][T14549] veth1_vlan: left promiscuous mode [ 1007.633771][T14549] veth0_vlan: left promiscuous mode [ 1007.670067][T20434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.201361][T14549] team0 (unregistering): Port device team_slave_1 removed [ 1008.225038][T14549] team0 (unregistering): Port device team_slave_0 removed [ 1008.904942][T22248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.955981][T22248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.133632][T22248] team0: Port device team_slave_0 added [ 1009.153008][T22248] team0: Port device team_slave_1 added [ 1009.166229][T22294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.173386][T22294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.184140][T22294] bridge_slave_0: entered allmulticast mode [ 1009.192383][T22294] bridge_slave_0: entered promiscuous mode [ 1009.247300][T22294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.255742][T22294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.263257][T22294] bridge_slave_1: entered allmulticast mode [ 1009.274510][T22294] bridge_slave_1: entered promiscuous mode [ 1009.294237][T22248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.301449][T22248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.339528][T22248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.359545][T22248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.366707][T22248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.398614][T22248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.602713][ T30] audit: type=1326 audit(1785510862.992:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22425 comm="syz.1.5055" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1003d9e019 code=0x0 [ 1009.651507][T20437] Bluetooth: hci0: command tx timeout [ 1009.656939][ T50] Bluetooth: hci1: command tx timeout [ 1009.667520][T22294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.710580][T22294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.728630][T22248] hsr_slave_0: entered promiscuous mode [ 1009.736086][T22248] hsr_slave_1: entered promiscuous mode [ 1009.743219][T22248] debugfs: 'hsr0' already exists in 'hsr' [ 1009.749077][T22248] Cannot create hsr debugfs directory [ 1010.104658][T22294] team0: Port device team_slave_0 added [ 1010.113505][T22294] team0: Port device team_slave_1 added [ 1010.214484][T22434] gadgetfs: bound to dummy_udc driver [ 1010.338986][T22294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.346308][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.373837][T22294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.459234][T14549] IPVS: stop unused estimator thread 0... [ 1010.485099][T22294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.492562][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1010.506327][ C0] gadgetfs: connected [ 1010.517669][ T9] gadgetfs: disconnected [ 1010.529934][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.576867][T22294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.742642][T22294] hsr_slave_0: entered promiscuous mode [ 1010.749431][T22294] hsr_slave_1: entered promiscuous mode [ 1010.756035][T22294] debugfs: 'hsr0' already exists in 'hsr' [ 1010.761768][T22294] Cannot create hsr debugfs directory [ 1010.830570][ C0] gadgetfs: connected [ 1010.850983][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1010.887704][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1010.904895][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.928887][ C0] gadgetfs: configuration #1 [ 1010.984675][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.013450][T22434] gadgetfs: suspended from state 3 [ 1011.019131][ T9] usb 1-1: can't set config #1, error -71 [ 1011.027617][T22434] gadgetfs: disconnected [ 1011.059171][ T9] usb 1-1: USB disconnect, device number 3 [ 1011.266870][T22443] loop5: detected capacity change from 0 to 512 [ 1011.307243][T22443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1011.382474][T22119] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1011.390439][T22443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.421858][T22119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1011.429913][T22119] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1011.440124][T22443] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.454539][T22119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.673252][T22119] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1011.690931][T22119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1011.695648][T20991] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.699000][T22119] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1011.707762][ T50] Bluetooth: hci1: command tx timeout [ 1011.726497][T22119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1011.953234][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.068928][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5066'. [ 1012.370342][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.513293][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.641590][T22119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.665930][T22119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.688242][T22463] loop5: detected capacity change from 0 to 32768 [ 1012.750284][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.757436][T14545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.766688][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.773770][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.843377][T22463] loop5: p1 p3 < > [ 1013.179767][T22471] loop7: detected capacity change from 0 to 1024 [ 1013.296344][ T13] bridge_slave_1: left allmulticast mode [ 1013.321808][ T13] bridge_slave_1: left promiscuous mode [ 1013.335378][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.413453][T22471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.426009][T22471] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.483328][ T13] bridge_slave_0: left allmulticast mode [ 1013.493280][T22471] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.5071: lblock 0 mapped to illegal pblock 0 (length 6) [ 1013.511041][ T5629] udevd[5629]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1013.516152][ T13] bridge_slave_0: left promiscuous mode [ 1013.527120][T22471] EXT4-fs (loop7): Remounting filesystem read-only [ 1013.533020][ T7440] udevd[7440]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1013.553247][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.647683][T20434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1014.061631][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.098874][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.109180][ T13] bond0 (unregistering): Released all slaves [ 1014.447042][T22494] overlayfs: invalid redirect (./file0/file1/file0) [ 1014.929109][T22502] net_ratelimit: 41 callbacks suppressed [ 1014.929134][T22502] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1016.187070][T22119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.357856][ T13] hsr_slave_0: left promiscuous mode [ 1016.414572][ T13] hsr_slave_1: left promiscuous mode [ 