last executing test programs: 6m30.646630726s ago: executing program 32 (id=97): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 6m29.247375464s ago: executing program 33 (id=106): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 6m27.315565089s ago: executing program 34 (id=119): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m32.193133499s ago: executing program 35 (id=412): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5m30.836705574s ago: executing program 36 (id=421): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xbffffffd, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x9, 0x567a5030, 0xb5f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 4m59.400715728s ago: executing program 37 (id=602): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 4m38.820405935s ago: executing program 38 (id=719): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) syz_clone3(&(0x7f0000000080)={0x180801600, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 3m43.260934306s ago: executing program 39 (id=1092): openat$ppp(0xffffffffffffff9c, 0x0, 0x280303, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x2000, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="043363e8167e675a7b4957478df830e8a1119af9"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m13.957372824s ago: executing program 40 (id=1172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x20000040) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000800)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00') 2m16.589256594s ago: executing program 41 (id=1625): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40c0) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1m52.996541396s ago: executing program 42 (id=1795): socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x35}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x5, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4349, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x109, 0x8200, 0x0, 0x365}}], 0x1, &(0x7f0000000340)={0x2e, 0x5c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m38.101898986s ago: executing program 43 (id=1880): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000a00)=r1, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0xf0, 0x28, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x8}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 1m26.578192051s ago: executing program 44 (id=1927): setns(0xc9, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r2], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) 1m10.837511867s ago: executing program 4 (id=2021): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 1m9.168817547s ago: executing program 4 (id=2034): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000008c0)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) r2 = dup3(r0, r1, 0x0) write$P9_RREADDIR(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m8.707338986s ago: executing program 4 (id=2037): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) open(0x0, 0x0, 0x0) unshare(0x62040200) 1m5.369918539s ago: executing program 45 (id=2051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e22"], 0x54}}, 0x20044010) 1m5.348416245s ago: executing program 4 (id=2058): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 1m4.044088832s ago: executing program 4 (id=2067): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/lo/disable_xfrm\x00', 0x1, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m3.678637097s ago: executing program 4 (id=2070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r0, 0xf6690000) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/172, 0xfffffffffffffeb6, 0x0, 0x0}, &(0x7f0000000040)=0x40) 58.653968261s ago: executing program 2 (id=2106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) 57.498080781s ago: executing program 2 (id=2115): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0xa, 0x3, 0xff) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r0) socket$kcm(0x10, 0x2, 0x0) socket(0x1, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 55.654342514s ago: executing program 2 (id=2125): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdca5, 0x20000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1ce, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 54.44428349s ago: executing program 2 (id=2133): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x800010, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x47c, &(0x7f0000000640)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "e58359738e229a4c668000000000ecd300e6d602000000000000000000000001", [0x8]}) socket$inet_sctp(0x2, 0x1, 0x84) 53.227706731s ago: executing program 2 (id=2137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x3, 0x2d, 0x40}, @llc={@snap={0xab, 0xaa, "c2", "f7a54a", 0x88f8, "49a952b2b2eca9ff0102a93985a94341323b142956073d3a97e5c6253d56e3e2d1072625"}}}, 0x3a) 50.767382348s ago: executing program 2 (id=2153): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000086dd605d000000283afffe800000000000000000000000000000ff020000000000b6"], 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 50.135348756s ago: executing program 46 (id=2153): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000086dd605d000000283afffe800000000000000000000000000000ff020000000000b6"], 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 48.361062841s ago: executing program 47 (id=2070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r0, 0xf6690000) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/172, 0xfffffffffffffeb6, 0x0, 0x0}, &(0x7f0000000040)=0x40) 36.594456999s ago: executing program 7 (id=2222): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) 35.197000839s ago: executing program 7 (id=2230): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 34.871746568s ago: executing program 7 (id=2232): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f00000011c0)=ANY=[], 0xb0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x8, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="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", 0x4c7) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"1774d10ed679a3761698425e02229859f202c5d54bb9aaa84c470671ed39e31fcd1987c3fab368535c1d72f471356277d68201ce587582e0b61c74107f26d9b357fed4393b6676c62cb12bb5104bc87b40120258613657f462d98097b32565f3c6a065c0ecf81581c270d0adccfdd40199844781374e1cee0129091296af79ff67a1f52be0c73043a7bb6860312b9b2d3514d05233defb9e2e9ae218a0731aa015e7f042114d434f4209218e37f80b240526d575cb63f1ca89512cd50e27c21a827328cbae0874b155506fd933a2e59978eaad1c78dbed757e9e0047f5ebd5e9faefad831e5c55100f289794dc5b2116838edc1caef786cead375259a7768ddfd6cf5ed870b7abdcef90350a64c1eb5d6e54de748d6349f7e5bcb0377df4744678e7700911426a8b8540996d54716ecd8cd3a9f8175f23d45f9a1497654d5f2e4dad96b4b34cce3a39eb084bb829e05c82249951f91b432999c302bbe8ae5f79bb8954ed23ad98f87b5c30d079b1b2186db53a3849f9dce0e4d49c04f3025d4b25bc0728ab25ea5d050dc2586bad7ac437d7a5881c06e8b9f3eae66dc2aa48d0edf763daa7c6aa90df3c61fd69cf301090790b608324f4cfcc23acdcbbf9bd7e224c5c33d817cddcd10e86cbbda0de36f52d2389fa84dad6ed1819ee056b9a80d0b81f2a6b4ac50192f87cabf46f5fc88abcfbeb4301632d353aaf091b7828d941cb1c0e1477e5761032a63dadc3c7f51de8429c63b4ad65e975e38f244c6fe40e8fc6c33c4a16deffbe1b0423e584f45023e196d92b5bbc7d1854c3f33e8b0b7c5d3d87f0119380e2d14d6630219dc0e31469c2af0db2d624cab5c276c396f7d1543370ca9d925ac2dc2204de8008517c815e9fa7cd56e53f82ce1d095cd08032f57835ecb14c39fd57c90e39557934cd278a609e2e05a07a791d417f4460d2c30c10e1ef92cc146b1f9ff6b98b2688e2f050c510feba0d6960d31522cec3f6b0f539f85898a6b6409dd179d990fb57026acd9382f505ce06db211d7a369f46d8ea5804502bc7829155794b19a098d095a00b520966e9f49c74111d1f0f0f75b07aff0d388650a63656c9e601269d2eff1740e87206416ec73c08b56570dd496846b4f1a5d76602b6594e173209e5e7cebbab3f9f29bf957d000510eff9ce7ee3fea7fff32f3b6ae414ac311e14550e9a597aec7e76df40b7352bf4ddbd00739041edda795aeaa2665ad51a836120054bb0c8c1d3149477167214a0f952c78039ec8a70e21158db26d8f0238f782a5d54dced90951085abd412ef2e5b9984c7e263dc3eac6c683e8b82c5d56b5fa1e2f65d5d0afd32bc66d76ddb87a41805e11137de7373a9f6366a9a314cc6d5e731abeb2e83f135798a8bdda1c47b36db21140a9278b86c520bdbc8338ccaf5fbd61d7e73750b38e4bb6c77c33bf5617086c8f97ab219b4f6c930fd717aed4f1fa0eebcda82322c561dcae23284e0bfa4bf7a5b4b19ff3fe3137c4e07c55543a7d3778ccfaf757fae541bcf475382cc8ab6a0ede61789652b528efaacfa804fc1583bdfeaea00565c70a5941dc7a947ed97d9b6688f6363edf0735e72d9b8a4b21e5cd2de518e27bfd41749eafa66f3452e941273050ceaf39435327737857d4718a31b83649b3dced6f37a9ce3621a83a7ba9163dea12990677d21781f4ff95a68dc4b268b4c5e428c0941443c98025773362acd28a88f8d7e42fa72b908ac6a816270d78541c98e36b838b83ba99656192624211a343e6e76e154ebdb1af56aa8489f6a30a6be0dcd84f80ab2d02ac7bee22e5f6207d74c4fda0c6d7cc71bea537718bf8bb1d3c2602903139449b046d09528b4331bd8e396bb9b5c0b15db16a72947eecd0f050de9ee9e6b82fcf48a7fbecf911fda3d013fa9941a60f41b9d1f56ac40f07e7259c7c79f17cb0a90c472d33aed227151fc93c76e7a1fee4675edae1a9fda95a5d2b42c7b13d84995ee1b6411c48329f529752d65601c034cdb13ea4051132ecb7f71953b43663053fc2a174b1a7694d6a8b3eb9facbaf8b7281e00357ee255816a489ca91656dc506deaa9c925a0e53600a9e7df5bc89db907a323ffeba03d3c06a4f0569a6c0cd02ca46eede0b9979aa5b40fa85b47b3d4f4aaf614b5b72ab9ea4289d08346759fbc4c0c25dd179d0efc994f4ace7612720dbd1b40395c95c43e24bdb5941295ccfdfb8b558b3234a80a2cfb5a50d96a31e2f1bcc4aba66994626f735d5fd742f0fc2ab2bcc0a73a6210e9b2222a3577f7cba7fd31459c58bef86eb76dd00fc165a16519d05f5aa5753b89c5391a051b2930b22eadbd1f4fc76fc675faf35bde9306ef48fa349f1978b84e033340681bf06966a833c03902d749444574b9e3e88e027b01d057db785a1e0d6b4135c3b6f2ac370a01351bcdf0474d4708675502e64e02d468c4e1454271dda60f82cefb8f6ec9bd871bb4c7a50a17f3d1d9c1bce2e79cb59704f78a31d13cd6678e20ea53e8d0bff1527bf76670982fab8cbe62377baf3c59f256e0bb21686402efd240cf07989832b02975e09b06da9486667869e543e7e868e1eb2242811f306f9cbeff4e606c62dbccfcc3dec265b396fa70c04b0816dddedfe5d70b44c35e387accad9945c91ced6665482f95e1bcd4fb603eb5add65c934d74a40dd37a24ea972babb9197dd85b102e67d5658dd8cd64b661fac6dae2e1d8f7325e2a62d1060836f53a2f3737c843a42662a7ed6eb63c5ca670273539529a760417f3d95fd4adfe86ae582742c1d54dd121e5ac820d3f547a647f72f723a66dc9830fbcc228559c77d3fd1d7443598717f69d58b9e7cc64e9aad2da810b45aaf01b377d54eddc0e97f6d1dc07aa33c30aa2667719cebf73e67d001bd967e6529f195b38dc6684758b557ce4ba3b47d84a03be117b58cc22adbab162bed3965f768982e5355d241f7f0c0943d389a61ef2c633d8b99c7b6deba3bc4e4c1b7366a178ed6bc1fb49ce646b411ccb940998d01a941546a5ad1988faa66ba6338a7562e17ee0af33e76d6dfcd0ed0fb92911b2c9cb880f367f6429a7446f090b90b83893d1c0ddb138959853b68a85894a6d5aa1d287c2a949f9331fedecf7de02a5b51014c917a42e33274e6d597bd6ab586f73ce61a96f9512a0ebc729869c664a895be61ec7882869852c922d3016726edc90f909af1d07e8a3671bf751135cd24066fad1992103bdcd5052059abb0e1df33560ab3637d66b1013f8a234e3238de1170da7addd84b21f1e870151f534d799ed6164a031686bc48d2ae5a89c81894a28a9cd944a535b907777397e739a3b6a8e7d54bef71907071bc2a047ca14d7ef2e9d9b66da86ce56bc62ada0c813d9d63aa899f77f5d804a13a79b0e2275c4ba387e970519e67d212193d91bd0a96a1068bc136616ab5153b1e4b956f1a44b5334e8fbf8abf57fb28a13a64ad6085497faf88556d721f8e0a0699469646f22789e6530c03c75f69279e809d95d444bd44af1d19d12046de9d524caedc84a506642edf34b409b41ccb9689f8597cacd20eee8beec2b3e89644c06750e080da5cc06f3cb10b854fc23d39e52bf95b88335e7536888d67ea92df5868c5835321234e70ebf80e4365c19693a3a640a30f5aec7c490b4ed32ff169e907e25f862fe5aa8a9238cf5cee03ec2ab9e2801239980e78162b560ae3d066351f944c31d8b57a20cd2419b05b0fdd9f8ca4b7a8e1e7955a6b66a264d6d4c56d83c15871ab3f3327284ff7cf5e8d6c7f762d755fac0c7784af9efd13c9337d38451acb23020f4934ef1708b362b5d5cf4b743fc0f9712860ca2977319e1226ed860c2be3caacc8465ba80a0a6856322bc352972fd3f3c0db3acd66d56fef139e48f3