last executing test programs: 30.252315035s ago: executing program 4 (id=441): syz_usb_connect(0x2, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dcbbe203a81fe229c89010203010902360001050000000904d30000ef01010006240600017705240001000d240f", @ANYRESDEC], 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) pread64(r0, 0x0, 0x0, 0x100000000) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 25.453511027s ago: executing program 4 (id=454): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 22.626595524s ago: executing program 0 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = eventfd2(0x1, 0x2) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0x26, 0x30000, 0x2, r2, 0x5}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x1000000, 0x800, 0x7, 0x1}, 0x20) 21.820117309s ago: executing program 4 (id=458): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x10040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x182) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x22406e, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 20.160196945s ago: executing program 1 (id=461): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8) splice(r2, 0x0, r5, 0x0, 0x80, 0x8) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) 19.755146622s ago: executing program 0 (id=463): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 17.051073872s ago: executing program 2 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000480)="$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") r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) 15.756084361s ago: executing program 0 (id=465): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 12.531485756s ago: executing program 3 (id=466): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(r1, 0x0, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.527477352s ago: executing program 2 (id=467): socket$inet6(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) 12.400668368s ago: executing program 1 (id=468): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 12.128418708s ago: executing program 4 (id=469): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070613000000000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 10.652536916s ago: executing program 0 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 10.317595838s ago: executing program 3 (id=471): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) 10.064347221s ago: executing program 2 (id=472): r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xdd}) 7.908153972s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002100)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}], 0x1}, 0x0) 7.907632562s ago: executing program 0 (id=474): unshare(0x40200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x844) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 6.952324718s ago: executing program 2 (id=475): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) syz_open_procfs(0x0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xaa24, 0xc000, 0x3, 0x1fa}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x6633, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) close(0xffffffffffffffff) 6.717160595s ago: executing program 1 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$key(0xf, 0x3, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0xf, 0x8) 4.72910462s ago: executing program 1 (id=477): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 4.492246564s ago: executing program 0 (id=478): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000f40)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.482955679s ago: executing program 2 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4000090) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffffff, 0x0, 0x200) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 4.138882134s ago: executing program 3 (id=480): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfea5, 0xa) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffd) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.54060884s ago: executing program 4 (id=481): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2a020400) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x4044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.059234756s ago: executing program 3 (id=482): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x8e080) sendfile(r2, r2, 0x0, 0x24002de8) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 1.447989547s ago: executing program 1 (id=483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket(0x1e, 0x5, 0x0) close(r2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) close(0x3) 1.400467935s ago: executing program 4 (id=484): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) inotify_init1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 604.322877ms ago: executing program 2 (id=485): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 368.772837ms ago: executing program 1 (id=486): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r1 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x0, 0x0, 0x4, 0x0, 0x1, r1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x40000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='mnt/encrypted_dir\x00', 0x24000, 0x157) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000000)={0x27, {0x3, 0x966, 0x2, 0xad75, 0x4, 0x3}}) 0s ago: executing program 3 (id=487): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0a00fe14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 91.999206][ T203] cfg80211: failed to load regulatory.db [ 93.955544][ T5579] cgroup: Unknown subsys name 'net' [ 94.224087][ T5579] cgroup: Unknown subsys name 'cpuset' [ 94.278341][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.272313][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.445825][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.471408][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.495437][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.525884][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.561656][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.562124][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.563708][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.564102][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.575745][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.576290][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.577863][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.594333][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.597291][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.599682][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.606238][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.606603][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.611335][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.611769][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.619584][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.641567][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.647529][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.709140][ T4907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.712006][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.712366][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.714139][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.769236][ T4907] Bluetooth: hci0: command tx timeout [ 102.848212][ T4907] Bluetooth: hci3: command tx timeout [ 102.848336][ T4907] Bluetooth: hci2: command tx timeout [ 102.848424][ T4907] Bluetooth: hci1: command tx timeout [ 102.937873][ T5610] Bluetooth: hci4: command tx timeout [ 103.634274][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.635766][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.635992][ T5601] bridge_slave_0: entered allmulticast mode [ 103.662677][ T5601] bridge_slave_0: entered promiscuous mode [ 103.732711][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.732952][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.733378][ T5601] bridge_slave_1: entered allmulticast mode [ 103.735906][ T5601] bridge_slave_1: entered promiscuous mode [ 103.791886][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.792127][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.792383][ T5602] bridge_slave_0: entered allmulticast mode [ 103.794880][ T5602] bridge_slave_0: entered promiscuous mode [ 103.884231][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.884490][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.884922][ T5602] bridge_slave_1: entered allmulticast mode [ 103.887445][ T5602] bridge_slave_1: entered promiscuous mode [ 103.954815][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.955227][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.955815][ T5600] bridge_slave_0: entered allmulticast mode [ 103.962167][ T5600] bridge_slave_0: entered promiscuous mode [ 103.973444][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.977141][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.983617][ T5599] bridge_slave_0: entered allmulticast mode [ 103.994466][ T5599] bridge_slave_0: entered promiscuous mode [ 104.058814][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.059255][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.059556][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.059824][ T5600] bridge_slave_1: entered allmulticast mode [ 104.062549][ T5600] bridge_slave_1: entered promiscuous mode [ 104.064005][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.064244][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.064434][ T5599] bridge_slave_1: entered allmulticast mode [ 104.066880][ T5599] bridge_slave_1: entered promiscuous mode [ 104.153952][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.154292][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.154901][ T5598] bridge_slave_0: entered allmulticast mode [ 104.157495][ T5598] bridge_slave_0: entered promiscuous mode [ 104.190884][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.238519][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.238973][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.239351][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.240132][ T5598] bridge_slave_1: entered allmulticast mode [ 104.242595][ T5598] bridge_slave_1: entered promiscuous mode [ 104.333681][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.385498][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.406315][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.459175][ T5601] team0: Port device team_slave_0 added [ 104.465549][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.485119][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.519827][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.524143][ T5601] team0: Port device team_slave_1 added [ 104.573714][ T5602] team0: Port device team_slave_0 added [ 104.584390][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.650552][ T5602] team0: Port device team_slave_1 added [ 104.698518][ T5600] team0: Port device team_slave_0 added [ 104.702400][ T5599] team0: Port device team_slave_0 added [ 104.754026][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.754039][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.754059][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.764802][ T5600] team0: Port device team_slave_1 added [ 104.794876][ T5599] team0: Port device team_slave_1 added [ 104.830946][ T5598] team0: Port device team_slave_0 added [ 104.832981][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.832992][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.833012][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.847758][ T5610] Bluetooth: hci0: command tx timeout [ 104.921647][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.921661][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.921681][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.925718][ T5598] team0: Port device team_slave_1 added [ 104.928889][ T5610] Bluetooth: hci1: command tx timeout [ 104.928919][ T5610] Bluetooth: hci2: command tx timeout [ 104.928939][ T5610] Bluetooth: hci3: command tx timeout [ 105.007730][ T4907] Bluetooth: hci4: command tx timeout [ 