last executing test programs: 18m36.692846535s ago: executing program 32 (id=1322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 16m6.059906428s ago: executing program 33 (id=2434): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13m15.32726538s ago: executing program 34 (id=3751): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 10m44.40682323s ago: executing program 35 (id=4863): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8m26.804406524s ago: executing program 36 (id=5820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 8m14.800371049s ago: executing program 37 (id=5897): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m9.261910672s ago: executing program 38 (id=5929): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000280)={[{@nombcache}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@orlov}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b0001000000050019000200000008002200", @ANYRES8=r2], 0x84}}, 0x200088c2) 4m55.447024741s ago: executing program 2 (id=6827): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4074, 0xfea}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 4m55.011755815s ago: executing program 2 (id=6830): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 4m54.453170865s ago: executing program 2 (id=6833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4m53.98685925s ago: executing program 2 (id=6836): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 4m52.152201609s ago: executing program 2 (id=6847): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(0x3) 4m49.961644552s ago: executing program 2 (id=6856): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000060000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m48.746591305s ago: executing program 39 (id=6856): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000060000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m26.281161028s ago: executing program 6 (id=7307): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000040)) 3m22.994297247s ago: executing program 6 (id=7329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x0, @val=@perf_event={0x17}}, 0x18) syz_emit_ethernet(0xd81, &(0x7f00000030c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "90eb81", 0xd4b, 0x21, 0xff, @loopback, @mcast1, {[@hopopts={0x32}], {{0x4e23, 0x4e20, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x1, "f6f244", 0x8, 'JO='}, "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"}}}}}}, 0x0) 3m22.487759735s ago: executing program 6 (id=7333): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r2 = open_tree(r1, &(0x7f0000000300)='./cgroup\x00', 0x89801) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r2, 0x0, r3, 0x0, 0x46) close_range(r0, 0xffffffffffffffff, 0x0) 3m21.968151844s ago: executing program 6 (id=7339): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@sysvgroups}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='mnt\x00', 0x486200, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m20.250806466s ago: executing program 6 (id=7346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3], 0x44}}, 0x2000800) 3m16.4931004s ago: executing program 3 (id=7362): r0 = socket$can_j1939(0x1d, 0x2, 0x7) read(r0, &(0x7f0000000140)=""/192, 0xc0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 3m15.428111777s ago: executing program 6 (id=7367): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) read$nci(r0, &(0x7f0000000380)=""/217, 0xd9) 3m15.258301726s ago: executing program 3 (id=7368): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x4, 0x0, @multicast1}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3m13.968164879s ago: executing program 40 (id=7367): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) read$nci(r0, &(0x7f0000000380)=""/217, 0xd9) 3m13.922199107s ago: executing program 3 (id=7372): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x200}}, {@lazytime}, {@mb_optimize_scan}]}, 0x1, 0x5ab, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="c9", 0x1}], 0x1, 0xe7b, 0x0, 0x200000000000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3m11.647226872s ago: executing program 3 (id=7382): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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") r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f00000001c0)=""/201, 0xc9) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000006080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3m9.199326683s ago: executing program 3 (id=7393): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) 3m5.172808076s ago: executing program 3 (id=7415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 3m3.827198284s ago: executing program 41 (id=7415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 1m24.446827384s ago: executing program 8 (id=7803): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7, 0x2000009, 0xfffffffffffffffe}) 1m23.101690589s ago: executing program 8 (id=7811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0x100) 1m22.501425298s ago: executing program 8 (id=7816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff1}, {0x1, 0xfff1}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m21.055066543s ago: executing program 8 (id=7824): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 1m20.240888585s ago: executing program 8 (id=7833): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs], 0x0, 0x0, 0x0}) 1m17.737348871s ago: executing program 8 (id=7855): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) 1m16.837873379s ago: executing program 42 (id=7855): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) 6.210994549s ago: executing program 9 (id=8252): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000002c0)=""/153, 0x99) 5.863959192s ago: executing program 5 (id=8257): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 5.570840973s ago: executing program 5 (id=8260): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) writev(r2, &(0x7f0000002700)=[{&(0x7f0000000740)='G', 0x1}, {0x0}], 0x2) 5.504231072s ago: executing program 9 (id=8261): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@mark={0xc, 0x15, {0x35075b, 0xf}}]}, 0xc4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000004000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000005"], 0xfc}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 5.15246886s ago: executing program 9 (id=8265): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 5.137507432s ago: executing program 1 (id=8266): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000012c0)="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", 0x1d2}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x20044014) recvmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/189, 0xbd}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000840)=""/164, 0xa4}], 0x3}, 0x3}], 0x2, 0x400101c3, 0x0) 4.825509083s ago: executing program 9 (id=8270): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.741942403s ago: executing program 1 (id=8271): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000000dc0), 0x7fa) mknod$loop(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x8, 0x0) 4.651731773s ago: executing program 5 (id=8273): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x123e02, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x9) 4.312056128s ago: executing program 7 (id=8275): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.055056696s ago: executing program 1 (id=8277): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) 3.924063572s ago: executing program 7 (id=8279): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000003c0)='./bus\x00') rmdir(&(0x7f0000000040)='./file0\x00') 3.865906253s ago: executing program 4 (id=8280): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2, 0x4}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 3.774937652s ago: executing program 7 (id=8281): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f00000034c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x559e, &(0x7f0000005680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)=0x1) 3.55202088s ago: executing program 9 (id=8282): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.517795025s ago: executing program 5 (id=8283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(0x3) 3.030477182s ago: executing program 1 (id=8284): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.812162339s ago: executing program 0 (id=8285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003181a08, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) setgroups(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 2.55379324s ago: executing program 4 (id=8286): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x4) 2.506346631s ago: executing program 9 (id=8287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224"], 0x0) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzszy3OwkAUhtF3vh9GYFB4dgIeW0WCRrKESiyLwLAxllHSQhs2QAjJOWJyc/OMuOGjStbT/DMO+/P/a1P7Z9iUdty1Odak/V2VkmWd0s0il1n/o8vuUJJt91CSzIfi1jzTU/1Lc33nbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwLe4BAAD//zujEGQ=") syz_usb_connect$uac2(0x3, 0x8b, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r1, &(0x7f0000007f40)=[{&(0x7f0000007fc0)=""/4110, 0x100e}], 0x1, 0x0, 0x5, 0xc) 2.284064591s ago: executing program 5 (id=8288): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.227041008s ago: executing program 1 (id=8289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x9, 0x5}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f80010001"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) 1.945145162s ago: executing program 5 (id=8290): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000011c0)={0x1c, &(0x7f0000000c80)={0x20, 0x0, 0x2, "42e0"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.53267495s ago: executing program 0 (id=8291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_getneigh={0x20, 0x1e, 0x903, 0x3, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x4109, 0x318}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c090}, 0xc4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12780}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x20000, 0x2000c}}}}}}]}, 0x48}}, 0x48084) 1.478308892s ago: executing program 4 (id=8292): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5c50fae9d6d8d3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.256234991s ago: executing program 0 (id=8293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x800001f}) 1.115407481s ago: executing program 7 (id=8294): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3004c8d1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5}, 0x8) 988.316361ms ago: executing program 1 (id=8295): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x176f, &(0x7f0000000140)={0x0, 0x48a2, 0x800, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) 868.669012ms ago: executing program 4 (id=8296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000001880)={0x9b, 0x100072, 0x100000}, 0x20) 746.374563ms ago: executing program 7 (id=8297): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 544.79649ms ago: executing program 4 (id=8298): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 544.539527ms ago: executing program 0 (id=8299): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000001c0)=0xd0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000001c0)=0xd0) close_range(r0, 0xffffffffffffffff, 0x0) 264.911066ms ago: executing program 7 (id=8300): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x100000006, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 236.048302ms ago: executing program 0 (id=8301): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1}, 0x10150) 210.747µs ago: executing program 0 (id=8302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = dup(r1) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000)={'dvmrp0', 0x32, 0x38}, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=8303): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x104}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) kernel console output (not intermixed with test programs): backlog [ 1188.086162][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.945042][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7165'. [ 1189.204501][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.337272][T26892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.461042][T26892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.469806][T26892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.666147][T26892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.736017][T26892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.740546][T26896] netlink: 'syz.7.7170': attribute type 4 has an invalid length. [ 1189.770548][T26896] netlink: 17 bytes leftover after parsing attributes in process `syz.7.7170'. [ 1189.808314][T26891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.851085][T26898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.915529][T26900] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.7170'. [ 1190.115752][T22181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.284178][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.178235][T26937] loop5: detected capacity change from 0 to 131072 [ 1193.187955][T22181] net_ratelimit: 2 callbacks suppressed [ 1193.187983][T22181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.280796][T26937] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 1193.287692][T26937] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1193.308726][T26937] F2FS-fs (loop5): invalid crc value [ 1193.466364][T26937] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1193.520814][T26937] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1193.528116][T26937] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1193.643551][T26924] loop7: detected capacity change from 0 to 131072 [ 1193.663343][T26924] F2FS-fs (loop7): invalid crc value [ 1193.686219][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.879607][T26924] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1193.914152][ C1] F2FS-fs (loop5): inconsistent node block, node_type:0, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 1193.924787][T26924] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1193.961013][ C1] F2FS-fs (loop5): inconsistent node block, node_type:0, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 1193.980620][T26937] overlayfs: failed to resolve './file2': -5 [ 1194.786611][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.980543][T26964] loop3: detected capacity change from 0 to 4096 [ 1195.186051][T26964] ntfs3(loop3): Failed to load $Extend (-22). [ 1195.192204][T26964] ntfs3(loop3): Failed to initialize $Extend. [ 1195.817496][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.885216][T26983] loop6: detected capacity change from 0 to 2640 [ 1195.924046][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.010274][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.064907][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.113287][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.136534][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.195858][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.201126][T22181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.286498][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.339425][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.347322][T26983] ldm_validate_partition_table(): Disk read failed. [ 1196.416742][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.480897][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.489085][T26983] Dev loop6: unable to read RDB block 0 [ 1196.490143][T26992] ªªªªªª: renamed from vlan0 (while UP) [ 1196.527760][T26983] loop6: unable to read partition table [ 1196.546189][T26983] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1196.779890][T26995] loop6: detected capacity change from 0 to 512 [ 1196.846401][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.873242][T26995] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1196.912213][T26995] EXT4-fs (loop6): ea_inode feature is not supported for Hurd [ 1197.883463][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.427466][T27025] loop3: detected capacity change from 0 to 1024 [ 1198.868653][T26995] loop6: detected capacity change from 0 to 32768 [ 1198.925184][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.001238][T26995] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1199.235847][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.453431][T26995] XFS (loop6): Ending clean mount [ 1199.601692][T27052] evm: overlay not supported [ 1199.967282][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.992547][T22712] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1200.998529][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.037407][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.276483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.302825][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.318432][T22181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.549383][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1202.549410][ T30] audit: type=1800 audit(1783558006.905:353): pid=27104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7236" name="bus" dev="tmpfs" ino=6556 res=0 errno=0 [ 1202.627982][ T30] audit: type=1326 audit(1783558006.945:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1202.712340][ T30] audit: type=1326 audit(1783558006.945:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1202.812389][ T30] audit: type=1326 audit(1783558006.945:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1202.900192][ T30] audit: type=1326 audit(1783558006.945:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1202.945754][ T30] audit: type=1326 audit(1783558006.955:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1203.001785][ T30] audit: type=1326 audit(1783558006.955:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1203.096707][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.128422][ T30] audit: type=1326 audit(1783558006.955:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1203.252208][ T30] audit: type=1326 audit(1783558006.955:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1203.317823][ T30] audit: type=1326 audit(1783558006.955:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.7.7235" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ab79de59 code=0x7ffc0000 [ 1203.657887][T27136] loop3: detected capacity change from 0 to 256 [ 1204.119132][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.240723][T27142] loop5: detected capacity change from 0 to 32768 [ 1204.313251][T27142] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1204.519642][T27142] XFS (loop5): Ending clean mount [ 1204.545651][T27142] XFS (loop5): Quotacheck needed: Please wait. [ 1205.170325][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.235913][T27142] XFS (loop5): Quotacheck: Done. [ 1205.304131][T27176] loop6: detected capacity change from 0 to 1024 [ 1205.396278][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.455385][T22372] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1206.225267][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.253027][T27184] loop3: detected capacity change from 0 to 1024 [ 1206.352409][T27184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1206.473693][T27184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.898422][T25883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.244765][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.276016][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.438335][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.318052][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.457683][T27232] loop7: detected capacity change from 0 to 1024 [ 1209.498592][T27232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1209.524720][T19973] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1209.615227][T27232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.728817][T19973] usb 4-1: Using ep0 maxpacket: 16 [ 1209.827849][T19973] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1209.836120][T19973] usb 4-1: config 1 has no interface number 0 [ 1209.873499][T19973] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1209.883495][T19973] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1209.982444][T27229] loop6: detected capacity change from 0 to 4096 [ 1209.990000][T19973] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1210.030219][T12837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.185006][T19973] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1210.194154][T19973] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1210.262050][T27229] ntfs3(loop6): Failed to load $Extend (-22). [ 1210.285575][T19973] usb 4-1: Product: syz [ 1210.297792][T27229] ntfs3(loop6): Failed to initialize $Extend. [ 1210.344656][T19973] usb 4-1: Manufacturer: syz [ 1210.365060][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.384342][T19973] usb 4-1: SerialNumber: syz [ 1210.448045][T27228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1210.462935][T27228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1210.947420][T27228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1211.016231][T27228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1211.411676][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.477338][T22181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.506143][T19973] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1211.749092][T19973] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1211.887538][T22181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.084459][T19973] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ee:ac:be:4a:ac:6f [ 1212.268466][T19973] usb 4-1: USB disconnect, device number 41 [ 1212.277655][T19973] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1212.318486][T27252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.488849][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.545002][T22179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.694451][T27262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7294'. [ 1212.953308][T19973] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1213.045588][T19973] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1213.097574][T19973] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1213.564977][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.881988][T27281] loop7: detected capacity change from 0 to 128 [ 1214.002281][T27281] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1214.128816][T27281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1214.518896][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.598891][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.798206][T27298] loop3: detected capacity change from 0 to 512 [ 1214.934070][T27298] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.7306: invalid indirect mapped block 256 (level 2) [ 1214.952746][T27303] netlink: 'syz.5.7321': attribute type 9 has an invalid length. [ 1215.025048][T27298] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1215.034913][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1215.053447][ C0] EXT4-fs (loop3): initial error at time 1783558019: ext4_free_branches:1020: inode 11 [ 1215.063234][ C0] EXT4-fs (loop3): last error at time 1783558019: ext4_free_branches:1020: inode 11 [ 1215.087771][T27298] EXT4-fs (loop3): 2 truncates cleaned up [ 1215.131050][T27298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1215.635555][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.693334][T25883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.083320][T27313] team0: entered allmulticast mode [ 1216.088530][T27313] team_slave_0: entered allmulticast mode [ 1216.094292][T27313] team_slave_1: entered allmulticast mode [ 1216.384167][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7315'. [ 1216.403599][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7315'. [ 1216.454398][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7315'. [ 1216.518585][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7315'. [ 1216.684208][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.276896][T27336] loop7: detected capacity change from 0 to 512 [ 1217.408332][T27336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.486354][T27336] ext4 filesystem being mounted at /826/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.557127][T22181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.732592][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.052573][T27354] fuse: Bad value for 'fd' [ 1218.508451][T12837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.756744][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.926941][T19973] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1218.994877][T19973] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1219.110900][T27374] loop3: detected capacity change from 0 to 128 [ 1219.156151][T27373] loop6: detected capacity change from 0 to 1024 [ 1219.244843][T27373] EXT4-fs: Ignoring removed bh option [ 1219.271315][T27374] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1219.403260][T27374] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.452106][T27373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.796172][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.827797][T27374] syz.3.7337 (pid 27374) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1219.870504][T27373] EXT4-fs error (device loop6): ext4_check_all_de:658: inode #12: block 7: comm syz.6.7339: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1220.081396][T25883] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1220.600918][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.762428][T22712] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1220.835473][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.878414][T22712] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1220.971167][T22712] EXT4-fs error (device loop6): empty_inline_dir:1776: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1221.541031][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1221.590284][T22712] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1221.690682][T22712] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1221.808300][T22712] EXT4-fs error (device loop6): empty_inline_dir:1776: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1221.877880][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.025580][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1222.104812][T22712] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1222.132921][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.310963][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7349'. [ 1222.354446][T22712] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1222.448026][T22712] EXT4-fs error (device loop6): empty_inline_dir:1776: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1222.556843][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1222.643616][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1222.699034][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1222.787971][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1222.852377][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1222.925131][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.944985][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1223.042439][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1223.096476][T22712] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1223.387434][T27416] loop7: detected capacity change from 0 to 128 [ 1223.462085][T27416] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1223.491991][T27416] hpfs: filesystem error: improperly stopped [ 1223.503264][T27416] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1223.534692][T27416] hpfs: You really don't want any checks? You are crazy... [ 1223.561123][T27416] hpfs: Code page index out of array [ 1223.608401][T27416] hpfs: code page support is disabled [ 1223.613981][T27416] hpfs: hpfs_map_4sectors(): unaligned read [ 1223.636735][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.665674][T27416] hpfs: hpfs_map_4sectors(): unaligned read [ 1223.672732][T27416] hpfs: filesystem error: unable to find root dir [ 1223.960643][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.195582][T16458] Bluetooth: hci6: command 0x1003 tx timeout [ 1224.229829][ T50] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1225.015085][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.060123][T22712] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.048736][T19973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.362566][T23241] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.641722][T23241] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.674874][T22179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.867225][T23241] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.075636][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.345725][T27462] loop3: detected capacity change from 0 to 1024 [ 1227.352007][T23241] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.827162][T27471] loop5: detected capacity change from 0 to 2048 [ 1227.923683][T22178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.941139][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.992650][T27462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1228.018695][T27471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1228.055466][T27462] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1228.097770][T16458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1228.121515][T16458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1228.137745][T16458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1228.150296][T16458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1228.159215][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.159464][T16458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1228.181039][T27471] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1228.386669][T27479] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.7372: lblock 3 mapped to illegal pblock 3 (length 1) [ 1228.417703][T27471] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -28 [ 1228.434471][T27467] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1228.535448][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1228.535478][ T30] audit: type=1800 audit(1783558032.675:380): pid=27462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7372" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1228.612970][T27479] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1228.684793][T27479] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1228.684793][T27479] [ 1228.718718][T27487] loop7: detected capacity change from 0 to 512 [ 1228.826955][T22372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.841329][T27487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1228.916459][T27487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.087563][T27487] ext4 filesystem being mounted at /834/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.109975][T27487] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.7391: iget: bad i_size value: 2533274857506816 [ 1229.221757][T27487] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.7391: iget: bad i_size value: 2533274857506816 [ 1229.239224][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.257563][T25883] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1229.294350][T25883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1229.856490][T12837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.882871][T27502] loop3: detected capacity change from 0 to 128 [ 1229.919976][T27502] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1230.093008][T27502] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1230.274451][T16458] Bluetooth: hci0: command tx timeout [ 1230.285864][T22183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.490767][T23241] erspan0: left allmulticast mode [ 1230.496335][T23241] erspan0: left promiscuous mode [ 1230.501612][T23241] bridge0: port 3(erspan0) entered disabled state [ 1230.643999][T23241] bridge_slave_1: left allmulticast mode [ 1230.746773][T23241] bridge_slave_1: left promiscuous mode [ 1230.777175][T23241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.878235][ T30] audit: type=1800 audit(1783558035.235:381): pid=27517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7386" name="nullb0" dev="tmpfs" ino=1307 res=0 errno=0 [ 1230.979708][T23241] bridge_slave_0: left allmulticast mode [ 1231.003912][T23241] bridge_slave_0: left promiscuous mode [ 1231.009797][T23241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.640209][T25883] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1231.668776][T25883] FAT-fs (loop3): Filesystem has been set read-only [ 1231.891994][T25883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1231.953506][T27532] loop5: detected capacity change from 0 to 2048 [ 1232.061446][T27532] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1232.263726][T27533] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1232.356499][T16458] Bluetooth: hci0: command tx timeout [ 1232.477936][T27532] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1233.432805][T27541] loop7: detected capacity change from 0 to 32768 [ 1233.621021][T27541] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1233.811914][T27541] XFS (loop7): Ending clean mount [ 1233.853105][T27541] XFS (loop7): Quotacheck needed: Please wait. [ 1234.296168][T22372] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 147 [ 1234.331816][T22372] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1234.440798][T16458] Bluetooth: hci0: command tx timeout [ 1234.469464][T22372] Remounting filesystem read-only [ 1234.483858][T23241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.487242][T27541] XFS (loop7): Quotacheck: Done. [ 1234.494300][T22372] NILFS (loop5): error -5 truncating bmap (ino=15) [ 1234.589179][T23241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.653096][T23241] bond0 (unregistering): Released all slaves [ 1234.670514][T12837] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1234.714786][T22372] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1235.286550][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1235.327491][T27514] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1236.516004][T16458] Bluetooth: hci0: command tx timeout [ 1237.147392][T23241] hsr_slave_0: left promiscuous mode [ 1237.212401][T23241] hsr_slave_1: left promiscuous mode [ 1237.242974][T23241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.356659][T23241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.487227][T23241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.541342][T23241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.110473][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1238.157602][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1238.159470][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.173028][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1238.188148][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1238.193645][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.201925][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 1238.216639][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1238.250060][T23241] veth1_macvtap: left promiscuous mode [ 1238.331927][T23241] veth0_macvtap: left promiscuous mode [ 1238.337587][T23241] veth1_vlan: left promiscuous mode [ 1238.399062][T23241] veth0_vlan: left promiscuous mode [ 1238.468964][T27609] overlayfs: failed to clone upperpath [ 1239.849492][T27626] loop7: detected capacity change from 0 to 164 [ 1239.874814][T27626] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 1240.361012][ T50] Bluetooth: hci5: command tx timeout [ 1240.610017][T23241] team0 (unregistering): Port device team_slave_1 removed [ 1240.635911][T27632] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7420'. [ 1240.664527][T23241] team0 (unregistering): Port device team_slave_0 removed [ 1240.753582][T27633] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7420'. [ 1241.040516][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1242.434402][ T50] Bluetooth: hci5: command tx timeout [ 1242.849966][T23241] IPVS: stop unused estimator thread 0... [ 1244.515268][ T50] Bluetooth: hci5: command tx timeout [ 1245.851715][T27707] loop7: detected capacity change from 0 to 1024 [ 1246.235640][T23241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.438834][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1246.482439][T27473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.495800][T27473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.506544][T27473] bridge_slave_0: entered allmulticast mode [ 1246.514797][T27473] bridge_slave_0: entered promiscuous mode [ 1246.600821][ T50] Bluetooth: hci5: command tx timeout [ 1246.779712][T23241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.924689][T27718] loop7: detected capacity change from 0 to 4096 [ 1246.952410][T27473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.968424][T27473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.997423][T27473] bridge_slave_1: entered allmulticast mode [ 1247.023454][T27718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.046471][T27473] bridge_slave_1: entered promiscuous mode [ 1247.180787][ T30] audit: type=1800 audit(1783558051.535:382): pid=27718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7438" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1247.377638][T27473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.615805][T27723] fuse: Bad value for 'fd' [ 1247.687781][T12837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.724280][T27726] loop5: detected capacity change from 0 to 256 [ 1248.429965][T23241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.502415][T27473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.782655][T23241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.869220][T27473] team0: Port device team_slave_0 added [ 1248.902286][T27473] team0: Port device team_slave_1 added [ 1249.028101][T27473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.068573][T27473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.142760][T27473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.262824][T27473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.292107][T27473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.342990][T27473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.747051][T27473] hsr_slave_0: entered promiscuous mode [ 1249.760705][T27473] hsr_slave_1: entered promiscuous mode [ 1249.771127][T27473] debugfs: 'hsr0' already exists in 'hsr' [ 1249.778201][T27473] Cannot create hsr debugfs directory [ 1249.814922][T23241] bridge_slave_1: left allmulticast mode [ 1249.821188][T23241] bridge_slave_1: left promiscuous mode [ 1249.828843][T23241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.847166][T23241] bridge_slave_0: left allmulticast mode [ 1249.855261][T23241] bridge_slave_0: left promiscuous mode [ 1249.869056][T23241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.387016][T23241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.402162][T23241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.416614][T23241] bond0 (unregistering): Released all slaves [ 1250.437598][T27600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.452421][T27600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.461758][T27600] bridge_slave_0: entered allmulticast mode [ 1250.473404][T27600] bridge_slave_0: entered promiscuous mode [ 1250.486749][T27600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.499611][T27600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.508560][T27600] bridge_slave_1: entered allmulticast mode [ 1250.519288][T27600] bridge_slave_1: entered promiscuous mode [ 1250.574454][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1250.877175][T27600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.966046][T27600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.150679][T27600] team0: Port device team_slave_0 added [ 1251.204721][T27600] team0: Port device team_slave_1 added [ 1251.341515][T23241] hsr_slave_0: left promiscuous mode [ 1251.351321][T23241] hsr_slave_1: left promiscuous mode [ 1251.359472][T23241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.369865][T23241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.380485][T23241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.390957][T23241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.429040][T23241] veth1_macvtap: left promiscuous mode [ 1251.440286][T23241] veth0_macvtap: left promiscuous mode [ 1251.447548][T23241] veth1_vlan: left promiscuous mode [ 1251.464228][T23241] veth0_vlan: left promiscuous mode [ 1252.112976][T23241] team_slave_1 (unregistering): left allmulticast mode [ 1252.132332][T23241] team0 (unregistering): Port device team_slave_1 removed [ 1252.172771][T23241] team_slave_0 (unregistering): left allmulticast mode [ 1252.186893][T23241] team0 (unregistering): Port device team_slave_0 removed [ 1252.481636][T27600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.490342][T27600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.531825][T27600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.557241][T27600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.569104][T27600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.600645][T27600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.993918][T27600] hsr_slave_0: entered promiscuous mode [ 1253.005089][T27600] hsr_slave_1: entered promiscuous mode [ 1253.022964][T27600] debugfs: 'hsr0' already exists in 'hsr' [ 1253.032795][T27600] Cannot create hsr debugfs directory [ 1255.139110][T27473] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1255.209290][T27473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1255.219466][T27473] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1255.288220][T27473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1255.298607][T27473] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1255.359322][T27473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1255.369517][T27473] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1255.440255][T27473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1255.719157][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1256.484720][T27473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.526375][T27473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.569400][T23232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.576675][T23232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.623466][T23232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.633430][T23232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.543038][T27600] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1257.581512][T27600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1257.604943][T27600] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1257.635247][T27600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1257.653373][T27600] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1257.699322][T27600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1257.726677][T27600] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1257.755363][T27600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1258.091398][T27600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.172973][T27600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.209192][T20773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.219877][T20773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.252661][T20773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.261994][T20773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1258.296932][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1259.314788][T27473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.459715][T27473] veth0_vlan: entered promiscuous mode [ 1260.493505][T27473] veth1_vlan: entered promiscuous mode [ 1260.909664][T27473] veth0_macvtap: entered promiscuous mode [ 1260.950739][T27473] veth1_macvtap: entered promiscuous mode [ 1261.094876][T27473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.227369][T27473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.270747][T27600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.334055][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1261.342485][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.383930][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.405784][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.423770][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.946082][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.986242][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.099865][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.107781][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.083490][T27600] veth0_vlan: entered promiscuous mode [ 1263.183429][T27600] veth1_vlan: entered promiscuous mode [ 1263.233039][T22183] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1263.360560][T27600] veth0_macvtap: entered promiscuous mode [ 1263.475338][T27600] veth1_macvtap: entered promiscuous mode [ 1263.557617][T27600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.581394][T22183] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1263.589829][T22183] usb 10-1: can't read configurations, error -71 [ 1263.608821][T27600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.670190][T23240] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.683202][T23240] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.728465][T23240] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.739408][T23240] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.085704][T23232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.124405][T23232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.343556][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.399403][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.454771][T27871] netlink: 'syz.5.7446': attribute type 4 has an invalid length. [ 1264.461003][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1267.934817][T22179] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1268.145461][T22179] usb 1-1: Using ep0 maxpacket: 8 [ 1268.225806][T22179] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.309138][T22179] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1268.339975][T22179] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1268.404817][T22179] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1268.511683][T22179] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1268.562114][T22179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1268.594982][T22179] usb 1-1: SerialNumber: syz [ 1268.649385][T27915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1268.674239][T22179] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1268.706016][T27937] netlink: 'syz.8.7470': attribute type 1 has an invalid length. [ 1268.706197][T22179] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1269.151391][T27947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.158921][T27947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.296168][T22179] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1269.377697][T27950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.427382][T22179] scsi host1: usb-storage 1-1:1.0 [ 1269.472036][T27950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.526674][T27950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.561312][T27950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.795319][T27947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.805308][T27947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.813038][T27947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.822870][T27947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.177294][T27947] bridge0: entered promiscuous mode [ 1270.183750][T27947] bridge0: entered allmulticast mode [ 1270.359207][T27966] netlink: 'syz.9.7478': attribute type 2 has an invalid length. [ 1270.411918][T27966] netlink: 'syz.9.7478': attribute type 2 has an invalid length. [ 1271.418150][T27952] usb 1-1: reset high-speed USB device number 46 using dummy_hcd [ 1271.775319][T27996] mac80211_hwsim hwsim32 »»»»»»: renamed from wlan0 (while UP) [ 1272.616367][T22183] usb 1-1: USB disconnect, device number 46 [ 1273.457447][T28020] netlink: 'syz.7.7495': attribute type 3 has an invalid length. [ 1273.707559][T28020] netlink: 'syz.7.7495': attribute type 3 has an invalid length. [ 1273.810348][T28026] loop9: detected capacity change from 0 to 2640 [ 1273.881877][T28026] buffer_io_error: 11 callbacks suppressed [ 1273.881904][T28026] Buffer I/O error on dev loop9, logical block 0, async page read [ 1274.087209][T28026] Buffer I/O error on dev loop9, logical block 0, async page read [ 1274.134551][T28031] loop5: detected capacity change from 0 to 512 [ 1274.235528][T28026] Buffer I/O error on dev loop9, logical block 0, async page read [ 1274.351508][T28031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 1274.404957][T28026] Buffer I/O error on dev loop9, logical block 1, async page read [ 1274.437677][T28031] System zones: 1-12 [ 1274.443585][T28031] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.7500: invalid