d63d3a62c532aa10485807269bac3348316d9fd1931cbfd2acaa5c4e9102872ab16500260f2aec57025c0d6dc1bd68bff597667469e8eb57459b1881c10bf9531c23a6d9349b06b0db60aa6f89a4e0162038ea1850348b72e16f7d647e092c1d7ca55ba5095e58b18dd56b72ba9cbc09598663e8f54b2594194de72475abafdb285d464007ab91a83b91e7c8d5968ecb452e011c0b74e4309180615c3f67c2cad6e086f3686fd5394efd86d8bd45829314a5eb4a0549613b668e7b97600ac9ffe59df44e87046de44432dcd0aaf0c02c446ee9aaf72e80ce989923d4720fd3b8257d3fec5af22737c1e426f9d851c7929d69713e4751d5d39de20f0990bbdcb579f36b778bba4b8c5bdeb78208412005fe7cee40fe86691b8b0d6d3234e74192528622c31022cc3a81f4a574efdb67348b36ae7fd5977059d911da17746b040f06e7bef06accf4ef1ea4f4402041a98f3760d0fb8851b4e7d1124f37b1c653cc9ac53f4e373f694f8c957c390b0801859a19776a83854d2b65766bb03321fdac9a23d3345821fc21195910245e5ad79926a08094b54e242f002634b7213e5c122e76514f9ce76ce2740741f7ffe30e036de63b737fb16b240c6eeef0c1c537d219449b95d497723088548267c229fd5a122f25f2c6ad2fc3ff28133305ca850c5e2d1453dbb4429a8ee3a8f173feb49b611764c536c668c9aca8b8ec575c2310044898a4657fa1dda2ec6f7b8906d9521525ffd30c2b5948a0250224ba4d6beb39008c3785ddad71ceedb34301706b71634bf74b33ea4c436c2006cc5275d7931855d376c6314f8a5431781c3347bd9b3edadb8fcb959a6bb48e9407de69458fcc61c3a62e32720d3fd838dad3f50e852a2aa6d26af70205f9d8e40d3b9232c2ea9a4f86857fec4f7772e43d6dabd1e34400a84d1d338941bc31ead12047bde3ccdd89c53fcbfeff9fba85be6c11447c4b088eb184186a5e41e17bc0011c008aa8b98b44c1c862f8f977d1998d8dce81688d3d80d0fa2b9b7e7f78f80361f525a7586f3d9e68456b55d6f0e8c99495da3a5f392fc8bfe4e42af04fe85936c99b7be80acd351bffa7b723717621d9ff37b5ef829dfdc6ab085c2e83df864306cee0096486e77a1f9d7b7cf5bd157a69a05a12bb735606ac360af2c23542e52880fe9328524d5b121e378319ef2e1a0874fc99842ac8ac04dd6c634b08d81ffd379e9a52573a1721f63a6c009c590e7f43fcbaa2c23c975dfd1a9d1a6dc21587511b4cfdb6f53721940a9f4dd3d8a2c6bdf9890a152e05c9b561518a58a861aae8cb02f1031a121297f6b0820b22d9d6e544adc91216f4a3c011dee24774bfddef418a56c5f0ed57e6f3ce2a76d812a19a9420141eca0ef3d86f552814cb8b2a68b53bb195b2dd2b44f49e93c742db0b2bd637fd247bc28755819a9e122725a6b4409baec607359268eb6cf83fcb674a3771b75b8a7ea0300c16a624333b69bc188c417557356ff7336cde8645f973ad18ee15fc3b34074e1ec58eb00b779a86c7dd7e76872798a12b29b3f446240770999853686f18a624beb6f07f614b413a0cbd954de99a6a79b7c9dbdec41fa172025d9e7d6e82935fc21b4c90bae9b4e9a84478e2289fda091ceacdd02bee2d96fa9d02982191418a9db4115ba049b045ef03dcffc0566d802df6d97dcd90660cd9c3a682bca8a48dd7168ab86074685993571843f74498f1d3a85ab9c63c83450809e86cb1bcf2f341cfd7db56090ad58c34e3a6a98ea65e7b5b439295b0ad6e6e695d88dec93c2ed776df7fc41ef0cec809500d2ce06ac217001748fa337b91f1bccf4d22ee7183e44a573cf95bdbe1e2e10d0c2d52e1992983f84fa1b109eb1495c9d25651510b75a2d5c689b7fe9", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 34.527736881s ago: executing program 7 (id=2234): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 34.391196158s ago: executing program 7 (id=2235): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) syz_fuse_handle_req(r0, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x9, {0x7, 0x0, 0x3, 0xfff}}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0x1, 0x3}) 33.75706686s ago: executing program 7 (id=2239): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x11, 0x10, 0x0, 0x1, 0x0, 0x0, @multicast}, 0x14) munmap$IORING_OFF_CQ_RING(0x0, 0x9) syz_io_uring_complete(0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 33.351102265s ago: executing program 48 (id=2239): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x11, 0x10, 0x0, 0x1, 0x0, 0x0, @multicast}, 0x14) munmap$IORING_OFF_CQ_RING(0x0, 0x9) syz_io_uring_complete(0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 27.151870231s ago: executing program 1 (id=2269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000000400000006"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 26.887092819s ago: executing program 1 (id=2270): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) 25.498411504s ago: executing program 1 (id=2275): fsmount(0xffffffffffffffff, 0x1, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 24.609896293s ago: executing program 1 (id=2278): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 24.156504535s ago: executing program 1 (id=2279): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259866ec9c3740ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c453c97e4af37017ea6b16b694bb4a6e4606c3e519d1d2bd3c8c4e97da22b4f9d5c3b90400000000000000c279f035580839066668ffce540b5a293e387768570000000000007a25720a170e7f5670e419dc44febf7ddc73fd4a5a216c28665f7f46c70f4e179109268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800000000000000000000000000000000000000000000000000ffffffffffffff7f00", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0xff82, 0x0, 0x0, 0x63, 0xc, "db2d618928d7dbc000003c803ade467e5a8800"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xd) 23.550163349s ago: executing program 1 (id=2282): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x50) listen(r1, 0x0) 22.895054406s ago: executing program 49 (id=2282): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x50) listen(r1, 0x0) 6.058872831s ago: executing program 3 (id=2359): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.733453859s ago: executing program 0 (id=2364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 5.205595678s ago: executing program 9 (id=2367): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) getdents(r3, 0x0, 0x0) 5.107525658s ago: executing program 0 (id=2369): open(&(0x7f0000000000)='./file0\x00', 0x10507e, 0xa6) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000019380)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x17d, 0x9) 4.89261253s ago: executing program 0 (id=2371): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x80}, @raw32={[0x40000000, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffffd, 0xff}, {}, {}, @connect={{0x4, 0x1}, {0xf8, 0x1}}}], 0x38) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 4.833536851s ago: executing program 9 (id=2372): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 4.772055083s ago: executing program 6 (id=2373): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap(&(0x7f00000e9000/0x3000)=nil, 0x3000, 0x3000009, 0x13, r1, 0x8a740000) 4.634220294s ago: executing program 3 (id=2374): socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.475682258s ago: executing program 9 (id=2376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xc9, &(0x7f0000000300)=ANY=[], 0x0) 4.444363229s ago: executing program 6 (id=2377): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0000000400000001008d167355bc2d828ba017", @ANYRES32, @ANYBLOB="02"], 0x50) io_uring_enter(r1, 0x2219, 0x74b5, 0x16, 0x0, 0x0) 3.995540029s ago: executing program 0 (id=2379): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchmod(r0, 0x101) 3.966345262s ago: executing program 3 (id=2380): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x131) r5 = dup2(r4, r0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0x40806685, &(0x7f0000000200)={0x10, 0x1, {r3}, {r2}, 0x100000}) 3.868769189s ago: executing program 6 (id=2381): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000004900)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) 3.791803052s ago: executing program 9 (id=2382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.791263737s ago: executing program 8 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x2c, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "9432"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.535545915s ago: executing program 3 (id=2384): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 3.469498935s ago: executing program 9 (id=2385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfe, 0x553b, &(0x7f00000024c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.424932562s ago: executing program 8 (id=2386): fspick(0xffffffffffffff9c, 0x0, 0x1) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.655254744s ago: executing program 8 (id=2387): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsmount(r0, 0x0, 0x0) 2.327107817s ago: executing program 3 (id=2388): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.272578269s ago: executing program 0 (id=2389): unshare(0x4a020400) r0 = getpid() syz_pidfd_open(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) 2.016496115s ago: executing program 8 (id=2391): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x0, r1}, 0x10) close(r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.014243741s ago: executing program 9 (id=2392): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$fou(&(0x7f0000002080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1.395422269s ago: executing program 5 (id=2396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 1.251112582s ago: executing program 5 (id=2397): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f00001d0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000068000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000019b000/0x1000)=nil, &(0x7f0000054000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000113000/0x1000)=nil, &(0x7f0000070000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x5) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 911.546224ms ago: executing program 8 (id=2398): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0xffffffff}, 0x8) 868.903691ms ago: executing program 5 (id=2399): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000400)='\x00', 0x1, 0x4044000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 867.943024ms ago: executing program 3 (id=2400): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x3a, r0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 804.431846ms ago: executing program 6 (id=2401): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000140), 0x0, 0x0, 0x2) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065"], 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 626.844913ms ago: executing program 5 (id=2402): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 586.520948ms ago: executing program 0 (id=2403): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x11bfb03f, &(0x7f0000000100)=""/230}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 585.263443ms ago: executing program 8 (id=2404): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0xe21}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 381.390869ms ago: executing program 6 (id=2405): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 335.379167ms ago: executing program 5 (id=2406): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x56f2be14c64fc14d}, 0x400c000) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 5.605327ms ago: executing program 6 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) write(r1, &(0x7f00000005c0)="010000000705810240000007058102000200", 0x12) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 0s ago: executing program 5 (id=2408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) kernel console output (not intermixed with test programs): ped:0 pincount:0 [ 371.535371][T12792] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 371.543202][T12792] page_type: f5(slab) [ 371.551518][T12792] raw: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 371.551575][T12792] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 371.551606][T12792] head: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 371.551636][T12792] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 371.551667][T12792] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 371.551696][T12792] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 371.551717][T12792] page dumped because: unmovable