105.046477][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.046491][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.046521][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.599321][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.599339][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.599374][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.604705][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.604721][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.604750][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.714692][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.714706][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.714726][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.716724][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.716735][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.716755][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.733807][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.733851][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.733920][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.883632][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.883645][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.883665][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.986053][ T5601] hsr_slave_0: entered promiscuous mode [ 105.989578][ T5601] hsr_slave_1: entered promiscuous mode [ 106.066848][ T5602] hsr_slave_0: entered promiscuous mode [ 106.074438][ T5602] hsr_slave_1: entered promiscuous mode [ 106.075957][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 106.076056][ T5602] Cannot create hsr debugfs directory [ 106.268147][ T5600] hsr_slave_0: entered promiscuous mode [ 106.269846][ T5600] hsr_slave_1: entered promiscuous mode [ 106.271167][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 106.271193][ T5600] Cannot create hsr debugfs directory [ 106.304890][ T5599] hsr_slave_0: entered promiscuous mode [ 106.306553][ T5599] hsr_slave_1: entered promiscuous mode [ 106.310590][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 106.310617][ T5599] Cannot create hsr debugfs directory [ 106.390394][ T5598] hsr_slave_0: entered promiscuous mode [ 106.391992][ T5598] hsr_slave_1: entered promiscuous mode [ 106.393320][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 106.393344][ T5598] Cannot create hsr debugfs directory [ 106.927908][ T4907] Bluetooth: hci0: command tx timeout [ 107.009554][ T5610] Bluetooth: hci2: command tx timeout [ 107.009589][ T5610] Bluetooth: hci1: command tx timeout [ 107.009736][ T4907] Bluetooth: hci3: command tx timeout [ 107.088197][ T4907] Bluetooth: hci4: command tx timeout [ 107.385968][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.453579][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.463605][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.504335][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.508257][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.543252][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.592153][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.617361][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.783200][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.817241][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.842772][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.875930][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.889199][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.924041][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.959619][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.003366][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.174345][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.225629][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.246845][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.276973][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.295319][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.326218][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.363139][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.390405][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.622082][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.655902][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.667151][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.706471][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.725792][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.770860][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.846881][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.882255][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.007796][ T4907] Bluetooth: hci0: command tx timeout [ 109.025527][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.089772][ T4907] Bluetooth: hci1: command tx timeout [ 109.098456][ T5610] Bluetooth: hci2: command tx timeout [ 109.098509][ T4907] Bluetooth: hci3: command tx timeout [ 109.133482][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.163943][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.177921][ T4907] Bluetooth: hci4: command tx timeout [ 109.189752][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.238040][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.264060][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.294715][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.311511][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.355505][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.386169][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.440727][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.470402][ T1505] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.470702][ T1505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.583944][ T1505] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.584079][ T1505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.703222][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.770123][ T1459] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.770272][ T1459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.806321][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.856234][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.856559][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.004173][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.063938][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.094626][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.094860][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.178405][ T1459] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.178553][ T1459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.352107][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.433724][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.433865][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.480673][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.537320][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.537462][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.820185][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.961534][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.961798][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.112825][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.113094][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.326655][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.884972][ T5601] veth0_vlan: entered promiscuous mode [ 111.957068][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.115238][ T5601] veth1_vlan: entered promiscuous mode [ 112.263498][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.626101][ T5601] veth0_macvtap: entered promiscuous mode [ 112.764566][ T5601] veth1_macvtap: entered promiscuous mode [ 112.845352][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.941410][ T5598] veth0_vlan: entered promiscuous mode [ 113.119966][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.144328][ T5598] veth1_vlan: entered promiscuous mode [ 113.177217][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.241082][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.294027][ T3351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.309895][ T3351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.348235][ T3351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.376008][ T3351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.504911][ T5599] veth0_vlan: entered promiscuous mode [ 113.665736][ T5600] veth0_vlan: entered promiscuous mode [ 113.712056][ T5599] veth1_vlan: entered promiscuous mode [ 113.753069][ T5598] veth0_macvtap: entered promiscuous mode [ 113.876033][ T5598] veth1_macvtap: entered promiscuous mode [ 113.925342][ T5600] veth1_vlan: entered promiscuous mode [ 114.038981][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.039004][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.049390][ T5602] veth0_vlan: entered promiscuous mode [ 114.114223][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.196638][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.234937][ T5602] veth1_vlan: entered promiscuous mode [ 114.268540][ T5599] veth0_macvtap: entered promiscuous mode [ 114.293823][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.293845][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.296899][ T197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.340510][ T197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.347012][ T5599] veth1_macvtap: entered promiscuous mode [ 114.364505][ T197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.397067][ T197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.432143][ T5600] veth0_macvtap: entered promiscuous mode [ 114.592360][ T5600] veth1_macvtap: entered promiscuous mode [ 114.785861][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.151002][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.191467][ T5602] veth0_macvtap: entered promiscuous mode [ 115.230072][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.277372][ T97] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.396224][ T97] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.409364][ T5602] veth1_macvtap: entered promiscuous mode [ 116.414925][ T97] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.478048][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.501751][ T97] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.552978][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.553000][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.652413][ T1505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.701259][ T1026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.746981][ T1026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.813162][ T1026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.065172][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.077376][ T1505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.077396][ T1505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.360364][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.585670][ T1505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.627315][ T1505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.926610][ T1505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.981783][ T1505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.102569][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.102591][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.479842][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.479867][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.973012][ T1459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.973035][ T1459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.355686][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.355718][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.725298][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.725319][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.391693][ T1459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.391713][ T1459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.446705][ T5815] Zero length message leads to an empty skb [ 121.910920][ T38] audit: type=1326 audit(1784163706.905:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5823 comm="syz.4.5" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8975d3de59 code=0x7ffc0000 [ 121.910983][ T38] audit: type=1326 audit(1784163706.905:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5823 comm="syz.4.5" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8975d3de59 code=0x7ffc0000 [ 121.913414][ T38] audit: type=1326 audit(1784163706.905:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5823 