indirect mapped block 1819239214 (level 1) [ 1274.471975][T28031] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1274.472962][T28031] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.7500: bg 0: block 361: padding at end of block bitmap is not set [ 1274.485948][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1274.485992][ C0] EXT4-fs (loop5): initial error at time 1783558078: ext4_free_branches:1020: inode 13 [ 1274.486050][ C0] EXT4-fs (loop5): last error at time 1783558078: ext4_free_branches:1020: inode 13 [ 1274.547013][T28031] loop5: lost filesystem error report for type 5 error -117 [ 1274.548776][T28031] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1274.565682][T28026] loop9: unable to read partition table [ 1274.583027][T28029] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1274.600384][T28027] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 1274.661236][T28026] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1274.791807][T28031] loop5: lost filesystem error report for type 5 error -117 [ 1274.811198][T28031] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.7500: attempt to clear invalid blocks 33619980 len 1 [ 1274.828722][T28029] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 1274.923796][T28029] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 1274.932395][T28031] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1274.941804][T28031] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.7500: invalid indirect mapped block 1819239214 (level 0) [ 1274.995481][T28029] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 1275.068866][T28029] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 1275.110076][T28031] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1275.153301][T28031] EXT4-fs (loop5): 1 truncate cleaned up [ 1275.216573][T28031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.463688][ T4984] ldm_validate_partition_table(): Disk read failed. [ 1275.517565][ T4984] Dev loop9: unable to read RDB block 0 [ 1275.523980][ T4984] loop9: unable to read partition table [ 1275.799140][T22372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.238120][T28062] loop7: detected capacity change from 0 to 64 [ 1276.383129][T28062] syz.7.7510: attempt to access beyond end of device [ 1276.383129][T28062] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1276.484173][T28062] syz.7.7510: attempt to access beyond end of device [ 1276.484173][T28062] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1277.209693][T28069] loop9: detected capacity change from 0 to 40427 [ 1277.225292][T28069] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1277.236072][T28069] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1277.383562][T28069] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1277.526951][T28069] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1277.537457][T28069] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1278.023182][T28069] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 1278.035418][T28069] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 1278.043504][T28069] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 1278.053760][T28069] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 1278.061395][T28069] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 1278.071555][T28069] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 1278.079150][T28069] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 1279.605915][T28093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7519'. [ 1279.621362][T28109] overlayfs: failed to clone upperpath [ 1284.302112][T28178] loop8: detected capacity change from 0 to 128 [ 1284.402437][T28178] vfat: Unknown parameter 'uid-0x000000000000ee00' [ 1286.539278][T28229] netlink: 'syz.8.7560': attribute type 4 has an invalid length. [ 1287.448007][T28236] loop8: detected capacity change from 0 to 32768 [ 1287.462500][T28236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.7566 (28236) [ 1287.503053][T28236] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1287.516968][T28236] BTRFS info (device loop8): using crc32c checksum algorithm [ 1287.771719][T20773] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 1288.009153][T28236] BTRFS warning (device loop8): couldn't read tree root [ 1288.016220][T28236] BTRFS warning (device loop8): try to load backup roots slot 1 [ 1288.044382][T23232] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 1288.134675][T28236] BTRFS warning (device loop8): couldn't read tree root [ 1288.144762][T28236] BTRFS warning (device loop8): try to load backup roots slot 2 [ 1288.164575][T23232] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1288.238057][T28236] BTRFS warning (device loop8): couldn't read tree root [ 1288.248156][T28236] BTRFS warning (device loop8): try to load backup roots slot 3 [ 1288.298544][T28236] BTRFS info (device loop8): checking UUID tree [ 1288.312710][T28236] BTRFS info (device loop8): setting nodatasum [ 1288.318956][T28236] BTRFS info (device loop8): enabling ssd optimizations [ 1288.330660][T28236] BTRFS info (device loop8): turning on flush-on-commit [ 1288.337677][T28236] BTRFS info (device loop8): turning on async discard [ 1288.347168][T28236] BTRFS info (device loop8): enabling free space tree [ 1288.354006][T28236] BTRFS info (device loop8): trying to use backup root at mount time [ 1288.364721][T28236] BTRFS info (device loop8): max_inline set to 0 [ 1289.140927][T27600] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1289.840205][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 1289.969029][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 1290.113031][T28265] ceph: No mds server is up or the cluster is laggy [ 1290.245779][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 1290.323061][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 1290.623309][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 1290.630997][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 1291.135216][ T5794] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1291.434480][ T5794] usb 1-1: Using ep0 maxpacket: 32 [ 1291.455615][ T5794] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1291.466914][ T5794] usb 1-1: config 0 has no interface number 0 [ 1291.481799][ T5794] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1291.507789][T28317] loop5: detected capacity change from 0 to 2048 [ 1291.667103][ T5794] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1291.712250][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.847172][T28317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1291.894627][ T5794] usb 1-1: Product: syz [ 1291.962041][ T5794] usb 1-1: Manufacturer: syz [ 1291.966715][ T5794] usb 1-1: SerialNumber: syz [ 1292.013037][ T5794] usb 1-1: config 0 descriptor?? [ 1292.035509][ T30] audit: type=1800 audit(1783558096.385:383): pid=28317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7585" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1292.808913][ T5794] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1292.837785][ T5794] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1292.901098][T22372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.286288][ T5794] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1293.356218][ T5794] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1293.382533][ T5794] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1293.398977][ T5794] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1293.487194][ T5794] usb 1-1: USB disconnect, device number 47 [ 1294.084461][T28356] loop5: detected capacity change from 0 to 512 [ 1294.157221][T28356] EXT4-fs: Ignoring removed oldalloc option [ 1294.447765][T28356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.485303][T28356] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1294.721212][T28356] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #2: comm syz.5.7596: corrupted inode contents [ 1294.862768][T28356] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #2: comm syz.5.7596: mark_inode_dirty error [ 1294.936107][T28369] input: syz0 as /devices/virtual/input/input63 [ 1294.982875][T28356] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #2: comm syz.5.7596: corrupted inode contents [ 1296.101803][T28356] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.7596: mark_inode_dirty error [ 1296.287422][T28384] Invalid argument reading file caps for ./file0 [ 1296.306242][T28356] EXT4-fs warning (device loop5): ext4_es_cache_extent:1079: inode #2: comm syz.5.7596: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 1296.306242][T28356] [ 1296.557216][T28356] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #2: comm syz.5.7596: corrupted inode contents [ 1296.675599][T28356] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.7596: mark_inode_dirty error [ 1296.689978][T28356] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 1296.793950][T28387] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #2: comm syz.5.7596: corrupted inode contents [ 1296.912801][T28387] EXT4-fs error (device loop5): add_dirent_to_buf:2151: inode #2: comm syz.5.7596: mark_inode_dirty error [ 1297.613937][T22372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.935735][T28407] loop8: detected capacity change from 0 to 2048 [ 1297.997612][T28407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1298.060674][T28407] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.412613][T27600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.437672][T28436] (syz.5.7619,28436,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1299.576777][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.618328][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.628113][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 1300.537096][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 1300.543290][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 1301.004901][T22186] libceph: connect (1)[c::]:6789 error -101 [ 1301.044257][T22186] libceph: mon0 (1)[c::]:6789 connect error [ 1301.065185][T28458] ceph: No mds server is up or the cluster is laggy [ 1301.112349][T28466] loop5: detected capacity change from 0 to 4096 [ 1301.132974][T28466] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1301.242463][T28473] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1301.552454][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 1301.559675][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 1301.715454][T28466] ntfs3(loop5): ino=19, mi_enum_attr [ 1301.728363][T28466] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1301.800926][T28466] ntfs3(loop5): ino=19, mi_enum_attr [ 1301.838744][T28466] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1302.141686][ T30] audit: type=1800 audit(1783558106.495:384): pid=28466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7627" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 1303.048206][T28489] loop8: detected capacity change from 0 to 4096 [ 1303.260387][T28489] ntfs3(loop8): Failed to load $Extend (-22). [ 1303.312788][T28489] ntfs3(loop8): Failed to initialize $Extend. [ 1303.885043][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1303.941129][T28507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1303.985494][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1304.019939][T28508] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 1304.067121][T28507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1304.068225][T28508] ntfs3(loop8): ino=5, "/" ntfs_readdir [ 1305.844437][T28540] netlink: 'syz.9.7651': attribute type 19 has an invalid length. [ 1305.874092][T28541] dvmrp8: left allmulticast mode [ 1306.292813][T28540] netlink: 'syz.9.7651': attribute type 19 has an invalid length. [ 1306.301013][T21022] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.318130][T21022] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.388317][T21022] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.457298][T21022] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.496689][T28567] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1311.290917][T28598] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7669'. [ 1311.387448][T28593] loop5: detected capacity change from 0 to 65536 [ 1311.399323][T28593] xfs: Deprecated parameter 'ikeep' [ 1311.405716][T28593] XFS: ikeep mount option is deprecated. [ 1311.489872][T28593] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1311.642304][T28593] XFS (loop5): Ending clean mount [ 1311.821827][T28593] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 1311.836632][T28593] XFS (loop5): Unmount and run xfs_repair [ 1311.842407][T28593] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1311.852188][T28593] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1311.861114][T28593] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1311.873015][T28593] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1311.881928][T28593] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1311.895389][T28593] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1311.904332][T28593] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1311.917657][T28593] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1311.926577][T28593] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1311.939875][T28593] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 1311.955541][T28593] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c5/0x8b0 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 1311.975416][T28593] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1312.281573][T22372] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1312.671977][T28623] netlink: 'syz.9.7676': attribute type 15 has an invalid length. [ 1312.768354][T28623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7676'. [ 1313.345599][T28630] all: renamed from bridge_slave_1 (while UP) [ 1313.503217][T28623] netlink: 'syz.9.7676': attribute type 15 has an invalid length. [ 1313.511151][T28623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7676'. [ 1313.782612][T28639] netlink: 'syz.8.7681': attribute type 1 has an invalid length. [ 1313.790440][T28639] netlink: 'syz.8.7681': attribute type 2 has an invalid length. [ 1313.839598][T28639] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7681'. [ 1321.750282][T28782] loop9: detected capacity change from 0 to 256 [ 1322.881563][T28792] loop8: detected capacity change from 0 to 32768 [ 1322.890583][T28792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.7729 (28792) [ 1322.923868][T28792] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1322.936135][T28792] BTRFS info (device loop8): using sha256 checksum algorithm [ 1322.943588][T28792] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1323.306775][T28792] BTRFS info (device loop8): rebuilding free space tree [ 1323.449721][T28792] BTRFS info (device loop8): disabling free space tree [ 1323.456779][T28792] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1323.473836][T28792] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1323.502234][T28792] BTRFS info (device loop8): enabling ssd optimizations [ 1323.509259][T28792] BTRFS info (device loop8): turning on async discard [ 1323.518729][T28792] BTRFS info (device loop8): enabling disk space caching [ 1323.525807][T28792] BTRFS info (device loop8): force clearing of disk cache [ 1323.898441][T28824] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 1324.670632][T28831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7737'. [ 1324.748482][T28831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7737'. [ 1326.727858][T27600] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1327.339727][T28868] netlink: 'syz.9.7750': attribute type 1 has an invalid length. [ 1327.827048][T28868] bond1: entered promiscuous mode [ 1327.925186][T28868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1328.445124][T28857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7745'. [ 1328.552060][T28886] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7736'. [ 1329.685882][T28903] syz_tun: refused to change device tx_queue_len [ 1329.747598][T28903] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1329.931991][T28903] syz_tun: refused to change device tx_queue_len [ 1329.938473][T28903] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1330.082309][T28908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7762'. [ 1331.645909][T28941] overlayfs: failed to clone upperpath [ 1332.365296][T28949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7774'. [ 