page [ 371.551737][T12792] page_owner tracks the page as allocated [ 371.551754][T12792] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6682, tgid 6682 (kworker/u8:4), ts 123118061822 [ 371.551801][T12792] post_alloc_hook+0x1f9/0x250 [ 371.552453][T12792] get_page_from_freelist+0x2209/0x2280 [ 371.552509][T12792] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 371.552540][T12792] allocate_slab+0x7d/0x620 [ 371.552576][T12792] refill_objects+0x2d5/0x350 [ 371.552612][T12792] __pcs_replace_empty_main+0x2c8/0x6c0 [ 371.552646][T12792] __kmalloc_cache_noprof+0x39b/0x600 [ 371.552691][T12792] tomoyo_find_next_domain+0xdf/0x1a90 [ 371.552729][T12792] tomoyo_bprm_check_security+0x11b/0x180 [ 371.552762][T12792] security_bprm_check+0x85/0x240 [ 371.552804][T12792] bprm_execve+0x888/0x1590 [ 371.552846][T12792] kernel_execve+0x8c3/0x9c0 [ 371.552886][T12792] call_usermodehelper_exec_async+0x20f/0x360 [ 371.645826][T12792] ret_from_fork+0x514/0xb70 [ 371.645853][T12792] ret_from_fork_asm+0x1a/0x30 [ 371.645890][T12792] page last free pid 6681 tgid 6681 ts 123061137369 stack trace: [ 371.645909][T12792] __free_frozen_pages+0xc93/0xd90 [ 371.645943][T12792] __slab_free+0x274/0x2c0 [ 371.645986][T12792] qlist_free_all+0x99/0x100 [ 371.646054][T12792] kasan_quarantine_reduce+0x148/0x160 [ 371.646091][T12792] __kasan_slab_alloc+0x22/0x80 [ 371.646114][T12792] kmem_cache_alloc_noprof+0x2b9/0x600 [ 371.646148][T12792] vm_area_dup+0x28/0x670 [ 371.646182][T12792] __split_vma+0x1f3/0xbf0 [ 371.646210][T12792] vms_gather_munmap_vmas+0x322/0x1370 [ 371.646236][T12792] mmap_region+0x8f9/0x2230 [ 371.646262][T12792] do_mmap+0xe0a/0x1300 [ 371.646289][T12792] vm_mmap_pgoff+0x272/0x4e0 [ 371.646314][T12792] ksys_mmap_pgoff+0x4dc/0x760 [ 371.646343][T12792] do_syscall_64+0x166/0x520 [ 371.646370][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.694965][T12794] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe08 [ 371.694991][T12794] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 371.695011][T12794] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 371.695035][T12794] page_type: f5(slab) [ 371.695057][T12794] raw: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122 [ 371.695078][T12794] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 371.695102][T12794] head: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122 [ 371.695124][T12794] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 371.695146][T12794] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 371.695168][T12794] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 371.695183][T12794] page dumped because: unmovable page [ 371.695195][T12794] page_owner tracks the page as allocated [ 371.695205][T12794] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7285, tgid 7285 (kworker/u8:31), ts 186252068577 [ 371.695242][T12794] post_alloc_hook+0x1f9/0x250 [ 371.695277][T12794] get_page_from_freelist+0x2209/0x2280 [ 371.695300][T12794] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 371.695323][T12794] allocate_slab+0x7d/0x620 [ 371.695351][T12794] refill_objects+0x2d5/0x350 [ 371.695380][T12794] __pcs_replace_empty_main+0x2c8/0x6c0 [ 371.695408][T12794] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 371.695446][T12794] __alloc_skb+0x2c1/0x7a0 [ 371.695476][T12794] nsim_dev_trap_report_work+0x25f/0xb40 [ 371.695515][T12794] process_scheduled_works+0xc3d/0x1630 [ 371.695547][T12794] worker_thread+0xa47/0xfb0 [ 371.695578][T12794] kthread+0x38b/0x480 [ 371.695599][T12794] ret_from_fork+0x514/0xb70 [ 371.695621][T12794] ret_from_fork_asm+0x1a/0x30 [ 371.695658][T12794] page last free pid 4977 tgid 4977 ts 185724564866 stack trace: [ 371.695676][T12794] __free_frozen_pages+0xc93/0xd90 [ 371.695709][T12794] __slab_free+0x274/0x2c0 [ 371.695745][T12794] qlist_free_all+0x99/0x100 [ 371.695798][T12794] kasan_quarantine_reduce+0x148/0x160 [ 371.695834][T12794] __kasan_slab_alloc+0x22/0x80 [ 371.695858][T12794] __kmalloc_noprof+0x307/0x720 [ 371.695892][T12794] tomoyo_realpath_from_path+0xef/0x640 [ 371.695931][T12794] tomoyo_path_perm+0x283/0x560 [ 371.695966][T12794] security_inode_getattr+0x12b/0x310 [ 371.695992][T12794] __x64_sys_newfstat+0x133/0x270 [ 371.696020][T12794] do_syscall_64+0x166/0x520 [ 371.696045][T12794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.251625][T12793] loop9: detected capacity change from 0 to 32768 [ 372.262943][T12793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1758 (12793) [ 372.295538][T12793] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 372.306210][T12793] BTRFS info (device loop9): using sha256 checksum algorithm [ 372.437571][T12793] BTRFS info (device loop9): enabling ssd optimizations [ 372.446399][T12793] BTRFS info (device loop9): turning on async discard [ 372.458843][T12793] BTRFS info (device loop9): enabling free space tree [ 372.656517][T12834] BTRFS critical (device loop9 state E): emergency shutdown [ 372.716777][T12793] BTRFS warning (device loop9 state E): Skipping commit of aborted transaction. [ 372.760356][T12793] BTRFS error (device loop9 state EA): Transaction 9 aborted (-EROFS) [ 372.760439][T12793] BTRFS: error (device loop9 state EA) in cleanup_transaction:2062: errno=-30 Readonly filesystem [ 372.760485][T12793] BTRFS info (device loop9 state EA): forced readonly [ 372.803763][T12835] netlink: 'syz.0.1765': attribute type 5 has an invalid length. [ 372.974773][ T7524] BTRFS info (device loop9 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 373.145861][T12748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.788229][T12868] binder: 12863:12868 ioctl c0306201 200000000640 returned -22 [ 374.817062][T12866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.844208][ T5628] Bluetooth: hci4: unexpected event for opcode 0x041b [ 374.860232][T12866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.409978][ T7262] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.410041][ T7262] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.410161][ T7262] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.410200][ T7262] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.410340][ T7262] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.410380][ T7262] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.410426][ T7262] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.410465][ T7262] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.499974][ T30] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 375.659076][ T30] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 375.665529][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.665578][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.008866][T12917] ceph: No mds server is up or the cluster is laggy [ 376.163442][ T30] wacom 0003:056A:033B.000B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 376.235270][ T30] wacom 0003:056A:033B.000B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 376.280759][ T30] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.000B/input/input12 [ 376.329300][T12929] netlink: 'syz.4.1794': attribute type 13 has an invalid length. [ 376.843932][ T5748] usb 4-1: USB disconnect, device number 7 [ 377.080383][T10188] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.293325][T12949] fuse: fd is not a fuse device [ 377.338154][T10188] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.658098][T10188] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.799351][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.813445][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.823213][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.833508][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.851365][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.857853][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.868705][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.043996][T10188] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.230358][T12979] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 378.304118][T12979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.344795][T12979] netlink: 'syz.4.1807': attribute type 10 has an invalid length. [ 378.344835][T12979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1807'. [ 378.440934][T12985] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 378.455138][ T7259] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 378.548418][T12979] dummy0: entered promiscuous mode [ 378.574956][ T7259] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 378.588421][T12979] bond1: (slave dummy0): Removing an active aggregator [ 378.613785][T12979] bond1: (slave dummy0): Releasing backup interface [ 378.931098][T13001] loop0: detected capacity change from 0 to 512 [ 378.946778][T13001] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 378.998140][T10188] bridge_slave_1: left allmulticast mode [ 378.998194][T10188] bridge_slave_1: left promiscuous mode [ 378.998458][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.079211][T10188] bridge_slave_0: left allmulticast mode [ 379.079259][T10188] bridge_slave_0: left promiscuous mode [ 379.079467][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.001017][ T5628] Bluetooth: hci1: command tx timeout [ 380.093966][T10188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.148117][T10188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.165820][T10188] bond0 (unregistering): Released all slaves [ 380.248926][T13025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.248974][T13025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.265719][T13025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.275354][T13025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.673117][T13048] input: syz0 as /devices/virtual/input/input15 [ 381.163850][T13063] loop0: detected capacity change from 0 to 128 [ 381.196665][T13063] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 381.311449][ T31] audit: type=1800 audit(1787768116.268:239): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1827" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 381.694539][T13068] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 381.745263][T10188] hsr_slave_0: left promiscuous mode [ 381.754278][T13071] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 381.796612][T10188] hsr_slave_1: left promiscuous mode [ 381.797588][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.798786][T10188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.828019][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.828065][T10188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.833248][T13083] loop4: detected capacity change from 0 to 512 [ 381.929083][T13083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 381.935864][T10188] veth1_macvtap: left promiscuous mode [ 381.935900][T10188] veth0_macvtap: left promiscuous mode [ 381.947383][T10188] veth1_vlan: left promiscuous mode [ 381.947461][T10188] veth0_vlan: left promiscuous mode [ 382.080198][ T5628] Bluetooth: hci1: command tx timeout [ 382.284819][T13088] loop0: detected capacity change from 0 to 128 [ 382.314253][T13088] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.319581][T13088] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 382.379112][T13088] EXT4-fs (loop0): shut down requested (2) [ 382.495202][T10882] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.708913][T10188] team0 (unregistering): Port device team_slave_1 removed [ 383.756232][T10188] team0 (unregistering): Port device team_slave_0 removed [ 384.159885][ T5628] Bluetooth: hci1: command tx timeout [ 