comm="syz.4.5" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8975d3de59 code=0x7ffc0000 [ 121.913567][ T38] audit: type=1326 audit(1784163706.905:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5823 comm="syz.4.5" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8975d3de59 code=0x7ffc0000 [ 124.600108][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.989031][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 125.208386][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 125.208420][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.208441][ T9] usb 4-1: Product: syz [ 125.208456][ T9] usb 4-1: Manufacturer: syz [ 125.208470][ T9] usb 4-1: SerialNumber: syz [ 126.091025][ T5849] loop4: detected capacity change from 0 to 1024 [ 126.093293][ T5849] EXT4-fs: Ignoring removed bh option [ 126.264396][ T9] usb 4-1: can't set config #1, error -71 [ 126.573354][ T9] usb 4-1: USB disconnect, device number 2 [ 129.159826][ T5849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.483558][ T5881] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 129.483582][ T5881] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 129.483686][ T5881] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.21'. [ 129.642488][ T5599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.594568][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 131.973398][ T5871] IPVS: starting estimator thread 0... [ 132.048611][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 132.061640][ T5900] IPVS: using max 9 ests per chain, 21600 per kthread [ 133.727807][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.733770][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.229298][ T5911] loop0: detected capacity change from 0 to 512 [ 135.648296][ T5911] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.28: inode has both inline data and extents flags [ 135.648520][ T5911] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.659035][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 135.659063][ C0] EXT4-fs (loop0): initial error at time 1784163720: ext4_orphan_get:1399: inode 15 [ 135.659111][ C0] EXT4-fs (loop0): last error at time 1784163720: ext4_orphan_get:1399: inode 15 [ 135.713558][ T5911] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.28: couldn't read orphan inode 15 (err -117) [ 135.713799][ T5911] loop0: lost filesystem error report for type 5 error -117 [ 135.736164][ T5911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.216126][ T38] audit: type=1804 audit(1784163721.145:6): pid=5923 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.0.28" name="/newroot/4/file0/file1" dev="loop0" ino=18 res=1 errno=0 [ 136.252434][ T38] audit: type=1800 audit(1784163721.235:7): pid=5923 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.0.28" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 137.407009][ T5600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.592640][ T5943] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 137.640317][ T5937] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../f [ 138.098599][ T5600] Flush: task=syz-executor[5600] dev=loop0 state=2 [ 138.456993][ T5600] Teardown: task=syz-executor[5600] dev=loop0 state=2 [ 140.237622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 142.580515][ T5972] loop0: detected capacity change from 0 to 512 [ 142.664751][ T5972] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 142.794232][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 142.818355][ T5972] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 142.818482][ T5972] System zones: 0-2, 18-18, 34-34 [ 144.240660][ T5972] EXT4-fs (loop0): 1 orphan inode deleted [ 144.266781][ T5972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.267301][ T5972] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.144161][ T5600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.309327][ T5600] Flush: task=syz-executor[5600] dev=loop0 state=2 [ 146.412811][ T5600] Teardown: task=syz-executor[5600] dev=loop0 state=2 [ 148.607624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.800479][ T6046] loop2: detected capacity change from 0 to 512 [ 151.710539][ T6051] syz.1.63 (6051) used greatest stack depth: 18224 bytes left [ 152.351731][ T6046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.351904][ T6046] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.653020][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'. [ 152.714179][ T6062] binder_alloc: 6059: pid 6059 spamming oneway? 1 buffers allocated for a total size of 4096 [ 152.833765][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.975420][ T5598] Flush: task=syz-executor[5598] dev=loop2 state=2 [ 153.109656][ T5598] Teardown: task=syz-executor[5598] dev=loop2 state=2 [ 154.448788][ T6068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.451239][ T6068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.060753][ T6068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.625126][ T4907] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.678525][ T6068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.678619][ T6068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.919819][ T6068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 156.017224][ T6068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.017313][ T6068] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 156.373240][ T6089] loop1: detected capacity change from 0 to 32768 [ 156.374629][ T6089] btrfs: Deprecated parameter 'usebackuproot' [ 156.374839][ T6089] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 156.387005][ T6089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.74 (6089) [ 156.537924][ T6068] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 156.561917][ T6089] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.561969][ T6089] BTRFS info (device loop1): using crc32c checksum algorithm [ 156.614851][ T6068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.614942][ T6068] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.687938][ T197] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 156.688262][ T6089] BTRFS error (device loop1): failed to load root extent [ 156.688339][ T6089] BTRFS warning (device loop1): try to load backup roots slot 1 [ 156.691847][ T197] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 156.691991][ T6089] BTRFS warning (device loop1): couldn't read tree root [ 156.692013][ T6089] BTRFS warning (device loop1): try to load backup roots slot 2 [ 156.694324][ T13] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 156.694503][ T6089] BTRFS warning (device loop1): couldn't read tree root [ 156.694525][ T6089] BTRFS warning (device loop1): try to load backup roots slot 3 [ 156.785558][ T6068] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.819046][ T6089] BTRFS info (device loop1): rebuilding free space tree [ 156.871760][ T6068] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.871846][ T6068] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 157.000722][ T6068] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 158.132751][ T6089] BTRFS info (device loop1): checking UUID tree [ 158.139977][ T6089] BTRFS info (device loop1): enabling ssd optimizations [ 158.140009][ T6089] BTRFS info (device loop1): turning on async discard [ 158.140027][ T6089] BTRFS info (device loop1): enabling free space tree [ 158.140044][ T6089] BTRFS info (device loop1): force clearing of disk cache [ 158.140061][ T6089] BTRFS info (device loop1): enabling auto defrag [ 158.140083][ T6089] BTRFS info (device loop1): trying to use backup root at mount time [ 158.140111][ T6089] BTRFS info (device loop1): use zstd compression, level 3 [ 158.157010][ T4907] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.157272][ T4907] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.183991][ T4907] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.687791][ T4907] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.024338][ T4907] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.207895][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.207939][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.208052][ T4907] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.767734][ T4907] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.226616][ T4907] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.288574][ T4907] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.288616][ T4907] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.615689][ T5601] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.850766][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.261432][ T5608] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.567076][ T6151] loop3: detected capacity change from 0 to 16 [ 163.576117][ T6151] ======================================================= [ 163.576117][ T6151] WARNING: The mand mount option has been deprecated and [ 163.576117][ T6151] and is ignored by this kernel. Remove the mand [ 163.576117][ T6151] option from the mount to silence this warning. [ 163.576117][ T6151] ======================================================= [ 163.641766][ T5601] Flush: task=syz-executor[5601] dev=loop1 state=2 [ 163.743385][ T6151] erofs (device loop3): mounted with root inode @ nid 36. [ 163.854216][ T5601] Teardown: task=syz-executor[5601] dev=loop1 state=2 [ 166.425928][ T5602] Flush: task=syz-executor[5602] dev=loop3 state=2 [ 166.918673][ T5602] Teardown: task=syz-executor[5602] dev=loop3 state=2 [ 167.100689][ T38] audit: type=1804 audit(1784163752.075:8): pid=6192 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.1.95" name="/newroot/19/file0" dev="tmpfs" ino=115 res=1 errno=0 [ 167.216226][ T6196] futex_wake_op: syz.3.92 tries to shift op by 144; fix this program [ 167.256135][ T6196] loop3: detected capacity change from 0 to 2048 [ 168.248735][ T6195] loop1: detected capacity change from 0 to 512 [ 168.463257][ T5608] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 168.484446][ T6196] loop3: p3 < > p4 < > [ 168.484474][ T6196] loop3: partition table partially beyond EOD, truncated [ 168.490616][ T6196] loop3: p3 start 4284289 is beyond EOD, truncated [ 168.634471][ T6195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.709123][ T6195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.849587][ T6195] Flush: task=syz.1.95[6195] dev=loop1 state=2 [ 168.852523][ T5790] Flush: task=udevd[5790] dev=loop3 state=2 [ 168.883970][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 169.132644][ T6195] Teardown: task=syz.1.95[6195] dev=loop1 state=2 [ 169.159346][ T5790] Teardown: task=udevd[5790] dev=loop3 state=2 [ 169.833487][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 170.332346][ T6227] loop4: detected capacity change from 0 to 40427 [ 170.344124][ T6227] F2FS-fs (loop4): Image doesn't support compression [ 170.344159][ T6227] F2FS-fs (loop4): build fault injection rate: 690 [ 170.364064][ T6227] F2FS-fs (loop4): invalid crc value [ 170.598659][ T6227] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 170.620844][ T6227] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.669493][ T38] audit: type=1800 audit(1784163755.655:9): pid=6227 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.4.104" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 172.291563][ T5599] syz-executor: attempt to access beyond end of device [ 172.291563][ T5599] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.359551][ T5599] CPU: 1 UID: 0 PID: 5599 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.359584][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 172.359602][ T5599] Call Trace: [ 172.359611][ T5599] [ 172.359621][ T5599] dump_stack_lvl+0xe8/0x150 [ 172.359662][ T5599] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 172.359698][ T5599] f2fs_write_end_io+0x124b/0x1710 [ 172.359756][ T5599] __submit_merged_bio+0x258/0x6a0 [ 172.359784][ T5599] ? rcu_is_watching+0x15/0xb0 [ 172.359820][ T5599] __submit_merged_write_cond+0x3c9/0x4e0 [ 172.359859][ T5599] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 172.359914][ T5599] f2fs_write_data_pages+0x2a27/0x36f0 [ 172.359993][ T5599] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 172.360079][ T5599] ? do_raw_spin_lock+0x12b/0x2f0 [ 172.360121][ T5599] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.360161][ T5599] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 172.360192][ T5599] ? reacquire_held_locks+0x117/0x1a0 [ 172.360230][ T5599] ? rt_spin_lock+0x1e0/0x400 [ 172.360266][ T5599] ? rt_spin_unlock+0x157/0x200 [ 172.360298][ T5599] ? rt_spin_unlock+0x163/0x200 [ 172.360324][ T5599] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 172.360359][ T5599] do_writepages+0x338/0x560 [ 172.360394][ T5599] ? rt_spin_unlock+0x157/0x200 [ 172.360433][ T5599] filemap_fdatawrite+0x1ec/0x2f0 [ 172.360469][ T5599] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 172.360498][ T5599] ? do_raw_spin_lock+0x12b/0x2f0 [ 172.360563][ T5599] ? rt_spin_unlock+0x157/0x200 [ 172.360595][ T5599] ? rt_spin_unlock+0x163/0x200 [ 172.360626][ T5599] f2fs_sync_dirty_inodes+0x30e/0x830 [ 172.360677][ T5599] f2fs_write_checkpoint+0x999/0x26b0 [ 172.360751][ T5599] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 172.360845][ T5599] kill_f2fs_super+0x2dd/0x700 [ 172.360890][ T5599] ? __pfx_kill_f2fs_super+0x10/0x10 [ 172.360938][ T5599] ? call_rcu+0x64b/0x8b0 [ 172.360969][ T5599] ? lockdep_hardirqs_on+0x7a/0x110 [ 172.361016][ T5599] deactivate_locked_super+0xbc/0x110 [ 172.361047][ T5599] cleanup_mnt+0x3d3/0x460 [ 172.361085][ T5599] task_work_run+0x1d9/0x270 [ 172.361113][ T5599] ? __pfx_task_work_run+0x10/0x10 [ 172.361150][ T5599] exit_to_user_mode_loop+0x1fa/0x730 [ 172.361176][ T5599] ? rcu_is_watching+0x15/0xb0 [ 172.361218][ T5599] do_syscall_64+0x33d/0x530 [ 172.361252][ T5599] ? irqentry_exit+0x10f/0x8f0 [ 172.361282][ T5599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.361305][ T5599] ? clear_bhb_loop+0x40/0x90 [ 172.361333][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.361356][ T5599] RIP: 0033:0x7f8975d3f097 [ 172.361384][ T5599] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 172.361403][ T5599] RSP: 002b:00007fff0b06f738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 172.361428][ T5599] RAX: 0000000000000000 RBX: 00007f8975dd32ca RCX: 00007f8975d3f097 [ 172.361443][ T5599] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0b06f7f0 [ 172.361456][ T5599] RBP: 00007fff0b06f7f0 R08: 00007fff0b0707f0 R09: 00000000ffffffff [ 172.361471][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0b070880 [ 172.361485][ T5599] R13: 00007f8975dd32ca R14: 00000000000299fd R15: 00007fff0b0708c0 [ 172.361521][ T5599] [ 172.367533][ T5599] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 172.537459][ T6245] loop3: detected capacity change from 0 to 4096 [ 172.816121][ T6251] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 172.816174][ T6251] CIFS mount error: No usable UNC path provided in device string! [ 172.816174][ T6251] [ 172.816421][ T6251] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 175.157870][ T6245] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 175.177744][ T6245] EXT4-fs: failed to create workqueue [ 175.177761][ T6245] EXT4-fs (loop3): mount failed [ 175.527081][ T5790] Flush: task=udevd[5790] dev=loop3 state=2 [ 175.619134][ T5790] Teardown: task=udevd[5790] dev=loop3 state=2 [ 176.039300][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 176.132958][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 176.334136][ T6291] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 178.561496][ T6309] loop2: detected capacity change from 0 to 764 [ 181.078634][ T5598] Flush: task=syz-executor[5598] dev=loop2 state=2 [ 181.117222][ T38] audit: type=1326 audit(1784163766.105:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6316 comm="syz.0.126" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0005ade59 code=0x0 [ 181.885986][ T5598] Teardown: task=syz-executor[5598] dev=loop2 state=2 [ 182.338569][ T6337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 182.576366][ T6345] tipc: Can't bind to reserved service type 2 [ 183.849024][ T6354] loop2: detected capacity change from 0 to 32768 [ 184.105521][ T6354] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 185.338407][ T6368] FAULT_FLAG_ALLOW_RETRY missing 801 [ 185.338440][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.4.139 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.338476][ T6368] Tainted: [L]=SOFTLOCKUP [ 185.338485][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 185.338501][ T6368] Call Trace: [ 185.338510][ T6368] [ 185.338521][ T6368] dump_stack_lvl+0xe8/0x150 [ 185.338566][ T6368] handle_userfault+0x123d/0x1990 [ 185.338599][ T6368] ? __pfx___free_frozen_pages+0x10/0x10 [ 185.338639][ T6368] ? __folio_put+0x30f/0x3c0 [ 185.338670][ T6368] ? __pfx___folio_put+0x10/0x10 [ 185.338698][ T6368] ? __pfx_handle_userfault+0x10/0x10 [ 185.338740][ T6368] ? do_pte_missing+0x26ce/0x28f0 [ 185.338788][ T6368] handle_mm_fault+0xf95/0x28d0 [ 185.338831][ T6368] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 185.338867][ T6368] ? handle_mm_fault+0xeb/0x28d0 [ 185.338926][ T6368] ? __pfx_handle_mm_fault+0x10/0x10 [ 185.338967][ T6368] ? follow_page_pte+0x74b/0xf20 [ 185.339017][ T6368] ? __pfx_follow_page_pte+0x10/0x10 [ 185.339071][ T6368] __get_user_pages+0x1676/0x2650 [ 185.339148][ T6368] populate_vma_page_range+0x2be/0x3c0 [ 185.339190][ T6368] ? __pfx_populate_vma_page_range+0x10/0x10 [ 185.339226][ T6368] ? vma_wants_writenotify+0xb2/0x340 [ 185.339264][ T6368] ? vma_set_page_prot+0xc3/0x100 [ 185.339305][ T6368] mprotect_fixup+0x937/0xad0 [ 185.339344][ T6368] ? __pfx_mprotect_fixup+0x10/0x10 [ 185.339386][ T6368] ? mas_next_slot+0xc94/0xd70 [ 185.339453][ T6368] do_mprotect_pkey+0x9d3/0xcd0 [ 185.339503][ T6368] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 185.339569][ T6368] ? rcu_is_watching+0x15/0xb0 [ 185.339615][ T6368] __x64_sys_mprotect+0x80/0x90 [ 185.339647][ T6368] do_syscall_64+0x17b/0x530 [ 185.339684][ T6368] ? irqentry_exit+0x10f/0x8f0 [ 185.339721][ T6368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.339747][ T6368] ? clear_bhb_loop+0x40/0x90 [ 185.339778][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.339804][ T6368] RIP: 0033:0x7f8975d3de59 [ 185.339828][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.339850][ T6368] RSP: 002b:00007f8973f75028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 185.339876][ T6368] RAX: ffffffffffffffda RBX: 00007f8975fc6090 RCX: 00007f8975d3de59 [ 185.339895][ T6368] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 185.339911][ T6368] RBP: 00007f8975dd3e6f R08: 0000000000000000 R09: 0000000000000000 [ 185.339927][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.339941][ T6368] R13: 00007f8975fc6128 R14: 00007f8975fc6090 R15: 00007fff0b0704c8 [ 185.339987][ T6368] [ 186.412733][ T6373] process 'syz.0.138' launched './file1' with NULL argv: empty string added [ 190.198168][ T6406] netlink: 'syz.4.151': attribute type 11 has an invalid length. [ 193.795933][ T5598] ocfs2: Unmounting device (7,2) on (node local) [ 193.951619][ T5598] Flush: task=syz-executor[5598] dev=loop2 state=2 [ 194.561133][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561251][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.906249][ T6440] loop1: detected capacity change from 0 to 40427 [ 195.919274][ T5598] Teardown: task=syz-executor[5598] dev=loop2 state=2 [ 195.948728][ T6440] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 195.948758][ T6440] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.033669][ T6440] F2FS-fs (loop1): invalid crc value [ 196.229843][ T6440] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 196.353119][ T6440] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 196.353153][ T6440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.387174][ T38] audit: type=1800 audit(1784163782.545:11): pid=6458 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.158" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 200.141994][ T5606] libceph: connect (1)[c::]:6789 error -101 [ 200.171707][ T5606] libceph: mon0 (1)[c::]:6789 connect error [ 200.200151][ T6442] ceph: No mds server is up or the cluster is laggy [ 200.265091][ T5606] libceph: connect (1)[c::]:6789 error -101 [ 200.265296][ T5606] libceph: mon0 (1)[c::]:6789 connect error [ 200.544197][ T5606] libceph: connect (1)[c::]:6789 error -101 [ 200.544414][ T5606] libceph: mon0 (1)[c::]:6789 connect error [ 203.210468][ T5601] Flush: task=syz-executor[5601] dev=loop1 state=2 [ 203.348195][ T5601] Teardown: task=syz-executor[5601] dev=loop1 state=2 [ 203.793060][ T6494] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†' [ 205.237627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 205.307600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 205.367611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 206.493012][ T6515] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 207.416930][ T6533] loop0: detected capacity change from 0 to 16 [ 207.462857][ T6533] erofs (device loop0): mounted with root inode @ nid 36. [ 209.696003][ T6565] loop1: detected capacity change from 0 to 764 [ 211.311418][ T5600] Flush: task=syz-executor[5600] dev=loop0 state=2 [ 211.466031][ T5600] Teardown: task=syz-executor[5600] dev=loop0 state=2 [ 212.755972][ T5790] Flush: task=udevd[5790] dev=loop1 state=2 [ 212.923711][ T5790] Teardown: task=udevd[5790] dev=loop1 state=2 [ 216.450344][ T6640] loop3: detected capacity change from 0 to 32768 [ 217.021148][ T6640] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.306791][ T6640] XFS (loop3): Ending clean mount [ 220.532208][ T5608] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.054695][ T5602] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.776235][ T6678] warning: `syz.2.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.996287][ T6687] zonefs (nullb0) ERROR: Not a zoned block device [ 224.630296][ T5602] Flush: task=syz-executor[5602] dev=loop3 state=2 [ 225.887608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 225.897607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 225.907603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 225.917602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 225.927604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 225.988602][ T5602] Teardown: task=syz-executor[5602] dev=loop3 state=2 [ 227.135788][ T6719] loop1: detected capacity change from 0 to 512 [ 227.162502][ T6719] EXT4-fs: Ignoring removed orlov option [ 227.162537][ T6719] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.411755][ T6719] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.218: corrupted in-inode xattr: e_value size too large [ 227.411801][ T6719] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.417656][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 227.417767][ C1] EXT4-fs (loop1): initial error at time 1784163812: ext4_iget_extra_inode:5180: inode 15 [ 227.417859][ C1] EXT4-fs (loop1): last error at time 1784163812: ext4_iget_extra_inode:5180: inode 15 [ 227.563251][ T6719] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.218: couldn't read orphan inode 15 (err -117) [ 227.563291][ T6719] loop1: lost filesystem error report for type 5 error -117 [ 227.615182][ T6719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.674412][ T6719] Bluetooth: MGMT ver 1.23 [ 227.682277][ T6719] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 231.190979][ T5601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.077819][ T5601] Flush: task=syz-executor[5601] dev=loop1 state=2 [ 232.498421][ T5601] Teardown: task=syz-executor[5601] dev=loop1 state=2 [ 246.418912][ T5324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 246.866916][ T5324] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 246.866951][ T5324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.007069][ T5324] usb 3-1: config 0 descriptor?? [ 248.019137][ T5324] usb 3-1: can't set config #0, error -71 [ 248.043423][ T5324] usb 3-1: USB disconnect, device number 2 [ 248.535483][ T6826] loop1: detected capacity change from 0 to 40427 [ 248.598719][ T38] audit: type=1326 audit(1784163833.575:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6819 comm="syz.3.244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc84728de59 code=0x0 [ 248.779483][ T6826] F2FS-fs (loop1): invalid crc value [ 248.909050][ T6826] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 248.940928][ T6826] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 250.270756][ T5601] syz-executor: attempt to access beyond end of device [ 250.270756][ T5601] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.315301][ T5601] CPU: 1 UID: 0 PID: 5601 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 250.315339][ T5601] Tainted: [L]=SOFTLOCKUP [ 