last executing test programs: 20m53.680517612s ago: executing program 32 (id=1756): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) r3 = gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x45, 0x1, 0x80002, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="0ffdffd8"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094) kcmp(r3, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r5, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) 20m52.489475241s ago: executing program 33 (id=1755): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 20m52.17734874s ago: executing program 34 (id=1758): r0 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x840) write$cgroup_int(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 20m51.985023556s ago: executing program 35 (id=1752): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[], 0x0) r2 = io_uring_setup(0x177f, &(0x7f00000002c0)) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x4d, &(0x7f00000000c0)=ANY=[]) 20m51.790914264s ago: executing program 36 (id=1748): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be0083000000000b09307a15b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0xfffffdc2, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x80000) 20m51.516467809s ago: executing program 37 (id=1757): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001"], 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x9, 0x800) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x3b83, &(0x7f0000000240)={0x0, 0x59db, 0x800, 0x2, 0x2bc, 0x0, r0}, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 14m15.350567732s ago: executing program 38 (id=2971): syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380), 0x80, 0x54f, &(0x7f0000000480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xae0f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x200, 0x31) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") getpid() socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_complete(0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x60000600) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet(0x2, 0x2, 0x1) 12m47.965195644s ago: executing program 39 (id=3159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe5b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) preadv(0xffffffffffffffff, &(0x7f0000003d40)=[{0x0}, {&(0x7f0000000840)=""/4084, 0xff4}], 0x2, 0x13, 0xf7) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='bfq', 0x3) sendfile(r3, r3, 0x0, 0x8) write(0xffffffffffffffff, 0x0, 0x0) 11m42.618016992s ago: executing program 40 (id=3310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002240), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0), 0x0) getegid() r2 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000010080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}], 0x20}}], 0x1, 0x40000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='exofs\x00', 0x0, 0x0) 9m45.254214505s ago: executing program 3 (id=3825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0xd) 9m44.858403997s ago: executing program 3 (id=3827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) close(0x3) 9m29.716948803s ago: executing program 41 (id=3824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r6, 0x1003c}, 0x80, &(0x7f0000004600)=[{&(0x7f0000000580)="25ff2b8e99e20341f94b754b2d663444fd304c65", 0x14}], 0x1}, 0x24004401) 9m29.617155541s ago: executing program 42 (id=3827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) close(0x3) 7m43.710938752s ago: executing program 43 (id=4294): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40006) 7m16.295869477s ago: executing program 6 (id=4482): openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x101042, 0x0) 7m15.8239699s ago: executing program 6 (id=4485): fsmount(0xffffffffffffffff, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) 7m15.430907814s ago: executing program 6 (id=4487): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000/0x400000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m14.760957146s ago: executing program 6 (id=4491): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) syz_clone(0x200, &(0x7f0000000080)="48fcf620aef68b4b279320745497a5a845791696e34354b44d16ee7d7f581e1d29bd34c18952210da2248b88e99f44340c160b1c50b9eb96552ad4", 0x3b, 0x0, &(0x7f0000000380), &(0x7f0000000680)="bfc8c07bf77d802607a8b8b1ecad22c2d5270c5a213a2818105faade4232da5bee6bdc5f461ae026d9d54c3aae1ec0ca9a36a05685bf3b98f058ccdc1c109d4cb214ed34e9137bd5e5c647a463627756f6d6d4639a290d0ecc074c797e5aaf7327c494da35ee00c45da969bf288d10a37ce66db4b6ed5e627ef7542d3ef67fb44793f4f52a44f248637275cff312e56856ae29721847bf2389039efd42151103ae2c5516f91aa6964a987cfd2db37fd9f1c7028a2e4d535f981d0f6c565795") write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 7m13.130462251s ago: executing program 6 (id=4495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 7m11.186392318s ago: executing program 6 (id=4498): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) ftruncate(r0, 0x84) 7m6.696054866s ago: executing program 44 (id=4466): socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) pipe(&(0x7f0000000080)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 6m58.824577479s ago: executing program 45 (id=4490): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 6m55.983943819s ago: executing program 46 (id=4498): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$eJzs2s9rXFUUB/DzaiUxNZ2Iv2hBvOhC3TyauHXRIC2IAUUboQrSV/OiQ54zIW8IjIidlW79E1yLS3eCdOkmG/8CF+4CkmUF8YmZMc0MI6H4Y0L7+WzmMOd+Z87lzgx3MfuvfPnx1madbxa9OJNlkV2OQdzJYinOxF8G8dIL13945u3r776+urZ25a2Urq5eW15JKZ1/9vv3Pv3mudu9c+98e/67udhben//YOXnvaf2Luz/fu2jdp3adep0e6lIN7vdXnGzKtNGu97KU3qzKou6TO1OXe6M9Ter7vZ2PxWdjcWF7Z2yrlPR6aetsp963dTb6afiw6LdSXmep8WF4J9Y//pO08RB8/CNaJrmka/i3O1Y/ClakT2WsscvZ0/eyJ4eZBcOmqY161H5Tzj/B9uxH/X5iOqL3fXd9eHjsL+6Ge2oooxL0Yrf4s+Pyciwvvra2pVL6dBSfF7dGuVv7a4/NJ5fjlYsTc8vD/NpPD8XC8fzK9GKJyIbjT2WX5man48Xnz+Wz6MVP34Q3ahi4/AF7uY/W07p1TfWJvIXD9cBANxv8nRk6v0tz/+uP8zfw/1w4n51Ni6ene3eiaj7n2wVVVXunFTMx8lrFIqTivmIOAVjHBW/jL4IE625f+MtYhBx9MzLj56WLU8UvzZNM214HgB3D33WkwAAAAAAAAAAAHAv/o8/GM56jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn2RwAAAP//lu3JvA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) ftruncate(r0, 0x84) 6m1.420884082s ago: executing program 3 (id=4514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='alps', 0x4) 5m59.877402228s ago: executing program 3 (id=4719): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 5m58.689472071s ago: executing program 3 (id=4724): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e65"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r8, r9, 0x3f5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xffffffffffffeffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r8, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, 0x0, 0x60a41, 0xb3836f6d7a15f29) close_range(r5, r6, 0x0) write$binfmt_format(r10, &(0x7f0000000040)='0\x00', 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) 5m57.658560539s ago: executing program 3 (id=4733): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) 5m56.040185031s ago: executing program 47 (id=4733): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) 4m21.33587824s ago: executing program 9 (id=5179): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40084}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x440e0) 4m20.472995552s ago: executing program 9 (id=5184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 4m18.86632159s ago: executing program 9 (id=5192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 4m18.297273336s ago: executing program 9 (id=5196): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 4m17.366070082s ago: executing program 9 (id=5202): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001002cbd7000fcdbdf250800", @ANYRES32=r0, @ANYBLOB="08020000", @ANYRES32=0x0, @ANYBLOB="0c001a8008002800", @ANYRES32, @ANYBLOB='\b\x00@'], 0x34}], 0x1, 0x0, 0x0, 0x30040091}, 0x8000) 4m16.202510724s ago: executing program 9 (id=5209): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000440)}, {0x0}], 0x2}}], 0x2, 0x4080) 4m14.892325144s ago: executing program 48 (id=5209): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000440)}, {0x0}], 0x2}}], 0x2, 0x4080) 2m8.0422142s ago: executing program 8 (id=5817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m7.445123159s ago: executing program 8 (id=5821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x7d) 2m6.462241612s ago: executing program 8 (id=5828): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2m5.921905376s ago: executing program 8 (id=5832): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@allow_utime={'allow_utime', 0x3d, 0x7fffffff}}, {@keep_last_dots}, {@errors_remount}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@gid}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0xfff}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0xfd, 0x1530, &(0x7f0000001cc0)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa5e438, &(0x7f0000001ac0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32=r0, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xe4b7, 0xffffffffffffffe3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004480)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 2m2.202500968s ago: executing program 8 (id=5852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000010201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500"], 0xc8}}, 0x0) 1m55.75824648s ago: executing program 8 (id=5878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m54.00796123s ago: executing program 49 (id=5878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 8.694859562s ago: executing program 7 (id=6318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.023543428s ago: executing program 7 (id=6330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000500)=@raw=[@generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) recvmmsg(r0, 0x0, 0x0, 0x40010023, 0x0) write(r0, &(0x7f0000000700)='h', 0x100000) 6.930254791s ago: executing program 1 (id=6332): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xc0001) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed, 0x9c, 0x1}, 0xe) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/200, 0xc8) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) 6.661622221s ago: executing program 1 (id=6334): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a2160000302b00fe8000000000000000000000000000bbfe800000000000"], 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r5, &(0x7f0000000340)="4d5d77022942cff43904b59b099b8bbd47242bec5ef3624f598d497d047792796235340b50fc120a46d497231074249a5491d36817b26cbe371818f2c6b74fb51420f8bc6b606d0d493c8ca441ddce8ad82f27845fbf3f7f85a15dbba088f05dd2665aedefcbc3bb7e35e55f28134b22b39ec3d1643f79d40c943a8d114a2802bbe36f6a2857a4c2abea88012459d5b4c48c15a668107b7e8359faba8139b2409f75546a126ad469e28c1f82f6f4dd7f5ca5e9980ef752420ef529f8d971cf8644af00f6a27a4ecd27e29bb1950e7162c0047bdea3542108632113d71b34e4f22880b6275935c719001f7e1f19eba80b", &(0x7f0000000580)=""/224, 0x4}, 0x20) 5.811344862s ago: executing program 7 (id=6338): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='C', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x37, 0x30, 0x31, 0x30, 0x33, 0x3, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x32, 0x65, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344550400000000000000eeff00112233445566778899aabbda03000000000000445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x30, 0x39, 0x61, 0x30, 0x66, 0x30, 0x61, 0x34, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x63, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x37, 0x30, 0x62, 0x35, 0x39, 0x51, 0x62, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "001122334455668899c8bbccddeeff000000cf0000000000000000000000000000000000000000000000002100000000000000000000000077abfff700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x63, 0x34, 0x61, 0x30, 0x66, 0x35, 0x65, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00ff00112233445566778899aabbccddeeff00", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x30, 0x32, 0x65, 0x30, 0x36, 0x30, 0x38, 0x34, 0x34, 0x30, 0x39, 0x64]}, &(0x7f0000000100)={0x0, "00112233005566778899aabbccddeeff00112233445566778899aabbccddeefd009eb14f59e29a3b0099aabbccddeeff00312233445566778899aabbccddeeff", 0x15}, 0x33, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x37, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x34, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x61, 0x30, 0x39, 0x32, 0x30, 0x30, 0x30, 0x33, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x8040}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x34, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000740), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x32, 0x64, 0x30, 0x30, 0x8d42ef30e2661b58, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x100023}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffc, 0x1) 5.631747624s ago: executing program 0 (id=6340): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_open_dev$dri(0x0, 0xaf82, 0x40400) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000280)) write(r0, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x8084) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@gid}, {}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'macromanian'}}]}, 0x1, 0x5d8, &(0x7f0000000cc0)="$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") 5.390357318s ago: executing program 4 (id=6342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value=r0}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2], 0x20) 5.290644912s ago: executing program 7 (id=6343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.252384543s ago: executing program 5 (id=6344): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00"/27, @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 4.977135968s ago: executing program 4 (id=6345): r0 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x0, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "001122334455667700000000ccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 4.858193071s ago: executing program 5 (id=6346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x1, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.57653334s ago: executing program 4 (id=6347): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xc0001) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed, 0x9c, 0x1}, 0xe) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/200, 0xc8) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) 3.553582893s ago: executing program 4 (id=6348): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b985", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000940)=""/4111, 0x100f}, {&(0x7f0000001a40)=""/4079, 0xfef}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000001980)=""/61, 0x3d}, {&(0x7f0000000700)=""/210, 0xd2}], 0x5}, 0x40000000) 3.519548735s ago: executing program 0 (id=6350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000500)=@raw=[@generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) recvmmsg(r0, 0x0, 0x0, 0x40010023, 0x0) write(r0, &(0x7f0000000700)='h', 0x100000) 3.195656062s ago: executing program 7 (id=6351): exit(0xef1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) exit(0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0x2020) 2.962748544s ago: executing program 5 (id=6353): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e02cac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 2.726156068s ago: executing program 1 (id=6354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xfff1, 0xffff}, {0x9}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.709175773s ago: executing program 2 (id=6355): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='C', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x37, 0x30, 0x31, 0x30, 0x33, 0x3, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x32, 0x65, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344550400000000000000eeff00112233445566778899aabbda03000000000000445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x30, 0x39, 0x61, 0x30, 0x66, 0x30, 0x61, 0x34, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x63, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x37, 0x30, 0x62, 0x35, 0x39, 0x51, 0x62, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "001122334455668899c8bbccddeeff000000cf0000000000000000000000000000000000000000000000002100000000000000000000000077abfff700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x63, 0x34, 0x61, 0x30, 0x66, 0x35, 0x65, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00ff00112233445566778899aabbccddeeff00", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x30, 0x32, 0x65, 0x30, 0x36, 0x30, 0x38, 0x34, 0x34, 0x30, 0x39, 0x64]}, &(0x7f0000000100)={0x0, "00112233005566778899aabbccddeeff00112233445566778899aabbccddeefd009eb14f59e29a3b0099aabbccddeeff00312233445566778899aabbccddeeff", 0x15}, 0x33, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x37, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x34, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x61, 0x30, 0x39, 0x32, 0x30, 0x30, 0x30, 0x33, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x8040}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x34, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000740), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x32, 0x64, 0x30, 0x30, 0x8d42ef30e2661b58, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x100023}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffc, 0x1) 2.594997436s ago: executing program 5 (id=6356): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) 2.585704429s ago: executing program 0 (id=6357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000dc0)) 2.297158637s ago: executing program 2 (id=6358): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00"/27, @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.241973318s ago: executing program 4 (id=6359): r0 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x0, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "001122334455667700000000ccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 2.179088689s ago: executing program 5 (id=6360): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xc0001) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed, 0x9c, 0x1}, 0xe) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/200, 0xc8) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) 1.862971592s ago: executing program 2 (id=6361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 1.755990427s ago: executing program 4 (id=6362): socket$kcm(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x5e, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b493016411"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.754556305s ago: executing program 1 (id=6363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.730508163s ago: executing program 0 (id=6364): r0 = io_uring_setup(0x66a5, &(0x7f0000000180)={0x0, 0xbfb7, 0x800, 0x1, 0x87}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 1.620413568s ago: executing program 7 (id=6365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x1, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.560365787s ago: executing program 5 (id=6366): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a2160000302b00fe8000000000000000000000000000bbfe800000000000"], 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r5, &(0x7f0000000340)="4d5d77022942cff43904b59b099b8bbd47242bec5ef3624f598d497d047792796235340b50fc120a46d497231074249a5491d36817b26cbe371818f2c6b74fb51420f8bc6b606d0d493c8ca441ddce8ad82f27845fbf3f7f85a15dbba088f05dd2665aedefcbc3bb7e35e55f28134b22b39ec3d1643f79d40c943a8d114a2802bbe36f6a2857a4c2abea88012459d5b4c48c15a668107b7e8359faba8139b2409f75546a126ad469e28c1f82f6f4dd7f5ca5e9980ef752420ef529f8d971cf8644af00f6a27a4ecd27e29bb1950e7162c0047bdea3542108632113d71b34e4f22880b6275935c719001f7e1f19eba80b", &(0x7f0000000580)=""/224, 0x4}, 0x20) 1.364141922s ago: executing program 2 (id=6367): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0) 971.025184ms ago: executing program 2 (id=6368): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e02cac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 850.265379ms ago: executing program 0 (id=6369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000500)=@raw=[@generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) recvmmsg(r0, 0x0, 0x0, 0x40010023, 0x0) write(r0, &(0x7f0000000700)='h', 0x100000) 646.276991ms ago: executing program 1 (id=6370): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 613.739011ms ago: executing program 2 (id=6371): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b985", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000940)=""/4111, 0x100f}, {&(0x7f0000001a40)=""/4079, 0xfef}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000001980)=""/61, 0x3d}, {&(0x7f0000000700)=""/210, 0xd2}], 0x5}, 0x40000000) 255.103332ms ago: executing program 0 (id=6372): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) 0s ago: executing program 1 (id=6373): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff9", 0x22, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): _vmalloc_node_range_noprof+0x10/0x10 [ 1581.449071][T25134] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1581.449090][T25134] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 1581.449120][T25134] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 1581.449156][T25134] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 1581.449188][T25134] vmalloc_noprof+0xb2/0xe0 [ 1581.449218][T25134] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 1581.449252][T25134] dvb_dmxdev_filter_start+0x107/0x10d0 [ 1581.449283][T25134] ? dvb_dmxdev_pes_filter_set+0x4cb/0x600 [ 1581.449317][T25134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.449348][T25134] dvb_demux_do_ioctl+0x48b/0x540 [ 1581.449382][T25134] dvb_usercopy+0x199/0x2e0 [ 1581.449410][T25134] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1581.449442][T25134] ? __pfx_dvb_usercopy+0x10/0x10 [ 1581.449480][T25134] ? __fget_files+0x3a2/0x420 [ 1581.449509][T25134] ? __fget_files+0x2a/0x420 [ 1581.449540][T25134] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1581.449571][T25134] dvb_demux_ioctl+0x29/0x40 [ 1581.449606][T25134] __se_sys_ioctl+0xfc/0x170 [ 1581.449631][T25134] do_syscall_64+0x166/0x520 [ 1581.449654][T25134] ? trace_irq_disable+0x3b/0x140 [ 1581.449675][T25134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.449701][T25134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.449722][T25134] RIP: 0033:0x7f46ed79e159 [ 1581.449741][T25134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.449757][T25134] RSP: 002b:00007f46ee65e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1581.449779][T25134] RAX: ffffffffffffffda RBX: 00007f46eda25fa0 RCX: 00007f46ed79e159 [ 1581.449794][T25134] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000006 [ 1581.449809][T25134] RBP: 00007f46ed83503b R08: 0000000000000000 R09: 0000000000000000 [ 1581.449822][T25134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1581.449835][T25134] R13: 00007f46eda26038 R14: 00007f46eda25fa0 R15: 00007ffd424db098 [ 1581.449866][T25134] [ 1581.948558][T25134] syz.1.5567: vmalloc error: size 8192, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1581.948645][T25134] CPU: 0 UID: 0 PID: 25134 Comm: syz.1.5567 Tainted: G L syzkaller #0 PREEMPT(full) [ 1581.948671][T25134] Tainted: [L]=SOFTLOCKUP [ 1581.948679][T25134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1581.948692][T25134] Call Trace: [ 1581.948700][T25134] [ 1581.948712][T25134] dump_stack_lvl+0xe8/0x150 [ 1581.948746][T25134] warn_alloc+0x24d/0x270 [ 1581.948768][T25134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.948793][T25134] ? lockdep_hardirqs_on+0x7b/0x110 [ 1581.948818][T25134] ? __pfx_warn_alloc+0x10/0x10 [ 1581.948837][T25134] ? kfree+0x1c5/0x650 [ 1581.948871][T25134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.948895][T25134] ? __get_vm_area_node+0x219/0x2f0 [ 1581.948931][T25134] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1581.948983][T25134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.949006][T25134] ? __kasan_kmalloc+0x93/0xb0 [ 1581.949033][T25134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1581.949063][T25134] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1581.949082][T25134] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 1581.949112][T25134] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 1581.949148][T25134] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 1581.949180][T25134] vmalloc_noprof+0xb2/0xe0 [ 1581.949210][T25134] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 1581.949244][T25134] dvb_dmxdev_filter_start+0x107/0x10d0 [ 1581.949274][T25134] ? dvb_dmxdev_pes_filter_set+0x4cb/0x600 [ 1581.949309][T25134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.949339][T25134] dvb_demux_do_ioctl+0x48b/0x540 [ 1581.949373][T25134] dvb_usercopy+0x199/0x2e0 [ 1581.949401][T25134] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1581.949433][T25134] ? __pfx_dvb_usercopy+0x10/0x10 [ 1581.949471][T25134] ? __fget_files+0x3a2/0x420 [ 1581.949500][T25134] ? __fget_files+0x2a/0x420 [ 1581.949531][T25134] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1581.949561][T25134] dvb_demux_ioctl+0x29/0x40 [ 1581.949592][T25134] __se_sys_ioctl+0xfc/0x170 [ 1581.949621][T25134] do_syscall_64+0x166/0x520 [ 1581.949643][T25134] ? trace_irq_disable+0x3b/0x140 [ 1581.949664][T25134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.949691][T25134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.949712][T25134] RIP: 0033:0x7f46ed79e159 [ 1581.949731][T25134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.949749][T25134] RSP: 002b:00007f46ee65e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1581.949770][T25134] RAX: ffffffffffffffda RBX: 00007f46eda25fa0 RCX: 00007f46ed79e159 [ 1581.949785][T25134] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000006 [ 1581.949799][T25134] RBP: 00007f46ed83503b R08: 0000000000000000 R09: 0000000000000000 [ 1581.949813][T25134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1581.949826][T25134] R13: 00007f46eda26038 R14: 00007f46eda25fa0 R15: 00007ffd424db098 [ 1581.949857][T25134] [ 1581.950093][T25092] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 1581.950113][T25092] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1581.950136][T25092] F2FS-fs (loop4): Start checkpoint disabled! [ 1582.055663][T25134] Mem-Info: [ 1582.055677][T25134] active_anon:5579 inactive_anon:26070 isolated_anon:0 [ 1582.055677][T25134] active_file:23046 inactive_file:40986 isolated_file:0 [ 1582.055677][T25134] unevictable:0 dirty:328 writeback:0 [ 1582.055677][T25134] slab_reclaimable:12330 slab_unreclaimable:117866 [ 1582.055677][T25134] mapped:44943 shmem:23858 pagetables:1969 [ 1582.055677][T25134] sec_pagetables:0 bounce:0 [ 1582.055677][T25134] kernel_misc_reclaimable:0 [ 1582.055677][T25134] free:1244911 free_pcp:2352 free_cma:0 [ 1582.055727][T25134] Node 0 active_anon:22316kB inactive_anon:104280kB active_file:92180kB inactive_file:163744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179772kB dirty:1312kB writeback:0kB shmem:95432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15456kB pagetables:7764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1582.055779][T25134] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1582.055827][T25134] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.055883][T25134] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1582.055923][T25134] Node 0 DMA32 free:1021404kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22316kB inactive_anon:104280kB active_file:92180kB inactive_file:163744kB unevictable:0kB writepending:1312kB zspages:0kB present:3129332kB managed:2546632kB mlocked:0kB bounce:0kB free_pcp:9408kB local_pcp:9408kB free_cma:0kB [ 1582.055982][T25134] lowmem_reserve[]: 0 0 0 0 0 [ 1582.056019][T25134] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.056071][T25134] lowmem_reserve[]: 0 0 0 0 0 [ 1582.056108][T25134] Node 1 Normal free:3942880kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.056163][T25134] lowmem_reserve[]: 0 0 0 0 0 [ 1582.056200][T25134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1582.056344][T25134] Node 0 DMA32: 475*4kB (U) 796*8kB (U) 268*16kB (UME) 1890*32kB (UM) 1312*64kB (UM) 727*128kB (UME) 279*256kB (UME) 87*512kB (UM) 28*1024kB (UME) 20*2048kB (UME) 143*4096kB (UM) = 1021388kB [ 1582.056512][T25134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1582.056620][T25134] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 11*16kB (UM) 6*32kB (UM) 3*64kB (UM) 1*128kB (M) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942880kB [ 1582.056799][T25134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.056815][T25134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1582.056831][T25134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.056847][T25134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1582.056863][T25134] 87856 total pagecache pages [ 1582.056871][T25134] 1 pages in swap cache [ 1582.056879][T25134] Free swap = 124992kB [ 1582.056887][T25134] Total swap = 124996kB [ 1582.056896][T25134] 2097051 pages RAM [ 1582.056904][T25134] 0 pages HighMem/MovableOnly [ 1582.056912][T25134] 428777 pages reserved [ 1582.056920][T25134] 0 pages cma reserved [ 1583.022480][T25092] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 1583.022763][T25092] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1583.464535][T11088] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1583.614858][T11088] usb 1-1: Using ep0 maxpacket: 16 [ 1583.629021][T11088] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1583.629062][T11088] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1583.632024][T11088] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 1583.632045][T11088] usb 1-1: config 4 has no interface number 0 [ 1583.632070][T11088] usb 1-1: config 4 interface 28 has no altsetting 0 [ 1583.681522][T11088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.681547][T11088] usb 1-1: Product: syz [ 1583.681561][T11088] usb 1-1: Manufacturer: syz [ 1583.681575][T11088] usb 1-1: SerialNumber: syz [ 1584.244721][T11088] usb 1-1: USB disconnect, device number 68 [ 1584.797342][T25165] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1584.797387][T25165] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1586.008917][T25192] fuse: Bad value for 'user_id' [ 1586.008936][T25192] fuse: Bad value for 'user_id' [ 1586.378460][T25199] binder: 25198:25199 ioctl c0306201 200000000080 returned -14 [ 1586.401327][T25199] binder: 25198:25199 ioctl c0306201 2000000003c0 returned -14 [ 1586.907317][T25208] loop2: detected capacity change from 0 to 1024 [ 1586.950437][T25208] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 1586.974482][T25208] JBD2: no valid journal superblock found [ 1586.997289][T25208] EXT4-fs (loop2): Could not load journal inode [ 1587.294333][ T5749] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1587.339474][T25215] netlink: 44551 bytes leftover after parsing attributes in process `syz.0.5597'. [ 1587.453902][ T5749] usb 5-1: Using ep0 maxpacket: 16 [ 1587.471174][ T5749] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1587.471214][ T5749] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1587.499878][ T5749] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 1587.499903][ T5749] usb 5-1: config 4 has no interface number 0 [ 1587.499933][ T5749] usb 5-1: config 4 interface 28 has no altsetting 0 [ 1587.552189][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.552216][ T5749] usb 5-1: Product: syz [ 1587.552231][ T5749] usb 5-1: Manufacturer: syz [ 1587.552244][ T5749] usb 5-1: SerialNumber: syz [ 1587.974208][ T5749] usb 5-1: USB disconnect, device number 26 [ 1588.647300][T25232] fuse: Bad value for 'user_id' [ 1588.647320][T25232] fuse: Bad value for 'user_id' [ 1588.721385][T25190] loop8: detected capacity change from 0 to 40427 [ 1588.755951][T25190] F2FS-fs (loop8): invalid crc value [ 1588.938996][T25190] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-4) [ 1589.027755][T25238] binder: 25236:25238 ioctl c0306201 200000000080 returned -14 [ 1590.184555][T25256] netlink: 44551 bytes leftover after parsing attributes in process `syz.4.5611'. [ 1590.630070][T25226] loop1: detected capacity change from 0 to 32768 [ 1590.726947][T25226] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1591.028438][T25226] XFS (loop1): Ending clean mount [ 1591.098247][T25280] fuse: Bad value for 'fd' [ 1591.233523][ T5749] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1591.395799][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 1591.419796][ T5749] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1591.419839][ T5749] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1591.460358][ T5749] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 1591.460385][ T5749] usb 1-1: config 4 has no interface number 0 [ 1591.460410][ T5749] usb 1-1: config 4 interface 28 has no altsetting 0 [ 1591.498068][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.498093][ T5749] usb 1-1: Product: syz [ 1591.498108][ T5749] usb 1-1: Manufacturer: syz [ 1591.498122][ T5749] usb 1-1: SerialNumber: syz [ 1591.862556][T25293] overlayfs: failed to resolve './bus': -2 [ 1591.927552][T25294] binder: 25292:25294 ioctl c0306201 200000000080 returned -14 [ 1592.387549][ T5749] usb 1-1: USB disconnect, device number 69 [ 1592.667950][T25305] CIFS: Attempting to mount //127.0.0.1/share [ 1592.989773][T25314] netlink: 44551 bytes leftover after parsing attributes in process `syz.7.5627'. [ 1593.141154][T23371] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1593.480112][T25305] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 1593.480922][T25305] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1594.016563][T25330] fuse: Bad value for 'fd' [ 1594.125529][T25289] loop4: detected capacity change from 0 to 40427 [ 1594.176677][T25289] F2FS-fs (loop4): invalid crc value [ 1594.466898][T25338] CIFS: Attempting to mount //127.0.0.1/share [ 1594.505656][T25339] binder: 25337:25339 ioctl c0306201 200000000080 returned -14 [ 1594.656285][T25341] CIFS: VFS: Invalid response size 0 for command 0 [ 1594.681406][T25338] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1594.949851][T25289] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1595.237210][T25289] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 1595.237236][T25289] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1595.237260][T25289] F2FS-fs (loop4): Start checkpoint disabled! [ 1595.314398][T25351] overlayfs: failed to resolve './bus': -2 [ 1595.614850][T25289] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 1595.990533][T25367] netlink: 44551 bytes leftover after parsing attributes in process `syz.1.5643'. [ 1596.244410][ T5749] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1596.393057][ T5749] usb 9-1: Using ep0 maxpacket: 16 [ 1596.398762][ T5749] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1596.398804][ T5749] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1596.401245][ T5749] usb 9-1: config 4 has an invalid interface number: 28 but max is 0 [ 1596.401266][ T5749] usb 9-1: config 4 has no interface number 0 [ 1596.401290][ T5749] usb 9-1: config 4 interface 28 has no altsetting 0 [ 1596.425570][ T5749] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.425593][ T5749] usb 9-1: Product: syz [ 1596.425607][ T5749] usb 9-1: Manufacturer: syz [ 1596.425628][ T5749] usb 9-1: SerialNumber: syz [ 1596.867322][ T5749] usb 9-1: USB disconnect, device number 44 [ 1597.121678][T25375] fuse: Bad value for 'fd' [ 1597.219810][T25377] binder: 25376:25377 ioctl c0306201 200000000080 returned -14 [ 1597.264924][T25377] binder: 25376:25377 ioctl c0306201 2000000003c0 returned -14 [ 1597.422675][T25357] loop7: detected capacity change from 0 to 32768 [ 1597.442541][T25357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5640 (25357) [ 1597.486316][T25357] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1597.486346][T25357] BTRFS info (device loop7): using sha256 checksum algorithm [ 1597.828024][T25357] BTRFS info (device loop7): rebuilding free space tree [ 1598.008139][T25357] BTRFS info (device loop7): checking UUID tree [ 1598.019714][T25357] BTRFS info (device loop7): enabling ssd optimizations [ 1598.019735][T25357] BTRFS info (device loop7): using spread ssd allocation scheme [ 1598.019751][T25357] BTRFS info (device loop7): turning on async discard [ 1598.019766][T25357] BTRFS info (device loop7): enabling free space tree [ 1598.019781][T25357] BTRFS info (device loop7): force clearing of disk cache [ 1598.019798][T25357] BTRFS info (device loop7): use zlib compression, level 3 [ 1598.532096][T24288] Bluetooth: hci0: command 0x0406 tx timeout [ 1598.699039][T25407] FAULT_INJECTION: forcing a failure. [ 1598.699039][T25407] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.699074][T25407] CPU: 0 UID: 0 PID: 25407 Comm: syz.1.5654 Tainted: G L syzkaller #0 PREEMPT(full) [ 1598.699100][T25407] Tainted: [L]=SOFTLOCKUP [ 1598.699108][T25407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1598.699121][T25407] Call Trace: [ 1598.699129][T25407] [ 1598.699138][T25407] dump_stack_lvl+0xe8/0x150 [ 1598.699174][T25407] should_fail_ex+0x410/0x560 [ 1598.699201][T25407] should_failslab+0xa8/0x100 [ 1598.699227][T25407] ? mempool_init_node+0x1f4/0x510 [ 1598.699261][T25407] kmem_cache_alloc_noprof+0xa1/0x600 [ 1598.699292][T25407] ? mempool_init_node+0x1f4/0x510 [ 1598.699322][T25407] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1598.699353][T25407] ? mempool_init_node+0x1f4/0x510 [ 1598.699386][T25407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.699413][T25407] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1598.699433][T25407] mempool_init_node+0x1f4/0x510 [ 1598.699472][T25407] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1598.699494][T25407] mempool_create_node_noprof+0xb8/0x150 [ 1598.699527][T25407] ? __pfx_mempool_free_slab+0x10/0x10 [ 1598.699551][T25407] ceph_osdc_init+0x4fa/0x900 [ 1598.699585][T25407] ceph_create_client+0x246/0x310 [ 1598.699610][T25407] ceph_get_tree+0x1ca/0x1a40 [ 1598.699650][T25407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.699673][T25407] ? apparmor_capable+0x126/0x170 [ 1598.699705][T25407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.699732][T25407] vfs_get_tree+0x92/0x2a0 [ 1598.699755][T25407] vfs_cmd_create+0xa2/0x200 [ 1598.699783][T25407] __se_sys_fsconfig+0x6b9/0x810 [ 1598.699812][T25407] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1598.699839][T25407] ? rcu_is_watching+0x16/0xb0 [ 1598.699864][T25407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.699897][T25407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.699921][T25407] ? __x64_sys_fsconfig+0x20/0xc0 [ 1598.699947][T25407] do_syscall_64+0x166/0x520 [ 1598.699969][T25407] ? trace_irq_disable+0x3b/0x140 [ 1598.699990][T25407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.700017][T25407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.700037][T25407] RIP: 0033:0x7f46ed79e159 [ 1598.700055][T25407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.700073][T25407] RSP: 002b:00007f46ee65e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1598.700094][T25407] RAX: ffffffffffffffda RBX: 00007f46eda25fa0 RCX: 00007f46ed79e159 [ 1598.700115][T25407] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1598.700127][T25407] RBP: 00007f46ed83503b R08: 0000000000000000 R09: 0000000000000000 [ 1598.700140][T25407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.700153][T25407] R13: 00007f46eda26038 R14: 00007f46eda25fa0 R15: 00007ffd424db098 [ 1598.700185][T25407] [ 1599.666605][T23901] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1600.021894][T25423] fuse: Bad value for 'fd' [ 1600.792365][T25400] loop4: detected capacity change from 0 to 40427 [ 1600.808129][T25400] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1600.808149][T25400] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1600.828576][T25400] F2FS-fs (loop4): invalid crc value [ 1600.833158][ T5748] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1600.960311][T25437] FAULT_INJECTION: forcing a failure. [ 1600.960311][T25437] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.960344][T25437] CPU: 0 UID: 0 PID: 25437 Comm: syz.7.5660 Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.960370][T25437] Tainted: [L]=SOFTLOCKUP [ 1600.960378][T25437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1600.960391][T25437] Call Trace: [ 1600.960399][T25437] [ 1600.960408][T25437] dump_stack_lvl+0xe8/0x150 [ 1600.960443][T25437] should_fail_ex+0x410/0x560 [ 1600.960470][T25437] should_failslab+0xa8/0x100 [ 1600.960498][T25437] __kmalloc_noprof+0xfe/0x720 [ 1600.960517][T25437] ? rcu_is_watching+0x16/0xb0 [ 1600.960542][T25437] ? tomoyo_realpath_from_path+0xef/0x640 [ 1600.960569][T25437] ? tomoyo_realpath_from_path+0xef/0x640 [ 1600.960603][T25437] tomoyo_realpath_from_path+0xef/0x640 [ 1600.960648][T25437] tomoyo_check_open_permission+0x229/0x470 [ 1600.960672][T25437] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1600.960694][T25437] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1600.960718][T25437] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.960742][T25437] ? __asan_memset+0x22/0x50 [ 1600.960797][T25437] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.960824][T25437] ? mnt_get_write_access+0x66/0x280 [ 1600.960845][T25437] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.960868][T25437] ? tomoyo_file_open+0x163/0x220 [ 1600.960902][T25437] security_file_open+0xa9/0x240 [ 1600.960924][T25437] do_dentry_open+0x4a0/0x1380 [ 1600.960959][T25437] vfs_open+0x3b/0x340 [ 1600.960981][T25437] ? path_openat+0x1428/0x1d60 [ 1600.961004][T25437] path_openat+0x1443/0x1d60 [ 1600.961042][T25437] do_file_open+0x23e/0x4a0 [ 1600.961068][T25437] ? __pfx_do_file_open+0x10/0x10 [ 1600.961097][T25437] ? __pfx_kfree_link+0x10/0x10 [ 1600.961138][T25437] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.961161][T25437] ? _raw_spin_unlock+0x28/0x50 [ 1600.961192][T25437] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.961215][T25437] ? alloc_fd+0x651/0x6c0 [ 1600.961252][T25437] do_sys_openat2+0x115/0x200 [ 1600.961277][T25437] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.961301][T25437] ? __se_sys_futex+0x3a8/0x450 [ 1600.961328][T25437] ? __pfx_do_sys_openat2+0x10/0x10 [ 1600.961360][T25437] ? rcu_is_watching+0x16/0xb0 [ 1600.961384][T25437] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.961412][T25437] __x64_sys_openat+0x138/0x170 [ 1600.961443][T25437] do_syscall_64+0x166/0x520 [ 1600.961465][T25437] ? trace_irq_disable+0x3b/0x140 [ 1600.961486][T25437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.961512][T25437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.961533][T25437] RIP: 0033:0x7f565e95e98e [ 1600.961552][T25437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1600.961569][T25437] RSP: 002b:00007f565f884ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1600.961591][T25437] RAX: ffffffffffffffda RBX: 00007f565f8856c0 RCX: 00007f565e95e98e [ 1600.961606][T25437] RDX: 0000000000000002 RSI: 00007f565f884f90 RDI: ffffffffffffff9c [ 1600.961621][T25437] RBP: 00007f565ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 1600.961639][T25437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.961652][T25437] R13: 00007f565ec26038 R14: 00007f565ec25fa0 R15: 00007fff3c184288 [ 1600.961683][T25437] [ 1600.996978][ T5748] usb 2-1: Using ep0 maxpacket: 16 [ 1601.015330][ T5748] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1601.015368][ T5748] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1601.025742][ T5748] usb 2-1: config 4 has an invalid interface number: 28 but max is 0 [ 1601.025763][ T5748] usb 2-1: config 4 has no interface number 0 [ 1601.025788][ T5748] usb 2-1: config 4 interface 28 has no altsetting 0 [ 1601.074550][T25437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1601.143769][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.143794][ T5748] usb 2-1: Product: syz [ 1601.143809][ T5748] usb 2-1: Manufacturer: syz [ 1601.143823][ T5748] usb 2-1: SerialNumber: syz [ 1601.814011][ T5748] usb 2-1: USB disconnect, device number 65 [ 1601.926230][T25400] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1602.672358][ T5748] libceph: connect (1)0.0.0.0:6789 error -22 [ 1602.672705][ T5748] libceph: mon0 (1)0.0.0.0:6789 connect error [ 1602.765385][T25452] device-mapper: table: 248:0: raid: Cannot understand number of raid devices parameters (-EINVAL) [ 1602.765410][T25452] device-mapper: ioctl: error adding target to table [ 1602.914847][T25429] loop8: detected capacity change from 0 to 32768 [ 1602.935095][ T5840] libceph: connect (1)0.0.0.0:6789 error -22 [ 1602.935218][ T5840] libceph: mon0 (1)0.0.0.0:6789 connect error [ 1602.981924][T25448] ceph: No mds server is up or the cluster is laggy [ 1603.045529][T25429] JBD2: Ignoring recovery information on journal [ 1603.250892][T25429] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1603.316534][T25464] fuse: Bad value for 'fd' [ 1603.877105][T25471] loop1: detected capacity change from 0 to 512 [ 1603.895778][ T31] audit: type=1800 audit(1789217421.206:812): pid=25429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5663" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 1603.992485][T25471] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1604.011952][T25471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 1604.012053][T25471] System zones: 1-12 [ 1604.048161][T25471] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.5680: corrupted in-inode xattr: e_value size too large [ 1604.048193][T25471] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1604.052942][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1604.052961][ C0] EXT4-fs (loop1): initial error at time 1789217421: ext4_iget_extra_inode:5210: inode 15 [ 1604.052990][ C0] EXT4-fs (loop1): last error at time 1789217421: ext4_iget_extra_inode:5210: inode 15 [ 1604.131031][T25471] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.5680: couldn't read orphan inode 15 (err -117) [ 1604.131062][T25471] loop1: lost filesystem error report for type 5 error -117 [ 1604.182475][T25471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1605.027183][T22280] ocfs2: Unmounting device (7,8) on (node local) [ 1605.331120][T25492] loop7: detected capacity change from 0 to 1024 [ 1605.373111][ T5840] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1605.400465][T25492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1605.400548][T25492] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1605.524542][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 1605.539819][ T5840] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1605.539859][ T5840] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1605.550901][ T5840] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 1605.550922][ T5840] usb 1-1: config 4 has no interface number 0 [ 1605.550947][ T5840] usb 1-1: config 4 interface 28 has no altsetting 0 [ 1605.598773][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.598798][ T5840] usb 1-1: Product: syz [ 1605.598812][ T5840] usb 1-1: Manufacturer: syz [ 1605.598826][ T5840] usb 1-1: SerialNumber: syz [ 1605.727437][T25492] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.5687: lblock 3 mapped to illegal pblock 3 (length 3) [ 1605.731376][T25492] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1605.731423][T25492] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1605.731423][T25492] [ 1605.767692][ T13] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 1605.809726][ T13] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1605.809777][ T13] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1605.809777][ T13] [ 1606.026347][ T5840] usb 1-1: USB disconnect, device number 70 [ 1606.406189][T25506] FAULT_INJECTION: forcing a failure. [ 1606.406189][T25506] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.406223][T25506] CPU: 0 UID: 0 PID: 25506 Comm: syz.8.5688 Tainted: G L syzkaller #0 PREEMPT(full) [ 1606.406251][T25506] Tainted: [L]=SOFTLOCKUP [ 1606.406259][T25506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1606.406272][T25506] Call Trace: [ 1606.406280][T25506] [ 1606.406289][T25506] dump_stack_lvl+0xe8/0x150 [ 1606.406324][T25506] should_fail_ex+0x410/0x560 [ 1606.406352][T25506] should_failslab+0xa8/0x100 [ 1606.406380][T25506] __kmalloc_noprof+0xfe/0x720 [ 1606.406400][T25506] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1606.406420][T25506] ? mpi_alloc+0x77/0x140 [ 1606.406443][T25506] ? mpi_alloc+0x77/0x140 [ 1606.406472][T25506] mpi_alloc+0x77/0x140 [ 1606.406498][T25506] mpi_read_raw_data+0x139/0x970 [ 1606.406528][T25506] dh_set_secret+0x200/0x320 [ 1606.406554][T25506] ? crypto_create_tfm_node+0x81/0x3c0 [ 1606.406581][T25506] ? __pfx_dh_set_secret+0x10/0x10 [ 1606.406606][T25506] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1606.406641][T25506] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1606.406665][T25506] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 1606.406694][T25506] __keyctl_dh_compute+0x5ae/0xd10 [ 1606.406727][T25506] ? futex_unqueue+0x22/0x240 [ 1606.406753][T25506] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1606.406777][T25506] ? futex_unqueue+0x211/0x240 [ 1606.406802][T25506] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1606.406830][T25506] ? __futex_wait+0x358/0x400 [ 1606.406867][T25506] ? __pfx___futex_wait+0x10/0x10 [ 1606.406902][T25506] ? __pfx_futex_wake_mark+0x10/0x10 [ 1606.406948][T25506] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1606.406977][T25506] keyctl_dh_compute+0x124/0x180 [ 1606.407008][T25506] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1606.407051][T25506] __se_sys_keyctl+0x44c/0x9d0 [ 1606.407076][T25506] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1606.407100][T25506] ? __pfx_do_futex+0x10/0x10 [ 1606.407134][T25506] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1606.407158][T25506] ? __se_sys_futex+0x3a8/0x450 [ 1606.407192][T25506] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1606.407216][T25506] ? rcu_is_watching+0x16/0xb0 [ 1606.407242][T25506] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1606.407271][T25506] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1606.407298][T25506] ? __x64_sys_keyctl+0x20/0xc0 [ 1606.407322][T25506] do_syscall_64+0x166/0x520 [ 1606.407344][T25506] ? trace_irq_disable+0x3b/0x140 [ 1606.407366][T25506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.407392][T25506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.407413][T25506] RIP: 0033:0x7f06e8d9e159 [ 1606.407432][T25506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.407450][T25506] RSP: 002b:00007f06e9bb0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1606.407472][T25506] RAX: ffffffffffffffda RBX: 00007f06e9025fa0 RCX: 00007f06e8d9e159 [ 1606.407487][T25506] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 1606.407501][T25506] RBP: 00007f06e8e3503b R08: 0000000000000000 R09: 0000000000000000 [ 1606.407515][T25506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1606.407527][T25506] R13: 00007f06e9026038 R14: 00007f06e9025fa0 R15: 00007ffe55ea9738 [ 1606.407558][T25506] [ 1606.693132][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.693187][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.900316][T25508] fuse: Bad value for 'fd' [ 1606.999073][ T6311] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 1606.999784][ T6311] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1606.999809][ T6311] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1606.999809][ T6311] [ 1607.058545][ T6311] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm kworker/u8:15: bg 0: block 112: padding at end of block bitmap is not set [ 1607.130070][ T6311] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 20 with error 28 [ 1607.130101][ T6311] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1607.130101][ T6311] [ 1607.130116][ T6311] EXT4-fs (loop7): Total free blocks count 0 [ 1607.361437][T25512] binder: 25510:25512 ioctl c0306201 200000000080 returned -14 [ 1607.380966][T25512] binder: 25510:25512 ioctl c0306201 2000000003c0 returned -14 [ 1607.409649][T25512] binder_alloc: 25510: binder_alloc_buf, no vma [ 1609.210098][T23371] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.279036][T21443] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 3) [ 1609.304691][ T6311] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 4: comm kworker/u8:15: lblock 4 mapped to illegal pblock 4 (length 2) [ 1609.354821][T23901] EXT4-fs warning (device loop7): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 1609.408791][T25524] loop8: detected capacity change from 0 to 32768 [ 1609.422783][T25524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5699 (25524) [ 1609.461311][T25524] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1609.461341][T25524] BTRFS info (device loop8): using sha256 checksum algorithm [ 1609.693039][ T5840] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1609.719014][T25552] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5707'. [ 1609.757273][T25524] BTRFS info (device loop8): enabling ssd optimizations [ 1609.757298][T25524] BTRFS info (device loop8): disabling tree log [ 1609.757313][T25524] BTRFS info (device loop8): turning on async discard [ 1609.757328][T25524] BTRFS info (device loop8): enabling free space tree [ 1609.844323][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 1609.848769][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1609.848810][ T5840] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1609.851362][ T5840] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 1609.851384][ T5840] usb 5-1: config 4 has no interface number 0 [ 1609.851409][ T5840] usb 5-1: config 4 interface 28 has no altsetting 0 [ 1609.922023][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.922049][ T5840] usb 5-1: Product: syz [ 1609.922063][ T5840] usb 5-1: Manufacturer: syz [ 1609.922077][ T5840] usb 5-1: SerialNumber: syz [ 1610.276837][T25556] fuse: Invalid rootmode [ 1610.381783][T25558] binder: 25557:25558 ioctl c0306201 200000000080 returned -14 [ 1610.396337][T25558] binder: BINDER_SET_CONTEXT_MGR already set [ 1610.396350][T25558] binder: 25557:25558 ioctl 4018620d 200000000040 returned -16 [ 1610.422728][T25558] binder: 25557:25558 ioctl c0306201 2000000003c0 returned -14 [ 1610.459588][ T5840] usb 5-1: USB disconnect, device number 27 [ 1610.522437][T25526] loop2: detected capacity change from 0 to 40427 [ 1610.553120][T25526] F2FS-fs (loop2): build fault injection rate: 174 [ 1610.553142][T25526] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 1610.558571][T25526] F2FS-fs (loop2): invalid crc value [ 1611.270964][T25526] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1611.463797][T25536] loop0: detected capacity change from 0 to 32768 [ 1611.717418][T25536] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1611.938076][T25536] XFS (loop0): Ending clean mount [ 1612.154178][T22280] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1612.310446][T25536] XFS (loop0): Quotacheck needed: Please wait. [ 1612.897304][T25536] XFS (loop0): Quotacheck: Done. [ 1613.115520][T21416] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1613.694020][T25595] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5721'. [ 1613.895039][T25597] fuse: Invalid rootmode [ 1614.137790][T25602] binder: 25599:25602 ioctl c0306201 200000000080 returned -14 [ 1614.404318][T25602] binder: 25599:25602 ioctl c0306201 2000000003c0 returned -14 [ 1614.455369][T25606] loop7: detected capacity change from 0 to 2048 [ 1614.530846][T25606] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1614.530868][T25606] UDF-fs: Scanning with blocksize 512 failed [ 1614.547569][ T5840] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1614.703728][ T5840] usb 9-1: Using ep0 maxpacket: 16 [ 1614.706611][T25606] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1614.713448][ T5840] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1614.713487][ T5840] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1614.747816][ T5840] usb 9-1: config 4 has an invalid interface number: 28 but max is 0 [ 1614.747839][ T5840] usb 9-1: config 4 has no interface number 0 [ 1614.747864][ T5840] usb 9-1: config 4 interface 28 has no altsetting 0 [ 1614.848822][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.848848][ T5840] usb 9-1: Product: syz [ 1614.848862][ T5840] usb 9-1: Manufacturer: syz [ 1614.848876][ T5840] usb 9-1: SerialNumber: syz [ 1615.307426][ T5840] usb 9-1: USB disconnect, device number 45 [ 1615.789037][T25626] xt_hashlimit: size too large, truncated to 1048576 [ 1616.348184][T25638] fuse: Invalid rootmode [ 1616.889415][T25645] binder: 25643:25645 ioctl c0306201 200000000080 returned -14 [ 1616.911715][T25645] binder: 25643:25645 ioctl c0306201 2000000003c0 returned -14 [ 1617.182031][T25649] loop8: detected capacity change from 0 to 2048 [ 1617.261276][T25649] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1617.261298][T25649] UDF-fs: Scanning with blocksize 512 failed [ 1617.318743][T25649] UDF-fs: warning (device loop8): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1617.879432][T25662] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5747'. [ 1618.227832][T25632] loop7: detected capacity change from 0 to 32768 [ 1618.245470][T25632] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5735 (25632) [ 1618.319291][T25632] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1618.319322][T25632] BTRFS info (device loop7): using blake2b checksum algorithm [ 1618.437275][T25675] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1618.437275][T25675] The task syz.2.5751 (25675) triggered the difference, watch for misbehavior. [ 1618.760775][T25632] BTRFS info (device loop7): enabling ssd optimizations [ 1618.760799][T25632] BTRFS info (device loop7): turning on async discard [ 1618.760815][T25632] BTRFS info (device loop7): enabling free space tree [ 1618.760832][T25632] BTRFS info (device loop7): use zlib compression, level 3 [ 1619.111894][T25655] loop1: detected capacity change from 0 to 32768 [ 1619.282416][T25655] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1619.438593][T25655] XFS (loop1): Ending clean mount [ 1619.477538][T23901] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1619.765242][T25706] binder: 25703:25706 ioctl c0306201 200000000080 returned -14 [ 1619.808631][T25706] binder: 25703:25706 ioctl c0306201 2000000003c0 returned -14 [ 1619.955952][T25655] XFS (loop1): Quotacheck needed: Please wait. [ 1620.082867][T25708] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5759'. [ 1620.194199][T11088] libceph: connect (1)0.0.0.0:6789 error -22 [ 1620.194328][T11088] libceph: mon0 (1)0.0.0.0:6789 connect error [ 1620.445371][T25704] ceph: No mds server is up or the cluster is laggy [ 1620.646585][T11088] libceph: connect (1)0.0.0.0:6789 error -22 [ 1620.646727][T11088] libceph: mon0 (1)0.0.0.0:6789 connect error [ 1620.761000][T25655] XFS (loop1): Quotacheck: Done. [ 1620.957007][T25692] loop8: detected capacity change from 0 to 32768 [ 1620.988799][T23371] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1621.011703][T25692] (syz.8.5756,25692,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1621.033204][T25692] (syz.8.5756,25692,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1621.151625][T25692] JBD2: Ignoring recovery information on journal [ 1621.170565][T25722] loop4: detected capacity change from 0 to 2048 [ 1621.270275][T25722] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1621.270298][T25722] UDF-fs: Scanning with blocksize 512 failed [ 1621.359601][T25722] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1621.512664][T25692] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1622.585135][T22280] ocfs2: Unmounting device (7,8) on (node local) [ 1622.995897][T25750] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5774'. [ 1623.489232][T25754] FAULT_INJECTION: forcing a failure. [ 1623.489232][T25754] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1623.489264][T25754] CPU: 0 UID: 0 PID: 25754 Comm: syz.7.5776 Tainted: G L syzkaller #0 PREEMPT(full) [ 1623.489290][T25754] Tainted: [L]=SOFTLOCKUP [ 1623.489298][T25754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1623.489311][T25754] Call Trace: [ 1623.489319][T25754] [ 1623.489328][T25754] dump_stack_lvl+0xe8/0x150 [ 1623.489362][T25754] should_fail_ex+0x410/0x560 [ 1623.489389][T25754] get_futex_key+0x1b4/0x1580 [ 1623.489424][T25754] ? __pfx_get_futex_key+0x10/0x10 [ 1623.489450][T25754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.489474][T25754] ? update_se+0x90/0x1020 [ 1623.489503][T25754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.489532][T25754] futex_wait_setup+0x4a/0x590 [ 1623.489569][T25754] ? __futex_wait+0xdf/0x400 [ 1623.489604][T25754] __futex_wait+0x15f/0x400 [ 1623.489646][T25754] ? __pfx___futex_wait+0x10/0x10 [ 1623.489682][T25754] ? __pfx_futex_wake_mark+0x10/0x10 [ 1623.489717][T25754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.489741][T25754] ? try_to_wake_up+0x8c5/0x14d0 [ 1623.489771][T25754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.489799][T25754] futex_wait+0x121/0x390 [ 1623.489833][T25754] ? __pfx_futex_wait+0x10/0x10 [ 1623.489875][T25754] ? __local_bh_enable_ip+0xd6/0x140 [ 1623.489907][T25754] do_futex+0x3e7/0x4e0 [ 1623.489931][T25754] ? __inet_bind+0x438/0xaa0 [ 1623.489967][T25754] ? __pfx_do_futex+0x10/0x10 [ 1623.489993][T25754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.490016][T25754] ? __sys_bind+0x36b/0x410 [ 1623.490044][T25754] __se_sys_futex+0x3a8/0x450 [ 1623.490076][T25754] ? __pfx___se_sys_futex+0x10/0x10 [ 1623.490103][T25754] ? rcu_is_watching+0x16/0xb0 [ 1623.490133][T25754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.490157][T25754] ? __x64_sys_futex+0x21/0xf0 [ 1623.490186][T25754] do_syscall_64+0x166/0x520 [ 1623.490208][T25754] ? trace_irq_disable+0x3b/0x140 [ 1623.490229][T25754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.490255][T25754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.490276][T25754] RIP: 0033:0x7f565e99e159 [ 1623.490295][T25754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.490312][T25754] RSP: 002b:00007f565f8850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1623.490333][T25754] RAX: ffffffffffffffda RBX: 00007f565ec25fa8 RCX: 00007f565e99e159 [ 1623.490348][T25754] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f565ec25fa8 [ 1623.490362][T25754] RBP: 00007f565ec25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1623.490375][T25754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.490388][T25754] R13: 00007f565ec26038 R14: 00007fff3c1841a0 R15: 00007fff3c184288 [ 1623.490419][T25754] [ 1624.104758][T25759] binder: 25758:25759 ioctl c0306201 200000000080 returned -14 [ 1624.139926][T25759] binder: 25758:25759 ioctl c0306201 2000000003c0 returned -14 [ 1624.641893][T25766] loop4: detected capacity change from 0 to 2048 [ 1624.700026][T25766] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1624.700047][T25766] UDF-fs: Scanning with blocksize 512 failed [ 1624.758706][T25766] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1625.435633][T25782] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1626.191035][T25794] loop8: detected capacity change from 0 to 16 [ 1626.257001][T25794] erofs (device loop8): mounted with root inode @ nid 36. [ 1626.332623][T25794] erofs (device loop8): not enough plain data on disk @ la 1024 of nid 36 [ 1626.332656][T25794] erofs (device loop8): read error -117 @ 0 of nid 36 [ 1626.426489][T25794] erofs (device loop8): not enough plain data on disk @ la 1024 of nid 36 [ 1626.426515][T25794] erofs (device loop8): read error -117 @ 0 of nid 36 [ 1626.601725][T25774] loop0: detected capacity change from 0 to 32768 [ 1626.679893][T25774] (syz.0.5783,25774,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1626.689491][T25774] (syz.0.5783,25774,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1626.777244][T25774] JBD2: Ignoring recovery information on journal [ 1627.002447][T25774] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1627.388072][T25774] loop0: detected capacity change from 32768 to 0 [ 1627.614847][T25803] Aborting journal on device loop0-29. [ 1627.614870][T25803] buffer_io_error: 279 callbacks suppressed [ 1627.614882][T25803] Buffer I/O error on dev loop0, logical block 552, lost sync page write [ 1627.614898][T25803] JBD2: I/O error when updating journal superblock for loop0-29. [ 1627.616974][T25813] loop7: detected capacity change from 0 to 2048 [ 1627.618775][T21416] (syz-executor,21416,0):ocfs2_start_trans:376 ERROR: status = -30 [ 1627.618801][T21416] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 1627.618816][T21416] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1627.618826][T21416] OCFS2: File system is now read-only. [ 1627.618835][T21416] (syz-executor,21416,0):ocfs2_modify_bh:105 ERROR: status = -30 [ 1627.618855][T21416] (syz-executor,21416,0):ocfs2_local_free_info:859 ERROR: status = -30 [ 1627.619057][T21416] (syz-executor,21416,0):ocfs2_start_trans:376 ERROR: status = -30 [ 1627.619078][T21416] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 1627.619093][T21416] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1627.619103][T21416] (syz-executor,21416,0):ocfs2_modify_bh:105 ERROR: status = -30 [ 1627.619122][T21416] (syz-executor,21416,0):ocfs2_local_free_info:859 ERROR: status = -30 [ 1627.619512][T21416] (syz-executor,21416,0):ocfs2_assign_bh:2417 ERROR: status = -5 [ 1627.619533][T21416] (syz-executor,21416,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -5 [ 1627.619553][T21416] (syz-executor,21416,0):ocfs2_shutdown_local_alloc:412 ERROR: status = -5 [ 1627.619612][T21416] Buffer I/O error on dev loop0, logical block 16936, lost sync page write [ 1627.619628][T21416] (syz-executor,21416,0):ocfs2_write_block:76 ERROR: status = -5 [ 