384.477836][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.478535][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.639669][T13126] loop3: detected capacity change from 0 to 131072 [ 384.702123][T13126] F2FS-fs (loop3): invalid crc value [ 384.776982][T13126] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 384.789368][T13126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 384.882084][ T31] audit: type=1800 audit(1787768119.838:240): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1845" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 384.888901][ T31] audit: type=1800 audit(1787768119.838:241): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1845" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 385.432416][ T7260] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.432494][ T7260] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.432554][ T7260] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.432601][ T7260] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.990410][T11667] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 386.149819][T11667] usb 5-1: Using ep0 maxpacket: 32 [ 386.152013][T11667] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.152062][T11667] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 386.155543][T11667] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 386.155568][T11667] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 386.155590][T11667] usb 5-1: config 14 has no interface number 0 [ 386.155608][T11667] usb 5-1: config 14 has no interface number 1 [ 386.155673][T11667] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 386.155699][T11667] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 386.155727][T11667] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 386.155756][T11667] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 386.155787][T11667] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 386.155816][T11667] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.155846][T11667] usb 5-1: config 14 interface 57 has no altsetting 0 [ 386.155866][T11667] usb 5-1: config 14 interface 228 has no altsetting 0 [ 386.168398][T11667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.168424][T11667] usb 5-1: Product: syz [ 386.168441][T11667] usb 5-1: Manufacturer: syz [ 386.168458][T11667] usb 5-1: SerialNumber: syz [ 386.248138][ T5628] Bluetooth: hci1: command tx timeout [ 386.552164][T12968] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.552325][T12968] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.552496][T12968] bridge_slave_0: entered allmulticast mode [ 386.566904][T12968] bridge_slave_0: entered promiscuous mode [ 386.592467][T12968] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.592629][T12968] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.592792][T12968] bridge_slave_1: entered allmulticast mode [ 386.612706][T12968] bridge_slave_1: entered promiscuous mode [ 386.722010][T11667] legousbtower 5-1:14.57: interrupt endpoints not found [ 386.740736][T13185] loop0: detected capacity change from 0 to 128 [ 386.897702][T12968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.940614][T12968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.993348][T13185] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.009397][T13185] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.140239][T11667] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 244.166 build 40507 [ 387.234462][T11667] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 387.372814][T12968] team0: Port device team_slave_0 added [ 387.409697][T12968] team0: Port device team_slave_1 added [ 387.543344][T10882] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.929557][T12968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.937295][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.963654][T12968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.007631][T12968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.007664][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.007714][T12968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.059583][T11665] usb 5-1: USB disconnect, device number 8 [ 388.119973][ T5762] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 388.134692][T11665] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 388.288807][ T5762] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 388.311695][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.344366][ T5762] usb 1-1: config 0 descriptor?? [ 388.411515][ T5762] cp210x 1-1:0.0: cp210x converter detected [ 388.444770][T12968] hsr_slave_0: entered promiscuous mode [ 388.455435][T12968] hsr_slave_1: entered promiscuous mode [ 388.775670][ T5762] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 388.807355][T13201] loop0: detected capacity change from 0 to 128 [ 388.827326][T13201] FAT-fs (loop0): bogus number of reserved sectors [ 388.827394][T13201] FAT-fs (loop0): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 388.827431][T13201] FAT-fs (loop0): Can't find a valid FAT filesystem [ 388.878423][ T5762] usb 1-1: cp210x converter now attached to ttyUSB0 [ 388.946931][T13216] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1863'. [ 389.126958][ T5848] usb 1-1: USB disconnect, device number 10 [ 389.149362][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 389.175905][ T5848] cp210x 1-1:0.0: device disconnected [ 390.331838][T13259] loop3: detected capacity change from 0 to 512 [ 390.358497][T13259] EXT4-fs (loop3): invalid journal inode [ 390.358589][T13259] EXT4-fs (loop3): can't get journal size [ 390.377430][T13259] EXT4-fs (loop3): 1 truncate cleaned up [ 390.384785][T13259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.484183][ T31] audit: type=1800 audit(1787768125.438:242): pid=13266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1871" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 390.704372][T13259] loop3: detected capacity change from 512 to 64 [ 390.787276][T13266] syz.3.1871: attempt to access beyond end of device [ 390.787276][T13266] loop3: rw=8423425, sector=98, nr_sectors = 8 limit=64 [ 390.799088][T13266] syz.3.1871: attempt to access beyond end of device [ 390.799088][T13266] loop3: rw=8402945, sector=96, nr_sectors = 2 limit=64 [ 390.799119][T13266] buffer_io_error: 138 callbacks suppressed [ 390.799132][T13266] Buffer I/O error on dev loop3, logical block 48, lost sync page write [ 390.799154][T13266] EXT4-fs error (device loop3): ext4_free_data:978: inode #15: block 48: comm syz.3.1871: IO error syncing itable block [ 390.819318][T13266] EXT4-fs error (device loop3): ext4_check_bdev_write_error:235: comm syz.3.1871: Error while async write back metadata [ 391.028490][T13280] netlink: 'syz.5.1875': attribute type 13 has an invalid length. [ 391.092821][ T8766] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 391.097355][ T8766] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 391.470006][T13287] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 391.497376][T13287] CIFS: Attempting to mount //127.0.0.1/sø:e[1ý2harefµDŽr=root [ 391.548216][T11178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.720252][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 391.766170][T13292] macvlan0: entered allmulticast mode [ 391.771771][T13292] dummy0: entered allmulticast mode [ 391.777879][T13292] dummy0: entered promiscuous mode [ 391.993617][T12968] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.009394][T12968] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.015276][T12968] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.024586][T12968] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.034647][T12968] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.046308][T12968] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.054650][T12968] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.065694][T12968] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.244670][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.255275][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.263801][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.272086][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.283624][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.295899][T13287] CIFS: VFS: Error connecting to socket. Aborting operation. [ 392.305295][T13287] CIFS: VFS: cifs_mount failed w/return code = -4 [ 392.312957][T10188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.924499][T13314] fuse: fd is not a fuse device [ 393.335461][T13310] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 393.348782][T13310] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 393.412245][T10188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.517121][T13310] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 393.519639][T13310] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 393.643202][T13310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.643299][T13310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 393.665292][T13310] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 393.665370][T13310] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 393.668395][T10188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.736707][T13310] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 393.799345][T10188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.813546][T13310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.822238][T13310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 393.880792][T13310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 393.919694][T13310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 393.933214][T12968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.936032][T13310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 393.989242][T13310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 394.021448][T12968] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.066332][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.066463][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.130680][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.130806][ T7285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.415654][T10188] bridge_slave_1: left allmulticast mode [ 394.421837][T10188] bridge_slave_1: left promiscuous mode [ 394.422059][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.445480][T10188] bridge_slave_0: left allmulticast mode [ 394.451764][T10188] bridge_slave_0: left promiscuous mode [ 394.452034][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.858370][T10188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.879543][T10188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.894903][T10188] bond0 (unregistering): Released all slaves [ 395.365640][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 395.520455][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 395.680374][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 395.688692][ T5621] Bluetooth: hci6: command 0x0c1a tx timeout [ 395.808827][T10188] hsr_slave_0: left promiscuous mode [ 395.815905][T10188] hsr_slave_1: left promiscuous mode [ 395.823650][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.832670][T10188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.840315][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.876789][T10188] veth1_macvtap: left promiscuous mode [ 395.888596][T10188] veth0_macvtap: left promiscuous mode [ 395.888734][T10188] veth1_vlan: left promiscuous mode [ 395.888825][T10188] veth0_vlan: left promiscuous mode [ 395.919902][ T5621] Bluetooth: hci0: command 0x041b tx timeout [ 396.194323][T13395] loop0: detected capacity change from 0 to 4096 [ 