250.315347][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 250.315377][ T5601] Call Trace: [ 250.315386][ T5601] [ 250.315395][ T5601] dump_stack_lvl+0xe8/0x150 [ 250.315442][ T5601] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 250.315477][ T5601] f2fs_write_end_io+0x124b/0x1710 [ 250.315530][ T5601] __submit_merged_bio+0x258/0x6a0 [ 250.315556][ T5601] ? rcu_is_watching+0x15/0xb0 [ 250.315592][ T5601] __submit_merged_write_cond+0x3c9/0x4e0 [ 250.315628][ T5601] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 250.315680][ T5601] f2fs_write_data_pages+0x2a27/0x36f0 [ 250.315758][ T5601] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.315835][ T5601] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.315871][ T5601] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.315902][ T5601] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 250.315929][ T5601] ? reacquire_held_locks+0x117/0x1a0 [ 250.315955][ T5601] ? rt_spin_lock+0x1e0/0x400 [ 250.315986][ T5601] ? rt_spin_unlock+0x157/0x200 [ 250.316014][ T5601] ? rt_spin_unlock+0x163/0x200 [ 250.316036][ T5601] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.316069][ T5601] do_writepages+0x338/0x560 [ 250.316118][ T5601] filemap_fdatawrite+0x1ec/0x2f0 [ 250.316154][ T5601] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 250.316182][ T5601] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.316243][ T5601] ? rt_spin_unlock+0x157/0x200 [ 250.316273][ T5601] ? rt_spin_unlock+0x163/0x200 [ 250.316302][ T5601] f2fs_sync_dirty_inodes+0x30e/0x830 [ 250.316352][ T5601] f2fs_write_checkpoint+0x999/0x26b0 [ 250.316432][ T5601] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 250.316523][ T5601] kill_f2fs_super+0x2dd/0x700 [ 250.316567][ T5601] ? __pfx_kill_f2fs_super+0x10/0x10 [ 250.316615][ T5601] ? call_rcu+0x64b/0x8b0 [ 250.316645][ T5601] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.316693][ T5601] deactivate_locked_super+0xbc/0x110 [ 250.316724][ T5601] cleanup_mnt+0x3d3/0x460 [ 250.316759][ T5601] task_work_run+0x1d9/0x270 [ 250.316785][ T5601] ? __pfx_task_work_run+0x10/0x10 [ 250.316820][ T5601] exit_to_user_mode_loop+0x1fa/0x730 [ 250.316845][ T5601] ? rcu_is_watching+0x15/0xb0 [ 250.316879][ T5601] do_syscall_64+0x33d/0x530 [ 250.316911][ T5601] ? irqentry_exit+0x10f/0x8f0 [ 250.316942][ T5601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.316964][ T5601] ? clear_bhb_loop+0x40/0x90 [ 250.316991][ T5601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.317013][ T5601] RIP: 0033:0x7fed17a1f097 [ 250.317033][ T5601] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 250.317052][ T5601] RSP: 002b:00007ffdc0e22d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 250.317074][ T5601] RAX: 0000000000000000 RBX: 00007fed17ab32ca RCX: 00007fed17a1f097 [ 250.317089][ T5601] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc0e22de0 [ 250.317103][ T5601] RBP: 00007ffdc0e22de0 R08: 00007ffdc0e23de0 R09: 00000000ffffffff [ 250.317117][ T5601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc0e23e70 [ 250.317131][ T5601] R13: 00007fed17ab32ca R14: 000000000003cb12 R15: 00007ffdc0e23eb0 [ 250.317166][ T5601] [ 250.573057][ T5601] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 250.828115][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 254.647030][ T5601] Flush: task=syz-executor[5601] dev=loop1 state=2 [ 256.157014][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.157130][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.191482][ T5601] Teardown: task=syz-executor[5601] dev=loop1 state=2 [ 256.981119][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 257.467691][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 257.474056][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.474084][ T32] usb 5-1: config 0 has no interfaces? [ 257.514066][ T32] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 257.514101][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.514131][ T32] usb 5-1: Product: syz [ 257.514145][ T32] usb 5-1: Manufacturer: syz [ 257.514160][ T32] usb 5-1: SerialNumber: syz [ 257.586654][ T32] usb 5-1: config 0 descriptor?? [ 257.809451][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.259'. [ 257.809528][ T6881] netlink: 17 bytes leftover after parsing attributes in process `syz.2.259'. [ 257.809548][ T6881] tipc: Invalid UDP bearer configuration [ 257.809601][ T6881] tipc: Enabling of bearer rejected, failed to enable media [ 257.960978][ T32] usb 5-1: can't set config #0, error -71 [ 258.843942][ T32] usb 5-1: USB disconnect, device number 2 [ 258.883370][ T5606] IPVS: starting estimator thread 0... [ 259.663420][ T6891] IPVS: using max 7 ests per chain, 16800 per kthread [ 259.886423][ T6903] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 259.886445][ T6903] netlink: 60795 bytes leftover after parsing attributes in process `syz.3.262'. [ 263.429946][ T6926] loop4: detected capacity change from 0 to 256 [ 263.658819][ T6927] loop1: detected capacity change from 0 to 128 [ 263.934602][ T6930] loop3: detected capacity change from 0 to 512 [ 263.935822][ T6930] EXT4-fs: Ignoring removed nobh option [ 264.089365][ T4907] Bluetooth: hci0: unexpected event for opcode 0x0066 [ 264.455895][ T6934] loop2: detected capacity change from 0 to 2048 [ 265.023321][ T6930] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.028014][ T6934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.139604][ T6927] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.328977][ T6927] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.646328][ T6930] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 265.684059][ T6930] EXT4-fs (loop3): 1 truncate cleaned up [ 265.722558][ T5598] Flush: task=syz-executor[5598] dev=loop2 state=2 [ 265.758992][ T5601] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.805609][ T5601] Flush: task=syz-executor[5601] dev=loop1 state=2 [ 265.808359][ T5598] Teardown: task=syz-executor[5598] dev=loop2 state=2 [ 265.826403][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.862283][ T38] audit: type=1800 audit(1784163850.845:13): pid=6930 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.270" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 265.882729][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 265.909798][ T5601] Teardown: task=syz-executor[5601] dev=loop1 state=2 [ 265.929448][ T6937] loop2: detected capacity change from 0 to 256 [ 265.962604][ T6904] Flush: task=udevd[6904] dev=loop2 state=2 [ 266.178643][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 266.268765][ T6904] Teardown: task=udevd[6904] dev=loop2 state=2 [ 266.427768][ T5606] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 266.934860][ T6951] loop4: detected capacity change from 0 to 128 [ 267.702720][ T5606] usb 3-1: too many configurations: 164, using maximum allowed: 8 [ 267.831482][ T5606] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 267.831514][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.835858][ T6951] hpfs: Bad magic ... probably not HPFS [ 267.918542][ T5606] usb 3-1: config 0 descriptor?? [ 268.255646][ T5790] Flush: task=udevd[5790] dev=loop4 state=2 [ 268.430958][ T6958] syz.1.279 uses obsolete (PF_INET,SOCK_PACKET) [ 268.433917][ T6954] tipc: Started in network mode [ 268.433948][ T6954] tipc: Node identity ac14140f, cluster identity 4711 [ 268.503735][ T5602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.675238][ T5602] Flush: task=syz-executor[5602] dev=loop3 state=2 [ 268.686142][ T6954] tipc: New replicast peer: 172.30.0.5 [ 268.750861][ T5790] Teardown: task=udevd[5790] dev=loop4 state=2 [ 268.782522][ T5606] usb 3-1: USB disconnect, device number 3 [ 268.791913][ T6954] tipc: Enabled bearer , priority 10 [ 268.870224][ T5602] Teardown: task=syz-executor[5602] dev=loop3 state=2 [ 269.016187][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.277'. [ 269.016213][ T6962] tipc: Disabling bearer [ 271.797930][ T6975] loop2: detected capacity change from 0 to 512 [ 271.806433][ T6975] EXT4-fs (loop2): blocks per group (35) and clusters per group (32768) inconsistent [ 271.807395][ T6975] Flush: task=syz.2.282[6975] dev=loop2 state=2 [ 272.333257][ T6975] Teardown: task=syz.2.282[6975] dev=loop2 state=2 [ 273.308193][ T6975] bridge1: entered promiscuous mode [ 273.513058][ T6990] loop4: detected capacity change from 0 to 4096 [ 273.857100][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.254821][ T5599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.442678][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 278.598484][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 279.773740][ T7041] loop2: detected capacity change from 0 to 256 [ 284.951844][ T7041] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 286.290066][ T5598] Flush: task=syz-executor[5598] dev=loop2 state=2 [ 287.268170][ T5598] Teardown: task=syz-executor[5598] dev=loop2 state=2 [ 287.393801][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 287.423660][ T7076] bridge0: port 2(bridge_slave_1) entered listening state [ 287.435824][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.692026][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 287.692063][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.692105][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 287.692129][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.856323][ T9] usb 4-1: config 0 descriptor?? [ 288.081335][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 288.081472][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.118970][ T9] usb 4-1: USB disconnect, device number 3 [ 291.779676][ T7122] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 291.905356][ T7128] loop0: detected capacity change from 0 to 16 [ 292.055188][ T7128] erofs (device loop0): mounted with root inode @ nid 36. [ 292.409331][ T7122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.445427][ T7125] gretap1: entered promiscuous mode [ 293.589816][ T7125] bond1: (slave gretap1): making interface the new active one [ 293.655923][ T7125] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 293.739338][ T7138] 0x000000000006-0x000000020000 : "" [ 294.092594][ T7138] ftl_cs: FTL header corrupt! [ 294.125584][ T5600] Flush: task=syz-executor[5600] dev=loop0 state=2 [ 294.549127][ T5600] Teardown: task=syz-executor[5600] dev=loop0 state=2 [ 294.955229][ T38] audit: type=1326 audit(1784163879.945:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 295.054136][ T38] audit: type=1326 audit(1784163879.995:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 295.513785][ T38] audit: type=1326 audit(1784163880.465:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 295.513844][ T38] audit: type=1326 audit(1784163880.465:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 295.528195][ T38] audit: type=1326 audit(1784163880.515:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 295.621556][ T38] audit: type=1326 audit(1784163880.615:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 295.621611][ T38] audit: type=1326 audit(1784163880.615:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 295.683856][ T38] audit: type=1326 audit(1784163880.675:21): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd00056e68e code=0x7ffc0000 [ 295.685921][ T38] audit: type=1326 audit(1784163880.675:22): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 295.685974][ T38] audit: type=1326 audit(1784163880.675:23): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7145 comm="syz.0.326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0005ade59 code=0x7ffc0000 [ 296.473621][ T7158] o2cb: This node has not been configured. [ 296.473636][ T7158] o2cb: Cluster check failed. Fix errors before retrying. [ 296.473702][ T7158] (syz.4.330,7158,1):user_dlm_register:674 ERROR: status = -22 [ 296.473728][ T7158] (syz.4.330,7158,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 297.986282][ T7166] binder_alloc: 7165: pid 7165 spamming oneway? 