1627.619654][T21416] (syz-executor,21416,0):ocfs2_update_disk_slot:203 ERROR: status = -5 [ 1627.619674][T21416] (syz-executor,21416,0):ocfs2_put_slot:539 ERROR: status = -5 [ 1627.677740][T21416] (syz-executor,21416,0):ocfs2_journal_shutdown:1103 ERROR: status = -5 [ 1627.906564][T25813] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1627.906585][T25813] UDF-fs: Scanning with blocksize 512 failed [ 1627.966923][T25813] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1628.022118][T21416] ocfs2: Unmounting device (7,0) on (node local) [ 1628.044495][T25791] loop1: detected capacity change from 0 to 32768 [ 1628.045313][T25791] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1628.120462][T25791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5792 (25791) [ 1628.149833][T25791] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1628.149861][T25791] BTRFS info (device loop1): using sha256 checksum algorithm [ 1628.300948][T25821] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5804'. [ 1628.409646][T25791] BTRFS info (device loop1): rebuilding free space tree [ 1628.719688][T25791] BTRFS info (device loop1): disabling free space tree [ 1628.719742][T25791] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1628.719762][T25791] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1628.787590][T25791] BTRFS info (device loop1): enabling ssd optimizations [ 1628.787616][T25791] BTRFS info (device loop1): force clearing of disk cache [ 1628.787638][T25791] BTRFS info (device loop1): enabling auto defrag [ 1628.787654][T25791] BTRFS info (device loop1): max_inline set to 0 [ 1629.097901][T23371] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1629.248885][T24288] Bluetooth: hci1: command 0x0405 tx timeout [ 1629.493718][T25849] loop2: detected capacity change from 0 to 512 [ 1629.529662][T25849] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1629.570325][T25849] EXT4-fs (loop2): 1 truncate cleaned up [ 1629.592776][T25849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1630.163356][T22308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.704276][T25819] loop4: detected capacity change from 0 to 32768 [ 1630.737742][T25874] trusted_key: encrypted_key: insufficient parameters specified [ 1630.792536][T25819] (syz.4.5802,25819,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1630.811615][T25819] (syz.4.5802,25819,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1631.018401][T25864] ceph: No mds server is up or the cluster is laggy [ 1631.100810][T25819] JBD2: Ignoring recovery information on journal [ 1631.183751][T25877] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1631.392180][T25819] JBD2: journal reset failed [ 1631.392196][T25819] (syz.4.5802,25819,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1631.392217][T25819] (syz.4.5802,25819,0):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 1632.710738][T25904] loop8: detected capacity change from 0 to 256 [ 1632.711674][T25904] exfat: Deprecated parameter 'utf8' [ 1632.821486][T25904] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x82675e9d, utbl_chksum : 0xe619d30d) [ 1632.969895][T25910] trusted_key: encrypted_key: insufficient parameters specified [ 1633.322108][T25915] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1633.493344][ T5749] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1633.646783][ T5749] usb 9-1: Using ep0 maxpacket: 8 [ 1633.648043][ T5749] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1633.649346][ T5749] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.649387][ T5749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.961634][T25899] loop0: detected capacity change from 0 to 32768 [ 1633.979112][T25899] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5827 (25899) [ 1634.009845][T25899] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1634.009874][T25899] BTRFS info (device loop0): using sha256 checksum algorithm [ 1634.035321][ T5749] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1634.194993][ T5749] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 1634.196147][ T5749] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1634.196169][ T5749] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1634.199485][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1634.199506][ T5749] usb 8-1: Product: syz [ 1634.199521][ T5749] usb 8-1: Manufacturer: syz [ 1634.269198][T25899] BTRFS info (device loop0): enabling ssd optimizations [ 1634.269289][T25899] BTRFS info (device loop0): turning on async discard [ 1634.269305][T25899] BTRFS info (device loop0): enabling free space tree [ 1634.309870][ T5749] iuu_phoenix 8-1:1.0: iuu_phoenix converter detected [ 1634.345479][T25913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.345874][T25913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1634.350325][ T5749] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 1635.051030][T25946] overlayfs: missing 'lowerdir' [ 1635.396454][T25924] loop2: detected capacity change from 0 to 32768 [ 1635.431574][T25924] (syz.2.5840,25924,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1635.448146][T25924] (syz.2.5840,25924,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1635.588116][T25924] JBD2: Ignoring recovery information on journal [ 1635.825547][T25924] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1636.155333][ T5771] usb 9-1: USB disconnect, device number 46 [ 1636.327009][T25924] (syz.2.5840,25924,0):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume. [ 1636.327040][T25924] (syz.2.5840,25924,0):ocfs2_group_add:513 ERROR: status = -22 [ 1636.369095][T25964] trusted_key: encrypted_key: insufficient parameters specified [ 1636.621661][T25926] loop7: detected capacity change from 0 to 32768 [ 1636.690373][T25926] BTRFS info: device /dev/loop7 (7:7) using temp-fsid c71040c3-96fe-4426-9e01-4cb5768246f2 [ 1636.690426][T25926] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5841 (25926) [ 1636.731476][T25926] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1636.731504][T25926] BTRFS info (device loop7): using sha256 checksum algorithm [ 1636.792371][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1636.792664][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1636.814359][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1636.814594][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1636.814813][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1636.815050][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1636.815261][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1636.815518][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1636.815771][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1636.927692][T22308] ocfs2: Unmounting device (7,2) on (node local) [ 1636.999823][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1637.000048][T25926] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1637.131140][T25926] BTRFS error (device loop7): open_ctree failed: -ENOMEM [ 1637.368252][ T5771] usb 8-1: USB disconnect, device number 46 [ 1637.467563][ T5771] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1637.468195][ T5771] iuu_phoenix 8-1:1.0: device disconnected [ 1637.546769][T21416] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1638.233350][ T5749] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1638.403040][ T5749] usb 8-1: Using ep0 maxpacket: 16 [ 1638.413182][ T5749] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1638.413223][ T5749] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1638.463362][ T5749] usb 8-1: config 4 has an invalid interface number: 28 but max is 0 [ 1638.463386][ T5749] usb 8-1: config 4 has no interface number 0 [ 1638.463411][ T5749] usb 8-1: config 4 interface 28 has no altsetting 0 [ 1638.509341][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.509366][ T5749] usb 8-1: Product: syz [ 1638.509380][ T5749] usb 8-1: Manufacturer: syz [ 1638.509394][ T5749] usb 8-1: SerialNumber: syz [ 1638.550111][T25990] loop1: detected capacity change from 0 to 256 [ 1639.068590][ T5749] usb 8-1: USB disconnect, device number 47 [ 1640.004086][T17032] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.243052][T25986] loop4: detected capacity change from 0 to 32768 [ 1640.281906][T25986] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5857 (25986) [ 1640.397171][T25986] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1640.397200][T25986] BTRFS info (device loop4): using blake2b checksum algorithm [ 1640.920627][T17032] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.259908][T25986] BTRFS error (device loop4): open_ctree failed: -EINTR [ 1641.459542][T26042] trusted_key: encrypted_key: insufficient parameters specified [ 1642.049346][T17032] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.639321][ T5840] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1642.775855][T17032] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.786505][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 1642.790037][ T5840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1642.790075][ T5840] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1642.791047][ T5840] usb 2-1: config 4 has an invalid interface number: 28 but max is 0 [ 1642.791066][ T5840] usb 2-1: config 4 has no interface number 0 [ 1642.791091][ T5840] usb 2-1: config 4 interface 28 has no altsetting 0 [ 1642.793086][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.793107][ T5840] usb 2-1: Product: syz [ 1642.793121][ T5840] usb 2-1: Manufacturer: syz [ 1642.793134][ T5840] usb 2-1: SerialNumber: syz [ 1643.024392][T26063] loop7: detected capacity change from 0 to 256 [ 1643.467458][ T5840] usb 2-1: USB disconnect, device number 66 [ 1644.657854][T26086] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1644.870390][T17032] bridge_slave_1: left allmulticast mode [ 1644.870416][T17032] bridge_slave_1: left promiscuous mode [ 1644.870602][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.931750][T17032] bridge_slave_0: left allmulticast mode [ 1644.931775][T17032] bridge_slave_0: left promiscuous mode [ 1644.946843][T17032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.470698][T24288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1645.488436][T24288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1645.504391][T24288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1645.506950][T24288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1645.512128][T24288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1646.035266][T26115] loop4: detected capacity change from 0 to 256 [ 1647.161396][T17032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.183659][T17032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.227916][T17032] bond0 (unregistering): Released all slaves [ 1647.648810][T24288] Bluetooth: hci4: command tx timeout [ 1647.939609][T26146] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1648.323523][T26124] loop1: detected capacity change from 0 to 32768 [ 1648.349547][T26124] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5895 (26124) [ 1648.632023][T26124] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1648.632054][T26124] BTRFS info (device loop1): using sha256 checksum algorithm [ 1648.849468][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1648.876759][T26124] BTRFS info (device loop1): enabling ssd optimizations [ 1648.876783][T26124] BTRFS info (device loop1): disabling tree log [ 1648.876800][T26124] BTRFS info (device loop1): turning on async discard [ 1648.876814][T26124] BTRFS info (device loop1): enabling free space tree [ 1649.191175][T17032] hsr_slave_0: left promiscuous mode [ 1649.577876][T17032] hsr_slave_1: left promiscuous mode [ 1649.578693][T17032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.578712][T17032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.627762][T17032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.627784][T17032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.723462][T24288] Bluetooth: hci4: command tx timeout [ 1649.755230][T26141] loop2: detected capacity change from 0 to 32768 [ 1649.866071][T26141] JBD2: Ignoring recovery information on journal [ 1649.887277][T17032] veth1_macvtap: left promiscuous mode [ 1649.887327][T17032] veth0_macvtap: left promiscuous mode [ 1649.887429][T17032] veth1_vlan: left promiscuous mode [ 1649.887485][T17032] veth0_vlan: left promiscuous mode [ 1650.066514][T26141] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1650.472759][ T31] audit: type=1800 audit(1789217467.766:813): pid=26141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5897" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1651.306734][T26201] loop4: detected capacity change from 0 to 1024 [ 1651.401863][T26201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1651.401950][T26201] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1651.678700][T26173] loop7: detected capacity change from 0 to 40427 [ 1651.716099][T26173] F2FS-fs (loop7): invalid crc value [ 1651.803133][T24288] Bluetooth: hci4: command tx timeout [ 1652.020619][T23371] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1652.071138][ T5984] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 1652.156024][T22308] ocfs2: Unmounting device (7,2) on (node local) [ 1652.394795][T26173] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1652.565860][T17032] team0 (unregistering): Port device team_slave_1 removed [ 1652.578693][T26173] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 1652.578717][T26173] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1652.578740][T26173] F2FS-fs (loop7): Start checkpoint disabled! [ 1652.717783][T17032] team0 (unregistering): Port device team_slave_0 removed [ 1652.841626][T26173] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 1652.920094][T26211] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1653.416142][T26215] loop2: detected capacity change from 0 to 256 [ 1653.883341][T24288] Bluetooth: hci4: command tx timeout [ 1654.011990][T26215] syzkaller0: entered promiscuous mode [ 1654.012013][T26215] syzkaller0: entered allmulticast mode [ 1654.208030][T21451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1654.366238][T26229] trusted_key: encrypted_key: insufficient parameters specified [ 1654.751001][T26232] loop4: detected capacity change from 0 to 2048 [ 1654.820835][T26232] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1654.820857][T26232] UDF-fs: Scanning with blocksize 512 failed [ 1654.925864][T26232] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1655.419574][T26247] FAULT_INJECTION: forcing a failure. [ 1655.419574][T26247] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.419608][T26247] CPU: 0 UID: 0 PID: 26247 Comm: syz.0.5921 Tainted: G L syzkaller #0 PREEMPT(full) [ 1655.419634][T26247] Tainted: [L]=SOFTLOCKUP [ 1655.419655][T26247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1655.419667][T26247] Call Trace: [ 1655.419676][T26247] [ 1655.419685][T26247] dump_stack_lvl+0xe8/0x150 [ 1655.419719][T26247] should_fail_ex+0x410/0x560 [ 1655.419747][T26247] should_failslab+0xa8/0x100 [ 1655.419775][T26247] __kmalloc_cache_noprof+0xa3/0x600 [ 1655.419794][T26247] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1655.419820][T26247] ? __se_sys_fspick+0x203/0x3c0 [ 1655.419843][T26247] ? __se_sys_fspick+0x203/0x3c0 [ 1655.419872][T26247] __se_sys_fspick+0x203/0x3c0 [ 1655.419898][T26247] ? __pfx___se_sys_fspick+0x10/0x10 [ 1655.419932][T26247] do_syscall_64+0x166/0x520 [ 1655.419955][T26247] ? trace_irq_disable+0x3b/0x140 [ 1655.419976][T26247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.420002][T26247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.420022][T26247] RIP: 0033:0x7f1b58b9e159 [ 1655.420041][T26247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.420058][T26247] RSP: 002b:00007f1b59ac3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 1655.420079][T26247] RAX: ffffffffffffffda RBX: 00007f1b58e26090 RCX: 00007f1b58b9e159 [ 1655.420094][T26247] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1655.420109][T26247] RBP: 00007f1b58c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1655.420121][T26247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1655.420134][T26247] R13: 00007f1b58e26128 R14: 00007f1b58e26090 R15: 00007fffefe06588 [ 1655.420165][T26247] [ 1657.219947][T26272] loop1: detected capacity change from 0 to 1024 [ 1657.357869][T26272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1657.357956][T26272] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1657.556281][T26099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.556374][T26099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.556501][T26099] bridge_slave_0: entered allmulticast mode [ 1657.599474][T26099] bridge_slave_0: entered promiscuous mode [ 1657.627096][T26099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.642562][T26099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.642696][T26099] bridge_slave_1: entered allmulticast mode [ 1657.707523][T26099] bridge_slave_1: entered promiscuous mode [ 1657.761428][T23371] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1657.940186][T26288] loop2: detected capacity change from 0 to 256 [ 1658.006016][T26251] loop4: detected capacity change from 0 to 32768 [ 1658.021518][T26099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1658.041858][T26251] (syz.4.5922,26251,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1658.068550][T26251] (syz.4.5922,26251,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1658.105320][T26099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.156777][T26251] JBD2: Ignoring recovery information on journal [ 1658.331780][T26251] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1658.408410][T26293] trusted_key: encrypted_key: insufficient parameters specified [ 1658.606348][T26099] team0: Port device team_slave_0 added [ 1658.623565][T26290] syzkaller0: entered promiscuous mode [ 1658.623585][T26290] syzkaller0: entered allmulticast mode [ 1658.687764][T26099] team0: Port device team_slave_1 added [ 1658.972601][T21451] ocfs2: Unmounting device (7,4) on (node local) [ 1659.080281][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1659.081123][T26099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1659.081136][T26099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1659.081161][T26099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1659.202636][T26099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1659.202654][T26099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1659.202684][T26099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.299498][T26276] loop7: detected capacity change from 0 to 32768 [ 1659.348112][T26276] (syz.7.5928,26276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1659.348351][T26276] (syz.7.5928,26276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1659.395211][T26298] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1659.449261][T26276] JBD2: Ignoring recovery information on journal [ 1659.663332][T26276] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1659.857710][T26099] hsr_slave_0: entered promiscuous mode [ 1659.877833][T26099] hsr_slave_1: entered promiscuous mode [ 1659.901529][T26099] debugfs: 'hsr0' already exists in 'hsr' [ 1659.901550][T26099] Cannot create hsr debugfs directory [ 1660.296643][T23901] ocfs2: Unmounting device (7,7) on (node local) [ 1660.381556][T26308] loop4: detected capacity change from 0 to 4096 [ 1660.520827][T26313] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1661.349195][T26316] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 1662.105908][T26317] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1662.395241][T26311] loop1: detected capacity change from 0 to 32768 [ 1662.414050][T26311] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5937 (26311) [ 1662.482588][T26311] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1662.482640][T26311] BTRFS info (device loop1): using sha256 checksum algorithm [ 1662.540222][T26344] device-mapper: ioctl: Target spec extends beyond end of parameters [ 1662.540238][T26344] device-mapper: ioctl: unable to find target [ 1662.582433][T26317] Remounting filesystem read-only [ 1662.847856][T26311] BTRFS info (device loop1): enabling ssd optimizations [ 1662.847882][T26311] BTRFS info (device loop1): disabling tree log [ 1662.847897][T26311] BTRFS info (device loop1): turning on async discard [ 1662.847912][T26311] BTRFS info (device loop1): enabling free space tree [ 1663.830339][T26373] FAULT_INJECTION: forcing a failure. [ 1663.830339][T26373] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.830374][T26373] CPU: 0 UID: 0 PID: 26373 Comm: syz.7.5947 Tainted: G L syzkaller #0 PREEMPT(full) [ 1663.830400][T26373] Tainted: [L]=SOFTLOCKUP [ 1663.830409][T26373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1663.830421][T26373] Call Trace: [ 1663.830429][T26373] [ 1663.830439][T26373] dump_stack_lvl+0xe8/0x150 [ 1663.830474][T26373] should_fail_ex+0x410/0x560 [ 1663.830501][T26373] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1663.830521][T26373] should_failslab+0xa8/0x100 [ 1663.830548][T26373] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1663.830567][T26373] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1663.830603][T26373] ? sock_alloc_inode+0x2c/0x1a0 [ 1663.830621][T26373] ? sock_alloc_inode+0x2c/0x1a0 [ 1663.830641][T26373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1663.830674][T26373] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1663.830693][T26373] sock_alloc_inode+0x2c/0x1a0 [ 1663.830713][T26373] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1663.830732][T26373] alloc_inode+0x6a/0x1b0 [ 1663.830761][T26373] __sock_create+0x12d/0x9d0 [ 1663.830791][T26373] __sys_socket+0xd6/0x1b0 [ 1663.830816][T26373] __x64_sys_socket+0x7a/0x90 [ 1663.830838][T26373] do_syscall_64+0x166/0x520 [ 1663.830861][T26373] ? trace_irq_disable+0x3b/0x140 [ 1663.830882][T26373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.830908][T26373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.830929][T26373] RIP: 0033:0x7f565e99e159 [ 1663.830948][T26373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.830965][T26373] RSP: 002b:00007f565f864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1663.830987][T26373] RAX: ffffffffffffffda RBX: 00007f565ec26090 RCX: 00007f565e99e159 [ 1663.831003][T26373] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000029 [ 1663.831016][T26373] RBP: 00007f565ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 1663.831029][T26373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1663.831042][T26373] R13: 00007f565ec26128 R14: 00007f565ec26090 R15: 00007fff3c184288 [ 1663.831073][T26373] [ 1663.831083][T26373] socket: no more sockets [ 1664.488337][T26373] ceph: No mds server is up or the cluster is laggy [ 1664.764036][T26322] syz.4.5936 (26322): drop_caches: 2 [ 1665.032509][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1665.094089][T21451] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1665.247701][T26355] loop0: detected capacity change from 0 to 32768 [ 1665.311918][T26355] (syz.0.5945,26355,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1665.312149][T26355] (syz.0.5945,26355,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1665.476216][T26355] JBD2: Ignoring recovery information on journal [ 1665.584298][ T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 1665.769333][T26355] JBD2: journal reset failed [ 1665.769348][T26355] (syz.0.5945,26355,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1665.769370][T26355] (syz.0.5945,26355,0):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 1665.956587][T26387] loop4: detected capacity change from 0 to 512 [ 1666.008549][T26387] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1666.057776][T26387] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.5950: inode has both inline data and extents flags [ 1666.057807][T26387] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1666.062912][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1666.062930][ C0] EXT4-fs (loop4): initial error at time 1789217483: ext4_orphan_get:1403: inode 15 [ 1666.062958][ C0] EXT4-fs (loop4): last error at time 1789217483: ext4_orphan_get:1403: inode 15 [ 1666.124413][T26387] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.5950: couldn't read orphan inode 15 (err -117) [ 1666.124442][T26387] loop4: lost filesystem error report for type 5 error -117 [ 1666.129122][T26387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.512697][T26361] BTRFS info (device loop1): balance: start -d -m [ 1667.035108][T26361] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 1667.278600][T26387] overlayfs: failed to clone lowerpath [ 1667.921631][T26099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1668.038208][T26361] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 1668.133098][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.133150][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.204796][T26385] loop2: detected capacity change from 0 to 40427 [ 1668.239174][T26385] F2FS-fs (loop2): invalid crc value [ 1668.653752][T26099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1668.678750][T26099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1668.727625][T26099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1668.757678][T26099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1668.810350][T26099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1668.812267][T26099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1668.877537][T26099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1668.898246][T26385] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1668.955277][T21451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.007849][T26385] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 1669.007874][T26385] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1669.007897][T26385] F2FS-fs (loop2): Start checkpoint disabled! [ 1669.289589][T26385] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 1669.289981][T26385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1669.372279][T26361] BTRFS info (device loop1): balance: canceled [ 1669.417198][T26430] loop4: detected capacity change from 0 to 256 [ 1669.579890][T26433] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5959'. [ 1669.579920][T26433] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5959'. [ 1669.579934][T26433] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5959'. [ 1669.616060][T26433] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5959'. [ 1669.661971][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1669.788614][T26099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.957305][T26099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.028930][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.029016][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.121996][T17032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.122081][T17032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.396633][T26099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1670.435672][T26442] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1670.513292][T11088] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1670.644101][T11088] usb 8-1: device descriptor read/64, error -71 [ 1670.892148][T11088] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1670.981399][T23371] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1671.023610][T11088] usb 8-1: device descriptor read/64, error -71 [ 1671.146151][T11088] usb usb8-port1: attempt power cycle [ 1671.489933][T11088] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1671.513424][T11088] usb 8-1: device descriptor read/8, error -71 [ 1671.793123][T11088] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1671.815561][T11088] usb 8-1: device descriptor read/8, error -71 [ 1671.947709][T11088] usb usb8-port1: unable to enumerate USB device [ 1673.327006][T26493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1673.327681][T26493] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1673.479222][T26099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.425548][T26480] loop1: detected capacity change from 0 to 32768 [ 1674.465027][T26480] (syz.1.5964,26480,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1674.466798][T26480] (syz.1.5964,26480,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1674.582657][T26480] JBD2: Ignoring recovery information on journal [ 1674.858894][T26480] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1675.485679][T23371] ocfs2: Unmounting device (7,1) on (node local) [ 1675.523971][T26489] loop0: detected capacity change from 0 to 40427 [ 1675.579115][T26489] F2FS-fs (loop0): invalid crc value [ 1675.672545][T26099] veth0_vlan: entered promiscuous mode [ 1675.750454][T26099] veth1_vlan: entered promiscuous mode [ 1676.317058][T26099] veth0_macvtap: entered promiscuous mode [ 1676.367337][T26099] veth1_macvtap: entered promiscuous mode [ 1676.431336][T26536] loop1: detected capacity change from 0 to 2048 [ 1676.533550][T26099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.548013][T26489] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1676.586195][T26099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.768514][T26489] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 1676.768541][T26489] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1676.768565][T26489] F2FS-fs (loop0): Start checkpoint disabled! [ 1676.806198][T16505] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.807751][ T5984] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.874169][T16505] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.884962][T16505] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.058560][T26489] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 1677.412532][T16505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.412552][T16505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.625784][T26536] EXT4-fs: Ignoring removed orlov option [ 1677.625811][T26536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1677.737576][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.737596][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.876079][T26536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1677.925879][T26549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1677.948808][T26549] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1679.820978][T26584] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5989'. [ 1680.189154][T26592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.601370][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6000'. [ 1680.629155][T26598] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6000'. [ 1680.782319][T26564] loop5: detected capacity change from 0 to 32768 [ 1680.886619][T26564] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1680.887603][T26569] loop2: detected capacity change from 0 to 32768 [ 1681.006366][T26569] JBD2: Ignoring recovery information on journal [ 1681.248512][T26569] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1681.414242][T26564] XFS (loop5): Ending clean mount [ 1681.651271][T26564] XFS (loop5): Quotacheck needed: Please wait. [ 1681.752545][ T31] audit: type=1800 audit(1789217499.076:814): pid=26569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5991" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1681.985918][T26564] XFS (loop5): Quotacheck: Done. [ 1682.130204][T26099] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1683.319096][T22308] ocfs2: Unmounting device (7,2) on (node local) [ 1684.483823][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1684.516324][T26658] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1684.517572][T26655] socket: no more sockets [ 1684.517581][T26655] Failed to initialize the IGMP autojoin socket (err -23) [ 1684.937223][T26671] xt_nfacct: accounting object `' does not exist [ 1684.982802][T26638] loop4: detected capacity change from 0 to 32768 [ 1685.129125][T26638] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6008 (26638) [ 1685.369471][T26638] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1685.369501][T26638] BTRFS info (device loop4): using blake2b checksum algorithm [ 1685.437910][T26677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6018'. [ 1685.437947][T26677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6018'. [ 1685.578139][T26666] Set syz1 is full, maxelem 1023 reached [ 1685.669745][T24288] Bluetooth: hci1: unexpected event for opcode 0x040e [ 1685.768583][T26638] BTRFS info (device loop4): enabling ssd optimizations [ 1685.768608][T26638] BTRFS info (device loop4): turning on async discard [ 1685.768623][T26638] BTRFS info (device loop4): enabling free space tree [ 1685.768640][T26638] BTRFS info (device loop4): use zlib compression, level 3 [ 1686.221023][T21451] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1687.080397][T26674] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.6019'. [ 1688.232035][T26729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6030'. [ 1688.252612][T26729] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6030'. [ 1688.670320][T26705] loop2: detected capacity change from 0 to 32768 [ 1688.771397][T26705] JBD2: Ignoring recovery information on journal [ 1688.792496][T26733] gadgetfs: bound to dummy_udc driver [ 1689.011112][T26705] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1689.083823][ T5749] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1689.084282][ T5756] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1689.084961][ C0] gadgetfs: connected [ 1689.085248][ T5756] gadgetfs: disconnected [ 1689.153726][ T31] audit: type=1800 audit(1789217506.486:815): pid=26705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6024" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1689.234986][ C0] gadgetfs: connected [ 1689.235571][ T5749] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1689.236326][ T5756] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1689.237103][ T5756] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1689.237136][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.238752][ T5749] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 1689.238772][ T5749] usb 8-1: config 1 has no interface number 0 [ 1689.304708][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.304731][ T5749] usb 8-1: Product: syz [ 1689.304746][ T5749] usb 8-1: Manufacturer: syz [ 1689.304759][ T5749] usb 8-1: SerialNumber: syz [ 1689.367955][ C0] gadgetfs: configuration #1 [ 1689.416780][ T5749] usb 8-1: 3:1 : does not exist [ 1689.416802][ T5749] usb 8-1: 3:2 : does not exist [ 1689.577847][T26742] gadgetfs: suspended from state 3 [ 1689.577944][T26742] gadgetfs: disconnected [ 1689.810540][ T5771] usb 1-1: USB disconnect, device number 71 [ 1690.257646][ T5771] usb 8-1: USB disconnect, device number 52 [ 1691.077767][T22308] ocfs2: Unmounting device (7,2) on (node local) [ 1691.731315][T26790] openvswitch: netlink: IP tunnel dst address not specified [ 1691.961951][T26760] loop5: detected capacity change from 0 to 32768 [ 1692.003073][T26760] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6037 (26760) [ 1692.037854][T26760] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1692.037882][T26760] BTRFS info (device loop5): using blake2b checksum algorithm [ 1692.427610][T26760] BTRFS info (device loop5): enabling ssd optimizations [ 1692.427637][T26760] BTRFS info (device loop5): turning on async discard [ 1692.427652][T26760] BTRFS info (device loop5): enabling free space tree [ 1692.427668][T26760] BTRFS info (device loop5): use zlib compression, level 3 [ 1692.725606][T26810] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.6051'. [ 1693.237417][T26099] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1693.504916][T26835] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6054'. [ 1694.249712][T26791] loop4: detected capacity change from 0 to 32768 [ 1694.318363][T26791] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1694.358921][T26791] JBD2: Ignoring recovery information on journal [ 1694.589745][T26791] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1695.230851][T26865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6066'. [ 1696.126170][T26879] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1696.471577][T21451] ocfs2: Unmounting device (7,4) on (node local) [ 1697.290916][T26891] loop2: detected capacity change from 0 to 1024 [ 1697.433307][T26893] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1697.438828][T26891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1697.438912][T26891] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1697.709081][T26873] loop0: detected capacity change from 0 to 32768 [ 1697.709973][T26873] btrfs: Unknown parameter 'ref_verify' [ 1697.855663][T26888] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.6072: lblock 3 mapped to illegal pblock 3 (length 3) [ 1698.135357][T26888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1698.135387][T26888] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1698.135387][T26888] [ 1698.517090][T17032] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm kworker/u8:20: lblock 0 mapped to illegal pblock 0 (length 3) [ 1698.571909][T17032] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 1698.571941][T17032] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1698.571941][T17032] [ 1698.805810][T26881] loop5: detected capacity change from 0 to 32768 [ 1698.820120][T26881] xfs: Deprecated parameter 'attr2' [ 1698.820136][T26881] XFS: attr2 mount option is deprecated. [ 1698.902447][T26881] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1698.997518][T26888] EXT4-fs error (device loop2): ext4_ext_remove_space:2977: inode #15: comm syz.2.6072: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1699.042579][T17032] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 1699.211183][T17032] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1699.346510][T26881] XFS (loop5): Ending clean mount [ 1699.390644][T26888] EXT4-fs error (device loop2) in ext4_setattr:6247: Corrupt filesystem [ 1699.447301][T26881] XFS (loop5): Quotacheck needed: Please wait. [ 1699.733100][ T13] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 1699.733620][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 1699.733644][ T13] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1699.733644][ T13] [ 1699.742559][T24816] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 2) [ 1699.826462][T24816] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117 [ 1699.826495][T24816] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1699.826495][T24816] [ 1699.828542][T22308] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 1699.877025][T22308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1700.221948][T26881] XFS (loop5): Quotacheck: Done. [ 1700.402651][T26099] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1700.441430][T26945] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1701.170218][T26954] loop0: detected capacity change from 0 to 512 [ 1701.191652][T26954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1701.247484][T26954] EXT4-fs (loop0): 1 truncate cleaned up [ 1701.268084][T26954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1701.340187][T26954] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.6090: corrupted xattr entries [ 1701.354834][T26954] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1701.387964][T26954] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.6090: corrupted xattr entries [ 1701.908826][T26937] loop7: detected capacity change from 0 to 32768 [ 1701.989571][T26937] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1702.409029][T26937] XFS (loop7): Ending clean mount [ 1702.646714][T26937] XFS (loop7): Quotacheck needed: Please wait. [ 1702.755787][T21416] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1703.329255][T26937] XFS (loop7): Quotacheck: Done. [ 1703.572022][T23901] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1703.888805][T27002] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6102'. [ 1705.271634][T27019] loop5: detected capacity change from 0 to 512 [ 1705.419167][T27019] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1705.490401][T27019] EXT4-fs (loop5): 1 truncate cleaned up [ 1705.534272][T27019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1705.655700][T27019] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.6108: corrupted xattr entries [ 1705.682264][T27031] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.6108: corrupted xattr entries [ 1705.703833][T27026] aoe: unknown AoE command type 0x75 [ 1706.438500][T27049] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6118'. [ 1707.141358][T26099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1707.737685][T27071] loop0: detected capacity change from 0 to 1024 [ 1707.765073][T27071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1707.817843][T27071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1707.817943][T27071] System zones: 0-1, 3-36 [ 1707.860327][T27071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1708.273937][T27081] loop2: detected capacity change from 0 to 256 [ 1708.275824][T27078] loop4: detected capacity change from 0 to 512 [ 1708.320488][T27078] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1708.367594][T27078] EXT4-fs (loop4): 1 truncate cleaned up [ 1708.416555][T27078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1708.486231][T27078] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.6126: corrupted xattr entries [ 1708.514330][T27078] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.6126: corrupted xattr entries [ 1708.620438][T27081] syzkaller0: entered promiscuous mode [ 1708.620460][T27081] syzkaller0: entered allmulticast mode [ 1709.010504][T21451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1709.948525][T27102] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6133'. [ 1712.116170][T21416] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.662735][T27135] loop0: detected capacity change from 0 to 512 [ 1712.705591][T27137] loop4: detected capacity change from 0 to 256 [ 1712.746922][T27135] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1712.798350][T27135] EXT4-fs (loop0): 1 truncate cleaned up [ 1712.841739][T27135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1712.890595][T27135] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.6142: corrupted xattr entries [ 1712.939802][T27135] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.6142: corrupted xattr entries [ 1713.020326][T27137] syzkaller0: entered promiscuous mode [ 1713.020348][T27137] syzkaller0: entered allmulticast mode [ 1713.051774][T27145] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6145'. [ 1713.248620][T21416] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.063379][T27160] fuse: Unknown parameter 'default_p' [ 1715.601909][T27180] loop0: detected capacity change from 0 to 1764 [ 1715.835361][T27163] loop5: detected capacity change from 0 to 32768 [ 1715.957759][T27163] JBD2: Ignoring recovery information on journal [ 1716.209840][T27180] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6158'. [ 1716.302657][T27163] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1716.497636][T27180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1716.551744][T27190] loop4: detected capacity change from 0 to 512 [ 1716.577565][T27190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1716.618757][T27190] EXT4-fs (loop4): 1 truncate cleaned up [ 1716.633925][T27180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.637737][T27190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1716.689175][T27180] bond0 (unregistering): Released all slaves [ 1716.699648][T27190] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.6160: corrupted xattr entries [ 1716.756833][T27190] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.6160: corrupted xattr entries [ 1716.883225][T27200] loop7: detected capacity change from 0 to 256 [ 1717.222309][T21451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.349402][T27206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1717.448664][T27200] syzkaller0: entered promiscuous mode [ 1717.448687][T27200] syzkaller0: entered allmulticast mode [ 1717.822733][T27214] fuse: Bad value for 'fd' [ 1718.312014][T26099] ocfs2: Unmounting device (7,5) on (node local) [ 1718.558011][T27229] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6171'. [ 1719.288046][T27197] loop2: detected capacity change from 0 to 40427 [ 1719.321760][T27197] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1719.321786][T27197] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1719.354777][T27197] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 1719.601285][T27247] loop4: detected capacity change from 0 to 512 [ 1719.637500][T27247] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1719.715207][T27247] EXT4-fs (loop4): 1 truncate cleaned up [ 1719.752549][T27247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1719.797550][T27247] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.6176: corrupted xattr entries [ 1720.096903][T27197] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1720.165189][T27254] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.6176: corrupted xattr entries [ 1720.338426][T27197] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1720.338451][T27197] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1720.416677][T27262] netlink: 61963 bytes leftover after parsing attributes in process `syz.5.6178'. [ 1720.472080][T21451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.948301][T27270] fuse: Unknown parameter 'default_permis' [ 1721.335848][T11088] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1721.504083][T11088] usb 6-1: Using ep0 maxpacket: 16 [ 1721.511637][T11088] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1721.511676][T11088] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1721.536797][T11088] usb 6-1: config 4 has an invalid interface number: 28 but max is 0 [ 1721.536822][T11088] usb 6-1: config 4 has no interface number 0 [ 1721.536847][T11088] usb 6-1: config 4 interface 28 has no altsetting 0 [ 1721.559386][T11088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.559410][T11088] usb 6-1: Product: syz [ 1721.559424][T11088] usb 6-1: Manufacturer: syz [ 1721.559438][T11088] usb 6-1: SerialNumber: syz [ 1721.980597][T11088] usb 6-1: USB disconnect, device number 35 [ 1722.570348][T27266] loop7: detected capacity change from 0 to 32768 [ 1722.610386][T27266] (syz.7.6179,27266,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1722.610763][T27266] (syz.7.6179,27266,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1722.768460][T27266] JBD2: Ignoring recovery information on journal [ 1722.866716][T27289] CIFS: Attempting to mount //127.0.0.1/share [ 1722.980916][T27266] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1723.044983][T27292] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 1723.590943][T27289] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1723.638115][T27304] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1723.710722][T23901] ocfs2: Unmounting device (7,7) on (node local) [ 1723.974286][T27311] fuse: Unknown parameter 'default_permis' [ 1724.998823][T27332] netlink: 61963 bytes leftover after parsing attributes in process `syz.7.6195'. [ 1725.779358][T27345] loop4: detected capacity change from 0 to 256 [ 1725.896294][T27305] loop0: detected capacity change from 0 to 40427 [ 1725.935252][T27305] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1725.935277][T27305] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1725.961582][T27305] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 1726.035244][T27347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6205'. [ 1726.251780][T27317] loop2: detected capacity change from 0 to 32768 [ 1726.288198][T27317] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6199 (27317) [ 1726.427770][T27317] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1726.427799][T27317] BTRFS info (device loop2): using sha256 checksum algorithm [ 1726.757087][T27317] BTRFS info (device loop2): enabling ssd optimizations [ 1726.757112][T27317] BTRFS info (device loop2): turning on async discard [ 1726.757128][T27317] BTRFS info (device loop2): enabling free space tree [ 1726.818756][T27305] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1727.081370][T27352] syzkaller0: entered promiscuous mode [ 1727.081392][T27352] syzkaller0: entered allmulticast mode [ 1727.319120][T27317] overlayfs: missing 'lowerdir' [ 1729.217397][T27391] fuse: Bad value for 'fd' [ 1729.571998][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.572048][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.798151][T22308] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1729.940398][T27402] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.6216'. [ 1730.690183][T27385] loop7: detected capacity change from 0 to 32768 [ 1730.716445][T27385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6211 (27385) [ 1730.904120][T27385] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1730.904151][T27385] BTRFS info (device loop7): using sha256 checksum algorithm [ 1731.152089][T27385] BTRFS info (device loop7): enabling ssd optimizations [ 1731.152115][T27385] BTRFS info (device loop7): disabling tree log [ 1731.152130][T27385] BTRFS info (device loop7): turning on async discard [ 1731.152145][T27385] BTRFS info (device loop7): enabling free space tree [ 1731.599349][T27438] fuse: Unknown parameter 'default_permis' [ 1732.357269][T27455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6224'. [ 1732.357306][T27455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6224'. [ 1733.176049][T27466] loop2: detected capacity change from 0 to 1024 [ 1733.479437][T27414] loop5: detected capacity change from 0 to 40427 [ 1733.527844][T27414] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1733.527870][T27414] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1733.528037][T27414] F2FS-fs (loop5): Unable to read 2th superblock [ 1734.788947][T27472] netlink: 61963 bytes leftover after parsing attributes in process `syz.5.6232'. [ 1734.918140][T27476] FAULT_INJECTION: forcing a failure. [ 1734.918140][T27476] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.918175][T27476] CPU: 0 UID: 0 PID: 27476 Comm: syz.4.6233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1734.918202][T27476] Tainted: [L]=SOFTLOCKUP [ 1734.918210][T27476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1734.918223][T27476] Call Trace: [ 1734.918231][T27476] [ 1734.918241][T27476] dump_stack_lvl+0xe8/0x150 [ 1734.918275][T27476] should_fail_ex+0x410/0x560 [ 1734.918303][T27476] should_failslab+0xa8/0x100 [ 1734.918329][T27476] ? alloc_empty_file+0x5b/0x1d0 [ 1734.918356][T27476] kmem_cache_alloc_noprof+0xa1/0x600 [ 1734.918390][T27476] ? alloc_empty_file+0x5b/0x1d0 [ 1734.918422][T27476] alloc_empty_file+0x5b/0x1d0 [ 1734.918448][T27476] alloc_file_pseudo+0x115/0x1e0 [ 1734.918478][T27476] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1734.918513][T27476] anon_inode_getfd+0xc8/0x1f0 [ 1734.918542][T27476] btf_new_fd+0x8f9/0xbb0 [ 1734.918573][T27476] __sys_bpf+0xd2e/0xd90 [ 1734.918604][T27476] ? __pfx___sys_bpf+0x10/0x10 [ 1734.918630][T27476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.918655][T27476] ? do_futex+0x3e7/0x4e0 [ 1734.918708][T27476] ? rcu_is_watching+0x16/0xb0 [ 1734.918755][T27476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.918784][T27476] __x64_sys_bpf+0xba/0xd0 [ 1734.918808][T27476] do_syscall_64+0x166/0x520 [ 1734.918830][T27476] ? trace_irq_disable+0x3b/0x140 [ 1734.918851][T27476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.918880][T27476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.918901][T27476] RIP: 0033:0x7f004219e159 [ 1734.918919][T27476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.918937][T27476] RSP: 002b:00007f00430c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1734.918958][T27476] RAX: ffffffffffffffda RBX: 00007f0042425fa0 RCX: 00007f004219e159 [ 1734.918974][T27476] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 1734.918988][T27476] RBP: 00007f004223503b R08: 0000000000000000 R09: 0000000000000000 [ 1734.919001][T27476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.919014][T27476] R13: 00007f0042426038 R14: 00007f0042425fa0 R15: 00007ffc1f738718 [ 1734.919045][T27476] [ 1735.575173][T23901] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1735.860960][T27485] fuse: Unknown parameter 'default_permissio' [ 1735.936576][ T60] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 1736.245809][T27487] loop2: detected capacity change from 0 to 4096 [ 1736.366794][T27492] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1736.655984][T27499] device-mapper: ioctl: Target spec extends beyond end of parameters [ 1736.656000][T27499] device-mapper: ioctl: unable to find target [ 1736.657143][T27496] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 1737.105289][T27498] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1737.778101][T27498] Remounting filesystem read-only [ 1737.778273][T27498] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1737.851486][T27487] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1739.035144][T27539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1739.123413][T27540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1739.536817][T27496] syz.2.6236 (27496): drop_caches: 2 [ 1740.200446][T27552] FAULT_INJECTION: forcing a failure. [ 1740.200446][T27552] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.200480][T27552] CPU: 0 UID: 0 PID: 27552 Comm: syz.4.6256 Tainted: G L syzkaller #0 PREEMPT(full) [ 1740.200506][T27552] Tainted: [L]=SOFTLOCKUP [ 1740.200515][T27552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1740.200527][T27552] Call Trace: [ 1740.200535][T27552] [ 1740.200545][T27552] dump_stack_lvl+0xe8/0x150 [ 1740.200579][T27552] should_fail_ex+0x410/0x560 [ 1740.200606][T27552] should_failslab+0xa8/0x100 [ 1740.200632][T27552] ? mempool_init_node+0x1f4/0x510 [ 1740.200666][T27552] kmem_cache_alloc_noprof+0xa1/0x600 [ 1740.200697][T27552] ? mempool_init_node+0x1f4/0x510 [ 1740.200735][T27552] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1740.200766][T27552] ? mempool_init_node+0x1f4/0x510 [ 1740.200798][T27552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.200825][T27552] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1740.200845][T27552] mempool_init_node+0x1f4/0x510 [ 1740.200884][T27552] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1740.200905][T27552] mempool_create_node_noprof+0xb8/0x150 [ 1740.200938][T27552] ? __pfx_mempool_free_slab+0x10/0x10 [ 1740.200962][T27552] ceph_osdc_init+0x4fa/0x900 [ 1740.200996][T27552] ceph_create_client+0x246/0x310 [ 1740.201020][T27552] ceph_get_tree+0x1ca/0x1a40 [ 1740.201053][T27552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.201076][T27552] ? apparmor_capable+0x126/0x170 [ 1740.201111][T27552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.201138][T27552] vfs_get_tree+0x92/0x2a0 [ 1740.201161][T27552] vfs_cmd_create+0xa2/0x200 [ 1740.201188][T27552] __se_sys_fsconfig+0x6b9/0x810 [ 1740.201218][T27552] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1740.201245][T27552] ? rcu_is_watching+0x16/0xb0 [ 1740.201269][T27552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.201298][T27552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.201321][T27552] ? __x64_sys_fsconfig+0x20/0xc0 [ 1740.201348][T27552] do_syscall_64+0x166/0x520 [ 1740.201370][T27552] ? trace_irq_disable+0x3b/0x140 [ 1740.201391][T27552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.201417][T27552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.201437][T27552] RIP: 0033:0x7f004219e159 [ 1740.201456][T27552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.201473][T27552] RSP: 002b:00007f00430c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1740.201495][T27552] RAX: ffffffffffffffda RBX: 00007f0042425fa0 RCX: 00007f004219e159 [ 1740.201510][T27552] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1740.201523][T27552] RBP: 00007f004223503b R08: 0000000000000000 R09: 0000000000000000 [ 1740.201536][T27552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1740.201548][T27552] R13: 00007f0042426038 R14: 00007f0042425fa0 R15: 00007ffc1f738718 [ 1740.201579][T27552] [ 1740.676120][T27537] loop0: detected capacity change from 0 to 32768 [ 1740.780935][T27537] JBD2: Ignoring recovery information on journal [ 1740.953382][T27537] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1741.089531][T27566] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1741.478306][T27571] loop0: detected capacity change from 32768 to 0 [ 1741.597055][T27537] (syz.0.6251,27537,0):ocfs2_search_chain:1935 ERROR: status = -5 [ 1741.597084][T27537] (syz.0.6251,27537,0):ocfs2_search_chain:2058 ERROR: status = -5 [ 1741.597104][T27537] (syz.0.6251,27537,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -5 [ 1741.597124][T27537] (syz.0.6251,27537,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -5 [ 1741.597144][T27537] (syz.0.6251,27537,0):ocfs2_claim_new_inode:2439 ERROR: status = -5 [ 1741.597178][T27537] (syz.0.6251,27537,0):ocfs2_claim_new_inode:2454 ERROR: status = -5 [ 1741.597198][T27537] (syz.0.6251,27537,0):ocfs2_mknod_locked:649 ERROR: status = -5 [ 1741.597218][T27537] (syz.0.6251,27537,0):ocfs2_mknod:394 ERROR: status = -5 [ 1741.597678][T27537] (syz.0.6251,27537,0):ocfs2_mknod:513 ERROR: status = -5 [ 1741.597700][T27537] (syz.0.6251,27537,0):ocfs2_create:685 ERROR: status = -5 [ 1741.768144][T27569] (syz.0.6251,27569,0):ocfs2_search_chain:1935 ERROR: status = -5 [ 1741.794747][T27569] (syz.0.6251,27569,0):ocfs2_search_chain:2058 ERROR: status = -5 [ 1741.794776][T27569] (syz.0.6251,27569,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -5 [ 1741.794797][T27569] (syz.0.6251,27569,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -5 [ 1741.794817][T27569] (syz.0.6251,27569,0):ocfs2_claim_new_inode:2439 ERROR: status = -5 [ 1741.794837][T27569] (syz.0.6251,27569,0):ocfs2_claim_new_inode:2454 ERROR: status = -5 [ 1741.794857][T27569] (syz.0.6251,27569,0):ocfs2_mknod_locked:649 ERROR: status = -5 [ 1741.794877][T27569] (syz.0.6251,27569,0):ocfs2_mknod:394 ERROR: status = -5 [ 1741.795007][T27569] (syz.0.6251,27569,0):ocfs2_mknod:513 ERROR: status = -5 [ 1741.795026][T27569] (syz.0.6251,27569,0):ocfs2_create:685 ERROR: status = -5 [ 1742.072552][T27559] Aborting journal on device loop0-75. [ 1742.072575][T27559] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 1742.072592][T27559] JBD2: I/O error when updating journal superblock for loop0-75. [ 1742.074023][T21416] (syz-executor,21416,0):ocfs2_assign_bh:2417 ERROR: status = -5 [ 1742.074048][T21416] (syz-executor,21416,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -5 [ 1742.074068][T21416] (syz-executor,21416,0):ocfs2_shutdown_local_alloc:412 ERROR: status = -5 [ 1742.074125][T21416] Buffer I/O error on dev loop0, logical block 17024, lost sync page write [ 1742.074140][T21416] (syz-executor,21416,0):ocfs2_write_block:76 ERROR: status = -5 [ 1742.074160][T21416] (syz-executor,21416,0):ocfs2_update_disk_slot:203 ERROR: status = -5 [ 1742.074180][T21416] (syz-executor,21416,0):ocfs2_put_slot:539 ERROR: status = -5 [ 1742.214999][T21416] (syz-executor,21416,0):ocfs2_journal_shutdown:1103 ERROR: status = -5 [ 1742.396942][T27588] fuse: Unknown parameter 'default_permissio' [ 1742.663844][ T31] audit: type=1326 audit(1789217559.996:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27591 comm="syz.7.6271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f565e99e159 code=0x0 [ 1742.760047][T11088] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1743.056559][T11088] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1743.203575][T11088] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1743.221308][T11088] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1743.512361][T27595] ceph: No mds server is up or the cluster is laggy [ 1743.564134][T11088] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1743.720766][T21416] ocfs2: Unmounting device (7,0) on (node local) [ 1744.757935][T27622] fuse: Bad value for 'fd' [ 1745.069857][T27627] syzkaller0: entered promiscuous mode [ 1745.069878][T27627] syzkaller0: entered allmulticast mode [ 1745.158887][T27630] fuse: Unknown parameter 'default_permission' [ 1745.540073][ T31] audit: type=1326 audit(1789217562.866:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27638 comm="syz.4.6287" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f004219e159 code=0x0 [ 1745.860073][T27647] FAULT_INJECTION: forcing a failure. [ 1745.860073][T27647] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.860106][T27647] CPU: 0 UID: 0 PID: 27647 Comm: syz.7.6289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1745.860133][T27647] Tainted: [L]=SOFTLOCKUP [ 1745.860141][T27647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1745.860153][T27647] Call Trace: [ 1745.860161][T27647] [ 1745.860170][T27647] dump_stack_lvl+0xe8/0x150 [ 1745.860207][T27647] should_fail_ex+0x410/0x560 [ 1745.860235][T27647] should_failslab+0xa8/0x100 [ 1745.860260][T27647] ? mempool_init_node+0x1f4/0x510 [ 1745.860294][T27647] kmem_cache_alloc_noprof+0xa1/0x600 [ 1745.860326][T27647] ? mempool_init_node+0x1f4/0x510 [ 1745.860356][T27647] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1745.860387][T27647] ? mempool_init_node+0x1f4/0x510 [ 1745.860420][T27647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1745.860451][T27647] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1745.860472][T27647] mempool_init_node+0x1f4/0x510 [ 1745.860511][T27647] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1745.860533][T27647] mempool_create_node_noprof+0xb8/0x150 [ 1745.860566][T27647] ? __pfx_mempool_free_slab+0x10/0x10 [ 1745.860590][T27647] ceph_osdc_init+0x4fa/0x900 [ 1745.860624][T27647] ceph_create_client+0x246/0x310 [ 1745.860648][T27647] ceph_get_tree+0x1ca/0x1a40 [ 1745.860681][T27647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1745.860704][T27647] ? apparmor_capable+0x126/0x170 [ 1745.860736][T27647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1745.860768][T27647] vfs_get_tree+0x92/0x2a0 [ 1745.860791][T27647] vfs_cmd_create+0xa2/0x200 [ 1745.860818][T27647] __se_sys_fsconfig+0x6b9/0x810 [ 1745.860848][T27647] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1745.860875][T27647] ? rcu_is_watching+0x16/0xb0 [ 1745.860900][T27647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1745.860929][T27647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1745.860953][T27647] ? __x64_sys_fsconfig+0x20/0xc0 [ 1745.860979][T27647] do_syscall_64+0x166/0x520 [ 1745.861001][T27647] ? trace_irq_disable+0x3b/0x140 [ 1745.861022][T27647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.861048][T27647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.861068][T27647] RIP: 0033:0x7f565e99e159 [ 1745.861087][T27647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.861103][T27647] RSP: 002b:00007f565f885028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1745.861125][T27647] RAX: ffffffffffffffda RBX: 00007f565ec25fa0 RCX: 00007f565e99e159 [ 1745.861140][T27647] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1745.861153][T27647] RBP: 00007f565ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 1745.861166][T27647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1745.861178][T27647] R13: 00007f565ec26038 R14: 00007f565ec25fa0 R15: 00007fff3c184288 [ 1745.861210][T27647] [ 1746.676497][T27663] fuse: Bad value for 'fd' [ 1747.069132][T27667] syzkaller0: entered promiscuous mode [ 1747.069153][T27667] syzkaller0: entered allmulticast mode [ 1747.106933][T27667] tipc: Enabling of bearer rejected, failed to enable media [ 1747.256702][T27669] fuse: Unknown parameter 'default_permission' [ 1747.937460][T27676] syzkaller0: entered promiscuous mode [ 1747.937481][T27676] syzkaller0: entered allmulticast mode [ 1748.547108][ T31] audit: type=1326 audit(1789217565.876:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27689 comm="syz.4.6308" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f004219e159 code=0x0 [ 1748.766550][T27697] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6310'. [ 1748.894259][T27703] fuse: Unknown parameter 'default_permission' [ 1749.116599][T27707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6313'. [ 1749.162482][T27706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1749.197654][T27706] loop5: detected capacity change from 0 to 8 [ 1749.252166][T27706] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1749.252198][T27706] SQUASHFS error: Failed to read block 0x9b: -5 [ 1749.252211][T27706] SQUASHFS error: Unable to read metadata cache entry [99] [ 1749.252224][T27706] SQUASHFS error: Unable to read inode 0x127 [ 1749.971045][T27718] syzkaller0: entered promiscuous mode [ 1749.971066][T27718] syzkaller0: entered allmulticast mode [ 1750.027507][T27718] tipc: Enabling of bearer rejected, failed to enable media [ 1750.766134][T27740] loop2: detected capacity change from 0 to 1024 [ 1751.205086][T27742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6325'. [ 1751.606041][ T31] audit: type=1326 audit(1789217568.926:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3790b9e159 code=0x0 [ 1751.849852][T27764] loop4: detected capacity change from 0 to 8 [ 1751.879811][T27764] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1751.879839][T27764] SQUASHFS error: Failed to read block 0x9b: -5 [ 1751.879852][T27764] SQUASHFS error: Unable to read metadata cache entry [99] [ 1751.879864][T27764] SQUASHFS error: Unable to read inode 0x127 [ 1753.367062][T27790] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6344'. [ 1753.390893][T27788] syzkaller0: entered promiscuous mode [ 1753.390913][T27788] syzkaller0: entered allmulticast mode [ 1753.453126][T27788] tipc: Enabling of bearer rejected, failed to enable media [ 1753.565685][T27789] loop0: detected capacity change from 0 to 1024 [ 1755.464776][ T31] audit: type=1326 