396.198340][T13395] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 396.316574][T13395] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 396.753458][T10188] team0 (unregistering): Port device team_slave_1 removed [ 396.821317][T10188] team0 (unregistering): Port device team_slave_0 removed [ 397.271819][T13405] bridge1: entered promiscuous mode [ 397.277226][T13405] bridge1: entered allmulticast mode [ 397.297295][T13405] team0: Port device bridge1 added [ 397.328656][T13408] bridge0: port 3(team0) entered blocking state [ 397.341050][T13408] bridge0: port 3(team0) entered disabled state [ 397.347826][T13408] team0: entered allmulticast mode [ 397.354982][T13408] team_slave_0: entered allmulticast mode [ 397.361005][T13408] team_slave_1: entered allmulticast mode [ 397.370270][T13408] team0: entered promiscuous mode [ 397.375490][T13408] team_slave_0: entered promiscuous mode [ 397.381529][T13408] team_slave_1: entered promiscuous mode [ 397.388616][T13408] bridge0: port 3(team0) entered blocking state [ 397.388758][T13408] bridge0: port 3(team0) entered forwarding state [ 397.455981][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 397.601529][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 397.760450][ T5621] Bluetooth: hci6: command 0x0c1a tx timeout [ 397.760512][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 397.787560][T13429] loop0: detected capacity change from 0 to 128 [ 397.836757][T13429] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.853076][T13429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 397.853199][T13429] System zones: 1-3, 19-19, 35-36 [ 397.877417][T13429] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 397.901584][T13429] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.920217][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 397.999903][ T5628] Bluetooth: hci0: command 0x041b tx timeout [ 398.434051][T13445] loop9: detected capacity change from 0 to 256 [ 398.436409][T13445] exfat: Bad value for 'uid' [ 398.436426][T13445] exfat: Bad value for 'uid' [ 398.490457][T13450] overlayfs: failed to clone upperpath [ 398.635505][T13429] fscrypt (loop0, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 398.736290][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.739931][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.741681][T13298] bridge_slave_0: entered allmulticast mode [ 398.752562][T13298] bridge_slave_0: entered promiscuous mode [ 398.777636][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.779422][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.779579][T13298] bridge_slave_1: entered allmulticast mode [ 398.810571][T13298] bridge_slave_1: entered promiscuous mode [ 398.833854][T13457] gadgetfs: bound to dummy_udc driver [ 398.849065][T10882] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.967409][T13457] loop9: detected capacity change from 0 to 128 [ 398.992577][T13457] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 398.992671][T13457] hpfs: filesystem error: improperly stopped [ 398.992689][T13457] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 398.992707][T13457] hpfs: You really don't want any checks? You are crazy... [ 398.993075][T13457] hpfs: hpfs_map_sector(): read error [ 398.993087][T13457] hpfs: code page support is disabled [ 398.995188][T13457] hpfs: hpfs_map_4sectors(): unaligned read [ 398.995262][T13457] hpfs: hpfs_map_4sectors(): unaligned read [ 398.995274][T13457] hpfs: filesystem error: unable to find root dir [ 398.996017][T12968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.217990][T13298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.260386][T13298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.484137][T13298] team0: Port device team_slave_0 added [ 399.503905][T13473] loop9: detected capacity change from 0 to 512 [ 399.505470][T13298] team0: Port device team_slave_1 added [ 399.520701][T13473] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 399.572430][T13473] EXT4-fs (loop9): 1 truncate cleaned up [ 399.575909][T13473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.684945][ T31] audit: type=1800 audit(1787768134.638:243): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1914" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 399.850200][ T5628] Bluetooth: hci6: command 0x0c1a tx timeout [ 399.871147][T13470] loop0: detected capacity change from 0 to 32768 [ 399.889470][T13298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.889510][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.889557][T13298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.891649][T13298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.891672][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.891708][T13298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.999901][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.054267][T13470] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 400.080022][ T5628] Bluetooth: hci0: command 0x041b tx timeout [ 400.140716][T13470] XFS (loop0): Ending clean mount [ 400.163878][T13493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1918'. [ 400.163921][T13493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1918'. [ 400.163941][T13493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1918'. [ 400.195893][T13493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1918'. [ 400.219887][T13298] hsr_slave_0: entered promiscuous mode [ 400.231818][T13298] hsr_slave_1: entered promiscuous mode [ 400.238363][T13298] debugfs: 'hsr0' already exists in 'hsr' [ 400.251146][ T31] audit: type=1800 audit(1787768135.208:244): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1916" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 400.265256][T13298] Cannot create hsr debugfs directory [ 400.288875][T13470] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 400.590688][ T7524] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 400.648057][ T7524] EXT4-fs (loop9): Remounting filesystem read-only [ 401.007601][T10882] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 401.694001][T13522] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1923'. [ 401.694055][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1923'. [ 402.055573][T12968] veth0_vlan: entered promiscuous mode [ 402.074857][T12968] veth1_vlan: entered promiscuous mode [ 402.130065][T13138] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 402.160744][ T5628] Bluetooth: hci0: command 0x041b tx timeout [ 402.279834][T13138] usb 1-1: Using ep0 maxpacket: 32 [ 402.287014][T13138] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 402.297435][T13138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.308769][T13138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.318989][T13138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.337433][T13138] usb 1-1: config 0 descriptor?? [ 402.699174][ T7524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.745507][T12968] veth0_macvtap: entered promiscuous mode [ 402.775778][T12968] veth1_macvtap: entered promiscuous mode [ 402.818924][T13138] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 403.085517][T12968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.174436][T12968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.181906][T13138] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 403.311083][T11667] usb 1-1: USB disconnect, device number 12 [ 403.341768][T13138] usb 5-1: Using ep0 maxpacket: 32 [ 403.348421][T13138] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 403.373561][T13138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.373605][T13138] usb 5-1: Product: syz [ 403.373640][T13138] usb 5-1: Manufacturer: syz [ 403.373663][T13138] usb 5-1: SerialNumber: syz [ 403.405593][T13138] usb 5-1: config 0 descriptor?? [ 403.470540][T10188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.470638][T10188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.470701][T10188] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.470750][T10188] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.656436][T13138] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 009 [ 403.846470][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 403.857406][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 403.866551][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 403.875205][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 403.892094][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.969662][T10189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.992059][T10189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.012783][T10189] bond0 (unregistering): Released all slaves [ 404.240381][ T5628] Bluetooth: hci0: command 0x041b tx timeout [ 404.351817][T13298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 404.367777][T13298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.424615][T13298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.459399][T13298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.461985][T13298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 404.476212][T13298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.481168][T13298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 404.498829][T13298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.516767][ T5762] usb 5-1: USB disconnect, device number 9 [ 404.767739][ T7281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.777533][ T7281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.819658][T10189] hsr_slave_0: left promiscuous mode [ 404.839845][T10189] hsr_slave_1: left promiscuous mode [ 404.840816][T10189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.864962][T10189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.226903][T10189] team0 (unregistering): Port device team_slave_1 removed [ 405.264832][T10189] team0 (unregistering): Port device team_slave_0 removed [ 405.385762][T13586] loop4: detected capacity change from 0 to 32768 [ 405.395735][T13586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1935 (13586) [ 405.445800][T13586] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.445863][T13586] BTRFS info (device loop4): using sha256 checksum algorithm [ 405.577510][T13586] BTRFS info (device loop4): setting nodatasum [ 405.590827][T13586] BTRFS info (device loop4): enabling ssd optimizations [ 405.599905][T13586] BTRFS info (device loop4): turning on async discard [ 405.599954][T13586] BTRFS info (device loop4): enabling free space tree [ 405.855377][T10182] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.865986][ T7285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.866005][ T7285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.003431][ T5628] Bluetooth: hci2: command tx timeout [ 406.320066][ T5628] Bluetooth: hci0: command 0x041b tx timeout [ 406.747818][T13298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.876353][T13298] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.902562][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.902689][ T7281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.958848][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.958982][ T7281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.373139][T13646] loop0: detected capacity change from 0 to 512 [ 407.390179][T13646] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 407.738012][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.746471][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.746612][T13555] bridge_slave_0: entered allmulticast mode [ 407.754587][T13555] bridge_slave_0: entered promiscuous mode [ 