1 buffers allocated for a total size of 4096 [ 298.208031][ T7164] overlayfs: failed to get inode (-116) [ 298.561448][ T7164] overlayfs: failed to get inode (-116) [ 299.048359][ T7171] evm: overlay not supported [ 299.217894][ T7180] loop0: detected capacity change from 0 to 1024 [ 299.370601][ T7180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.327875][ T7193] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5598] was attempted by ""[7193] [ 302.718744][ T5600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.460171][ T5600] Flush: task=syz-executor[5600] dev=loop0 state=2 [ 303.822331][ T5600] Teardown: task=syz-executor[5600] dev=loop0 state=2 [ 306.490939][ T7233] loop1: detected capacity change from 0 to 256 [ 306.674984][ T7233] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 308.831885][ T5601] Flush: task=syz-executor[5601] dev=loop1 state=2 [ 309.008858][ T5601] Teardown: task=syz-executor[5601] dev=loop1 state=2 [ 309.181788][ T7268] syzkaller0: entered promiscuous mode [ 309.181817][ T7268] syzkaller0: entered allmulticast mode [ 309.501417][ T7271] tipc: Started in network mode [ 309.501557][ T7271] tipc: Node identity 3e1afd644032, cluster identity 4711 [ 309.635021][ T7271] tipc: Enabled bearer , priority 0 [ 309.998193][ T7267] tipc: Resetting bearer [ 311.335658][ T7291] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5600] was attempted by " [ 313.092855][ T7267] tipc: Disabling bearer [ 313.398096][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 313.398125][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 314.677251][ T37] tipc: Node number set to 2116615524 [ 316.478302][ T6526] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.478944][ T6526] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.479006][ T6526] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.479046][ T6526] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.090005][ T7318] loop4: detected capacity change from 0 to 1764 [ 317.092401][ T7318] isofs_fill_super: bread failed, dev=loop4, iso_blknum=4055, block=4055 [ 317.093519][ T7318] Flush: task=syz.4.372[7318] dev=loop4 state=2 [ 318.302311][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.302417][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.428985][ T7318] Teardown: task=syz.4.372[7318] dev=loop4 state=2 [ 320.258331][ T7326] loop0: detected capacity change from 0 to 256 [ 322.669180][ T7326] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x2419ac00) [ 322.669207][ T7326] exFAT-fs (loop0): invalid boot region [ 322.669218][ T7326] exFAT-fs (loop0): failed to recognize exfat type [ 322.674514][ T7326] Flush: task=syz.0.375[7326] dev=loop0 state=2 [ 323.914341][ T7326] Teardown: task=syz.0.375[7326] dev=loop0 state=2 [ 325.645100][ T7352] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 325.645319][ T7352] overlayfs: missing 'lowerdir' [ 326.079849][ T7352] mmap: syz.1.382 (7352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 328.328152][ T7363] loop2: detected capacity change from 0 to 128 [ 328.334355][ T7363] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.359983][ T7363] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.103912][ T7382] loop3: detected capacity change from 0 to 4096 [ 334.191495][ T7390] loop4: detected capacity change from 0 to 2048 [ 334.244213][ T7382] EXT4-fs (loop3): can't read group descriptor 0 [ 334.375334][ T7390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.676210][ T5790] Flush: task=udevd[5790] dev=loop3 state=2 [ 334.731935][ T7389] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 334.810320][ T7389] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 334.810355][ T7389] EXT4-fs (loop4): This should not happen!! Data will be lost [ 334.810355][ T7389] [ 334.810370][ T7389] EXT4-fs (loop4): Total free blocks count 0 [ 334.810383][ T7389] EXT4-fs (loop4): Free/Dirty block details [ 334.810444][ T7389] EXT4-fs (loop4): free_blocks=2415919504 [ 334.810492][ T7389] EXT4-fs (loop4): dirty_blocks=32 [ 334.810506][ T7389] EXT4-fs (loop4): Block reservation details [ 334.810518][ T7389] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 334.908832][ T5790] Teardown: task=udevd[5790] dev=loop3 state=2 [ 335.209695][ T7390] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 335.783568][ T5598] Flush: task=syz-executor[5598] dev=loop2 state=2 [ 335.812655][ T5599] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 335.923379][ T7407] loop3: detected capacity change from 0 to 4096 [ 335.988426][ T5598] Teardown: task=syz-executor[5598] dev=loop2 state=2 [ 336.024745][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 336.053405][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 336.140770][ T7407] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 337.480136][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 337.796862][ T7407] ntfs3(loop3): ino=19, mi_enum_attr [ 337.797170][ T7407] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 337.982696][ T7407] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 339.116578][ T7433] netlink: 'syz.4.401': attribute type 4 has an invalid length. [ 339.284727][ T7436] loop0: detected capacity change from 0 to 512 [ 339.338246][ T7436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.348160][ T7436] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 339.438336][ T7436] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.403: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 339.497727][ T5730] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 339.657309][ T5602] Flush: task=syz-executor[5602] dev=loop3 state=2 [ 339.671238][ T5730] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.692761][ T5730] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.708531][ T5730] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.708601][ T5730] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 339.708627][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.782291][ T7439] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.403: lblock 23 mapped to illegal pblock 18 (length 1) [ 339.827861][ T5602] Teardown: task=syz-executor[5602] dev=loop3 state=2 [ 339.877066][ T5730] usb 5-1: config 0 descriptor?? [ 339.963363][ T5730] rndis_host 5-1:0.0: skipping garbage [ 339.963385][ T5730] rndis_host 5-1:0.0: skipping garbage [ 339.963404][ T5730] rndis_host 5-1:0.0: rndis: master #0/ffff88803e73c000 slave #1/0000000000000000 [ 340.121070][ T7436] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 12: comm syz.0.403: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 340.127648][ T7436] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.403: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 340.363360][ T5606] usb 5-1: USB disconnect, device number 3 [ 340.539138][ T5600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.621416][ T5600] Flush: task=syz-executor[5600] dev=loop0 state=2 [ 340.992409][ T5600] Teardown: task=syz-executor[5600] dev=loop0 state=2 [ 341.767852][ T5606] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 342.030453][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 342.030482][ T38] audit: type=1800 audit(1784163926.935:28): pid=7458 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.406" name="bus" dev="ramfs" ino=13612 res=0 errno=0 [ 342.073959][ T5606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.074014][ T5606] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 342.074038][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.147944][ T5606] usb 3-1: config 0 descriptor?? [ 342.208674][ T5606] pwc: Askey VC010 type 2 USB webcam detected. [ 342.659813][ T5606] pwc: recv_control_msg error -32 req 02 val 2b00 [ 342.692486][ T5606] pwc: recv_control_msg error -32 req 02 val 2700 [ 342.705179][ T5606] pwc: recv_control_msg error -32 req 02 val 2c00 [ 342.772059][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 343.344844][ T5606] pwc: recv_control_msg error -32 req 04 val 1000 [ 343.355248][ T5606] pwc: recv_control_msg error -32 req 04 val 1300 [ 343.356115][ T5606] pwc: recv_control_msg error -32 req 04 val 1400 [ 343.357123][ T5606] pwc: recv_control_msg error -32 req 02 val 2000 [ 343.378942][ T7476] loop1: detected capacity change from 0 to 512 [ 343.424861][ T7476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 343.440371][ T5606] pwc: recv_control_msg error -32 req 02 val 2100 [ 343.453694][ T5606] pwc: recv_control_msg error -32 req 04 val 1500 [ 343.456543][ T5606] pwc: recv_control_msg error -32 req 02 val 2500 [ 343.851855][ T5606] pwc: recv_control_msg error -71 req 02 val 2600 [ 343.853924][ T5606] pwc: recv_control_msg error -71 req 02 val 2900 [ 343.855049][ T5606] pwc: recv_control_msg error -71 req 02 val 2800 [ 343.880502][ T5606] pwc: recv_control_msg error -71 req 04 val 1100 [ 343.888216][ T5606] pwc: recv_control_msg error -71 req 04 val 1200 [ 345.120239][ T5606] pwc: Registered as video103. [ 345.255780][ T7476] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.414: corrupted xattr entries [ 345.255816][ T7476] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 345.258292][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 345.258315][ C1] EXT4-fs (loop1): initial error at time 1784163930: xattr_find_entry:337: inode 15 [ 345.258346][ C1] EXT4-fs (loop1): last error at time 1784163930: xattr_find_entry:337: inode 15 [ 345.329250][ T7476] EXT4-fs (loop1): 1 orphan inode deleted [ 345.387741][ T5909] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 345.478815][ T7476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.494255][ T5606] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 345.749230][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 345.959690][ T5606] usb 3-1: USB disconnect, device number 4 [ 346.138199][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.138257][ T5909] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 346.138280][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.301571][ T5909] usb 4-1: config 0 descriptor?? [ 346.391410][ T5909] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 346.441460][ T5909] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 346.441489][ T5909] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 346.441534][ T5909] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 347.511882][ T7488] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 347.511882][ T7488] program syz.3.417 not setting count and/or reply_len properly [ 348.120518][ T9] usb 4-1: USB disconnect, device number 4 [ 348.177769][ T5601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.281081][ T5601] Flush: task=syz-executor[5601] dev=loop1 state=2 [ 348.350382][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.423'. [ 348.350460][ T7510] netlink: 'syz.4.423': attribute type 7 has an invalid length. [ 348.350476][ T7510] netlink: 'syz.4.423': attribute type 8 has an invalid length. [ 348.350489][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 348.509588][ T5601] Teardown: task=syz-executor[5601] dev=loop1 state=2 [ 348.636005][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.423'. [ 348.636043][ T7510] netlink: 'syz.4.423': attribute type 7 has an invalid length. [ 348.655928][ T7510] netlink: 'syz.4.423': attribute type 8 has an invalid length. [ 348.655950][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 351.800727][ T7536] tipc: Failed to remove unknown binding: 66,0,0/0:2168672593/2168672595 [ 351.817403][ T7532] tipc: Failed to remove unknown binding: 66,0,0/0:3186780548/3186780549 [ 351.817443][ T7532] tipc: Failed to remove unknown binding: 66,0,0/0:3186780548/3186780549 [ 356.008065][ T38] audit: type=1326 audit(1784163940.995:29): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 356.008408][ T38] audit: type=1326 audit(1784163940.995:30): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 356.259523][ T38] audit: type=1326 audit(1784163941.255:31): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed17a1de59 code=0x0 [ 356.309741][ T38] audit: type=1326 audit(1784163941.305:32): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 356.309797][ T38] audit: type=1326 audit(1784163941.305:33): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 356.309848][ T38] audit: type=1326 audit(1784163941.305:34): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 356.699578][ T38] audit: type=1326 audit(1784163941.695:35): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 356.699766][ T38] audit: type=1326 audit(1784163941.695:36): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 356.715135][ T38] audit: type=1326 audit(1784163941.705:37): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 356.881931][ T38] audit: type=1326 audit(1784163941.835:38): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7554 comm="syz.1.