audit(1789217572.796:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27814 comm="syz.7.6351" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f565e99e159 code=0x0 [ 1756.002621][T27832] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6354'. [ 1756.408816][T27840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1757.088396][T27857] tipc: Enabling of bearer rejected, failed to enable media [ 1757.180725][T27859] syzkaller0: entered promiscuous mode [ 1757.180753][T27859] syzkaller0: entered allmulticast mode [ 1773.012808][T16368] Bluetooth: hci4: command 0x0406 tx timeout [ 1794.935652][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1794.947350][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.581425][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.593537][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1907.687629][ T32] INFO: task kworker/u8:9:24816 blocked for more than 144 seconds. [ 1907.687655][ T32] Tainted: G L syzkaller #0 [ 1907.687667][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1907.687676][ T32] task:kworker/u8:9 state:D stack:23624 pid:24816 tgid:24816 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1907.687733][ T32] Workqueue: events_unbound bpf_map_free_deferred [ 1907.687761][ T32] Call Trace: [ 1907.687769][ T32] [ 1907.687784][ T32] __schedule+0x17db/0x58f0 [ 1907.687807][ T32] ? __lock_acquire+0x747/0x2de0 [ 1907.687836][ T32] ? kfree+0x1c5/0x650 [ 1907.687878][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1907.687911][ T32] ? __pfx___schedule+0x10/0x10 [ 1907.687929][ T32] ? lock_acquire+0x115/0x350 [ 1907.687956][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.687983][ T32] ? schedule+0x90/0x2b0 [ 1907.688006][ T32] schedule+0x164/0x2b0 [ 1907.688028][ T32] synchronize_rcu_expedited+0x619/0x770 [ 1907.688055][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688079][ T32] ? __lock_acquire+0x747/0x2de0 [ 1907.688101][ T32] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1907.688130][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1907.688157][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688181][ T32] ? __lock_acquire+0x747/0x2de0 [ 1907.688207][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688233][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688261][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688296][ T32] sock_map_free+0x29/0x3c0 [ 1907.688327][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688352][ T32] ? kfree+0x4d/0x650 [ 1907.688383][ T32] bpf_map_free+0x19d/0x3f0 [ 1907.688407][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1907.688436][ T32] process_scheduled_works+0xc3d/0x1630 [ 1907.688463][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688516][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1907.688549][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688573][ T32] ? assign_work+0x3cf/0x5d0 [ 1907.688605][ T32] worker_thread+0xa47/0xfb0 [ 1907.688659][ T32] kthread+0x38b/0x480 [ 1907.688680][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1907.688707][ T32] ? __pfx_kthread+0x10/0x10 [ 1907.688729][ T32] ret_from_fork+0x514/0xb70 [ 1907.688753][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1907.688785][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.688809][ T32] ? __switch_to+0xc89/0x1420 [ 1907.688841][ T32] ? __pfx_kthread+0x10/0x10 [ 1907.688867][ T32] ret_from_fork_asm+0x1a/0x30 [ 1907.688915][ T32] [ 1907.688937][ T32] INFO: task syz.5.6366:27858 blocked for more than 144 seconds. [ 1907.688954][ T32] Tainted: G L syzkaller #0 [ 1907.688966][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1907.688975][ T32] task:syz.5.6366 state:D stack:24360 pid:27858 tgid:27858 ppid:26099 task_flags:0x400040 flags:0x00080002 [ 1907.689031][ T32] Call Trace: [ 1907.689038][ T32] [ 1907.689051][ T32] __schedule+0x17db/0x58f0 [ 1907.689071][ T32] ? __lock_acquire+0x747/0x2de0 [ 1907.689115][ T32] ? __pfx___schedule+0x10/0x10 [ 1907.689133][ T32] ? lock_acquire+0x115/0x350 [ 1907.689159][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.689185][ T32] ? schedule+0x90/0x2b0 [ 1907.689208][ T32] schedule+0x164/0x2b0 [ 1907.689230][ T32] synchronize_rcu_expedited+0x619/0x770 [ 1907.689261][ T32] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1907.689289][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1907.689327][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.689354][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.689380][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.689413][ T32] packet_release+0xa38/0xd00 [ 1907.689439][ T32] ? __pfx_packet_release+0x10/0x10 [ 1907.689458][ T32] ? down_write+0x16b/0x200 [ 1907.689489][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.689519][ T32] __sock_release+0xa0/0x1f0 [ 1907.689552][ T32] ? __pfx_sock_close+0x10/0x10 [ 1907.689583][ T32] sock_close+0x1c/0x30 [ 1907.689612][ T32] __fput+0x418/0xa50 [ 1907.689647][ T32] task_work_run+0x1d9/0x270 [ 1907.689673][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1907.689704][ T32] exit_to_user_mode_loop+0x204/0x770 [ 1907.689726][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.689749][ T32] ? rcu_is_watching+0x16/0xb0 [ 1907.689778][ T32] do_syscall_64+0x328/0x520 [ 1907.689801][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.689828][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.689849][ T32] RIP: 0033:0x7f3790b9e159 [ 1907.689871][ T32] RSP: 002b:00007ffd08ba4fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1907.689891][ T32] RAX: 0000000000000000 RBX: 00007f3790e27da0 RCX: 00007f3790b9e159 [ 1907.689906][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1907.689918][ T32] RBP: 00007f3790e27da0 R08: 0000000000000006 R09: 0000000000000000 [ 1907.689931][ T32] R10: 00007f3790e27cb0 R11: 0000000000000246 R12: 00000000001ad2cd [ 1907.689945][ T32] R13: 00007f3790e2627c R14: 00000000001ad217 R15: 00007f3790e26270 [ 1907.689977][ T32] [ 1907.689986][ T32] INFO: task dhcpcd:27879 blocked for more than 144 seconds. [ 1907.690002][ T32] Tainted: G L syzkaller #0 [ 1907.690013][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1907.690022][ T32] task:dhcpcd state:D stack:25672 pid:27879 tgid:27879 ppid:5272 task_flags:0x400140 flags:0x00080000 [ 1907.690078][ T32] Call Trace: [ 1907.690085][ T32] [ 1907.690097][ T32] __schedule+0x17db/0x58f0 [ 1907.690118][ T32] ? __lock_acquire+0x747/0x2de0 [ 1907.690145][ T32] ? security_file_alloc+0x34/0x310 [ 1907.690179][ T32] ? stack_trace_save+0xa9/0x100 [ 1907.690211][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 1907.690252][ T32] ? __pfx___schedule+0x10/0x10 [ 1907.690270][ T32] ? lock_acquire+0x115/0x350 [ 1907.690296][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.690322][ T32] ? schedule+0x90/0x2b0 [ 1907.690346][ T32] schedule+0x164/0x2b0 [ 1907.690367][ T32] synchronize_rcu_expedited+0x619/0x770 [ 1907.690398][ T32] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1907.690426][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1907.690463][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.690491][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.690517][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.690549][ T32] __unregister_prot_hook+0x4de/0x6b0 [ 1907.690583][ T32] ? packet_do_bind+0x96/0xe90 [ 1907.690607][ T32] ? packet_do_bind+0x96/0xe90 [ 1907.690629][ T32] packet_do_bind+0x58d/0xe90 [ 1907.690653][ T32] ? packet_do_bind+0x96/0xe90 [ 1907.690680][ T32] __sys_bind+0x2e3/0x410 [ 1907.690705][ T32] ? __pfx___sys_bind+0x10/0x10 [ 1907.690741][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1907.690771][ T32] __x64_sys_bind+0x7a/0x90 [ 1907.690794][ T32] do_syscall_64+0x166/0x520 [ 1907.690817][ T32] ? trace_irq_disable+0x3b/0x140 [ 1907.690838][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.690868][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.690889][ T32] RIP: 0033:0x7f710d8f42d7 [ 1907.690906][ T32] RSP: 002b:00007fff2812fb48 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 1907.690926][ T32] RAX: ffffffffffffffda RBX: 0000556264d2c540 RCX: 00007f710d8f42d7 [ 1907.690941][ T32] RDX: 0000000000000014 RSI: 00007fff2812fb60 RDI: 0000000000000003 [ 1907.690955][ T32] RBP: 000055623cf5e4b0 R08: 00007f710d9c3ac0 R09: 0000000000000000 [ 1907.690969][ T32] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000 [ 1907.690981][ T32] R13: 0000556264d2b9a0 R14: 0000000000000000 R15: 000055623cf73ac0 [ 1907.691013][ T32] [ 1907.691022][ T32] [ 1907.691022][ T32] Showing all locks held in the system: [ 1907.691031][ T32] locks held by kthreadd/2: 2, last CPU#0: [ 1907.691045][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1907.691096][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 1907.691151][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 1907.691165][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.691222][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.691278][ T32] #2: ffff88807ed707a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1907.691340][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1907.691354][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1907.691404][ T32] locks held by kworker/u8:2/37: 3, last CPU#0: [ 1907.691418][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.691474][ T32] #1: ffffc90000ad7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.691530][ T32] #2: ffff88807c8107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1907.691592][ T32] locks held by kworker/u8:4/59: 4, last CPU#0: [ 1907.691606][ T32] #0: ffff888047c34940 ((wq_completion)wg-kex-wg1#50){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.691668][ T32] #1: ffffc9000200fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.691725][ T32] #2: ffff8880632c1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1907.691788][ T32] #3: ffff888087550d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1907.691849][ T32] locks held by kworker/u8:5/60: 3, last CPU#0: [ 1907.691868][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.691924][ T32] #1: ffffc9000202fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.691981][ T32] #2: ffff8880349307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1907.692043][ T32] locks held by kworker/u8:6/233: 3, last CPU#0: [ 1907.692057][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.692113][ T32] #1: ffffc9000207fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.692170][ T32] #2: ffff8880515a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1907.692241][ T32] locks held by kworker/R-ipv6_/3188: 3, on CPU#0: [ 1907.692256][ T32] #0: ffff888031def940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.692312][ T32] #1: ffffc9000e697c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.692369][ T32] #2: ffffffff90252800 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1907.692423][ T32] locks held by kworker/R-bat_e/3219: 2, last CPU#0: [ 1907.692438][ T32] #0: ffff8880321fd940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.692493][ T32] #1: ffffc9000e817c20 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1907.692552][ T32] locks held by udevd/4977: 2, last CPU#0: [ 1907.692566][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1907.692615][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 1907.692666][ T32] locks held by crond/5349: 4, last CPU#0: [ 1907.692679][ T32] #0: ffff888077b58380 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: lookup_open+0x231/0x1a40 [ 1907.692734][ T32] #1: ffff888077b58218 (&ei->i_data_sem [ 1911.412779][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1912.526200][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23901/1:b..l P27883/1:b..l P5349/1:b..l P27878/1:b..l P4977/1:b..l [ 1912.538925][ C0] rcu: (detected by 0, t=10502 jiffies, g=327133, q=684978 ncpus=1) [ 1912.546969][ C0] task:udevd state:R running task stack:23400 pid:4977 tgid:4977 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1912.560441][ C0] Call Trace: [ 1912.563699][ C0] [ 1912.566617][ C0] __schedule+0x17db/0x58f0 [ 1912.571116][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1912.576316][ C0] ? __pfx___schedule+0x10/0x10 [ 1912.581150][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1912.586768][ C0] ? __lock_acquire+0x747/0x2de0 [ 1912.591700][ C0] preempt_schedule_irq+0x4b/0x90 [ 1912.596713][ C0] irqentry_exit+0x14f/0x910 [ 1912.601286][ C0] ? trace_irq_disable+0x3b/0x140 [ 1912.606318][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1912.612282][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1912.617549][ C0] Code: ff ff ff e8 f0 d9 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 b5 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 0a 16 6d ff cc 48 8d 3d c7 41 da [ 1912.637134][ C0] RSP: 0018:ffffc900034cf700 EFLAGS: 00000296 [ 1912.643204][ C0] RAX: 00badaa68ac43500 RBX: 0000000000000000 RCX: 0000000000000046 [ 1912.651156][ C0] RDX: 0000000074fa2fa7 RSI: ffffffff8e6fecbc RDI: ffffffff8c6d9c80 [ 1912.659109][ C0] RBP: ffff88807e361f40 R08: ffffffff81b0f6ed R09: 0000000000000000 [ 1912.667060][ C0] R10: dffffc0000000000 R11: ffffffff81b285f0 R12: ffffffff8ed5c8a0 [ 1912.675013][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1912.682969][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1912.689107][ C0] ? is_module_text_address+0x1d/0x1e0 [ 1912.694579][ C0] ? is_module_text_address+0x1d/0x1e0 [ 1912.700023][ C0] is_module_text_address+0x39/0x1e0 [ 1912.705308][ C0] ? is_module_text_address+0x1d/0x1e0 [ 1912.710753][ C0] kernel_text_address+0x94/0xe0 [ 1912.715678][ C0] __kernel_text_address+0xd/0x30 [ 1912.720704][ C0] unwind_get_return_address+0x4d/0x90 [ 1912.726149][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1912.732285][ C0] arch_stack_walk+0xfb/0x150 [ 1912.736960][ C0] stack_trace_save+0xa9/0x100 [ 1912.741717][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1912.747077][ C0] ? __lock_acquire+0x747/0x2de0 [ 1912.752003][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1912.757622][ C0] save_stack+0x122/0x230 [ 1912.761940][ C0] ? __pfx_save_stack+0x10/0x10 [ 1912.766775][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1912.772390][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 1912.777670][ C0] ? __slab_free+0x274/0x2c0 [ 1912.782241][ C0] ? qlist_free_all+0x99/0x100 [ 1912.786989][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1912.792602][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1912.797611][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1912.803238][ C0] ? do_getname+0x2e/0x250 [ 1912.807642][ C0] ? vfs_fstatat+0x45/0x170 [ 1912.812129][ C0] ? __x64_sys_newfstatat+0x151/0x200 [ 1912.817486][ C0] ? do_syscall_64+0x166/0x520 [ 1912.822233][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.828286][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1912.833904][ C0] ? page_ext_put+0x97/0xc0 [ 1912.838398][ C0] __reset_page_owner+0x71/0x1f0 [ 1912.843323][ C0] __free_frozen_pages+0xc93/0xd90 [ 1912.848439][ C0] __slab_free+0x274/0x2c0 [ 1912.852853][ C0] qlist_free_all+0x99/0x100 [ 1912.857427][ C0] ? do_getname+0x2e/0x250 [ 1912.861828][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1912.867458][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1912.872902][ C0] __kasan_slab_alloc+0x22/0x80 [ 1912.877740][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1912.883282][ C0] ? do_getname+0x2e/0x250 [ 1912.887683][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1912.893306][ C0] ? do_getname+0x2e/0x250 [ 1912.897732][ C0] do_getname+0x2e/0x250 [ 1912.901984][ C0] ? getname_flags+0x11/0x20 [ 1912.906566][ C0] vfs_fstatat+0x45/0x170 [ 1912.910889][ C0] __x64_sys_newfstatat+0x151/0x200 [ 1912.916086][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1912.921809][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1912.927427][ C0] ? rcu_is_watching+0x16/0xb0 [ 1912.932177][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1912.937806][ C0] do_syscall_64+0x166/0x520 [ 1912.942381][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.948435][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.954311][ C0] RIP: 0033:0x7efd52d11b0a [ 1912.958707][ C0] RSP: 002b:00007fff527a0df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1912.967102][ C0] RAX: ffffffffffffffda RBX: 00005628ddc5b428 RCX: 00007efd52d11b0a [ 1912.975055][ C0] RDX: 00007fff527a0e00 RSI: 00005628ddc49ed3 RDI: 00000000ffffff9c [ 1912.983008][ C0] RBP: 00005628edf45148 R08: 00063478c1c69200 R09: 3fffffffffffffff [ 1912.990959][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.998929][ C0] R13: 00007fff527a0e00 R14: 0000000000000000 R15: 00063478c1c69200 [ 1913.006900][ C0] [ 1913.009901][ C0] task:syz.2.6371 state:R running task stack:26888 pid:27878 tgid:27876 ppid:22308 task_flags:0x40044c flags:0x00080001 [ 1913.023404][ C0] Call Trace: [ 1913.026662][ C0] [ 1913.029578][ C0] __schedule+0x17db/0x58f0 [ 1913.034075][ C0] ? irqentry_exit+0x218/0x910 [ 1913.038825][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.044451][ C0] ? trace_irq_disable+0x3b/0x140 [ 1913.049464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.055096][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1913.060134][ C0] ? __pfx___schedule+0x10/0x10 [ 1913.064981][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1913.070341][ C0] preempt_schedule_common+0x7f/0xd0 [ 1913.075610][ C0] preempt_schedule_thunk+0x16/0x40 [ 1913.080800][ C0] _raw_spin_unlock+0x41/0x50 [ 1913.085471][ C0] __zap_vma_range+0x40e1/0x4f80 [ 1913.090430][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.096050][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1913.101326][ C0] ? mas_find+0x6d6/0xcb0 [ 1913.105645][ C0] unmap_vmas+0x390/0x550 [ 1913.109957][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.115582][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1913.120412][ C0] ? mas_next_slot+0xc91/0xd70 [ 1913.125175][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.130797][ C0] exit_mmap+0x293/0x9f0 [ 1913.135034][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1913.139821][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1913.144501][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.150120][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 1913.155307][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.160933][ C0] __mmput+0x118/0x420 [ 1913.164995][ C0] exit_mm+0x221/0x2d0 [ 1913.169050][ C0] do_exit+0x6cd/0x2360 [ 1913.173279][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.178902][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.184523][ C0] ? __pfx_do_exit+0x10/0x10 [ 1913.189097][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1913.194113][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.199737][ C0] do_group_exit+0x22d/0x2f0 [ 1913.204328][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1913.209542][ C0] get_signal+0x121b/0x12c0 [ 1913.214052][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1913.219594][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1913.225741][ C0] ? __x64_sys_recvmsg+0x25a/0x290 [ 1913.230860][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1913.236214][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.241829][ C0] ? rcu_is_watching+0x16/0xb0 [ 1913.246582][ C0] do_syscall_64+0x328/0x520 [ 1913.251169][ C0] ? trace_irq_disable+0x3b/0x140 [ 1913.256174][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.262245][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.268119][ C0] RIP: 0033:0x7ff437b9e159 [ 1913.272516][ C0] RSP: 002b:00007ff438984028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1913.280913][ C0] RAX: fffffffffffffe00 RBX: 00007ff437e25fa0 RCX: 00007ff437b9e159 [ 1913.288886][ C0] RDX: 0000000040000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1913.296951][ C0] RBP: 00007ff437c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1913.304901][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1913.312854][ C0] R13: 00007ff437e26038 R14: 00007ff437e25fa0 R15: 00007ffe97bbbcb8 [ 1913.320824][ C0] [ 1913.323822][ C0] task:crond state:R running task stack:23184 pid:5349 tgid:5349 ppid:1 task_flags:0x400000 flags:0x00080000 [ 1913.337295][ C0] Call Trace: [ 1913.340554][ C0] [ 1913.343467][ C0] __schedule+0x17db/0x58f0 [ 1913.347967][ C0] ? lookup_open+0x9e1/0x1a40 [ 1913.352647][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1913.357744][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.363371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.368992][ C0] ? __lock_acquire+0x747/0x2de0 [ 1913.373919][ C0] ? __pfx___schedule+0x10/0x10 [ 1913.378756][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.384372][ C0] ? __lock_acquire+0x747/0x2de0 [ 1913.389304][ C0] preempt_schedule_irq+0x4b/0x90 [ 1913.394313][ C0] irqentry_exit+0x14f/0x910 [ 1913.398886][ C0] ? trace_irq_disable+0x3b/0x140 [ 1913.403905][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1913.409897][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1913.415193][ C0] Code: ff ff ff e8 f0 d9 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 b5 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 0a 16 6d ff cc 48 8d 3d c7 41 da [ 1913.434786][ C0] RSP: 0018:ffffc900036eec10 EFLAGS: 00000292 [ 1913.440833][ C0] RAX: 6f029c2d14205000 RBX: 0000000000000000 RCX: 0000000000000046 [ 1913.448805][ C0] RDX: 00000000a93a1f12 RSI: ffffffff8e6fecbc RDI: ffffffff8c6d9c80 [ 1913.456758][ C0] RBP: ffff888026ea8000 R08: ffffffff82439c22 R09: 0000000000000000 [ 1913.464712][ C0] R10: dffffc0000000000 R11: fffff9400012a207 R12: ffffffff8ed5c8a0 [ 1913.472664][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1913.480622][ C0] ? page_ext_get+0x22/0x2e0 [ 1913.485206][ C0] ? page_ext_get+0x22/0x2e0 [ 1913.489781][ C0] page_ext_get+0x3e/0x2e0 [ 1913.494181][ C0] ? page_ext_get+0x22/0x2e0 [ 1913.498782][ C0] __reset_page_owner+0x28/0x1f0 [ 1913.503725][ C0] __free_frozen_pages+0xc93/0xd90 [ 1913.508841][ C0] __slab_free+0x274/0x2c0 [ 1913.513239][ C0] ? lock_acquire+0x115/0x350 [ 1913.517929][ C0] ? qlist_free_all+0x8e/0x100 [ 1913.522952][ C0] qlist_free_all+0x99/0x100 [ 1913.527547][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1913.532998][ C0] __kasan_kmalloc+0x22/0xb0 [ 1913.537576][ C0] __kmalloc_noprof+0x36b/0x720 [ 1913.542500][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 1913.547523][ C0] ? ext4_find_extent+0x1f5/0xcd0 [ 1913.552541][ C0] ? ext4_find_extent+0x1f5/0xcd0 [ 1913.557565][ C0] ext4_find_extent+0x1f5/0xcd0 [ 1913.562421][ C0] ext4_ext_map_blocks+0x2a9/0x5680 [ 1913.567603][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.573240][ C0] ? __lock_acquire+0x747/0x2de0 [ 1913.578174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.583796][ C0] ? __lock_acquire+0x747/0x2de0 [ 1913.588765][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.594387][ C0] ? __lock_acquire+0x747/0x2de0 [ 1913.599330][ C0] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1913.604966][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.610585][ C0] ? __lock_acquire+0x747/0x2de0 [ 1913.615526][ C0] ? lock_acquire+0x115/0x350 [ 1913.620192][ C0] ext4_map_query_blocks+0x136/0x9c0 [ 1913.625467][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.631087][ C0] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1913.636891][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.642507][ C0] ? down_read+0x2be/0x330 [ 1913.646939][ C0] ext4_map_blocks+0x44c/0x12c0 [ 1913.651792][ C0] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1913.657084][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.662703][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 1913.668148][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.673775][ C0] ext4_getblk+0x1c3/0x7c0 [ 1913.678178][ C0] ? path_openat+0x677/0x1d60 [ 1913.682834][ C0] ? do_file_open+0x23e/0x4a0 [ 1913.687503][ C0] ? __pfx_ext4_getblk+0x10/0x10 [ 1913.692429][ C0] ? __lock_acquire+0x747/0x2de0 [ 1913.697353][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.703151][ C0] ext4_bread_batch+0x64/0x4a0 [ 1913.707913][ C0] __ext4_find_entry+0xf01/0x1930 [ 1913.712932][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1913.718043][ C0] ? __pfx___ext4_find_entry+0x10/0x10 [ 1913.723492][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.729131][ C0] ? ext4_fname_prepare_lookup+0x3d8/0x4f0 [ 1913.734941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.740575][ C0] ? d_alloc_parallel+0x1535/0x16b0 [ 1913.745766][ C0] ext4_lookup+0x17b/0x710 [ 1913.750174][ C0] ? d_alloc_parallel+0x39c/0x16b0 [ 1913.755268][ C0] ? __pfx_ext4_lookup+0x10/0x10 [ 1913.760197][ C0] ? d_lookup+0x1f/0xa0 [ 1913.764337][ C0] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1913.770494][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.776147][ C0] lookup_open+0x9e1/0x1a40 [ 1913.780657][ C0] path_openat+0x677/0x1d60 [ 1913.785162][ C0] do_file_open+0x23e/0x4a0 [ 1913.789677][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1913.794704][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.800323][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1913.805166][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.810783][ C0] ? alloc_fd+0x651/0x6c0 [ 1913.815110][ C0] do_sys_openat2+0x115/0x200 [ 1913.819778][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1913.824967][ C0] ? rcu_is_watching+0x16/0xb0 [ 1913.829715][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.835362][ C0] __x64_sys_openat+0x138/0x170 [ 1913.840206][ C0] do_syscall_64+0x166/0x520 [ 1913.844784][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.850847][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.856750][ C0] RIP: 0033:0x7f09c26f9407 [ 1913.861150][ C0] RSP: 002b:00007fff0165a3f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1913.869544][ C0] RAX: ffffffffffffffda RBX: 00007f09c25a9c80 RCX: 00007f09c26f9407 [ 1913.877582][ C0] RDX: 0000000000000000 RSI: 00007f09c28ec764 RDI: ffffffffffffff9c [ 1913.885537][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1913.893504][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f09c28f8492 [ 1913.901471][ C0] R13: 00007f09c28f8492 R14: 0000000000000001 R15: 0000000000000020 [ 1913.909443][ C0] [ 1913.912450][ C0] task:syz.1.6373 state:R running task stack:25608 pid:27883 tgid:27883 ppid:23371 task_flags:0x40044c flags:0x00080002 [ 1913.925926][ C0] Call Trace: [ 1913.929187][ C0] [ 1913.932101][ C0] __schedule+0x17db/0x58f0 [ 1913.936604][ C0] ? irqentry_exit+0x218/0x910 [ 1913.941374][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.946993][ C0] ? trace_irq_disable+0x3b/0x140 [ 1913.952007][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.957624][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1913.962639][ C0] ? __pfx___schedule+0x10/0x10 [ 1913.967481][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1913.972856][ C0] preempt_schedule_common+0x7f/0xd0 [ 1913.978155][ C0] preempt_schedule_thunk+0x16/0x40 [ 1913.983346][ C0] _raw_spin_unlock+0x41/0x50 [ 1913.988017][ C0] __zap_vma_range+0x40e1/0x4f80 [ 1913.992994][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1913.998618][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1914.003900][ C0] ? mas_find+0x6d6/0xcb0 [ 1914.008218][ C0] unmap_vmas+0x390/0x550 [ 1914.012531][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.018154][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1914.022987][ C0] ? mas_next_slot+0xc91/0xd70 [ 1914.027752][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.033396][ C0] exit_mmap+0x293/0x9f0 [ 1914.037635][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1914.042411][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1914.047094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.052712][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 1914.057900][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.063523][ C0] __mmput+0x118/0x420 [ 1914.067584][ C0] exit_mm+0x221/0x2d0 [ 1914.071639][ C0] do_exit+0x6cd/0x2360 [ 1914.075788][ C0] ? __pfx_do_exit+0x10/0x10 [ 1914.080364][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1914.085380][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.091004][ C0] do_group_exit+0x22d/0x2f0 [ 1914.095580][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1914.100779][ C0] get_signal+0x121b/0x12c0 [ 1914.105293][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1914.111617][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1914.117798][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1914.123156][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.128775][ C0] ? rcu_is_watching+0x16/0xb0 [ 1914.133530][ C0] do_syscall_64+0x328/0x520 [ 1914.138105][ C0] ? trace_irq_disable+0x3b/0x140 [ 1914.143111][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.149169][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.155046][ C0] RIP: 0033:0x7f46ed79ef49 [ 1914.159441][ C0] RSP: 002b:00007ffd424daf58 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1914.167834][ C0] RAX: fffffffffffffffc RBX: 00007f46ed75a4e0 RCX: 00007f46ed79ef49 [ 1914.175880][ C0] RDX: 00007f46ed75a4e0 RSI: 0000000000000058 RDI: 00007ffd424dafb0 [ 1914.183832][ C0] RBP: 00007f46ee63d6c0 R08: 00007f46ee63d6c0 R09: 00007ffd424db097 [ 1914.191802][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1914.199753][ C0] R13: 000000000000006e R14: 00007ffd424dafb0 R15: 00007ffd424db098 [ 1914.207721][ C0] [ 1914.210721][ C0] task:syz-executor state:R running task stack:22312 pid:23901 tgid:23901 ppid:23878 task_flags:0x400140 flags:0x00080000 [ 1914.224192][ C0] Call Trace: [ 1914.227452][ C0] [ 1914.230365][ C0] __schedule+0x17db/0x58f0 [ 1914.234859][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.240492][ C0] ? __lock_acquire+0x747/0x2de0 [ 1914.245418][ C0] ? __pfx___schedule+0x10/0x10 [ 1914.250267][ C0] preempt_schedule_irq+0x4b/0x90 [ 1914.255274][ C0] irqentry_exit+0x14f/0x910 [ 1914.259848][ C0] ? trace_irq_disable+0x3b/0x140 [ 1914.264866][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1914.270835][ C0] RIP: 0010:unwind_next_frame+0x4d0/0x2550 [ 1914.276633][ C0] Code: fc ff df 4c 8b 7c 24 10 49 8d 6e 38 0f 84 8a 16 00 00 e9 ee 01 00 00 49 89 d5 49 89 d7 4c 89 e0 4c 29 f8 48 89 c1 48 c1 f9 02 <48> c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 [ 1914.296222][ C0] RSP: 0018:ffffc900055074a0 EFLAGS: 00000256 [ 1914.302276][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1914.310228][ C0] RDX: ffffffff909e01a0 RSI: ffffffff912202b6 RDI: ffffffff8c6d9c20 [ 1914.318182][ C0] RBP: ffffffff824ceca2 R08: 0000000000000001 R09: 0000000000000000 [ 1914.326133][ C0] R10: dffffc0000000000 R11: ffffffff81b285f0 R12: ffffffff909e01a0 [ 1914.334087][ C0] R13: ffffffff909e01a0 R14: ffffc90005507548 R15: ffffffff909e01a0 [ 1914.342044][ C0] ? __x64_sys_newfstat+0x132/0x270 [ 1914.347233][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1914.353418][ C0] ? __x64_sys_newfstat+0x133/0x270 [ 1914.358608][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1914.363712][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1914.369879][ C0] arch_stack_walk+0x11b/0x150 [ 1914.374635][ C0] ? __x64_sys_newfstat+0x133/0x270 [ 1914.379825][ C0] stack_trace_save+0xa9/0x100 [ 1914.384587][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1914.389968][ C0] ? __lock_acquire+0x747/0x2de0 [ 1914.394896][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.400517][ C0] save_stack+0x122/0x230 [ 1914.404832][ C0] ? __pfx_save_stack+0x10/0x10 [ 1914.409668][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.415302][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 1914.420580][ C0] ? __slab_free+0x274/0x2c0 [ 1914.425168][ C0] ? qlist_free_all+0x99/0x100 [ 1914.429914][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1914.435527][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 1914.440289][ C0] ? __kmalloc_noprof+0x36b/0x720 [ 1914.445315][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 1914.451024][ C0] ? tomoyo_path_perm+0x283/0x560 [ 1914.456031][ C0] ? security_inode_getattr+0x12b/0x310 [ 1914.461567][ C0] ? __x64_sys_newfstat+0x133/0x270 [ 1914.466774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.472395][ C0] ? page_ext_put+0x97/0xc0 [ 1914.476909][ C0] __reset_page_owner+0x71/0x1f0 [ 1914.481834][ C0] __free_frozen_pages+0xc93/0xd90 [ 1914.486970][ C0] __slab_free+0x274/0x2c0 [ 1914.491368][ C0] ? lock_acquire+0x115/0x350 [ 1914.496056][ C0] ? qlist_free_all+0x8e/0x100 [ 1914.500807][ C0] qlist_free_all+0x99/0x100 [ 1914.505381][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1914.510825][ C0] __kasan_kmalloc+0x22/0xb0 [ 1914.515421][ C0] __kmalloc_noprof+0x36b/0x720 [ 1914.520252][ C0] ? rcu_is_watching+0x16/0xb0 [ 1914.525025][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 1914.530033][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 1914.535741][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 1914.541456][ C0] tomoyo_realpath_from_path+0xef/0x640 [ 1914.547004][ C0] tomoyo_path_perm+0x283/0x560 [ 1914.551839][ C0] ? tomoyo_path_perm+0x251/0x560 [ 1914.556850][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1914.562207][ C0] ? __x64_sys_openat+0x138/0x170 [ 1914.567260][ C0] security_inode_getattr+0x12b/0x310 [ 1914.572625][ C0] __x64_sys_newfstat+0x133/0x270 [ 1914.577640][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.583262][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 1914.588813][ C0] ? rcu_is_watching+0x16/0xb0 [ 1914.593562][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.599189][ C0] do_syscall_64+0x166/0x520 [ 1914.603763][ C0] ? trace_irq_disable+0x3b/0x140 [ 1914.608767][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.614819][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.620714][ C0] RIP: 0033:0x7f565e99c767 [ 1914.625111][ C0] RSP: 002b:00007fff3c184528 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 1914.633506][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f565e99c767 [ 1914.641458][ C0] RDX: 0000000000000000 RSI: 00007fff3c184530 RDI: 0000000000000003 [ 1914.649407][ C0] RBP: 00007fff3c18462c R08: 0000000000000000 R09: 0000000000000000 [ 1914.657355][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000a3 [ 1914.665305][ C0] R13: 0000000000000000 R14: 00000000001ad02e R15: 00007fff3c184680 [ 1914.673293][ C0] [ 1914.676311][ C0] rcu: rcu_preempt kthread starved for 276 jiffies! g327133 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1914.687241][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1914.697186][ C0] rcu: RCU grace-period kthread stack dump: [ 1914.703050][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1914.716555][ C0] Call Trace: [ 1914.719813][ C0] [ 1914.722743][ C0] __schedule+0x17db/0x58f0 [ 1914.727238][ C0] ? __lock_acquire+0x747/0x2de0 [ 1914.732174][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1914.737283][ C0] ? __pfx___schedule+0x10/0x10 [ 1914.742113][ C0] ? lock_acquire+0x115/0x350 [ 1914.746777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.752419][ C0] ? schedule+0x90/0x2b0 [ 1914.756648][ C0] schedule+0x164/0x2b0 [ 1914.760814][ C0] schedule_timeout+0x152/0x2c0 [ 1914.765657][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1914.771023][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1914.776309][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.781926][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1914.787748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.793368][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1914.798908][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1914.803748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.809370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.814988][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.820607][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1914.826747][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1914.832033][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1914.837238][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1914.841841][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1914.847043][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1914.851974][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.857590][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1914.862611][ C0] kthread+0x38b/0x480 [ 1914.866664][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1914.871841][ C0] ? __pfx_kthread+0x10/0x10 [ 1914.876418][ C0] ret_from_fork+0x514/0xb70 [ 1914.880993][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1914.886097][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1914.891712][ C0] ? __switch_to+0xc89/0x1420 [ 1914.896384][ C0] ? __pfx_kthread+0x10/0x10 [ 1914.900958][ C0] ret_from_fork_asm+0x1a/0x30 [ 1914.905731][ C0] [ 1914.908728][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1914.915031][ C0] CPU: 0 UID: 0 PID: 3219 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1914.926298][ C0] Tainted: [L]=SOFTLOCKUP [ 1914.930597][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1914.940631][ C0] Workqueue: bat_events batadv_tt_purge [ 1914.946175][ C0] RIP: 0010:__rcu_read_lock+0x29/0x60 [ 1914.951540][ C0] Code: 90 f3 0f 1e fa 53 65 48 8b 1d 3b cf e7 11 48 81 c3 c4 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 18 ff 03 8b 03 3d 00 00 00 40 7d 07 5b e9 0d 30 63 ff cc [ 1914.971129][ C0] RSP: 0018:ffffc90000006d30 EFLAGS: 00000213 [ 1914.977203][ C0] RAX: 0000000000000000 RBX: ffff888032284344 RCX: dffffc0000000000 [ 1914.985173][ C0] RDX: dffffc0000000000 RSI: ffffffff8a1b6695 RDI: ffffc90000006e20 [ 1914.993131][ C0] RBP: 1ffff92000000dc4 R08: ffffc90000006eb0 R09: 0000000000000009 [ 1915.001080][ C0] R10: dffffc0000000000 R11: ffffffff81b285f0 R12: dffffc0000000000 [ 1915.009034][ C0] R13: ffffc90000007520 R14: ffffc90000006de8 R15: 1ffff92000000dbd [ 1915.017044][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 1915.025954][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1915.032533][ C0] CR2: 000055555d3614e8 CR3: 0000000051682000 CR4: 0000000000350ef0 [ 1915.040502][ C0] Call Trace: [ 1915.043781][ C0] [ 1915.046604][ C0] ? nft_synproxy_do_eval+0x335/0x550 [ 1915.051964][ C0] unwind_next_frame+0x88/0x2550 [ 1915.056894][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1915.062254][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1915.067357][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1915.073491][ C0] arch_stack_walk+0x11b/0x150 [ 1915.078243][ C0] ? nft_synproxy_do_eval+0x335/0x550 [ 1915.083606][ C0] ? fill_pool+0x163/0x610 [ 1915.088011][ C0] stack_trace_save+0xa9/0x100 [ 1915.092769][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1915.098139][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.103760][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1915.108872][ C0] kasan_save_track+0x3e/0x80 [ 1915.113534][ C0] ? kasan_save_track+0x3e/0x80 [ 1915.118366][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1915.123371][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1915.128994][ C0] ? fill_pool+0x163/0x610 [ 1915.133408][ C0] ? debug_object_activate+0x38d/0x420 [ 1915.138851][ C0] ? call_rcu+0x43/0x8b0 [ 1915.143093][ C0] ? skb_release_head_state+0x71/0x370 [ 1915.148544][ C0] ? __kfree_skb+0x24/0x210 [ 1915.153032][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1915.158406][ C0] ? nft_synproxy_do_eval+0x335/0x550 [ 1915.163803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.169424][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1915.174265][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1915.179717][ C0] ? fill_pool+0x163/0x610 [ 1915.184119][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1915.189746][ C0] ? fill_pool+0x163/0x610 [ 1915.194171][ C0] ? debug_object_activate+0x364/0x420 [ 1915.199618][ C0] fill_pool+0x163/0x610 [ 1915.203875][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1915.208634][ C0] ? ip_output+0x5a/0x450 [ 1915.212964][ C0] ? debug_object_activate+0x364/0x420 [ 1915.218408][ C0] debug_object_activate+0x38d/0x420 [ 1915.223678][ C0] ? rcuref_put_slowpath+0xc8/0x1d0 [ 1915.228880][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1915.234179][ C0] call_rcu+0x43/0x8b0 [ 1915.238239][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.243884][ C0] ? dst_release+0x126/0x1b0 [ 1915.248481][ C0] skb_release_head_state+0x71/0x370 [ 1915.253760][ C0] __kfree_skb+0x24/0x210 [ 1915.258084][ C0] nft_synproxy_eval_v4+0x36a/0x4e0 [ 1915.263287][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1915.269001][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1915.273846][ C0] nft_synproxy_do_eval+0x335/0x550 [ 1915.279043][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.284666][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1915.290390][ C0] ? nft_trace_init+0x280/0x4d0 [ 1915.295240][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.300884][ C0] nft_do_chain+0x48d/0x1b10 [ 1915.305471][ C0] ? __pfx_nft_osf_eval+0x10/0x10 [ 1915.310484][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1915.315495][ C0] ? trace_packet+0x32b/0x4a0 [ 1915.320165][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1915.324940][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1915.329877][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1915.335339][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1915.340092][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.345709][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1915.351077][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1915.356526][ C0] nf_hook_slow+0xc5/0x220 [ 1915.360941][ C0] NF_HOOK+0x21f/0x3c0 [ 1915.365032][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.370655][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1915.376624][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1915.380768][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1915.385372][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1915.391363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.396986][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.402625][ C0] ? ip_local_deliver+0x113/0x190 [ 1915.407643][ C0] NF_HOOK+0x336/0x3c0 [ 1915.411703][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1915.416801][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1915.420964][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1915.425567][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1915.430666][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.436283][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1915.440864][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1915.445365][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1915.449879][ C0] process_backlog+0xa6b/0x18b0 [ 1915.454721][ C0] ? process_backlog+0x3de/0x18b0 [ 1915.459740][ C0] __napi_poll+0xaa/0x330 [ 1915.464081][ C0] net_rx_action+0x61d/0xf50 [ 1915.468669][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1915.473792][ C0] handle_softirqs+0x226/0x860 [ 1915.478547][ C0] ? do_softirq+0x77/0xd0 [ 1915.482876][ C0] ? batadv_tt_purge+0x4ae/0xa10 [ 1915.487835][ C0] do_softirq+0x77/0xd0 [ 1915.491992][ C0] [ 1915.494903][ C0] [ 1915.497830][ C0] __local_bh_enable_ip+0x100/0x140 [ 1915.503026][ C0] batadv_tt_purge+0x4ae/0xa10 [ 1915.507788][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1915.513515][ C0] process_scheduled_works+0xc3d/0x1630 [ 1915.519088][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1915.525057][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1915.530075][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.535697][ C0] ? assign_work+0x3af/0x5d0 [ 1915.540280][ C0] rescuer_thread+0x7c5/0x10e0 [ 1915.545040][ C0] ? rescuer_thread+0xb8/0x10e0 [ 1915.549900][ C0] kthread+0x38b/0x480 [ 1915.553954][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1915.559142][ C0] ? __pfx_kthread+0x10/0x10 [ 1915.563717][ C0] ret_from_fork+0x514/0xb70 [ 1915.568293][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1915.573396][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1915.579011][ C0] ? __switch_to+0xc89/0x1420 [ 1915.583682][ C0] ? __pfx_kthread+0x10/0x10 [ 1915.588261][ C0] ret_from_fork_asm+0x1a/0x30 [ 1915.593034][ C0]