407.809239][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.809371][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.809515][T13555] bridge_slave_1: entered allmulticast mode [ 407.823192][T13555] bridge_slave_1: entered promiscuous mode [ 408.056330][T13555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.077255][T13555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.089797][ T5628] Bluetooth: hci2: command tx timeout [ 408.297904][T13555] team0: Port device team_slave_0 added [ 408.313450][T13555] team0: Port device team_slave_1 added [ 408.530266][T13555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.530303][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.530352][T13555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.568344][ T5272] netdevsim netdevsim8 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 408.569064][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 408.577933][T13555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.577949][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.577979][T13555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.582282][ T7271] rpcbind: server 127.0.0.1 not responding, timed out [ 408.918956][T13555] hsr_slave_0: entered promiscuous mode [ 408.925534][T13555] hsr_slave_1: entered promiscuous mode [ 408.926326][T13555] debugfs: 'hsr0' already exists in 'hsr' [ 408.926346][T13555] Cannot create hsr debugfs directory [ 409.352470][T13298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.698803][T13727] FAULT_INJECTION: forcing a failure. [ 409.698803][T13727] name failslab, interval 1, probability 0, space 0, times 0 [ 409.698865][T13727] CPU: 0 UID: 0 PID: 13727 Comm: syz.6.1964 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.698903][T13727] Tainted: [L]=SOFTLOCKUP [ 409.698915][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 409.698930][T13727] Call Trace: [ 409.698941][T13727] [ 409.698951][T13727] dump_stack_lvl+0xe8/0x150 [ 409.698994][T13727] should_fail_ex+0x410/0x560 [ 409.699032][T13727] should_failslab+0xa8/0x100 [ 409.699061][T13727] ? prepare_creds+0x30/0x820 [ 409.699089][T13727] kmem_cache_alloc_noprof+0xa1/0x600 [ 409.699125][T13727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.699154][T13727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.699183][T13727] ? make_kuid+0x1e5/0x670 [ 409.699221][T13727] ? prepare_creds+0x30/0x820 [ 409.699249][T13727] ? __pfx_make_kuid+0x10/0x10 [ 409.699291][T13727] prepare_creds+0x30/0x820 [ 409.699317][T13727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 409.699352][T13727] __sys_setuid+0x96/0x580 [ 409.699390][T13727] do_syscall_64+0x166/0x520 [ 409.699419][T13727] ? trace_irq_disable+0x3b/0x140 [ 409.699442][T13727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.699475][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.699500][T13727] RIP: 0033:0x7f5643f9e0d9 [ 409.699558][T13727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.699580][T13727] RSP: 002b:00007f5644d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 409.699606][T13727] RAX: ffffffffffffffda RBX: 00007f5644225fa0 RCX: 00007f5643f9e0d9 [ 409.699626][T13727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 409.699641][T13727] RBP: 00007f5644035024 R08: 0000000000000000 R09: 0000000000000000 [ 409.699657][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.699672][T13727] R13: 00007f5644226038 R14: 00007f5644225fa0 R15: 00007ffc8ec4d668 [ 409.699710][T13727] [ 410.160110][ T5628] Bluetooth: hci2: command tx timeout [ 410.496370][ T5272] netdevsim netdevsim8 eth4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 410.497260][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 410.544578][T13298] veth0_vlan: entered promiscuous mode [ 410.591183][T13298] veth1_vlan: entered promiscuous mode [ 410.866526][T13298] veth0_macvtap: entered promiscuous mode [ 410.916517][T13740] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.1969'. [ 411.045210][T13734] loop4: detected capacity change from 0 to 40427 [ 411.053194][T13298] veth1_macvtap: entered promiscuous mode [ 411.067919][T13734] F2FS-fs (loop4): invalid crc value [ 411.098438][T13743] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 411.419441][T13298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.439715][T13734] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 411.455387][T13298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.491849][ T7260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.494428][ T7285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.494476][ T7285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.494515][ T7285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.529423][T13734] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 412.207198][ T7281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.207259][ T7281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.239829][ T5628] Bluetooth: hci2: command tx timeout [ 412.332109][T13724] loop0: detected capacity change from 0 to 131072 [ 412.547289][T13555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.576757][T13555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.598741][ T7285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.598780][ T7285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.607932][T13555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 412.662654][T13555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.663548][T13555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.701563][T13724] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 412.727772][T13555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.762663][T13555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.836794][T13555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.432286][T13555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.497256][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.497791][T10182] syz-executor: attempt to access beyond end of device [ 413.497791][T10182] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 413.513807][T10182] CPU: 1 UID: 0 PID: 10182 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 413.513843][T10182] Tainted: [L]=SOFTLOCKUP [ 413.513853][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 413.513868][T10182] Call Trace: [ 413.513879][T10182] [ 413.513889][T10182] dump_stack_lvl+0xe8/0x150 [ 413.513930][T10182] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 413.513978][T10182] f2fs_write_end_io+0x1215/0x16f0 [ 413.514013][T10182] ? blkg_put+0x22/0x240 [ 413.514069][T10182] __submit_merged_bio+0x258/0x6a0 [ 413.514094][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514124][T10182] ? rcu_is_watching+0x16/0xb0 [ 413.514161][T10182] __submit_merged_write_cond+0x3c9/0x4e0 [ 413.514212][T10182] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 413.514272][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514329][T10182] f2fs_write_data_pages+0x2a27/0x36f0 [ 413.514400][T10182] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 413.514429][T10182] ? is_bpf_text_address+0x26/0x2b0 [ 413.514473][T10182] ? arch_stack_walk+0xfb/0x150 [ 413.514539][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514568][T10182] ? add_lock_to_list+0xc7/0x100 [ 413.514601][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514629][T10182] ? __lock_acquire+0x13e8/0x2cf0 [ 413.514685][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514714][T10182] ? do_raw_spin_lock+0x12b/0x2f0 [ 413.514754][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514787][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514815][T10182] ? do_raw_spin_unlock+0xf5/0x200 [ 413.514850][T10182] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 413.514883][T10182] do_writepages+0x338/0x560 [ 413.514923][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514955][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.514988][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.515017][T10182] ? do_raw_spin_unlock+0xf5/0x200 [ 413.515056][T10182] filemap_fdatawrite+0x1e9/0x2f0 [ 413.515086][T10182] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 413.515152][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.515184][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.515218][T10182] ? do_raw_spin_unlock+0xf5/0x200 [ 413.515258][T10182] f2fs_sync_dirty_inodes+0x30e/0x830 [ 413.515315][T10182] f2fs_write_checkpoint+0xa3d/0x2710 [ 413.515347][T10182] ? __lock_acquire+0x683/0x2cf0 [ 413.515408][T10182] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 413.515439][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.515510][T10182] ? try_to_wake_up+0x8b6/0x14d0 [ 413.515558][T10182] kill_f2fs_super+0x2dd/0x700 [ 413.515601][T10182] ? __pfx_kill_f2fs_super+0x10/0x10 [ 413.515646][T10182] ? call_rcu+0x64d/0x8b0 [ 413.515674][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.515703][T10182] ? lockdep_hardirqs_on+0x7b/0x110 [ 413.515730][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.515774][T10182] deactivate_locked_super+0xbc/0x110 [ 413.515809][T10182] cleanup_mnt+0x3d3/0x460 [ 413.515850][T10182] task_work_run+0x1d9/0x270 [ 413.515882][T10182] ? __pfx_task_work_run+0x10/0x10 [ 413.515921][T10182] exit_to_user_mode_loop+0x204/0x770 [ 413.515945][T10182] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.515973][T10182] ? rcu_is_watching+0x16/0xb0 [ 413.516008][T10182] do_syscall_64+0x328/0x520 [ 413.516034][T10182] ? trace_irq_disable+0x3b/0x140 [ 413.516058][T10182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.516090][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.516116][T10182] RIP: 0033:0x7fa50279f317 [ 413.516138][T10182] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 413.516158][T10182] RSP: 002b:00007ffe100574b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 413.516184][T10182] RAX: 0000000000000000 RBX: 00007fa502834474 RCX: 00007fa50279f317 [ 413.516202][T10182] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe10057570 [ 413.516217][T10182] RBP: 00007ffe10057570 R08: 00007ffe10058570 R09: 00000000ffffffff [ 413.516235][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe10058600 [ 413.516251][T10182] R13: 00007fa502834474 R14: 0000000000064c67 R15: 00007ffe10058640 [ 413.516298][T10182] [ 413.522647][T10182] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 413.728591][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.728727][ T7285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.793339][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.793453][ T7260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.014301][T13811] loop6: detected capacity change from 0 to 512 [ 414.056908][T13811] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 414.345744][T13816] fuse: fd is not a fuse device [ 414.604236][T13824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1979'. [ 414.733982][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1985'. [ 414.851095][ T5762] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 415.004316][ T5762] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.008747][ T5762] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.008795][ T5762] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 415.013385][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 415.013412][ T5762] usb 5-1: SerialNumber: syz [ 415.064171][ T5762] rndis_host 5-1:1.0: probe with driver rndis_host failed with error -22 [ 415.211262][T13845] ip_tables: iptables: counters copy to user failed while replacing table [ 415.329452][ T5762] usb 5-1: USB disconnect, device number 10 [ 415.719869][T13142] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 