1016.436034][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.461670][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.471215][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.478991][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.525192][ T13] veth1_macvtap: left promiscuous mode [ 1016.534181][ T13] veth0_macvtap: left promiscuous mode [ 1016.550885][ T13] veth1_vlan: left promiscuous mode [ 1016.556328][ T13] veth0_vlan: left promiscuous mode [ 1017.336970][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1017.379638][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1018.071703][T22119] veth0_vlan: entered promiscuous mode [ 1018.084480][T22119] veth1_vlan: entered promiscuous mode [ 1018.266239][T22119] veth0_macvtap: entered promiscuous mode [ 1018.276746][T22119] veth1_macvtap: entered promiscuous mode [ 1018.297121][T22119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.308645][T22119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.348023][T14549] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.358833][T14549] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.367980][T14549] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.376716][T14549] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.699500][T16113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.718278][T16113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.761013][T16113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.778446][T16113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.947359][T22248] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1019.061811][T22248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1019.083955][T22248] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1019.120059][T22248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1019.169848][T22248] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1019.232559][T22248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1019.267969][T22248] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1019.291257][T22604] netlink: 'syz.8.4974': attribute type 1 has an invalid length. [ 1019.316482][T22248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1019.407019][T22609] netlink: 51 bytes leftover after parsing attributes in process `syz.7.5103'. [ 1019.677341][T22294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1019.690109][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1019.715865][T22294] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1019.734467][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1019.759464][T22294] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1019.775605][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1019.790879][T22294] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1019.804811][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1019.914181][T22248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.129033][T22248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.324416][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.331602][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.442198][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.449396][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.539938][T22294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.688966][T22294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.760971][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.768173][T14545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.946160][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.953398][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.988854][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5100'. [ 1021.474049][T22637] loop7: detected capacity change from 0 to 40427 [ 1021.604186][T22637] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 1021.610568][T22637] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1021.820164][T22637] F2FS-fs (loop7): invalid crc value [ 1022.392438][T22637] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1022.458207][T22637] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1022.539214][T22637] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1022.973209][ T30] audit: type=1800 audit(1785510876.302:265): pid=22637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5095" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 1022.995842][T22248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.018309][T22703] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5108'. [ 1023.338329][T22294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.549727][T22720] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0) [ 1023.616500][T20434] syz-executor: attempt to access beyond end of device [ 1023.616500][T20434] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1023.770738][T20434] CPU: 0 UID: 0 PID: 20434 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.770794][T20434] Tainted: [L]=SOFTLOCKUP [ 1023.770807][T20434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1023.770829][T20434] Call Trace: [ 1023.770840][T20434] [ 1023.770855][T20434] dump_stack_lvl+0x100/0x190 [ 1023.770901][T20434] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1023.770962][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.771006][T20434] ? errseq_set+0xe3/0x150 [ 1023.771061][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.771112][T20434] f2fs_write_end_bio+0xf53/0x1340 [ 1023.771154][T20434] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1023.771199][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.771252][T20434] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1023.771290][T20434] bio_endio+0x778/0x8e0 [ 1023.771336][T20434] submit_bio_noacct+0x64c/0x1ff0 [ 1023.771404][T20434] f2fs_submit_write_bio+0x133/0x330 [ 1023.771466][T20434] __submit_merged_bio+0x330/0x7b0 [ 1023.771502][T20434] ? rcu_is_watching+0x12/0xc0 [ 1023.771565][T20434] __submit_merged_write_cond+0x3fe/0x510 [ 1023.771614][T20434] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1023.771665][T20434] ? __pfx___might_resched+0x10/0x10 [ 1023.771705][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.771748][T20434] ? folio_clear_dirty_for_io+0x178/0x960 [ 1023.771813][T20434] f2fs_write_cache_pages+0x20e9/0x2630 [ 1023.771880][T20434] ? __bfs+0xef/0x2a0 [ 1023.771936][T20434] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1023.771981][T20434] ? is_bpf_text_address+0x8a/0x1a0 [ 1023.772026][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.772070][T20434] ? check_irq_usage+0xe5/0x810 [ 1023.772116][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.772159][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.772203][T20434] ? __css_rstat_updated+0x1ce/0x5a0 [ 1023.772286][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.772330][T20434] ? __mod_zone_page_state+0xe2/0x190 [ 1023.772415][T20434] ? check_noncircular+0x97/0x160 [ 1023.772454][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.772497][T20434] ? rcu_is_watching+0x12/0xc0 [ 1023.772558][T20434] f2fs_write_data_pages+0x799/0x16d0 [ 1023.772604][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.772648][T20434] ? check_prev_add+0xfe/0xe60 [ 1023.772696][T20434] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1023.772760][T20434] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1023.772810][T20434] do_writepages+0x278/0x600 [ 1023.772873][T20434] ? __pfx_do_writepages+0x10/0x10 [ 1023.772929][T20434] ? do_raw_spin_unlock+0x145/0x1e0 [ 1023.772979][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.773023][T20434] ? _raw_spin_unlock+0x28/0x50 [ 1023.773067][T20434] filemap_writeback+0x22d/0x2e0 [ 1023.773106][T20434] ? __pfx_filemap_writeback+0x10/0x10 [ 1023.773165][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.773260][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.773303][T20434] ? find_held_lock+0x2b/0x80 [ 1023.773356][T20434] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1023.773403][T20434] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1023.773450][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.773505][T20434] f2fs_sync_dirty_inodes+0x46a/0x970 [ 1023.773576][T20434] block_operations+0x2a6/0xfc0 [ 1023.773633][T20434] ? __pfx_block_operations+0x10/0x10 [ 1023.773733][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.773779][T20434] ? ktime_get+0x22c/0x320 [ 1023.773820][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.773863][T20434] ? rcu_is_watching+0x12/0xc0 [ 1023.773921][T20434] f2fs_write_checkpoint+0x58b/0x53d0 [ 1023.773972][T20434] ? _raw_spin_unlock_irq+0x23/0x50 [ 1023.774013][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.774057][T20434] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1023.774094][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.774138][T20434] ? __wait_for_common+0x1f3/0x4c0 [ 1023.774183][T20434] ? __pfx_schedule_timeout+0x10/0x10 [ 1023.774226][T20434] ? __pfx___wait_for_common+0x10/0x10 [ 1023.774277][T20434] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1023.774325][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.774379][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.774423][T20434] ? rcu_is_watching+0x12/0xc0 [ 1023.774474][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.774518][T20434] ? kthread_stop+0x280/0x630 [ 1023.774583][T20434] kill_f2fs_super+0x3f1/0x4a0 [ 1023.774631][T20434] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1023.774698][T20434] ? lockdep_hardirqs_on+0x78/0x100 [ 1023.774743][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.774788][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.774845][T20434] deactivate_locked_super+0xc1/0x1b0 [ 1023.774892][T20434] deactivate_super+0xe7/0x110 [ 1023.774937][T20434] cleanup_mnt+0x21f/0x450 [ 1023.774992][T20434] task_work_run+0x150/0x240 [ 1023.775031][T20434] ? __pfx_task_work_run+0x10/0x10 [ 1023.775070][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.775123][T20434] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1023.775166][T20434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.775210][T20434] ? rcu_is_watching+0x12/0xc0 [ 1023.775267][T20434] do_syscall_64+0x666/0x870 [ 1023.775320][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.775358][T20434] RIP: 0033:0x7f4652b9f257 [ 1023.775386][T20434] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1023.775422][T20434] RSP: 002b:00007ffca789bda8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1023.775456][T20434] RAX: 0000000000000000 RBX: 00007f4652c3445c RCX: 00007f4652b9f257 [ 1023.775481][T20434] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca789be60 [ 1023.775504][T20434] RBP: 00007ffca789be60 R08: 00007ffca789ce60 R09: 00000000ffffffff [ 1023.775528][T20434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca789cef0 [ 1023.775556][T20434] R13: 00007f4652c3445c R14: 00000000000f9bce R15: 00007ffca789cf30 [ 1023.775606][T20434] [ 1024.378719][T20434] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1024.602027][ T10] loop7: lost filesystem error report for type 5 error -108 [ 1024.688791][T22248] veth0_vlan: entered promiscuous mode [ 1025.146597][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1025.155897][T22248] veth1_vlan: entered promiscuous mode [ 1025.322824][T22248] veth0_macvtap: entered promiscuous mode [ 1026.301580][T22248] veth1_macvtap: entered promiscuous mode [ 1026.323734][T22294] veth0_vlan: entered promiscuous mode [ 1026.332046][T22248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.366981][T22248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.514312][T14545] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.530416][ T113] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.539165][ T113] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.547881][ T113] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.558048][T22747] loop5: detected capacity change from 0 to 131072 [ 1026.575043][T22747] F2FS-fs (loop5): invalid crc value [ 1026.640882][T22294] veth1_vlan: entered promiscuous mode [ 1026.787263][T22747] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1026.829233][T22747] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1027.268381][T22294] veth0_macvtap: entered promiscuous mode [ 1027.494085][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.518211][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.549854][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1027.583550][T22294] veth1_macvtap: entered promiscuous mode [ 1027.653468][T22294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.678183][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.692661][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.742976][T22294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.060413][T14554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.091329][T14554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.138147][ T113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.168631][ T113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.260612][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.303604][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.373115][T14549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.390293][T14549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.772281][T22793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.859457][T22793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.631392][T22816] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5130'. [ 1029.648172][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'. [ 1029.957140][ T24] usb 8-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 1029.966231][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.974231][ T24] usb 8-1: Product: syz [ 1029.978399][ T24] usb 8-1: Manufacturer: syz [ 1030.010521][ T5776] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1030.070165][ T24] usb 8-1: can't set config #1, error -71 [ 1030.077800][ T24] usb 8-1: USB disconnect, device number 14 [ 1030.284702][ T5776] usb 7-1: Using ep0 maxpacket: 8 [ 1030.307635][ T5776] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1030.348309][ T5776] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.397923][ T5776] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.464499][ T5776] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.522146][ T5776] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.590975][ T5776] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1030.635450][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.904870][ T5776] usb 7-1: usb_control_msg returned -32 [ 1030.938627][ T5776] usbtmc 7-1:16.0: can't read capabilities [ 1031.741889][T22863] configfs-gadget.g1 gadget.0: HOST MAC 1a:75:2a:52:95:fc [ 1031.839818][T22863] configfs-gadget.g1 gadget.0: MAC 6a:bd:01:51:df:25 [ 1031.922981][T22878] overlayfs: failed to clone upperpath [ 1032.029879][T22591] usb 7-1: USB disconnect, device number 35 [ 1032.199804][T22863] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 1032.350870][T22863] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 1032.375288][T22862] loop7: detected capacity change from 0 to 131072 [ 1032.388183][T22862] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1032.396278][T22862] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1032.411905][T22862] F2FS-fs (loop7): invalid crc value [ 1032.516152][T22862] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1032.539282][T22862] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1032.546333][T22862] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1032.570713][T22889] netlink: 'syz.1.5150': attribute type 18 has an invalid length. [ 1032.643223][ T187] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1032.660276][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1032.669839][T22889] netlink: 'syz.1.5150': attribute type 18 has an invalid length. [ 1032.677771][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1032.853179][T22885] Process accounting resumed [ 1032.925554][ T187] usb 1-1: Dual-Role OTG device on HNP port [ 1032.959529][ T187] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1033.033992][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.090591][T22899] loop9: detected capacity change from 0 to 128 [ 1033.348012][ T187] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 1a:75:2a:52:95:fc [ 1034.526352][T22941] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1034.618837][T22941] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1035.240356][ T5776] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1035.452298][ T5776] usb 9-1: not running at top speed; connect to a high speed hub [ 1035.510154][ T5776] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1035.527751][ T5776] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.557843][ T5776] usb 9-1: Product: syz [ 1035.574574][ T5776] usb 9-1: Manufacturer: syz [ 1035.604713][ T5776] usb 9-1: SerialNumber: syz [ 1035.688359][ T5776] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 1035.731004][T22967] loop6: detected capacity change from 0 to 2048 [ 1035.774207][ T5776] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1035.854289][T22970] gadgetfs: bound to dummy_udc driver [ 1035.879623][ T5776] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1035.945846][ T5776] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1035.947333][T22967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.053414][ T5776] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1036.203545][ T187] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1036.245723][ C0] gadgetfs: connected [ 1036.260833][ T187] gadgetfs: disconnected [ 1036.306977][T22984] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1036.344925][T22984] EXT4-fs (loop6): Remounting filesystem read-only [ 1036.353714][T22984] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 1036.491109][ C0] gadgetfs: connected [ 1036.511920][ T187] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1036.583393][ T187] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1036.605191][T22970] gadgetfs: suspended from state 3 [ 1036.628881][T22970] gadgetfs: disconnected [ 1036.636865][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.717884][ T187] usb 2-1: can't set config #1, error -71 [ 1036.763207][ T187] usb 2-1: USB disconnect, device number 18 [ 1036.931236][T22294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.021809][ T5768] usb 9-1: USB disconnect, device number 21 [ 1037.085525][ T5768] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1037.121303][ T5768] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1037.166975][ T5768] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1037.237828][T22999] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 1037.278328][ T5768] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1037.289778][ T5768] keyspan 9-1:1.0: device disconnected [ 1037.704547][T23021] loop5: detected capacity change from 0 to 128 [ 1037.903580][T23021] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1037.967307][T23021] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.673178][T20991] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1039.106510][ T187] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1039.334475][ T187] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.403497][ T187] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1039.455164][ T187] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1039.505359][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.558329][ T187] usb 7-1: Product: syz [ 1039.596199][ T187] usb 7-1: Manufacturer: syz [ 1039.650741][ T187] usb 7-1: SerialNumber: syz [ 1039.849178][ T187] cdc_mbim 7-1:1.0: skipping garbage [ 1040.164814][T23060] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1040.329195][T23063] loop5: detected capacity change from 0 to 131072 [ 1040.337700][T23063] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1040.345794][T23063] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1040.355797][T23063] F2FS-fs (loop5): invalid crc value [ 1040.495788][T23063] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1040.508366][T23079] pim6reg1: entered promiscuous mode [ 1040.536349][T23063] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1040.543395][T23063] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1040.555935][T23079] pim6reg1: entered allmulticast mode [ 1040.881521][T23060] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1040.917332][ T187] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 1040.969316][ T187] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 1041.061896][T23067] loop8: detected capacity change from 0 to 32768 [ 1041.191773][ T30] audit: type=1800 audit(1785510894.582:266): pid=23067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5206" name="bus" dev="loop8" ino=8 res=0 errno=0 [ 1041.223139][ T187] wwan wwan0: port wwan0mbim0 attached [ 1041.324582][ T187] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 5a:37:db:a5:27:af [ 1041.395952][ T187] usb 7-1: USB disconnect, device number 36 [ 1041.461284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.472378][ T187] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 1041.760152][ T187] wwan wwan0: port wwan0mbim0 disconnected [ 1042.108985][T23108] binder: 23107:23108 ioctl c0306201 2000000001c0 returned -14 [ 1042.841269][ T5768] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1043.595205][T23156] loop8: detected capacity change from 0 to 1024 [ 1043.684061][T23158] loop6: detected capacity change from 0 to 2048 [ 1043.762930][T23158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1043.781377][ T30] audit: type=1800 audit(1785510897.172:267): pid=23158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5224" name="file2" dev="loop6" ino=1347 res=0 errno=0 [ 1043.946487][ T30] audit: type=1800 audit(1785510897.342:268): pid=23164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5227" name="idVendor" dev="configfs" ino=65627 res=0 errno=0 [ 1044.222218][ T5768] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1044.512108][ T30] audit: type=1800 audit(1785510897.922:269): pid=23177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5231" name="pattern" dev="configfs" ino=64841 res=0 errno=0 [ 1044.903982][ T5768] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1044.915074][ T5768] usb 8-1: can't read configurations, error -71 [ 1045.152289][T23192] loop9: detected capacity change from 0 to 4096 [ 1045.779859][T23219] 9p: Unknown uid 00000000004294967295 [ 1047.816735][T23247] ceph: No mds server is up or the cluster is laggy [ 1047.832043][T22591] libceph: connect (1)[c::]:6789 error -101 [ 1047.846385][T23254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1047.887867][T22591] libceph: mon0 (1)[c::]:6789 connect error [ 1048.140123][ T30] audit: type=1800 audit(1785510901.542:270): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5258" name="protocol" dev="configfs" ino=65720 res=0 errno=0 [ 1048.416888][ T5776] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1048.691974][ T5776] usb 9-1: Using ep0 maxpacket: 8 [ 1048.721645][ T5776] usb 9-1: config 0 has no interfaces? [ 1048.730548][ T5776] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1048.774218][ T5776] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.863387][ T5776] usb 9-1: config 0 descriptor?? [ 1049.342788][ T5776] usb 9-1: USB disconnect, device number 22 [ 1051.078083][T23358] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 1051.363896][T22591] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1051.622221][T22591] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1051.656461][T22591] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1051.693768][T22591] usb 10-1: can't read configurations, error -71 [ 1052.257599][T23392] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5300'. [ 1052.601347][T23401] loop9: detected capacity change from 0 to 512 [ 1052.799677][T23401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.876908][T23401] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.914421][ T30] audit: type=1804 audit(1785510906.282:271): pid=23401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5302" name="/newroot/35/file1/bus" dev="loop9" ino=18 res=1 errno=0 [ 1053.009869][T22248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.343928][T23424] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1053.760753][T23438] loop9: detected capacity change from 0 to 512 [ 1053.772718][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.859066][T23438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1054.026130][ C1] Unknown status report in ack skb [ 1054.067101][T23438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.079792][T23438] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.108876][T23438] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm syz.9.5313: bg 0: block 217: padding at end of block bitmap is not set [ 1054.151547][ T5768] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1054.196472][T23438] EXT4-fs (loop9): Remounting filesystem read-only [ 1054.272560][T22248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.395152][ T48] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 1054.454204][ T48] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 1054.555384][T23455] netlink: 1355 bytes leftover after parsing attributes in process `syz.5.5319'. [ 1054.723903][T23462] overlayfs: failed to clone upperpath [ 1054.752220][T23465] Bluetooth: MGMT ver 1.23 [ 1055.068744][T23472] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1055.735566][ T5736] usb 1-1: USB disconnect, device number 4 [ 1055.799409][ T5736] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 1055.898183][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 1056.003029][T23506] udc dummy_udc.0: failed to start g1: -2 [ 1056.009076][T23506] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1056.470051][ T5768] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1056.479149][ T5768] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.487150][ T5768] usb 9-1: Product: syz [ 1056.491322][ T5768] usb 9-1: Manufacturer: syz [ 1056.495929][ T5768] usb 9-1: SerialNumber: syz [ 1056.637241][ T30] audit: type=1326 audit(1785510910.042:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23520 comm="syz.5.5338" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff61239e019 code=0x0 [ 1056.824519][ T5768] usb 9-1: can't set config #1, error -71 [ 1056.846761][ T5768] usb 9-1: USB disconnect, device number 23 [ 1069.579170][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1161.850204][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1161.857193][ C0] rcu: 1-...!: (1 GPs behind) idle=d624/1/0x4000000000000000 softirq=127317/127331 fqs=2 [ 1161.869644][ C0] rcu: (detected by 0, t=10506 jiffies, g=162521, q=1822 ncpus=2) [ 1161.877549][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1161.877586][ C1] NMI backtrace for cpu 1 [ 1161.877611][ C1] CPU: 1 UID: 0 PID: 23529 Comm: syz.9.5340 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.877658][ C1] Tainted: [L]=SOFTLOCKUP [ 1161.877671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1161.877691][ C1] RIP: 0010:rb_erase_linked+0xca/0x190 [ 1161.877739][ C1] Code: 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b9 00 00 00 4d 89 74 24 18 48 89 ee 48 89 df e8 49 ec ff ff 48 89 da <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 81 00 [ 1161.877772][ C1] RSP: 0018:ffffc90000a08e20 EFLAGS: 00000086 [ 1161.877798][ C1] RAX: dffffc0000000000 RBX: ffff888076b40300 RCX: ffff8880b8528698 [ 1161.877822][ C1] RDX: ffff888076b40300 RSI: ffff8880b8528698 RDI: ffff888076b40310 [ 1161.877845][ C1] RBP: ffff8880b8528698 R08: 0000000000000001 R09: 0000000000000000 [ 1161.877867][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1161.877887][ C1] R13: ffff8880b85286a0 R14: 0000000000000000 R15: 0000000000000000 [ 1161.877912][ C1] FS: 0000000000000000(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000 [ 1161.877942][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.877965][ C1] CR2: 00007f465395da08 CR3: 0000000074644000 CR4: 0000000000350ef0 [ 1161.877987][ C1] Call Trace: [ 1161.877998][ C1] [ 1161.878013][ C1] __remove_hrtimer+0x116/0x440 [ 1161.878068][ C1] __hrtimer_run_queues+0x352/0x9c0 [ 1161.878125][ C1] ? rcu_is_watching+0x12/0xc0 [ 1161.878178][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1161.878243][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1161.878297][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1161.878339][ C1] [ 1161.878351][ C1] [ 1161.878363][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1161.878401][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1161.878439][ C1] Code: 05 3b 7d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 c6 c8 3c 0f 0f 82 ac 02 00 00 8b 35 6e fc 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 7c 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 1161.878472][ C1] RSP: 0018:ffffc900052af418 EFLAGS: 00000206 [ 1161.878497][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1161.878518][ C1] RDX: 0000000000000000 RSI: ffffffff8e185cdc RDI: ffffffff8c401a80 [ 1161.878540][ C1] RBP: ffffffff8ebe8140 R08: 000000009f08cfc3 R09: 000000000000001e [ 1161.878562][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1161.878582][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1161.878619][ C1] ? page_table_check_clear+0x471/0x8f0 [ 1161.878675][ C1] ? page_table_check_clear+0x471/0x8f0 [ 1161.878729][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.878775][ C1] page_table_check_clear+0x67/0x8f0 [ 1161.878829][ C1] ? page_table_check_clear+0x4b/0x8f0 [ 1161.878888][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 1161.878945][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 1161.879001][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 1161.879044][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 1161.879095][ C1] __zap_vma_range+0x2ccc/0x4a30 [ 1161.879157][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1161.879206][ C1] unmap_vmas+0x299/0x5f0 [ 1161.879243][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1161.879277][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.879318][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1161.879383][ C1] exit_mmap+0x1ef/0xa00 [ 1161.879417][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.879461][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1161.879495][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.879535][ C1] ? rcu_is_watching+0x12/0xc0 [ 1161.879588][ C1] ? uprobe_clear_state+0x49/0x260 [ 1161.879629][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.879669][ C1] ? find_held_lock+0x2b/0x80 [ 1161.879718][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1161.879766][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.879805][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1161.879864][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.879905][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1161.879959][ C1] __mmput+0x12a/0x410 [ 1161.879999][ C1] mmput+0x67/0x80 [ 1161.880036][ C1] do_exit+0x8b1/0x2ae0 [ 1161.880083][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.880126][ C1] ? lock_acquire+0x1b9/0x370 [ 1161.880164][ C1] ? find_held_lock+0x2b/0x80 [ 1161.880214][ C1] ? __pfx_do_exit+0x10/0x10 [ 1161.880261][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.880303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.880344][ C1] ? find_held_lock+0x2b/0x80 [ 1161.880392][ C1] ? get_signal+0x7e0/0x21e0 [ 1161.880435][ C1] do_group_exit+0xd5/0x2a0 [ 1161.880488][ C1] get_signal+0x1ec7/0x21e0 [ 1161.880535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.880579][ C1] ? __pfx_get_signal+0x10/0x10 [ 1161.880625][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.880664][ C1] ? do_futex+0x190/0x440 [ 1161.880713][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1161.880749][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1161.880791][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.880831][ C1] ? fput+0x79/0x100 [ 1161.880883][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.880928][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 1161.880968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.881009][ C1] ? rcu_is_watching+0x12/0xc0 [ 1161.881058][ C1] do_syscall_64+0x666/0x870 [ 1161.881105][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.881144][ C1] RIP: 0033:0x7f52a179e019 [ 1161.881169][ C1] Code: Unable to access opcode bytes at 0x7f52a179dfef. [ 1161.881185][ C1] RSP: 002b:00007f52a26120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1161.881215][ C1] RAX: fffffffffffffe00 RBX: 00007f52a1a25fa8 RCX: 00007f52a179e019 [ 1161.881238][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f52a1a25fa8 [ 1161.881259][ C1] RBP: 00007f52a1a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.881280][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.881301][ C1] R13: 00007f52a1a26038 R14: 00007ffdc599b700 R15: 00007ffdc599b7e8 [ 1161.881340][ C1] [ 1161.881578][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g162521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1162.486573][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1162.496547][ C0] rcu: RCU grace-period kthread stack dump: [ 1162.502426][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1162.515989][ C0] Call Trace: [ 1162.519272][ C0] [ 1162.522209][ C0] __schedule+0x125c/0x6730 [ 1162.526739][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.532421][ C0] ? __pfx___schedule+0x10/0x10 [ 1162.537284][ C0] ? find_held_lock+0x2b/0x80 [ 1162.541994][ C0] ? schedule+0x225/0x2c0 [ 1162.546337][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.551999][ C0] schedule+0xdd/0x2c0 [ 1162.556086][ C0] schedule_timeout+0x127/0x280 [ 1162.560952][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1162.566337][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1162.571667][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.577319][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1162.583146][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.588801][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1162.594284][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1162.599066][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.604722][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1162.610029][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1162.614990][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1162.620202][ C0] ? rcu_is_watching+0x12/0xc0 [ 1162.624996][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1162.630825][ C0] rcu_gp_kthread+0x179/0x230 [ 1162.635519][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1162.640730][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1162.646555][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.652213][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.657866][ C0] ? __kthread_parkme+0x18c/0x230 [ 1162.662923][ C0] ? kthread+0x13a/0x450 [ 1162.667206][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1162.672412][ C0] kthread+0x370/0x450 [ 1162.676506][ C0] ? __pfx_kthread+0x10/0x10 [ 1162.681125][ C0] ret_from_fork+0x72b/0xd50 [ 1162.685737][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1162.690867][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.696514][ C0] ? __switch_to+0x800/0x10f0 [ 1162.701226][ C0] ? __switch_to_asm+0x39/0x70 [ 1162.706020][ C0] ? __pfx_kthread+0x10/0x10 [ 1162.710647][ C0] ret_from_fork_asm+0x1a/0x30 [ 1162.715464][ C0] [ 1162.718480][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1162.724806][ C0] CPU: 0 UID: 0 PID: 23527 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 1162.736194][ C0] Tainted: [L]=SOFTLOCKUP [ 1162.740513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1162.750571][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 1162.757357][ C0] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 1162.776976][ C0] RSP: 0018:ffffc90004e77880 EFLAGS: 00000202 [ 1162.783051][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81fdb6b2 [ 1162.791028][ C0] RDX: ffff8880283bbe00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1162.799004][ C0] RBP: ffff8880b8541380 R08: 0000000000000005 R09: 0000000000000000 [ 1162.806978][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1162.814950][ C0] R13: ffffed10170a8271 R14: 0000000000000001 R15: ffff8880b843c9c0 [ 1162.822930][ C0] FS: 0000000000000000(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000 [ 1162.831877][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.838465][ C0] CR2: 00007efcead5d7d0 CR3: 000000002c48c000 CR4: 0000000000350ef0 [ 1162.846444][ C0] Call Trace: [ 1162.849720][ C0] [ 1162.852648][ C0] smp_call_function_many_cond+0x5b2/0x1870 [ 1162.858567][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1162.863807][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.869471][ C0] ? free_pgd_range+0x2a0/0x10d0 [ 1162.874418][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1162.880775][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.886429][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1162.891654][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1162.896778][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 1162.901914][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 1162.907030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.912679][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1162.918254][ C0] tlb_finish_mmu+0x3fe/0x810 [ 1162.922957][ C0] exit_mmap+0x454/0xa00 [ 1162.927213][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1162.931984][ C0] ? rcu_is_watching+0x12/0xc0 [ 1162.936774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.942427][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1162.947374][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.953021][ C0] ? find_held_lock+0x2b/0x80 [ 1162.957718][ C0] ? uprobe_clear_state+0x5f/0x260 [ 1162.962854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.968500][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1162.974169][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1162.979812][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 1162.985475][ C0] __mmput+0x12a/0x410 [ 1162.989559][ C0] mmput+0x67/0x80 [ 1162.993297][ C0] do_exit+0x8b1/0x2ae0 [ 1162.997480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.003124][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.008769][ C0] ? __pfx_do_exit+0x10/0x10 [ 1163.013378][ C0] ? do_group_exit+0x1bd/0x2a0 [ 1163.018167][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.023812][ C0] ? rcu_is_watching+0x12/0xc0 [ 1163.028615][ C0] do_group_exit+0xd5/0x2a0 [ 1163.033152][ C0] __x64_sys_exit_group+0x3e/0x50 [ 1163.038198][ C0] x64_sys_call+0x102c/0x1530 [ 1163.042893][ C0] do_syscall_64+0x115/0x870 [ 1163.047506][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.053406][ C0] RIP: 0033:0x7efceac5b6c5 [ 1163.057820][ C0] Code: Unable to access opcode bytes at 0x7efceac5b69b. [ 1163.064829][ C0] RSP: 002b:00007ffd566e5a78 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 1163.073248][ C0] RAX: ffffffffffffffda RBX: 00007ffd566e5d04 RCX: 00007efceac5b6c5 [ 1163.081217][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1163.089187][ C0] RBP: 0000000000000003 R08: 00007ffd566e5b70 R09: 0000000000000002 [ 1163.097157][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1163.105127][ C0] R13: 00007ffd566e5db0 R14: 00007efceae6b000 R15: 0000558c0aac7d98 [ 1163.113136][ C0] [ 1289.254278][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 232s! [ 1289.266639][ C0] Showing busy workqueues and worker pools: [ 1289.274210][ C0] workqueue events: flags=0x100 [ 1289.279078][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=27 refcnt=28 [ 1289.279153][ C0] pending: 7*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, vmstat_shepherd, psi_avgs_work, jump_label_update_timeout, 3*psi_avgs_work, 4*ovs_dp_masks_rebalance, 2*rht_deferred_worker, switchdev_deferred_process_work, 5*rht_deferred_worker [ 1289.279585][ C0] workqueue events_long: flags=0x100 [ 1289.315659][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=13 refcnt=14 [ 1289.315741][ C0] pending: 6*defense_work_handler, br_fdb_cleanup, 2*br_multicast_gc_work, br_fdb_cleanup, 3*br_multicast_gc_work [ 1289.315949][ C0] workqueue events_unbound: flags=0x2 [ 1289.341102][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=34 refcnt=35 [ 1289.341167][ C0] pending: nsim_dev_trap_report_work, toggle_allocation_gate, 2*nsim_dev_trap_report_work, 9*cfg80211_wiphy_work, 7*nsim_dev_trap_report_work, flush_memcg_stats_dwork, 6*macvlan_process_broadcast, cfg80211_wiphy_work, 2*macvlan_process_broadcast, idle_cull_fn, macvlan_process_broadcast, 2*idle_cull_fn [ 1289.341746][ C0] workqueue events_power_efficient: flags=0x180 [ 1289.383721][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=13 refcnt=14 [ 1289.383805][ C0] pending: wg_ratelimiter_gc_entries, 2*neigh_managed_work, do_cache_clean, 2*neigh_periodic_work, gc_worker, reg_check_chans_work, 5*check_lifetime [ 1289.384150][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 1289.412705][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.412783][ C0] pending: kfree_rcu_monitor [ 1289.412848][ C0] workqueue mm_percpu_wq: flags=0x108 [ 1289.429970][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.430043][ C0] pending: vmstat_update [ 1289.430101][ C0] workqueue pm: flags=0x2 [ 1289.446301][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.446373][ C0] pending: pm_runtime_work [ 1289.446452][ C0] workqueue writeback: flags=0x4a [ 1289.463070][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1289.463137][ C0] pending: 2*wb_workfn [ 1289.463209][ C0] workqueue usb_hub_wq: flags=0x104 [ 1289.479620][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 1289.479690][ C0] in-flight: 5768:hub_event for 232s hub_event ,5736:hub_event for 233s hub_event [ 1289.479975][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 1289.502432][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=9 [ 1289.502499][ C0] pending: addrconf_verify_work [ 1289.502555][ C0] inactive: 5*addrconf_verify_work [ 1289.502611][ C0] workqueue krxrpcd: flags=0x2001a [ 1289.525166][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=9 [ 1289.525244][ C0] pending: rxrpc_peer_keepalive_worker [ 1289.525298][ C0] inactive: 5*rxrpc_peer_keepalive_worker [ 1289.525361][ C0] workqueue bat_events: flags=0x6000a [ 1289.550202][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=53 [ 1289.550268][ C0] pending: batadv_iv_send_outstanding_bat_ogm_packet [ 1289.550331][ C0] inactive: 2*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_mcast_mla_update, 