1332.374276][T28949] netlink: 'syz.9.7774': attribute type 9 has an invalid length. [ 1333.874489][T28974] macsec1: entered allmulticast mode [ 1333.879893][T28974] team0: entered allmulticast mode [ 1333.904840][T28974] team_slave_0: entered allmulticast mode [ 1333.911201][T28974] team_slave_1: entered allmulticast mode [ 1333.948855][T28974] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1334.260277][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7787'. [ 1334.321147][T28989] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7787'. [ 1334.690783][T28996] overlayfs: failed to clone upperpath [ 1335.661909][T29010] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1335.813260][T29019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7798'. [ 1335.968625][T22183] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1336.087395][T29024] overlayfs: failed to clone upperpath [ 1336.165523][T22183] usb 1-1: Using ep0 maxpacket: 32 [ 1336.269228][T22183] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.358330][T22183] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1336.525999][T22183] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1336.535125][T22183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.576651][T22183] usb 1-1: Product: syz [ 1336.599133][T22183] usb 1-1: Manufacturer: syz [ 1336.649388][T22183] usb 1-1: SerialNumber: syz [ 1336.979599][T29016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1337.211502][T29037] loop8: detected capacity change from 0 to 8192 [ 1337.371290][T29037] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1337.977967][T29053] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7810'. [ 1338.228223][T22183] cdc_ncm 1-1:1.0: bind() failure [ 1338.276620][T22183] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1338.342170][T29062] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1338.365869][T22183] cdc_ncm 1-1:1.1: bind() failure [ 1338.433227][T22183] usb 1-1: USB disconnect, device number 48 [ 1338.870954][T29071] sctp: [Deprecated]: syz.7.7815 (pid 29071) Use of int in max_burst socket option. [ 1338.870954][T29071] Use struct sctp_assoc_value instead [ 1340.943624][T29113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.951024][T29113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.098111][T29113] bridge0: left promiscuous mode [ 1341.103169][T29113] bridge0: left allmulticast mode [ 1341.927480][T29113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.003212][T29113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.923779][T29167] fuse: Bad value for 'fd' [ 1343.191685][ T5791] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.235702][ T5791] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.324812][ T5791] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.365691][ T5791] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.830929][T23238] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.363591][T29214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7867'. [ 1345.434079][T16458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1345.454309][T29214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7867'. [ 1345.464642][T16458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1345.506145][T16458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1345.522877][T16458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1345.530904][T16458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1345.674305][T22183] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1345.947088][T22183] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1346.014948][T22183] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1346.078885][T22183] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1346.115075][T22183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.437471][T22183] usb 6-1: usb_control_msg returned -32 [ 1346.448350][T22183] usbtmc 6-1:16.0: can't read capabilities [ 1346.748203][T23238] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.563897][T23238] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.646943][ T50] Bluetooth: hci5: command tx timeout [ 1348.424935][ T5767] usb 6-1: USB disconnect, device number 16 [ 1348.488357][T23238] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.951025][T29282] netlink: 'syz.9.7885': attribute type 4 has an invalid length. [ 1349.070467][T29282] netlink: 'syz.9.7885': attribute type 4 has an invalid length. [ 1349.184209][T22183] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1349.320512][T29294] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7888'. [ 1349.398444][T22183] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1349.436981][T22183] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.490677][T22183] usb 1-1: config 0 has no interfaces? [ 1349.532519][T22183] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1349.565042][T22183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.598373][T22183] usb 1-1: config 0 descriptor?? [ 1349.744619][ T50] Bluetooth: hci5: command tx timeout [ 1350.114514][T22182] usb 1-1: USB disconnect, device number 49 [ 1351.798874][ T50] Bluetooth: hci5: command tx timeout [ 1351.872627][T23238] bridge_slave_1: left allmulticast mode [ 1351.882260][T23238] bridge_slave_1: left promiscuous mode [ 1351.888854][T23238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.923991][T23238] bridge_slave_0: left allmulticast mode [ 1351.948159][T23238] bridge_slave_0: left promiscuous mode [ 1351.970937][T23238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.700564][T23238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.716640][T23238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.736961][T23238] bond0 (unregistering): Released all slaves [ 1352.872655][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1352.958328][T29342] loop5: detected capacity change from 0 to 40427 [ 1353.023416][T29342] F2FS-fs (loop5): invalid crc value [ 1353.596985][T29342] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1353.677370][ T30] audit: type=1804 audit(1783558157.975:385): pid=29360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7909" name="file1" dev="tmpfs" ino=4960 res=1 errno=0 [ 1353.733801][T29342] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 1353.741476][T29342] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1353.788837][T29342] F2FS-fs (loop5): Start checkpoint disabled! [ 1353.833600][T29342] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 1353.860261][T29342] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1353.894543][T16458] Bluetooth: hci5: command tx timeout [ 1354.551880][T29386] 9pnet: p9_errstr2errno: server reported unknown error p [ 1354.634856][T23232] kworker/u8:7: attempt to access beyond end of device [ 1354.634856][T23232] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1354.716513][T23232] CPU: 1 UID: 0 PID: 23232 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.716581][T23232] Tainted: [L]=SOFTLOCKUP [ 1354.716595][T23232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1354.716621][T23232] Workqueue: writeback wb_workfn (flush-7:5) [ 1354.716685][T23232] Call Trace: [ 1354.716697][T23232] [ 1354.716715][T23232] dump_stack_lvl+0x100/0x190 [ 1354.716761][T23232] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1354.716837][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.716884][T23232] ? errseq_set+0xe3/0x150 [ 1354.716933][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.716986][T23232] f2fs_write_end_bio+0xf53/0x1340 [ 1354.717050][T23232] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1354.717114][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.717169][T23232] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1354.717226][T23232] bio_endio+0x778/0x8e0 [ 1354.717292][T23232] submit_bio_noacct+0x64c/0x1ff0 [ 1354.717355][T23232] f2fs_submit_write_bio+0x133/0x330 [ 1354.717409][T23232] __submit_merged_bio+0x330/0x7b0 [ 1354.717472][T23232] ? rcu_is_watching+0x12/0xc0 [ 1354.717530][T23232] __submit_merged_write_cond+0x3fe/0x510 [ 1354.717600][T23232] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1354.717669][T23232] ? __pfx___might_resched+0x10/0x10 [ 1354.717706][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.717751][T23232] ? folio_clear_dirty_for_io+0x178/0x960 [ 1354.717816][T23232] f2fs_write_cache_pages+0x20e9/0x2630 [ 1354.717883][T23232] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1354.717933][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.717980][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.718025][T23232] ? find_held_lock+0x2b/0x80 [ 1354.718075][T23232] ? nr_blockdev_pages+0xde/0x120 [ 1354.718124][T23232] ? nr_blockdev_pages+0xde/0x120 [ 1354.718168][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.718231][T23232] ? si_meminfo+0x118/0x230 [ 1354.718269][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.718316][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.718416][T23232] ? find_held_lock+0x2b/0x80 [ 1354.718474][T23232] ? f2fs_inode_synced+0x2d5/0x3f0 [ 1354.718523][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.718569][T23232] ? rcu_is_watching+0x12/0xc0 [ 1354.718625][T23232] f2fs_write_data_pages+0x799/0x16d0 [ 1354.718668][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.718728][T23232] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1354.718787][T23232] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1354.718831][T23232] do_writepages+0x278/0x600 [ 1354.718895][T23232] ? __pfx_do_writepages+0x10/0x10 [ 1354.718954][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.719006][T23232] __writeback_single_inode+0x164/0x1300 [ 1354.719054][T23232] ? find_held_lock+0x2b/0x80 [ 1354.719109][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.719159][T23232] ? __pfx___writeback_single_inode+0x10/0x10 [ 1354.719205][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.719250][T23232] ? do_raw_spin_unlock+0x145/0x1e0 [ 1354.719300][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.719352][T23232] writeback_sb_inodes+0x766/0x1c50 [ 1354.719422][T23232] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1354.719471][T23232] ? do_raw_spin_lock+0x128/0x260 [ 1354.719519][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.719624][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.719671][T23232] ? rcu_is_watching+0x12/0xc0 [ 1354.719721][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.719767][T23232] ? queue_io+0x287/0x530 [ 1354.719808][T23232] wb_writeback+0x1c0/0xb50 [ 1354.719866][T23232] ? __pfx_wb_writeback+0x10/0x10 [ 1354.719924][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.719970][T23232] ? mark_held_locks+0x40/0x70 [ 1354.720008][T23232] ? _raw_spin_unlock_irq+0x23/0x50 [ 1354.720068][T23232] wb_workfn+0x143/0xc80 [ 1354.720117][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.720163][T23232] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1354.720221][T23232] ? __pfx_wb_workfn+0x10/0x10 [ 1354.720270][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.720321][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.720372][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.720418][T23232] ? rcu_is_watching+0x12/0xc0 [ 1354.720479][T23232] process_one_work+0xa23/0x1940 [ 1354.720560][T23232] ? __pfx_process_one_work+0x10/0x10 [ 1354.720618][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.720680][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.720733][T23232] worker_thread+0x5ef/0xe50 [ 1354.720810][T23232] ? kthread+0x13a/0x450 [ 1354.720862][T23232] ? __pfx_worker_thread+0x10/0x10 [ 1354.720918][T23232] kthread+0x370/0x450 [ 1354.720971][T23232] ? __pfx_kthread+0x10/0x10 [ 1354.721028][T23232] ret_from_fork+0x72b/0xd50 [ 1354.721077][T23232] ? __pfx_ret_from_fork+0x10/0x10 [ 1354.721123][T23232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.721169][T23232] ? __switch_to+0x800/0x10f0 [ 1354.721224][T23232] ? __switch_to_asm+0x39/0x70 [ 1354.721277][T23232] ? __pfx_kthread+0x10/0x10 [ 1354.721335][T23232] ret_from_fork_asm+0x1a/0x30 [ 1354.721411][T23232] [ 1354.721428][T23232] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1355.259681][T29402] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7919'. [ 1355.259743][T29402] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7919'. [ 1355.719145][T23238] hsr_slave_0: left promiscuous mode [ 1355.769292][T23238] hsr_slave_1: left promiscuous mode [ 1356.104999][T23238] veth1_macvtap: left promiscuous mode [ 1356.118615][T23238] veth0_macvtap: left promiscuous mode [ 1356.134308][T23238] veth1_vlan: left promiscuous mode [ 1356.141345][T23238] veth0_vlan: left promiscuous mode [ 1356.336222][T29429] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7927'. [ 1356.646610][T29423] ceph: No mds server is up or the cluster is laggy [ 1356.654136][T22181] libceph: connect (1)[c::]:6789 error -101 [ 1356.660289][T22181] libceph: mon0 (1)[c::]:6789 connect error [ 1356.933672][T22181] libceph: connect (1)[c::]:6789 error -101 [ 1356.939944][T22181] libceph: mon0 (1)[c::]:6789 connect error [ 1357.794733][T23238] team0 (unregistering): Port device team_slave_1 removed [ 1357.865972][T29457] loop5: detected capacity change from 0 to 512 [ 1357.946033][T29457] EXT4-fs: inline encryption not supported [ 1357.953034][T29457] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1357.985153][T23238] team0 (unregistering): Port device team_slave_0 removed [ 1358.027175][T29457] EXT4-fs (loop5): 1 truncate cleaned up [ 1358.060831][T29457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.329722][T29457] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6453: inode #15: comm syz.5.7936: bad extra_isize 62 (inode size 256) [ 1358.394712][T29457] EXT4-fs (loop5): Remounting filesystem read-only [ 1358.412507][T29470] EXT4-fs (loop5): Online defrag not supported for non-extent files [ 1358.650315][T22372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.038319][T29483] overlayfs: failed to clone upperpath [ 1359.192018][T29207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.242077][T29207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.270977][T29207] bridge_slave_0: entered allmulticast mode [ 1359.304710][T29207] bridge_slave_0: entered promiscuous mode [ 1359.339223][T29207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.363741][T29207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.410743][T29207] bridge_slave_1: entered allmulticast mode [ 1359.460605][T29207] bridge_slave_1: entered promiscuous mode [ 1359.799054][T29207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.923349][T29207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.452589][T29207] team0: Port device team_slave_0 added [ 1360.519585][T29207] team0: Port device team_slave_1 added [ 1360.826008][T29207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.865873][T29207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.011658][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.021413][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.033849][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 1361.052254][T29207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.086791][T29207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.103895][T29207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.254198][T29207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.723354][T29207] hsr_slave_0: entered promiscuous mode [ 1361.748274][T29207] hsr_slave_1: entered promiscuous mode [ 1361.790632][T29207] debugfs: 'hsr0' already exists in 'hsr' [ 1361.805154][T29207] Cannot create hsr debugfs directory [ 1362.073624][T29552] Bluetooth: MGMT ver 1.23 [ 1362.362507][T29558] loop5: detected capacity change from 0 to 1024 [ 1362.452950][T29558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1362.482962][T29562] loop9: detected capacity change from 0 to 512 [ 1362.632234][T29562] FAT-fs (loop9): data area starts beyond volume (3104 > 128) [ 1362.702186][T29562] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1362.786580][T29562] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7967'. [ 1362.832501][T29562] netlink: 'syz.9.7967': attribute type 1 has an invalid length. [ 1362.877574][T29562] bond0: option mode: unable to set because the bond device has slaves [ 1362.887444][T22372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1363.857945][T29607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.963261][ T5767] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1364.199535][ T5767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.246118][ T5767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.371580][ T5767] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1364.419397][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.470413][ T5767] usb 1-1: config 0 descriptor?? [ 1364.592458][T29613] netlink: 116 bytes leftover after parsing attributes in process `syz.7.7978'. [ 1365.171728][ T5767] usb 1-1: language id specifier not provided by device, defaulting to English [ 1365.532178][T29634] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1365.761820][ T5767] uclogic 0003:256C:006D.0044: failed retrieving string descriptor #100: -71 [ 1365.786153][ T5767] uclogic 0003:256C:006D.0044: failed retrieving pen parameters: -71 [ 1365.804649][ T5767] uclogic 0003:256C:006D.0044: failed probing pen v1 parameters: -71 [ 1365.823763][ T5767] uclogic 0003:256C:006D.0044: failed probing parameters: -71 [ 1365.866802][ T5767] uclogic 0003:256C:006D.0044: probe with driver uclogic failed with error -71 [ 1365.943005][ T5767] usb 1-1: USB disconnect, device number 50 [ 1366.331521][T29572] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.342707][T29572] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.700894][T29648] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1366.892330][T29651] team0: left allmulticast mode [ 1366.897792][T29651] team_slave_0: left allmulticast mode [ 1366.903681][T29651] team_slave_1: left allmulticast mode [ 1366.924999][T29651] macsec1: left allmulticast mode [ 1366.947063][T29648] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1366.973690][T29580] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.984482][T29581] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.992910][T29581] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.110444][T29581] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.479502][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1367.561262][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1367.670562][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1367.792753][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1367.819346][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1368.348230][T29572] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.358582][T29572] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.476883][T29572] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.487324][T29572] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.632732][T29688] overlayfs: failed to clone upperpath [ 1369.703590][T29693] loop5: detected capacity change from 0 to 512 [ 1369.964389][T16458] Bluetooth: hci0: command tx timeout [ 1370.752992][T29572] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1370.802224][T29572] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.305443][ T5767] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1371.478674][T29207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1371.488667][ T5767] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1371.521521][T29207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1371.529510][ T5767] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1371.550675][T29207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1371.557871][ T5767] usb 6-1: config 150 has no interface number 0 [ 1371.566264][ T5767] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1371.578641][T29207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1371.589368][ T5767] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1371.600237][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.621087][ T5767] usb 6-1: Product: syz [ 1371.625821][ T5767] usb 6-1: Manufacturer: syz [ 1371.630566][ T5767] usb 6-1: SerialNumber: syz [ 1371.648739][T29207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1371.698212][T29207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1371.778031][T29207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1371.800524][T29207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1371.898004][ T5767] xr_serial 6-1:150.204: skipping garbage [ 1371.916682][ T5767] xr_serial 6-1:150.204: xr_serial converter detected [ 1372.065359][T16458] Bluetooth: hci0: command tx timeout [ 1372.248872][T29736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.565187][T29572] bridge_slave_1: left allmulticast mode [ 1372.570997][T29572] bridge_slave_1: left promiscuous mode [ 1372.587881][T29572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.636807][T29572] bridge_slave_0: left allmulticast mode [ 1372.662451][T29572] bridge_slave_0: left promiscuous mode [ 1372.668358][T29572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.785566][ T5767] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 1373.071121][T22179] usb 6-1: USB disconnect, device number 17 [ 1373.147521][T22179] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1373.157709][T22179] xr_serial 6-1:150.204: device disconnected [ 1373.905643][T29572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.981568][T29572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.014140][T29572] bond0 (unregistering): Released all slaves [ 1374.031741][ T30] audit: type=1800 audit(1783558178.375:386): pid=29768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8014" name="nullb0" dev="tmpfs" ino=1307 res=0 errno=0 [ 1374.074703][T29572] bond1 (unregistering): Released all slaves [ 1374.131009][T16458] Bluetooth: hci0: command tx timeout [ 1374.196679][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1374.331552][T29207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.398198][T29207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.455602][T23241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.462878][T23241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.894007][T23241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.901282][T23241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.252561][T29787] loop5: detected capacity change from 0 to 512 [ 1375.269405][ T30] audit: type=1800 audit(1783558179.625:387): pid=29788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8022" name="nullb0" dev="tmpfs" ino=5105 res=0 errno=0 [ 1375.420801][T29787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1375.430886][T29787] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size [ 1375.896010][T29656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.903344][T29656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.924598][T29656] bridge_slave_0: entered allmulticast mode [ 1375.934136][T29656] bridge_slave_0: entered promiscuous mode [ 1375.979639][T29656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.986891][T29656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.994212][T29656] bridge_slave_1: entered allmulticast mode [ 1376.002703][T29656] bridge_slave_1: entered promiscuous mode [ 1376.241806][T16458] Bluetooth: hci0: command tx timeout [ 1376.303775][T29656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.480560][T29656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.598638][T29572] hsr_slave_0: left promiscuous mode [ 1376.604963][T29572] hsr_slave_1: left promiscuous mode [ 1376.611048][T29572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.660076][T29572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.674857][T29572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.704282][T29572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.720764][T29806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8026'. [ 1376.751481][T29572] veth1_macvtap: left promiscuous mode [ 1376.757053][T29572] veth0_macvtap: left promiscuous mode [ 1376.762669][T29572] veth1_vlan: left promiscuous mode [ 1376.768055][T29572] veth0_vlan: left promiscuous mode [ 1377.042515][T29809] netlink: 'syz.5.8027': attribute type 7 has an invalid length. [ 1377.936242][T29572] team0 (unregistering): Port device team_slave_1 removed [ 1378.007381][T29572] team0 (unregistering): Port device team_slave_0 removed [ 1378.904052][T29806] hsr_slave_1 (unregistering): left promiscuous mode [ 1379.060672][T29809] netlink: 'syz.5.8027': attribute type 7 has an invalid length. [ 1379.094587][T29656] team0: Port device team_slave_0 added [ 1379.103522][T29656] team0: Port device team_slave_1 added [ 1379.377094][T29656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.384114][T29656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.467073][T29836] binder: 29835:29836 ioctl c0306201 200000000040 returned -14 [ 1379.566082][T29656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.612966][T29656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.695156][T29656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.747376][T29656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.772939][T29843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8034'. [ 1379.993184][T29843] bond1: entered promiscuous mode [ 1380.022281][T29843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1380.249633][T29849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1380.268818][T29849] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1380.366005][T29849] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 1380.569677][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1381.060539][T29656] hsr_slave_0: entered promiscuous mode [ 1381.091573][T29656] hsr_slave_1: entered promiscuous mode [ 1381.125050][T29656] debugfs: 'hsr0' already exists in 'hsr' [ 1381.157338][T29656] Cannot create hsr debugfs directory [ 1381.221046][T29870] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8042'. [ 1382.024031][T29207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.105255][T29572] macvlan0: left allmulticast mode [ 1382.110464][T29572] veth1_vlan: left allmulticast mode [ 1382.159917][T29572] macvlan0: left promiscuous mode [ 1382.165589][T29572] bridge0: port 3(macvlan0) entered disabled state [ 1382.198776][T29572] bridge_slave_0: left allmulticast mode [ 1382.204500][T29572] bridge_slave_0: left promiscuous mode [ 1382.210784][T29572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.202382][T29906] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 1383.953691][T29927] fuse: Bad value for 'fd' [ 1384.851660][T29572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.913877][T29572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.925177][T29572] bond0 (unregistering): Released all slaves [ 1385.013942][T29572] bond1 (unregistering): Released all slaves [ 1385.075673][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1385.109011][T29938] ip6erspan0: entered allmulticast mode [ 1385.336665][T29572] tipc: Disabling bearer [ 1385.342935][T29572] tipc: Left network mode [ 1385.673808][T29207] veth0_vlan: entered promiscuous mode [ 1386.131169][T29207] veth1_vlan: entered promiscuous mode [ 1386.409685][T29972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8070'. [ 1386.709801][T29968] bridge0: port 1(team0) entered disabled state [ 1386.716808][T29968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.226674][T29968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.363866][T29968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.697908][T29968] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1387.912899][T29977] loop5: detected capacity change from 0 to 32768 [ 1388.129761][T29977] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1388.237370][T29968] ip6erspan0: left allmulticast mode [ 1388.342076][T29977] XFS (loop5): Ending clean mount [ 1388.350073][T29972] xfrm1: entered promiscuous mode [ 1388.369914][T29972] xfrm1: entered allmulticast mode [ 1388.389976][T29972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8070'. [ 1388.423137][T23232] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.434903][T29576] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.453033][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1388.543824][T29207] veth0_macvtap: entered promiscuous mode [ 1388.627873][T29207] veth1_macvtap: entered promiscuous mode [ 1388.650349][T29207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.668925][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8079'. [ 1388.690166][T29576] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.741269][T22372] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1389.141938][T29576] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.155311][T29207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.296683][T29572] hsr_slave_0: left promiscuous mode [ 1389.324624][T29572] hsr_slave_1: left promiscuous mode [ 1389.330884][T29572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.338291][T29572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.451298][T29572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.469318][T29572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.714864][T29572] veth1_macvtap: left promiscuous mode [ 1389.720519][T29572] veth0_macvtap: left promiscuous mode [ 1389.726209][T29572] veth1_vlan: left promiscuous mode [ 1389.731645][T29572] veth0_vlan: left promiscuous mode [ 1391.434252][T30039] loop5: detected capacity change from 0 to 131072 [ 1391.488828][T30039] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 1391.495759][T30039] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1391.506221][T30039] F2FS-fs (loop5): invalid crc value [ 1391.614821][T30039] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1391.642645][T30039] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1391.649887][T30039] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1392.442055][T30049] tls_set_device_offload: netdev not found [ 1392.770867][T29572] team0 (unregistering): Port device team_slave_1 removed [ 1392.805185][T29572] team0 (unregistering): Port device team_slave_0 removed [ 1393.343966][T23241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.371865][T23241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.552624][T23241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.594615][T23241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.177964][T29580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.195528][T30076] loop5: detected capacity change from 0 to 128 [ 1394.218447][T29580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.317116][T30076] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1394.458804][T30076] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.867355][T22372] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1394.954804][T29580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.962738][T29580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.125421][T29656] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1395.225890][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1395.267834][T29656] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1395.388068][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1395.444137][T29656] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1395.581870][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1395.607984][T29656] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1395.694501][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1396.065205][T29656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.210523][T29656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.298184][T23232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.305441][T23232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.328666][T23232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.336025][T23232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.877151][ T30] audit: type=1326 audit(1783558201.235:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1396.988989][ T30] audit: type=1326 audit(1783558201.275:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1397.198828][ T30] audit: type=1326 audit(1783558201.275:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1397.408051][ T30] audit: type=1326 audit(1783558201.275:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1397.621288][ T30] audit: type=1326 audit(1783558201.275:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1397.653676][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8124'. [ 1397.744899][T30151] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8124'. [ 1397.792839][T30151] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8124'. [ 1397.831969][ T30] audit: type=1326 audit(1783558201.275:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1398.027423][ T30] audit: type=1326 audit(1783558201.275:394): auid=4294967295 uid=384 