415.757205][T13555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.870576][T13142] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 415.878633][T13555] veth0_vlan: entered promiscuous mode [ 415.887243][T13142] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.887289][T13142] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.909414][T13142] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 415.909458][T13142] usb 7-1: SerialNumber: syz [ 415.922440][T13555] veth1_vlan: entered promiscuous mode [ 416.104088][T13555] veth0_macvtap: entered promiscuous mode [ 416.123849][T13555] veth1_macvtap: entered promiscuous mode [ 416.203155][T13555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.247461][T13555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.340149][ T7285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.344695][ T7285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.344738][ T7285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.344777][ T7285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.505511][T13142] usb 7-1: 0:2 : does not exist [ 416.522486][T13142] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 416.598385][T13142] usb 7-1: USB disconnect, device number 5 [ 416.771148][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.804982][ T7271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.805026][ T7271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.879404][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.879446][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.332955][T13905] fuse: fd is not a fuse device [ 418.687874][T13961] loop1: detected capacity change from 0 to 512 [ 418.708375][T13961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 419.344069][ T5272] netdevsim netdevsim8 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 419.358103][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 419.966239][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.982580][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.081660][T14002] fuse: fd is not a fuse device [ 420.091796][ T5731] kernel read not supported for file /kmsg (pid: 5731 comm: kworker/0:5) [ 420.621624][T14021] loop0: detected capacity change from 0 to 256 [ 420.632422][T14021] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.023556][ T5848] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 421.184463][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 421.243437][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 421.243506][ T5848] usb 1-1: New USB device found, idVendor=defb, idProduct=41e1, bcdDevice=8b.b4 [ 421.243568][ T5848] usb 1-1: too many configurations: 238, using maximum allowed: 8 [ 421.269693][ T5848] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 421.270293][ T5848] usb 1-1: can't read configurations, error -71 [ 421.678748][ T5272] netdevsim netdevsim8 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.679477][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 422.287279][T14073] loop1: detected capacity change from 0 to 8 [ 423.653963][T13008] syz_tun (unregistering): left allmulticast mode [ 423.844977][T14088] jffs2: notice: (14088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 423.946214][T14088] jffs2: notice: (14088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 424.304717][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 424.361374][ T7267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.501517][T14097] batadv_slave_0: entered promiscuous mode [ 424.501690][T14103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.546068][T14103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.755201][ T7267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.958732][ T7267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.363170][T14117] loop6: detected capacity change from 0 to 8192 [ 425.449675][ T7267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.491362][ T31] audit: type=1326 audit(1787768160.448:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.491436][ T31] audit: type=1326 audit(1787768160.448:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.515428][ T31] audit: type=1326 audit(1787768160.448:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.515483][ T31] audit: type=1326 audit(1787768160.448:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.515532][ T31] audit: type=1326 audit(1787768160.448:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.534152][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 425.549980][ T31] audit: type=1326 audit(1787768160.508:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.550897][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 425.564374][ T31] audit: type=1326 audit(1787768160.508:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.565997][ T31] audit: type=1326 audit(1787768160.508:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.573487][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 425.582282][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 425.583799][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 425.623016][ T31] audit: type=1326 audit(1787768160.558:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 425.623075][ T31] audit: type=1326 audit(1787768160.558:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.2061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609139e0d9 code=0x7ffc0000 [ 426.617946][ T7267] team0: left allmulticast mode [ 426.617992][ T7267] team_slave_0: left allmulticast mode [ 426.618033][ T7267] team_slave_1: left allmulticast mode [ 426.640485][ T7267] team0: left promiscuous mode [ 426.640530][ T7267] team_slave_0: left promiscuous mode [ 426.640755][ T7267] team_slave_1: left promiscuous mode [ 426.643979][ T7267] bridge0: port 3(team0) entered disabled state [ 426.673594][ T7267] bridge_slave_1: left allmulticast mode [ 426.673638][ T7267] bridge_slave_1: left promiscuous mode [ 426.673874][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.714427][ T7267] bridge_slave_0: left allmulticast mode [ 426.714474][ T7267] bridge_slave_0: left promiscuous mode [ 426.724941][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.421071][ T7267] team0: Port device bridge1 removed [ 427.439195][ T7267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.467754][ T7267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.482293][ T7267] bond0 (unregistering): Released all slaves [ 427.603161][ T5628] Bluetooth: hci5: command tx timeout [ 427.699374][T14200] fuse: fd is not a fuse device [ 427.892573][T14206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.092049][ T7267] hsr_slave_0: left promiscuous mode [ 428.116946][ T7267] hsr_slave_1: left promiscuous mode [ 428.117907][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.117928][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.139148][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.139189][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.179050][ T7267] veth1_macvtap: left promiscuous mode [ 428.179131][ T7267] veth0_macvtap: left promiscuous mode [ 428.179278][ T7267] veth1_vlan: left promiscuous mode [ 428.190664][ T7267] veth0_vlan: left promiscuous mode [ 428.922515][ T7267] team0 (unregistering): Port device team_slave_1 removed [ 428.972856][ T7267] team0 (unregistering): Port device team_slave_0 removed [ 429.681708][ T5628] Bluetooth: hci5: command tx timeout [ 429.985564][T14260] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.986616][T14260] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.053770][T14261] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.053978][T14261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.054328][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.054463][T14261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.088105][T14261] bridge0: entered promiscuous mode [ 430.102877][T14261] bridge0: entered allmulticast mode [ 430.530329][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2098'. [ 430.626760][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2098'. [ 431.480817][T14132] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.488183][T14132] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.495769][T14132] bridge_slave_0: entered allmulticast mode [ 431.503974][T14132] bridge_slave_0: entered promiscuous mode [ 431.513188][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.520721][T14132] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.528003][T14132] bridge_slave_1: entered allmulticast mode [ 431.553631][T14132] bridge_slave_1: entered promiscuous mode [ 431.563915][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 431.672919][T14132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.687130][T14132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.745025][T14132] team0: Port device team_slave_0 added [ 431.757293][T14132] team0: Port device team_slave_1 added [ 431.770547][ T5621] Bluetooth: hci5: command tx timeout [ 431.857853][T14132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.857898][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.857930][T14132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.865067][T14132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.865082][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.865112][T14132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.050337][T14132] hsr_slave_0: entered promiscuous mode [ 432.057263][T14132] hsr_slave_1: entered promiscuous mode [ 432.063871][T14132] debugfs: 'hsr0' already exists in 'hsr' [ 432.063891][T14132] Cannot create hsr debugfs directory [ 432.097616][T14331] loop1: detected capacity change from 0 to 512 [ 432.113004][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 432.119409][ T31] audit: type=1800 audit(1787768167.068:268): pid=14309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2105" name="/" dev="fuse" ino=4 res=0 errno=0 [ 432.175586][T14331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.358095][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.418454][T14340] vivid-002: ================= START STATUS ================= [ 432.418519][T14340] vivid-002: Radio HW Seek Mode: Bounded [ 432.418545][T14340] vivid-002: Radio Programmable HW Seek: false [ 432.418577][T14340] vivid-002: RDS Rx I/O Mode: Block I/O [ 432.418601][T14340] vivid-002: Generate RBDS Instead of RDS: false [ 432.418627][T14340] vivid-002: RDS Reception: true [ 432.418650][T14340] vivid-002: RDS Program Type: 0 inactive [ 432.418680][T14340] vivid-002: RDS PS Name: inactive [ 432.418709][T14340] vivid-002: RDS Radio Text: inactive [ 432.418738][T14340] vivid-002: RDS Traffic Announcement: false inactive [ 432.418768][T14340] vivid-002: RDS Traffic Program: false inactive [ 432.418797][T14340] vivid-002: RDS Music: false inactive [ 432.418827][T14340] vivid-002: ================== END STATUS ================== [ 432.647317][ T5621] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 432.754658][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2114'. [ 433.190241][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 433.200211][ T5731] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 433.223162][T14362] loop6: detected capacity change from 0 to 2048 [ 433.273787][T14362] NILFS (loop6): invalid segment: Magic number mismatch [ 433.273831][T14362] NILFS (loop6): trying rollback from an earlier position [ 433.315448][T14362] NILFS (loop6): recovery complete [ 433.328235][T14365] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.370734][ T5731] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 