2*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_mcast_mla_update, 4*batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 11*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_tt_purge, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge [ 1289.551212][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.626469][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.626543][ C0] pending: wg_packet_handshake_send_worker [ 1289.626601][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.644613][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.644681][ C0] pending: wg_packet_handshake_send_worker [ 1289.644735][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1289.662743][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.662811][ C0] pending: wg_packet_handshake_send_worker [ 1289.662881][ C0] workqueue bond1: flags=0x2000a [ 1289.680809][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 1289.680879][ C0] pending: bond_alb_monitor [ 1289.680947][ C0] inactive: bond_mii_monitor [ 1289.681004][ C0] workqueue bond1: flags=0x2000a [ 1289.702541][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 1289.702611][ C0] pending: bond_mii_monitor [ 1289.702665][ C0] inactive: bond_alb_monitor [ 1289.702730][ C0] workqueue krds_cp_wq#6/0: flags=0x20002 [ 1289.725041][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 1289.725106][ C0] pending: rds_connect_worker [ 1289.725162][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.742039][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.742107][ C0] pending: wg_packet_handshake_send_worker [ 1289.742156][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1289.760514][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.760592][ C0] pending: wg_packet_encrypt_worker [ 1289.760644][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.760714][ C0] pending: wg_packet_encrypt_worker [ 1289.760761][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1289.791720][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.791804][ C0] pending: wg_packet_encrypt_worker [ 1289.791859][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1289.810026][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.810111][ C0] pending: wg_packet_encrypt_worker [ 1289.826004][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.831054][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.831129][ C0] pending: wg_packet_handshake_send_worker [ 1289.831187][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1289.849542][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.849626][ C0] pending: wg_packet_encrypt_worker [ 1289.849679][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.849757][ C0] pending: wg_packet_encrypt_worker [ 1289.849807][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1289.880803][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.880885][ C0] pending: wg_packet_encrypt_worker [ 1289.880939][ C0] workqueue hci4: flags=0x20012 [ 1289.898588][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1289.898667][ C0] pending: hci_conn_timeout [ 1289.898737][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.916225][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.916300][ C0] pending: wg_packet_handshake_send_worker [ 1289.916355][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1289.934716][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.934798][ C0] pending: wg_packet_encrypt_worker [ 1289.934850][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.934926][ C0] pending: wg_packet_encrypt_worker [ 1289.934974][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.965611][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.965680][ C0] pending: wg_packet_handshake_send_worker [ 1289.965730][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1289.984076][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.984159][ C0] pending: wg_packet_encrypt_worker [ 1289.984215][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.984292][ C0] pending: wg_packet_encrypt_worker [ 1289.984339][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1290.015327][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.015408][ C0] pending: wg_packet_encrypt_worker [ 1290.015460][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.015536][ C0] pending: wg_packet_encrypt_worker [ 1290.015582][ C0] workqueue hci0: flags=0x20012 [ 1290.046034][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1290.046116][ C0] pending: hci_conn_timeout [ 1290.046187][ C0] workqueue hci1: flags=0x20012 [ 1290.063488][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1290.063561][ C0] pending: hci_conn_timeout [ 1290.063625][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1290.081100][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1290.081170][ C0] pending: wg_packet_handshake_send_worker [ 1290.081224][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1290.099564][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.099643][ C0] pending: wg_packet_encrypt_worker [ 1290.099697][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.099774][ C0] pending: wg_packet_encrypt_worker [ 1290.099823][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1290.130825][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.130898][ C0] pending: wg_packet_encrypt_worker [ 1290.130947][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.131018][ C0] pending: wg_packet_encrypt_worker [ 1290.131063][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1290.162036][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.162119][ C0] pending: wg_packet_encrypt_worker [ 1290.162171][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1290.162250][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 1290.162324][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1290.194782][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1290.194858][ C0] pending: wg_packet_handshake_send_worker [ 1290.194912][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1290.213287][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.213363][ C0] pending: wg_packet_encrypt_worker [ 1290.213411][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1290.213481][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 1290.213547][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1290.245987][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1290.246062][ C0] pending: wg_packet_handshake_send_worker [ 1290.246116][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1290.264476][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.264559][ C0] pending: wg_packet_encrypt_worker [ 1290.264610][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.264686][ C0] pending: wg_packet_encrypt_worker [ 1290.264734][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1290.295719][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.295799][ C0] pending: wg_packet_encrypt_worker [ 1290.295850][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.295927][ C0] pending: wg_packet_encrypt_worker [ 1290.295990][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=233s workers=8 idle: 29 11568 24 11566 22177 5354