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1398.271091][T30142] loop5: detected capacity change from 0 to 131072 [ 1398.283843][T30142] xfs: Deprecated parameter 'ikeep' [ 1398.289095][T30142] XFS: ikeep mount option is deprecated. [ 1398.307932][ T30] audit: type=1326 audit(1783558201.275:395): auid=4294967295 uid=384 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1398.345197][ T30] audit: type=1326 audit(1783558201.305:396): auid=4294967295 uid=384 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1398.372118][ T30] audit: type=1326 audit(1783558201.305:397): auid=4294967295 uid=384 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.4.8120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855699de59 code=0x7ffc0000 [ 1398.521778][T30142] XFS (loop5): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1398.997887][T30142] XFS (loop5): Starting recovery (logdev: internal) [ 1399.209979][T30142] XFS (loop5): Ending recovery (logdev: internal) [ 1399.271180][T30197] 9p: Unknown uid 00000000004294967295 [ 1399.298845][T30142] XFS (loop5): User initiated shutdown received. [ 1399.305677][T30142] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:467). Shutting down filesystem. [ 1399.319115][T30142] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1399.366082][T30199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8132'. [ 1399.460411][T29656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.614297][T22372] XFS (loop5): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1399.796030][T30209] fuse: Bad value for 'fd' [ 1401.133564][T29656] veth0_vlan: entered promiscuous mode [ 1401.219560][T29656] veth1_vlan: entered promiscuous mode [ 1401.301614][ T11] kernel read not supported for file /input/event0 (pid: 11 comm: kworker/0:1) [ 1401.323831][T30242] overlayfs: failed to clone upperpath [ 1401.398190][T29656] veth0_macvtap: entered promiscuous mode [ 1401.559384][T29656] veth1_macvtap: entered promiscuous mode [ 1401.678787][T29656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.743423][T29656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.795307][T23240] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.804182][T23240] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.854126][T23240] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.865526][T29572] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.478658][T29572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.553074][T29572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.750482][T29580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.802760][T29580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.802141][T30305] loop5: detected capacity change from 0 to 32768 [ 1403.877096][T30305] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1403.977397][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1403.977424][ T30] audit: type=1800 audit(1783558208.335:399): pid=30305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8160" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 1404.447682][T30318] Process accounting resumed [ 1404.714988][T22372] ocfs2: Unmounting device (7,5) on (node local) [ 1406.575556][T30386] fuse: Bad value for 'fd' [ 1407.007454][T30404] Invalid argument reading file caps for ./file0 [ 1408.558355][T30449] loop5: detected capacity change from 0 to 512 [ 1408.675317][T30449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.888042][T22372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.872724][T30462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.021482][T30481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8220'. [ 1410.056687][T30481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8220'. [ 1410.135772][T30481] IPv6: sit1: Disabled Multicast RS [ 1410.759732][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8222'. [ 1411.154332][T30508] loop9: detected capacity change from 0 to 1024 [ 1411.185437][T30508] EXT4-fs: inline encryption not supported [ 1411.201252][T30508] EXT4-fs (loop9): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1411.286298][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8228'. [ 1411.295245][T30512] netlink: 'syz.5.8228': attribute type 11 has an invalid length. [ 1411.303069][T30512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8228'. [ 1411.383347][T30508] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1411.447446][T30508] EXT4-fs (loop9): shut down requested (1) [ 1411.523697][T23240] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.550292][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8228'. [ 1411.591067][T23240] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.628334][T30512] netlink: 'syz.5.8228': attribute type 11 has an invalid length. [ 1411.658973][T23240] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.662397][T29656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.694157][T23240] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.708952][T30512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8228'. [ 1411.763064][T30523] netlink: 'syz.1.8230': attribute type 39 has an invalid length. [ 1412.037574][T30527] loop9: detected capacity change from 0 to 1024 [ 1412.094803][T30527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1412.101539][T30527] EXT4-fs: Ignoring removed orlov option [ 1412.369131][T30527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.319476][T29656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.674695][T22183] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1413.798019][T30571] netlink: 'syz.7.8245': attribute type 14 has an invalid length. [ 1413.841256][T30571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8245'. [ 1413.853918][T30571] netlink: 'syz.7.8245': attribute type 14 has an invalid length. [ 1413.854662][T22183] usb 1-1: Using ep0 maxpacket: 8 [ 1413.861781][T30571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8245'. [ 1413.862461][T30571] netlink: 'syz.7.8245': attribute type 14 has an invalid length. [ 1413.900577][T22183] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1413.917066][T22183] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1413.948996][T22183] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1413.979754][T22183] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1413.994506][T30571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8245'. [ 1414.007047][T22183] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1414.064143][T22183] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1414.103414][T22183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.389102][T22183] usb 1-1: GET_CAPABILITIES returned 0 [ 1414.425473][T22183] usbtmc 1-1:16.0: can't read capabilities [ 1414.700588][T22186] usb 1-1: USB disconnect, device number 51 [ 1415.080939][T30601] loop1: detected capacity change from 0 to 256 [ 1415.112083][T30601] exfat: Deprecated parameter 'namecase' [ 1415.148236][T30601] exfat: Deprecated parameter 'namecase' [ 1415.224122][T30601] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1415.843104][T30625] overlayfs: failed to clone lowerpath [ 1415.969569][T30633] fuse: Bad value for 'fd' [ 1418.664883][T30709] Bluetooth: MGMT ver 1.23 [ 1419.187129][T22178] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1419.405162][T22186] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1419.459682][T22178] usb 10-1: Using ep0 maxpacket: 16 [ 1419.622542][T22186] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1419.642189][T22178] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.645801][T22186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.652424][T22178] usb 10-1: config 0 has no interfaces? [ 1419.652492][T22178] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1419.705412][T22186] usb 6-1: Product: syz [ 1419.727663][T22186] usb 6-1: Manufacturer: syz [ 1419.734385][T22178] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.745346][T22186] usb 6-1: SerialNumber: syz [ 1419.758710][T22186] usb 6-1: config 0 descriptor?? [ 1419.794016][T22178] usb 10-1: config 0 descriptor?? [ 1419.827371][T22186] ch341 6-1:0.0: ch341-uart converter detected [ 1420.196700][T30740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8297'. [ 1420.246062][T30740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8297'. [ 1420.289182][T23240] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.298291][T30740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8297'. [ 1420.323532][T23240] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.332312][T23240] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.371569][T30740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8297'. [ 1420.423013][T23240] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.482082][T30705] loop9: detected capacity change from 0 to 8192 [ 1420.595930][T30705] loop9: p2 p3 p4[EZD] [ 1420.620860][T30705] loop9: partition table partially beyond EOD, truncated [ 1420.660912][T30705] loop9: p2 start 16711687 is beyond EOD, truncated [ 1420.735087][T30705] loop9: p4 size 264072 extends beyond EOD, truncated [ 1525.844081][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1525.851161][ C0] rcu: (detected by 0, t=10503 jiffies, g=221065, q=470 ncpus=2) [ 1525.859004][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295089765-4295079262), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1525.872407][ C0] rcu: rcu_preempt kthread starved for 10503 jiffies! g221065 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1525.883729][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1525.893735][ C0] rcu: RCU grace-period kthread stack dump: [ 1525.899633][ C0] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1525.913250][ C0] Call Trace: [ 1525.916546][ C0] [ 1525.919498][ C0] __schedule+0x125c/0x6730 [ 1525.924053][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.929757][ C0] ? __pfx___schedule+0x10/0x10 [ 1525.934654][ C0] ? find_held_lock+0x2b/0x80 [ 1525.939393][ C0] ? schedule+0x225/0x2c0 [ 1525.943767][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.949465][ C0] schedule+0xdd/0x2c0 [ 1525.953607][ C0] schedule_timeout+0x127/0x280 [ 1525.958502][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1525.963912][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1525.969311][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.975021][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1525.980889][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.986570][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1525.992101][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1525.996961][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.002694][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1526.008036][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1526.013008][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1526.018273][ C0] ? rcu_is_watching+0x12/0xc0 [ 1526.023119][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1526.028986][ C0] rcu_gp_kthread+0x179/0x230 [ 1526.033697][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1526.039054][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1526.044923][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.050702][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.056375][ C0] ? __kthread_parkme+0x18c/0x230 [ 1526.061532][ C0] ? kthread+0x13a/0x450 [ 1526.065823][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1526.071289][ C0] kthread+0x370/0x450 [ 1526.075445][ C0] ? __pfx_kthread+0x10/0x10 [ 1526.080178][ C0] ret_from_fork+0x72b/0xd50 [ 1526.084937][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1526.090341][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.096139][ C0] ? __switch_to+0x800/0x10f0 [ 1526.100876][ C0] ? __switch_to_asm+0x39/0x70 [ 1526.105694][ C0] ? __pfx_kthread+0x10/0x10 [ 1526.110345][ C0] ret_from_fork_asm+0x1a/0x30 [ 1526.115180][ C0] [ 1526.118222][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1526.124561][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1526.129801][ C1] NMI backtrace for cpu 1 [ 1526.129831][ C1] CPU: 1 UID: 0 PID: 22596 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1526.129879][ C1] Tainted: [L]=SOFTLOCKUP [ 1526.129891][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1526.129912][ C1] RIP: 0010:match_held_lock+0xf/0xb0 [ 1526.129977][ C1] Code: 31 31 f6 90 31 db eb b6 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 53 48 89 fb 48 39 77 10 74 72 66 83 7f 22 1f <76> 63 48 8b 46 08 48 89 f7 48 85 c0 74 6a 8b 15 bd 45 bb 0f 85 d2 [ 1526.130011][ C1] RSP: 0018:ffffc90000a08d98 EFLAGS: 00000093 [ 1526.130038][ C1] RAX: 0000000000000000 RBX: ffff88807f28ab40 RCX: 0000000000000001 [ 1526.130060][ C1] RDX: 0000000000000000 RSI: ffff8880417b42c0 RDI: ffff88807f28ab40 [ 1526.130083][ C1] RBP: ffff88807f289f00 R08: 0000000000000005 R09: 0000000000000000 [ 1526.130110][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 1526.130131][ C1] R13: 0000000000000046 R14: ffff88807f28ab40 R15: 0000000000000004 [ 1526.130156][ C1] FS: 0000555565de8500(0000) GS:ffff888123eee000(0000) knlGS:0000000000000000 [ 1526.130188][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1526.130211][ C1] CR2: 00007fe4b435da08 CR3: 000000004fe75000 CR4: 0000000000350ef0 [ 1526.130233][ C1] Call Trace: [ 1526.130246][ C1] [ 1526.130262][ C1] lock_is_held_type+0x9d/0x140 [ 1526.130317][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1526.130353][ C1] advance_sched+0x7a4/0xd20 [ 1526.130387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.130430][ C1] ? find_held_lock+0x2b/0x80 [ 1526.130480][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.130520][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1526.130562][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1526.130596][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1526.130648][ C1] ? rcu_is_watching+0x12/0xc0 [ 1526.130695][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1526.130755][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1526.130804][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1526.130856][ C1] [ 1526.130867][ C1] [ 1526.130880][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1526.130918][ C1] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 1526.130959][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 1526.130992][ C1] RSP: 0018:ffffc90005d5f428 EFLAGS: 00000286 [ 1526.131018][ C1] RAX: 0000000000000001 RBX: 0000000000041a44 RCX: ffffffff82855bec [ 1526.131040][ C1] RDX: ffff88807f289f00 RSI: ffffffff8c400000 RDI: ffffffff8c400040 [ 1526.131063][ C1] RBP: ffff88813fe76100 R08: 0000000000000005 R09: 0000000000000000 [ 1526.131085][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1526.131111][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 1526.131140][ C1] ? page_table_check_set+0x7c/0x930 [ 1526.131197][ C1] srso_alias_return_thunk+0x5/0xfbef5 [ 1526.131238][ C1] rcu_is_watching+0x12/0xc0 [ 1526.131282][ C1] page_table_check_set+0x534/0x930 [ 1526.131337][ C1] __page_table_check_ptes_set+0x27a/0x4e0 [ 1526.131391][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1526.131444][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1526.131491][ C1] copy_page_range+0x2197/0x5b20 [ 1526.131558][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.131598][ C1] ? mas_wr_store_entry+0xa1/0x1e80 [ 1526.131638][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1526.131679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.131725][ C1] ? __pfx___might_resched+0x10/0x10 [ 1526.131757][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.131801][ C1] ? dup_mmap+0xcfe/0x21b0 [ 1526.131831][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.131872][ C1] ? down_write+0x146/0x1f0 [ 1526.131905][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.131946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.131986][ C1] ? up_write+0x2e5/0x5c0 [ 1526.132026][ C1] dup_mmap+0xd44/0x21b0 [ 1526.132068][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1526.132102][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.132143][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1526.132198][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.132238][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1526.132271][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.132311][ C1] ? find_held_lock+0x2b/0x80 [ 1526.132356][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1526.132404][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.132450][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.132502][ C1] copy_process+0x4588/0x8030 [ 1526.132556][ C1] ? __pfx_copy_process+0x10/0x10 [ 1526.132594][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1526.132638][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.132686][ C1] kernel_clone+0x176/0x9d0 [ 1526.132727][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1526.132772][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.132820][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.132860][ C1] ? find_held_lock+0x2b/0x80 [ 1526.132904][ C1] ? __might_fault+0xc5/0x140 [ 1526.132948][ C1] __do_sys_clone+0xd9/0x120 [ 1526.132987][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1526.133040][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.133083][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.133134][ C1] do_syscall_64+0x115/0x870 [ 1526.133190][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.133225][ C1] RIP: 0033:0x7f85569c68d2 [ 1526.133251][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1526.133285][ C1] RSP: 002b:00007ffdce1f8960 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1526.133315][ C1] RAX: ffffffffffffffda RBX: 00007ffdce1f8960 RCX: 00007f85569c68d2 [ 1526.133338][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1526.133359][ C1] RBP: 00007ffdce1f8aec R08: 0000000000000000 R09: 0000000000000001 [ 1526.133381][ C1] R10: 0000555565de87d0 R11: 0000000000000246 R12: 0000000000000001 [ 1526.133402][ C1] R13: 00000000000927c0 R14: 000000000015ad18 R15: 00007ffdce1f8b40 [ 1526.133437][ C1] [ 1673.277640][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/u8:19:29576] [ 1673.277678][ C0] Modules linked in: [ 1673.277697][ C0] irq event stamp: 19405224 [ 1673.277710][ C0] hardirqs last enabled at (19405223): [] irqentry_exit+0x24d/0xa00 [ 1673.277788][ C0] hardirqs last disabled at (19405224): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1673.277852][ C0] softirqs last enabled at (19405222): [] __irq_exit_rcu+0x162/0x210 [ 1673.277901][ C0] softirqs last disabled at (19405213): [] __irq_exit_rcu+0x162/0x210 [ 1673.277961][ C0] CPU: 0 UID: 0 PID: 29576 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.278014][ C0] Tainted: [L]=SOFTLOCKUP [ 1673.278028][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1673.278053][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1673.278111][ C0] RIP: 0010:smp_call_function_many_cond+0x5b0/0x16c0 [ 1673.278154][ C0] Code: 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 ff 83 e0 01 41 89 c6 89 c6 e8 e3 8f 0c 00 45 85 f6 <75> d0 e8 69 95 0c 00 e8 64 95 0c 00 83 c3 01 bf 07 00 00 00 48 63 [ 1673.278190][ C0] RSP: 0018:ffffc90004b87878 EFLAGS: 00000202 [ 1673.278219][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd19ad [ 1673.278248][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88803246be00 [ 1673.278273][ C0] RBP: ffff8880b8541380 R08: 0000000000000005 R09: 0000000000000000 [ 1673.278298][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1673.278321][ C0] R13: ffffed10170a8271 R14: 0000000000000001 R15: ffff8880b843c9c0 [ 1673.278349][ C0] FS: 0000000000000000(0000) GS:ffff888123dee000(0000) knlGS:0000000000000000 [ 1673.278382][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1673.278409][ C0] CR2: 00007fe4b381b2a0 CR3: 000000000e992000 CR4: 0000000000350ef0 [ 1673.278434][ C0] Call Trace: [ 1673.278446][ C0] [ 1673.278469][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1673.278537][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1673.278576][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1673.278638][ C0] ? __pfx___text_poke+0x10/0x10 [ 1673.278693][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1673.278744][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1673.278784][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1673.278845][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1673.278913][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.278963][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1673.279029][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.279073][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1673.279147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.279202][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1673.279269][ C0] jump_label_update+0x37a/0x550 [ 1673.279330][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1673.279388][ C0] static_key_enable+0x1a/0x20 [ 1673.279441][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 1673.279498][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1673.279557][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.279606][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.279651][ C0] ? rcu_is_watching+0x12/0xc0 [ 1673.279712][ C0] process_one_work+0xa23/0x1940 [ 1673.279795][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1673.279852][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.279912][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.279965][ C0] worker_thread+0x5ef/0xe50 [ 1673.280035][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1673.280096][ C0] ? kthread+0x13a/0x450 [ 1673.280151][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1673.280207][ C0] kthread+0x370/0x450 [ 1673.280263][ C0] ? __pfx_kthread+0x10/0x10 [ 1673.280319][ C0] ret_from_fork+0x72b/0xd50 [ 1673.280368][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1673.280415][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.280460][ C0] ? __switch_to+0x800/0x10f0 [ 1673.280519][ C0] ? __switch_to_asm+0x39/0x70 [ 1673.280573][ C0] ? __pfx_kthread+0x10/0x10 [ 1673.280630][ C0] ret_from_fork_asm+0x1a/0x30 [ 1673.280705][ C0] [ 1673.280719][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1673.684058][ C1] NMI backtrace for cpu 1 [ 1673.684091][ C1] CPU: 1 UID: 0 PID: 22596 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.684141][ C1] Tainted: [L]=SOFTLOCKUP [ 1673.684154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1673.684176][ C1] RIP: 0010:debug_objects_fill_pool+0xe/0x5a0 [ 1673.684232][ C1] Code: ff 4c 89 ef e8 73 b7 53 fd eb df 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 <41> 55 41 54 55 53 48 83 ec 70 48 c7 44 24 10 b3 8a b5 41 48 8d 5c [ 1673.684267][ C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00000002 [ 1673.684294][ C1] RAX: dffffc0000000000 RBX: ffff8880b8528640 RCX: ffffffff81f531db [ 1673.684318][ C1] RDX: ffff88807f289f00 RSI: ffffffff8bd2f980 RDI: ffff8880417b4300 [ 1673.684342][ C1] RBP: ffffc90000a08e58 R08: 0000000000000005 R09: ffffc90000a08d90 [ 1673.684365][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1673.684386][ C1] R13: ffff8880417b4300 R14: 0000000000000001 R15: 1ffff920001411b2 [ 1673.684413][ C1] FS: 0000555565de8500(0000) GS:ffff888123eee000(0000) knlGS:0000000000000000 [ 1673.684444][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1673.684468][ C1] CR2: 00007fe4b435da08 CR3: 000000004fe75000 CR4: 0000000000350ef0 [ 1673.684490][ C1] Call Trace: [ 1673.684504][ C1] [ 1673.684520][ C1] debug_object_activate+0x103/0x4b0 [ 1673.684566][ C1] ? advance_sched+0x76b/0xd20 [ 1673.684605][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1673.684654][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.684701][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1673.684752][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.684798][ C1] enqueue_hrtimer+0x75/0x2f0 [ 1673.684847][ C1] __hrtimer_run_queues+0x6ed/0x9c0 [ 1673.684899][ C1] ? rcu_is_watching+0x12/0xc0 [ 1673.684952][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1673.685014][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1673.685071][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1673.685132][ C1] [ 1673.685143][ C1] [ 1673.685156][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1673.685195][ C1] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 1673.685236][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 1673.685271][ C1] RSP: 0018:ffffc90005d5f428 EFLAGS: 00000286 [ 1673.685297][ C1] RAX: 0000000000000001 RBX: 0000000000041a44 RCX: ffffffff82855bec [ 1673.685320][ C1] RDX: ffff88807f289f00 RSI: ffffffff8c400000 RDI: ffffffff8c400040 [ 1673.685343][ C1] RBP: ffff88813fe76100 R08: 0000000000000005 R09: 0000000000000000 [ 1673.685365][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1673.685386][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 1673.685415][ C1] ? page_table_check_set+0x7c/0x930 [ 1673.685480][ C1] srso_alias_return_thunk+0x5/0xfbef5 [ 1673.685520][ C1] rcu_is_watching+0x12/0xc0 [ 1673.685565][ C1] page_table_check_set+0x534/0x930 [ 1673.685621][ C1] __page_table_check_ptes_set+0x27a/0x4e0 [ 1673.685677][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1673.685729][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1673.685783][ C1] copy_page_range+0x2197/0x5b20 [ 1673.685855][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.685896][ C1] ? mas_wr_store_entry+0xa1/0x1e80 [ 1673.685938][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1673.686003][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686049][ C1] ? __pfx___might_resched+0x10/0x10 [ 1673.686081][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686126][ C1] ? dup_mmap+0xcfe/0x21b0 [ 1673.686157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686198][ C1] ? down_write+0x146/0x1f0 [ 1673.686232][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686274][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686315][ C1] ? up_write+0x2e5/0x5c0 [ 1673.686361][ C1] dup_mmap+0xd44/0x21b0 [ 1673.686404][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1673.686434][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686475][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1673.686535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686576][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1673.686609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686650][ C1] ? find_held_lock+0x2b/0x80 [ 1673.686697][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1673.686752][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686799][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.686847][ C1] copy_process+0x4588/0x8030 [ 1673.686907][ C1] ? __pfx_copy_process+0x10/0x10 [ 1673.686945][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1673.686989][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.687038][ C1] kernel_clone+0x176/0x9d0 [ 1673.687080][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1673.687118][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.687168][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.687209][ C1] ? find_held_lock+0x2b/0x80 [ 1673.687254][ C1] ? __might_fault+0xc5/0x140 [ 1673.687302][ C1] __do_sys_clone+0xd9/0x120 [ 1673.687343][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1673.687399][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.687442][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.687488][ C1] do_syscall_64+0x115/0x870 [ 1673.687550][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.687585][ C1] RIP: 0033:0x7f85569c68d2 [ 1673.687613][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1673.687647][ C1] RSP: 002b:00007ffdce1f8960 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1673.687678][ C1] RAX: ffffffffffffffda RBX: 00007ffdce1f8960 RCX: 00007f85569c68d2 [ 1673.687701][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1673.687723][ C1] RBP: 00007ffdce1f8aec R08: 0000000000000000 R09: 0000000000000001 [ 1673.687748][ C1] R10: 0000555565de87d0 R11: 0000000000000246 R12: 0000000000000001 [ 1673.687770][ C1] R13: 00000000000927c0 R14: 000000000015ad18 R15: 00007ffdce1f8b40 [ 1673.687807][ C1] [ 1674.285948][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 1674.292655][ C0] CPU: 0 UID: 0 PID: 29576 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.303878][ C0] Tainted: [L]=SOFTLOCKUP [ 1674.308200][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1674.318276][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1674.324831][ C0] Call Trace: [ 1674.328115][ C0] [ 1674.330961][ C0] dump_stack_lvl+0x100/0x190 [ 1674.335660][ C0] vpanic+0x552/0x970 [ 1674.339660][ C0] ? __pfx_vpanic+0x10/0x10 [ 1674.344176][ C0] ? __entry_text_end+0x1020b5/0x1020b9 [ 1674.349751][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1674.354994][ C0] panic+0xd1/0xe0 [ 1674.358729][ C0] ? __pfx_panic+0x10/0x10 [ 1674.363156][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.368903][ C0] ? __pfx_printk_trigger_flush+0x10/0x10 [ 1674.374659][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.380326][ C0] ? wq_watchdog_touch+0xec/0x1a0 [ 1674.385388][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 1674.390694][ C0] ? watchdog_timer_fn+0x702/0x7a0 [ 1674.395827][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 1674.401054][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1674.406528][ C0] __hrtimer_run_queues+0x13f/0x9c0 [ 1674.411774][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1674.416764][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1674.422780][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1674.428455][ C0] [ 1674.431385][ C0] [ 1674.434319][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1674.440320][ C0] RIP: 0010:smp_call_function_many_cond+0x5b0/0x16c0 [ 1674.447015][ C0] Code: 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 ff 83 e0 01 41 89 c6 89 c6 e8 e3 8f 0c 00 45 85 f6 <75> d0 e8 69 95 0c 00 e8 64 95 0c 00 83 c3 01 bf 07 00 00 00 48 63 [ 1674.466644][ C0] RSP: 0018:ffffc90004b87878 EFLAGS: 00000202 [ 1674.472731][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd19ad [ 1674.480712][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88803246be00 [ 1674.488695][ C0] RBP: ffff8880b8541380 R08: 0000000000000005 R09: 0000000000000000 [ 1674.496673][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1674.504650][ C0] R13: ffffed10170a8271 R14: 0000000000000001 R15: ffff8880b843c9c0 [ 1674.512649][ C0] ? smp_call_function_many_cond+0x5ad/0x16c0 [ 1674.518752][ C0] ? smp_call_function_many_cond+0x5ad/0x16c0 [ 1674.524837][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1674.529905][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1674.536251][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1674.541663][ C0] ? __pfx___text_poke+0x10/0x10 [ 1674.546635][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1674.551727][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1674.556909][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1674.562845][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1674.568626][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.574291][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1674.580577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.586284][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1674.592578][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.598245][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1674.604272][ C0] jump_label_update+0x37a/0x550 [ 1674.609253][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1674.615182][ C0] static_key_enable+0x1a/0x20 [ 1674.619977][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 1674.625302][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1674.631233][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.636892][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.642546][ C0] ? rcu_is_watching+0x12/0xc0 [ 1674.647348][ C0] process_one_work+0xa23/0x1940 [ 1674.652345][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1674.657749][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.663421][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.669090][ C0] worker_thread+0x5ef/0xe50 [ 1674.673731][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1674.678883][ C0] ? kthread+0x13a/0x450 [ 1674.683158][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1674.688305][ C0] kthread+0x370/0x450 [ 1674.692408][ C0] ? __pfx_kthread+0x10/0x10 [ 1674.697045][ C0] ret_from_fork+0x72b/0xd50 [ 1674.702119][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1674.707293][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.712973][ C0] ? __switch_to+0x800/0x10f0 [ 1674.717711][ C0] ? __switch_to_asm+0x39/0x70 [ 1674.722541][ C0] ? __pfx_kthread+0x10/0x10 [ 1674.727181][ C0] ret_from_fork_asm+0x1a/0x30 [ 1674.732015][ C0] [ 1675.896221][ C0] Shutting down cpus with NMI [ 1675.901291][ C0] Kernel Offset: disabled [ 1675.905609][ C0] Rebooting in 86400 seconds..