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 358.123576][ T5909] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 359.697918][ T5909] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 359.972805][ T5909] usb 5-1: config 5 has an invalid interface number: 211 but max is 0 [ 359.972835][ T5909] usb 5-1: config 5 has an invalid descriptor of length 51, skipping remainder of the config [ 359.972856][ T5909] usb 5-1: config 5 has no interface number 0 [ 360.016444][ T5909] usb 5-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 360.016475][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.016494][ T5909] usb 5-1: Product: syz [ 360.016509][ T5909] usb 5-1: Manufacturer: syz [ 360.016523][ T5909] usb 5-1: SerialNumber: syz [ 361.031066][ T38] kauditd_printk_skb: 64 callbacks suppressed [ 361.031086][ T38] audit: type=1326 audit(1784163945.985:103): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7577 comm="syz.1.443" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed179de68e code=0x7ffc0000 [ 361.035448][ T38] audit: type=1326 audit(1784163946.025:104): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7577 comm="syz.1.443" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed179de68e code=0x7ffc0000 [ 361.036932][ T38] audit: type=1326 audit(1784163946.025:105): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7577 comm="syz.1.443" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed179de68e code=0x7ffc0000 [ 361.039517][ T38] audit: type=1326 audit(1784163946.035:106): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7577 comm="syz.1.443" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed179de68e code=0x7ffc0000 [ 361.052493][ T38] audit: type=1326 audit(1784163946.035:107): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7577 comm="syz.1.443" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed179de68e code=0x7ffc0000 [ 361.059261][ T38] audit: type=1326 audit(1784163946.055:108): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7577 comm="syz.1.443" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed179de68e code=0x7ffc0000 [ 361.073719][ T38] audit: type=1326 audit(1784163946.065:109): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7577 comm="syz.1.443" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 361.076142][ T38] audit: type=1326 audit(1784163946.065:110): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7577 comm="syz.1.443" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fed17a1de59 code=0x7ffc0000 [ 361.166790][ T7591] fuse: Bad value for 'fd' [ 361.329300][ T5909] rndis_host 5-1:5.211: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 361.375383][ T5909] usb 5-1: USB disconnect, device number 5 [ 362.604244][ T7602] tmpfs: Unsupported parameter 'huge' [ 365.012906][ T7628] capability: warning: `syz.3.453' uses deprecated v2 capabilities in a way that may be insecure [ 366.294078][ T7624] loop4: detected capacity change from 0 to 256 [ 366.443145][ T7624] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 366.976182][ T7632] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 367.166574][ T38] audit: type=1800 audit(1784163952.145:111): pid=7632 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.454" name="file1" dev="loop4" ino=1048605 res=0 errno=0 [ 369.199703][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 369.404149][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 369.993578][ T7651] loop4: detected capacity change from 0 to 40427 [ 370.005042][ T7651] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 370.005064][ T7651] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 370.031351][ T7651] F2FS-fs (loop4): Image doesn't support compression [ 370.037166][ T7651] F2FS-fs (loop4): invalid crc value [ 370.199917][ T7651] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 370.221659][ T7651] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 370.221742][ T7651] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 370.222998][ T7651] F2FS-fs (loop4): Start checkpoint disabled! [ 370.293762][ T7651] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 370.464655][ T7651] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 370.464726][ T7651] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 373.778439][ T7668] loop2: detected capacity change from 0 to 128 [ 376.741864][ T7668] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 376.741941][ T7668] EXT4-fs: failed to create workqueue [ 376.741953][ T7668] EXT4-fs (loop2): mount failed [ 377.130423][ T6904] Flush: task=udevd[6904] dev=loop2 state=2 [ 377.470844][ T7681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.711595][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.711717][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.500323][ T6904] Teardown: task=udevd[6904] dev=loop2 state=2 [ 379.529939][ T6530] kworker/u8:27: attempt to access beyond end of device [ 379.529939][ T6530] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 379.552890][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 379.552973][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 379.821140][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: kworker/u8:27 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.821177][ T6530] Tainted: [L]=SOFTLOCKUP [ 379.821185][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 379.821199][ T6530] Workqueue: writeback wb_workfn (flush-7:4) [ 379.821339][ T6530] Call Trace: [ 379.821348][ T6530] [ 379.821357][ T6530] dump_stack_lvl+0xe8/0x150 [ 379.821395][ T6530] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 379.821480][ T6530] f2fs_write_end_io+0x124b/0x1710 [ 379.821577][ T6530] __submit_merged_bio+0x258/0x6a0 [ 379.821606][ T6530] ? rcu_is_watching+0x15/0xb0 [ 379.821725][ T6530] __submit_merged_write_cond+0x3c9/0x4e0 [ 379.821764][ T6530] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 379.821818][ T6530] f2fs_write_data_pages+0x2a27/0x36f0 [ 379.821851][ T6530] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.821924][ T6530] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 379.821972][ T6530] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 379.822044][ T6530] ? __lock_acquire+0x6df/0x2e40 [ 379.822134][ T6530] ? do_raw_spin_lock+0x12b/0x2f0 [ 379.822194][ T6530] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.822229][ T6530] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.822262][ T6530] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 379.822296][ T6530] do_writepages+0x338/0x560 [ 379.822357][ T6530] ? reacquire_held_locks+0x117/0x1a0 [ 379.822388][ T6530] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 379.822427][ T6530] __writeback_single_inode+0x12e/0xf90 [ 379.822488][ T6530] writeback_sb_inodes+0x9db/0x1ab0 [ 379.822530][ T6530] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.822577][ T6530] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 379.822655][ T6530] ? rcu_is_watching+0x15/0xb0 [ 379.822687][ T6530] ? queue_io+0x2c2/0x450 [ 379.822717][ T6530] wb_writeback+0x41c/0xad0 [ 379.822746][ T6530] ? queue_io+0x211/0x450 [ 379.822780][ T6530] ? __pfx_wb_writeback+0x10/0x10 [ 379.822825][ T6530] wb_workfn+0x437/0x10f0 [ 379.822864][ T6530] ? update_se+0x90/0xf30 [ 379.822930][ T6530] ? __pfx_wb_workfn+0x10/0x10 [ 379.822974][ T6530] ? update_protect_slice+0x128/0x210 [ 379.823045][ T6530] ? lock_acquire+0x115/0x350 [ 379.823080][ T6530] ? rcu_is_watching+0x15/0xb0 [ 379.823117][ T6530] ? process_one_work+0x7fd/0x1480 [ 379.823171][ T6530] process_one_work+0xaaf/0x1480 [ 379.823222][ T6530] ? __pfx_process_one_work+0x10/0x10 [ 379.823247][ T6530] ? do_raw_spin_lock+0x12b/0x2f0 [ 379.823275][ T6530] ? assign_work+0x3cf/0x5d0 [ 379.823309][ T6530] worker_thread+0xb05/0x10d0 [ 379.823365][ T6530] kthread+0x388/0x470 [ 379.823400][ T6530] ? __pfx_worker_thread+0x10/0x10 [ 379.823425][ T6530] ? __pfx_kthread+0x10/0x10 [ 379.823461][ T6530] ret_from_fork+0x514/0xb70 [ 379.823500][ T6530] ? __pfx_ret_from_fork+0x10/0x10 [ 379.823536][ T6530] ? __switch_to+0xc89/0x1420 [ 379.823622][ T6530] ? __pfx_kthread+0x10/0x10 [ 379.823658][ T6530] ret_from_fork_asm+0x1a/0x30 [ 379.823700][ T6530] [ 379.836810][ T6530] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 382.594813][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 382.751028][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 384.622211][ T7706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.474'. [ 387.328448][ T5730] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 387.499484][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 387.501565][ T5730] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 387.501589][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 387.547061][ T5730] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 387.547084][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.547098][ T5730] usb 1-1: Product: syz [ 387.547108][ T5730] usb 1-1: Manufacturer: syz [ 387.547119][ T5730] usb 1-1: SerialNumber: syz [ 387.826993][ T5730] usb 1-1: config 0 descriptor?? [ 387.861441][ T5730] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 387.875210][ T5730] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 388.629335][ T5730] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 388.635391][ T5730] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 389.305914][ T5730] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 389.308840][ T5730] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 389.372990][ T5730] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 389.376620][ T5730] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 389.415807][ T5730] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 389.690516][ T5730] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 389.722475][ T7753] [ 389.722487][ T7753] ============================================ [ 389.722496][ T7753] WARNING: possible recursive locking detected [ 389.722514][ T7753] syzkaller #0 Tainted: G L [ 389.722527][ T7753] -------------------------------------------- [ 389.722535][ T7753] syz.4.484/7753 is trying to acquire lock: [ 389.722548][ T7753] ffffffff8eba3e88 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 389.722695][ T7753] [ 389.722695][ T7753] but task is already holding lock: [ 389.722703][ T7753] ffffffff8eba3e88 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 389.722757][ T7753] [ 389.722757][ T7753] other info that might help us debug this: [ 389.722765][ T7753] Possible unsafe locking scenario: [ 389.722765][ T7753] [ 389.722772][ T7753] CPU0 [ 389.722778][ T7753] ---- [ 389.722783][ T7753] lock(qp_broker_list.mutex); [ 389.722799][ T7753] lock(qp_broker_list.mutex); [ 389.722814][ T7753] [ 389.722814][ T7753] *** DEADLOCK *** [ 389.722814][ T7753] [ 389.722819][ T7753] May be due to missing lock nesting notation [ 389.722819][ T7753] [ 389.722827][ T7753] locks held by syz.4.484/7753: 1, last CPU#1: [ 389.722844][ T7753] #0: ffffffff8eba3e88 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 389.722917][ T7753] [ 389.722917][ T7753] stack backtrace: [ 389.722934][ T7753] CPU: 1 UID: 0 PID: 7753 Comm: syz.4.484 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.722965][ T7753] Tainted: [L]=SOFTLOCKUP [ 389.722973][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 389.722987][ T7753] Call Trace: [ 389.722995][ T7753] [ 389.723005][ T7753] dump_stack_lvl+0xe8/0x150 [ 389.723039][ T7753] print_deadlock_bug+0x27a/0x290 [ 389.723072][ T7753] __lock_acquire+0x261c/0x2e40 [ 389.723099][ T7753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 389.723139][ T7753] ? kasan_save_track+0x4f/0x80 [ 389.723201][ T7753] ? kasan_save_track+0x3e/0x80 [ 389.723221][ T7753] ? kasan_save_free_info+0x40/0x50 [ 389.723280][ T7753] ? __kasan_slab_free+0x5c/0x80 [ 389.723302][ T7753] ? kfree+0x1c5/0x6c0 [ 389.723381][ T7753] ? vmci_ctx_put+0x5ba/0xc00 [ 389.723435][ T7753] ? vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 389.723466][ T7753] ? vmci_datagram_dispatch+0x450/0xc80 [ 389.723499][ T7753] lock_acquire+0x115/0x350 [ 389.723524][ T7753] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 389.723551][ T7753] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 389.723577][ T7753] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 389.723599][ T7753] mutex_lock_nested+0x5a/0x1d0 [ 389.723624][ T7753] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 389.723650][ T7753] vmci_qp_broker_detach+0xe9/0xeb0 [ 389.723678][ T7753] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 389.723702][ T7753] ? kasan_quarantine_put+0xbb/0x1f0 [ 389.723737][ T7753] ? lockdep_hardirqs_on+0x7a/0x110 [ 389.723772][ T7753] ? kfree+0x1c5/0x6c0 [ 389.723803][ T7753] ? vmci_ctx_put+0x5ba/0xc00 [ 389.723831][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.723870][ T7753] vmci_ctx_put+0x619/0xc00 [ 389.723899][ T7753] ? rt_mutex_postunlock+0x103/0x120 [ 389.723922][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.723954][ T7753] ? __pfx_vmci_ctx_put+0x10/0x10 [ 389.723981][ T7753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 389.724025][ T7753] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 389.724060][ T7753] vmci_datagram_dispatch+0x450/0xc80 [ 389.724095][ T7753] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 389.724133][ T7753] vmci_qp_broker_detach+0x87e/0xeb0 [ 389.724162][ T7753] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 389.724186][ T7753] ? kasan_quarantine_put+0xbb/0x1f0 [ 389.724224][ T7753] ? kfree+0x1c5/0x6c0 [ 389.724263][ T7753] ? vmci_ctx_put+0x5ba/0xc00 [ 389.724291][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.724322][ T7753] vmci_ctx_put+0x619/0xc00 [ 389.724351][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.724382][ T7753] ? __pfx_vmci_ctx_put+0x10/0x10 [ 389.724421][ T7753] vmci_host_close+0x91/0x140 [ 389.724444][ T7753] ? __pfx_vmci_host_close+0x10/0x10 [ 389.724466][ T7753] __fput+0x42a/0xa80 [ 389.724532][ T7753] task_work_run+0x1d9/0x270 [ 389.724556][ T7753] ? __pfx_task_work_run+0x10/0x10 [ 389.724585][ T7753] exit_to_user_mode_loop+0x1fa/0x730 [ 389.724641][ T7753] ? rcu_is_watching+0x15/0xb0 [ 389.724674][ T7753] do_syscall_64+0x33d/0x530 [ 389.724708][ T7753] ? irqentry_exit+0x10f/0x8f0 [ 389.724741][ T7753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.724764][ T7753] ? clear_bhb_loop+0x40/0x90 [ 389.724789][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.724818][ T7753] RIP: 0033:0x7f8975d3de59 [ 389.724839][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.724876][ T7753] RSP: 002b:00007f8973b31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 389.724908][ T7753] RAX: 0000000000000000 RBX: 00007f8975fc6270 RCX: 00007f8975d3de59 [ 389.724925][ T7753] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 389.724940][ T7753] RBP: 00007f8975dd3e6f R08: 0000000000000000 R09: 0000000000000000 [ 389.724954][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.724968][ T7753] R13: 00007f8975fc6308 R14: 00007f8975fc6270 R15: 00007fff0b0704c8 [ 389.724994][ T7753] [ 389.877720][ T5730] usb 1-1: USB disconnect, device number 2 [ 389.967909][ T7759] loop1: detected capacity change from 0 to 128 [ 389.972581][ T7753] ------------[ cut here ]------------ [ 389.972624][ T7753] rtmutex deadlock detected [ 389.972646][ T7753] WARNING: kernel/locking/rtmutex.c:1698 at rt_mutex_handle_deadlock+0x21/0xb0, CPU#0: syz.4.484/7753 [ 389.972788][ T7753] Modules linked in: [ 389.972846][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.4.484 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.972933][ T7753] Tainted: [L]=SOFTLOCKUP [ 389.972957][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 389.972992][ T7753] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 389.973073][ T7753] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 40 01 00 48 8d 3d af ce 69 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 73 6b 55 07 4c 8d [ 389.973127][ T7753] RSP: 0018:ffffc9000891f4d0 EFLAGS: 00010286 [ 389.973212][ T7753] RAX: 0000000080000000 RBX: 00000000ffffffdd RCX: 0000000000000000 [ 389.973248][ T7753] RDX: 0000000000000000 RSI: ffffffff8bca9460 RDI: ffffffff8fb2a330 [ 389.973292][ T7753] RBP: ffffc9000891f680 R08: ffffffff8faf857f R09: 1ffffffff1f5f0af [ 389.973353][ T7753] R10: dffffc0000000000 R11: fffffbfff1f5f0b0 R12: 1ffff92001123ea8 [ 389.973405][ T7753] R13: ffffffff8b48cec2 R14: ffffffff8eba3e30 R15: dffffc0000000000 [ 389.973449][ T7753] FS: 00007f8973b316c0(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 389.973497][ T7753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.973540][ T7753] CR2: 000056451072f660 CR3: 0000000035552000 CR4: 00000000003526f0 [ 389.973584][ T7753] Call Trace: [ 389.973607][ T7753] [ 389.973630][ T7753] ? rt_mutex_slowlock+0x1f2/0x780 [ 389.973709][ T7753] rt_mutex_slowlock+0x73c/0x780 [ 389.973786][ T7753] ? rt_mutex_slowlock+0x1f2/0x780 [ 389.973856][ T7753] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 389.974021][ T7753] ? lock_acquire+0x231/0x350 [ 389.974052][ T7753] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 389.974076][ T7753] mutex_lock_nested+0x168/0x1d0 [ 389.974114][ T7753] vmci_qp_broker_detach+0xe9/0xeb0 [ 389.974203][ T7753] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 389.974278][ T7753] ? kasan_quarantine_put+0xbb/0x1f0 [ 389.974387][ T7753] ? lockdep_hardirqs_on+0x7a/0x110 [ 389.974478][ T7753] ? kfree+0x1c5/0x6c0 [ 389.974568][ T7753] ? vmci_ctx_put+0x5ba/0xc00 [ 389.974649][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.974747][ T7753] vmci_ctx_put+0x619/0xc00 [ 389.974816][ T7753] ? rt_mutex_postunlock+0x103/0x120 [ 389.974876][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.974962][ T7753] ? __pfx_vmci_ctx_put+0x10/0x10 [ 389.975031][ T7753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 389.975153][ T7753] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 389.975237][ T7753] vmci_datagram_dispatch+0x450/0xc80 [ 389.975335][ T7753] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 389.975435][ T7753] vmci_qp_broker_detach+0x87e/0xeb0 [ 389.975492][ T7753] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 389.975537][ T7753] ? kasan_quarantine_put+0xbb/0x1f0 [ 389.975636][ T7753] ? kfree+0x1c5/0x6c0 [ 389.975744][ T7753] ? vmci_ctx_put+0x5ba/0xc00 [ 389.975821][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.975900][ T7753] vmci_ctx_put+0x619/0xc00 [ 389.975978][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.976061][ T7753] ? __pfx_vmci_ctx_put+0x10/0x10 [ 389.976164][ T7753] vmci_host_close+0x91/0x140 [ 389.976232][ T7753] ? __pfx_vmci_host_close+0x10/0x10 [ 389.976289][ T7753] __fput+0x42a/0xa80 [ 389.976367][ T7753] task_work_run+0x1d9/0x270 [ 389.976427][ T7753] ? __pfx_task_work_run+0x10/0x10 [ 389.976505][ T7753] exit_to_user_mode_loop+0x1fa/0x730 [ 389.976574][ T7753] ? rcu_is_watching+0x15/0xb0 [ 389.976662][ T7753] do_syscall_64+0x33d/0x530 [ 389.976754][ T7753] ? irqentry_exit+0x10f/0x8f0 [ 389.976844][ T7753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.976902][ T7753] ? clear_bhb_loop+0x40/0x90 [ 389.976985][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.977015][ T7753] RIP: 0033:0x7f8975d3de59 [ 389.977034][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.977052][ T7753] RSP: 002b:00007f8973b31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 389.977114][ T7753] RAX: 0000000000000000 RBX: 00007f8975fc6270 RCX: 00007f8975d3de59 [ 389.977159][ T7753] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 389.977196][ T7753] RBP: 00007f8975dd3e6f R08: 0000000000000000 R09: 0000000000000000 [ 389.977233][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.977268][ T7753] R13: 00007f8975fc6308 R14: 00007f8975fc6270 R15: 00007fff0b0704c8 [ 389.977338][ T7753] [ 389.977381][ T7753] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 389.977437][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.4.484 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.977490][ T7753] Tainted: [L]=SOFTLOCKUP [ 389.977506][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 389.977540][ T7753] Call Trace: [ 389.977562][ T7753] [ 389.977584][ T7753] vpanic+0x56c/0xa60 [ 389.977729][ T7753] ? __pfx__printk+0x10/0x10 [ 389.977797][ T7753] ? __pfx_vpanic+0x10/0x10 [ 389.977852][ T7753] ? is_bpf_text_address+0x292/0x2b0 [ 389.977988][ T7753] ? is_bpf_text_address+0x26/0x2b0 [ 389.978078][ T7753] panic+0xc5/0xd0 [ 389.978134][ T7753] ? __pfx_panic+0x10/0x10 [ 389.978188][ T7753] __warn+0x315/0x4c0 [ 389.978207][ T7753] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 389.978235][ T7753] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 389.978261][ T7753] __report_bug+0x276/0x570 [ 389.978295][ T7753] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 389.978322][ T7753] ? __pfx___report_bug+0x10/0x10 [ 389.978358][ T7753] ? __schedule+0x171f/0x5530 [ 389.978390][ T7753] report_bug_entry+0x19a/0x290 [ 389.978422][ T7753] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 389.978445][ T7753] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 389.978469][ T7753] handle_bug+0xce/0x200 [ 389.978490][ T7753] exc_invalid_op+0x1a/0x50 [ 389.978512][ T7753] asm_exc_invalid_op+0x1a/0x20 [ 389.978533][ T7753] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 389.978560][ T7753] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 40 01 00 48 8d 3d af ce 69 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 73 6b 55 07 4c 8d [ 389.978578][ T7753] RSP: 0018:ffffc9000891f4d0 EFLAGS: 00010286 [ 389.978597][ T7753] RAX: 0000000080000000 RBX: 00000000ffffffdd RCX: 0000000000000000 [ 389.978613][ T7753] RDX: 0000000000000000 RSI: ffffffff8bca9460 RDI: ffffffff8fb2a330 [ 389.978628][ T7753] RBP: ffffc9000891f680 R08: ffffffff8faf857f R09: 1ffffffff1f5f0af [ 389.978645][ T7753] R10: dffffc0000000000 R11: fffffbfff1f5f0b0 R12: 1ffff92001123ea8 [ 389.978661][ T7753] R13: ffffffff8b48cec2 R14: ffffffff8eba3e30 R15: dffffc0000000000 [ 389.978680][ T7753] ? rt_mutex_slowlock+0x1f2/0x780 [ 389.978722][ T7753] ? rt_mutex_slowlock+0x1f2/0x780 [ 389.978747][ T7753] rt_mutex_slowlock+0x73c/0x780 [ 389.978773][ T7753] ? rt_mutex_slowlock+0x1f2/0x780 [ 389.978798][ T7753] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 389.978833][ T7753] ? lock_acquire+0x231/0x350 [ 389.978860][ T7753] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 389.978882][ T7753] mutex_lock_nested+0x168/0x1d0 [ 389.978908][ T7753] vmci_qp_broker_detach+0xe9/0xeb0 [ 389.978936][ T7753] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 389.978958][ T7753] ? kasan_quarantine_put+0xbb/0x1f0 [ 389.978992][ T7753] ? lockdep_hardirqs_on+0x7a/0x110 [ 389.979025][ T7753] ? kfree+0x1c5/0x6c0 [ 389.979054][ T7753] ? vmci_ctx_put+0x5ba/0xc00 [ 389.979080][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.979109][ T7753] vmci_ctx_put+0x619/0xc00 [ 389.979135][ T7753] ? rt_mutex_postunlock+0x103/0x120 [ 389.979156][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.979185][ T7753] ? __pfx_vmci_ctx_put+0x10/0x10 [ 389.979213][ T7753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 389.979255][ T7753] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 389.979290][ T7753] vmci_datagram_dispatch+0x450/0xc80 [ 389.979323][ T7753] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 389.979358][ T7753] vmci_qp_broker_detach+0x87e/0xeb0 [ 389.979386][ T7753] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 389.979408][ T7753] ? kasan_quarantine_put+0xbb/0x1f0 [ 389.979443][ T7753] ? kfree+0x1c5/0x6c0 [ 389.979474][ T7753] ? vmci_ctx_put+0x5ba/0xc00 [ 389.979502][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.979531][ T7753] vmci_ctx_put+0x619/0xc00 [ 389.979558][ T7753] ? vmci_ctx_put+0x13e/0xc00 [ 389.979588][ T7753] ? __pfx_vmci_ctx_put+0x10/0x10 [ 389.979626][ T7753] vmci_host_close+0x91/0x140 [ 389.979647][ T7753] ? __pfx_vmci_host_close+0x10/0x10 [ 389.979668][ T7753] __fput+0x42a/0xa80 [ 389.979704][ T7753] task_work_run+0x1d9/0x270 [ 389.979727][ T7753] ? __pfx_task_work_run+0x10/0x10 [ 389.979753][ T7753] exit_to_user_mode_loop+0x1fa/0x730 [ 389.979777][ T7753] ? rcu_is_watching+0x15/0xb0 [ 389.979808][ T7753] do_syscall_64+0x33d/0x530 [ 389.979841][ T7753] ? irqentry_exit+0x10f/0x8f0 [ 389.979869][ T7753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.979890][ T7753] ? clear_bhb_loop+0x40/0x90 [ 389.979914][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.979933][ T7753] RIP: 0033:0x7f8975d3de59 [ 389.979952][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.979969][ T7753] RSP: 002b:00007f8973b31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 389.979991][ T7753] RAX: 0000000000000000 RBX: 00007f8975fc6270 RCX: 00007f8975d3de59 [ 389.980006][ T7753] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 389.980021][ T7753] RBP: 00007f8975dd3e6f R08: 0000000000000000 R09: 0000000000000000 [ 389.980034][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.980047][ T7753] R13: 00007f8975fc6308 R14: 00007f8975fc6270 R15: 00007fff0b0704c8 [ 389.980071][ T7753] [ 389.980256][ T7753] Kernel Offset: disabled