433.390919][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 433.399162][ T5731] usb 3-1: Product: syz [ 433.404074][ T5731] usb 3-1: SerialNumber: syz [ 433.413251][ T5731] usb 3-1: config 0 descriptor?? [ 433.444657][ T31] audit: type=1800 audit(1787768168.398:269): pid=14362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2118" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 433.574163][T14361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.633681][ T5731] hso 3-1:0.0: Failed to find BULK eps [ 433.845217][T13142] usb 3-1: USB disconnect, device number 3 [ 433.849931][ T5621] Bluetooth: hci5: command tx timeout [ 433.970077][ T7269] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.970158][ T7269] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.970196][ T7269] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.970234][ T7269] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.226646][T12968] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 434.654414][T14395] binder: 14392:14395 ioctl c0306201 0 returned -14 [ 434.784857][T14402] fuse: fd is not a fuse device [ 434.906130][T14132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 434.970423][T14132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.982005][T14132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 434.998567][T14132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.092493][T14132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 435.128542][T14132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.138600][T14132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 435.164942][T14132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.538040][T14132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.561484][ T5731] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 435.604718][T14132] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.636979][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.637166][ T7267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.704319][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.704443][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.746348][ T5731] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 435.763229][ T5731] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.763301][ T5731] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 435.763368][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.965164][T14132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.117371][T14423] loop2: detected capacity change from 0 to 512 [ 436.143876][T14423] EXT4-fs (loop2): invalid journal inode [ 436.143989][T14423] EXT4-fs (loop2): can't get journal size [ 436.208349][T14423] EXT4-fs (loop2): 1 truncate cleaned up [ 436.235951][T14423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.258011][ C0] usb 7-1: received EP1 urb->status = -2 [ 436.264362][ T5731] usb 7-1: unable to init card! (ret=-110) [ 436.264878][ T5731] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 436.373673][ T31] audit: type=1800 audit(1787768171.328:270): pid=14423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2133" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 436.596659][T14428] loop2: detected capacity change from 512 to 64 [ 436.597809][T14423] syz.2.2133: attempt to access beyond end of device [ 436.597809][T14423] loop2: rw=8402945, sector=96, nr_sectors = 2 limit=64 [ 436.597864][T14423] Buffer I/O error on dev loop2, logical block 48, lost sync page write [ 436.597892][T14423] EXT4-fs error (device loop2): ext4_splice_branch:472: inode #15: block 48: comm syz.2.2133: IO error syncing itable block [ 436.612704][T14432] netlink: 'syz.5.2134': attribute type 1 has an invalid length. [ 436.614029][T14423] EXT4-fs error (device loop2): ext4_check_bdev_write_error:235: comm syz.2.2133: Error while async write back metadata [ 436.616047][T14423] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 15: block 209:freeing already freed block (bit 208); block bitmap corrupt. [ 436.616517][T14423] EXT4-fs (loop2): pa ffff8880349fc2b8: logic 0, phys. 193, len 32 [ 436.616542][T14423] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5460: group 0, free 32, pa_free 31 [ 436.616660][T14423] syz.2.2133: attempt to access beyond end of device [ 436.616660][T14423] loop2: rw=8402945, sector=96, nr_sectors = 2 limit=64 [ 436.616687][T14423] Buffer I/O error on dev loop2, logical block 48, lost sync page write [ 436.616707][T14423] EXT4-fs error (device loop2): ext4_free_data:978: inode #15: block 48: comm syz.2.2133: IO error syncing itable block [ 436.678457][T14432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.683961][T14423] EXT4-fs error (device loop2): ext4_check_bdev_write_error:235: comm syz.2.2133: Error while async write back metadata [ 436.753518][T14439] bridge1: entered promiscuous mode [ 436.817490][T14439] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 436.916091][T14438] loop6: detected capacity change from 0 to 128 [ 437.043947][T13298] syz-executor: attempt to access beyond end of device [ 437.043947][T13298] loop2: rw=8402945, sector=96, nr_sectors = 2 limit=64 [ 437.044007][T13298] Buffer I/O error on dev loop2, logical block 48, lost sync page write [ 437.044029][T13298] EXT4-fs error (device loop2): ext4_free_data:978: inode #15: block 48: comm syz-executor: IO error syncing itable block [ 437.060269][T13298] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -5 [ 437.082162][T13298] EXT4-fs error (device loop2): ext4_check_bdev_write_error:235: comm syz-executor: Error while async write back metadata [ 437.166876][T13298] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 437.174690][T13298] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 437.426120][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 437.442496][T14457] fuse: fd is not a fuse device [ 437.569629][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2143'. [ 437.930845][ T7281] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.109363][T14132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.336958][ T7281] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.393133][ T5731] usb 7-1: USB disconnect, device number 6 [ 438.594246][ T7281] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.637131][T14495] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 438.797478][ T7281] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.245629][T13298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.287660][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.287750][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.325196][T14483] loop1: detected capacity change from 0 to 32768 [ 439.343222][ T7281] bridge_slave_1: left allmulticast mode [ 439.350543][ T7281] bridge_slave_1: left promiscuous mode [ 439.356630][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.384866][ T7281] bridge_slave_0: left allmulticast mode [ 439.384912][ T7281] bridge_slave_0: left promiscuous mode [ 439.385124][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.404696][T14483] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 439.503025][T14483] XFS (loop1): Ending clean mount [ 439.549159][ T31] audit: type=1800 audit(1787768174.508:271): pid=14483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2145" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 439.603463][T14483] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 439.712756][T14530] XFS (loop1): User initiated shutdown received. [ 439.713119][T14530] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 439.713210][T14530] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 439.902946][T13555] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 440.102705][ T7281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.149634][ T7281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.189555][ T7281] bond0 (unregistering): Released all slaves [ 440.308201][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.324345][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.333719][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.357151][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.374987][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.697297][T14132] veth0_vlan: entered promiscuous mode [ 440.846004][T14132] veth1_vlan: entered promiscuous mode [ 440.986842][ T7281] hsr_slave_0: left promiscuous mode [ 441.005962][ T7281] hsr_slave_1: left promiscuous mode [ 441.013831][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.013873][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.031945][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.039380][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.067841][ T7281] veth1_macvtap: left promiscuous mode [ 441.074946][ T7281] veth0_macvtap: left promiscuous mode [ 441.080706][ T7281] veth1_vlan: left promiscuous mode [ 441.080777][ T7281] veth0_vlan: left promiscuous mode [ 441.615531][ T7281] team0 (unregistering): Port device team_slave_1 removed [ 441.636728][ T7281] team0 (unregistering): Port device team_slave_0 removed [ 442.066224][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 442.120802][T14132] veth0_macvtap: entered promiscuous mode [ 442.147364][T14132] veth1_macvtap: entered promiscuous mode [ 442.265773][T14132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.307048][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 442.315009][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 442.322679][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 442.328290][T14132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.346604][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 442.348479][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 442.481147][ T5628] Bluetooth: hci0: command tx timeout [ 442.510882][ T7269] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.511258][ T7269] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.511634][ T7269] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.520620][ T7269] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.810515][ T7285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.810562][ T7285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.128314][ T7285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.128359][ T7285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.414981][ T5628] Bluetooth: hci6: command tx timeout [ 444.559885][ T5621] Bluetooth: hci0: command tx timeout [ 445.593991][T14686] loop7: detected capacity change from 0 to 128 [ 445.604632][T14686] EXT4-fs: Ignoring removed i_version option [ 445.635657][T14689] fuse: fd is not a fuse device [ 445.641718][T14686] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.656954][T14686] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 445.698086][ T7281] bridge_slave_1: left allmulticast mode [ 445.698140][ T7281] bridge_slave_1: left promiscuous mode [ 445.698373][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.716006][ T7281] bridge_slave_0: left allmulticast mode [ 445.716028][ T7281] bridge_slave_0: left promiscuous mode [ 445.718912][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.918445][T14132] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.068968][T14680] loop1: detected capacity change from 0 to 32768 [ 446.188622][ T7281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.210193][T14706] fuse: fd is not a fuse device [ 446.272827][ T7281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.297827][ T7281] bond0 (unregistering): Released all slaves [ 446.352804][ T7281] bond1 (unregistering): Released all slaves [ 446.362517][ T7278] smbdirect: ib_dev[syz1] removed [ 446.400616][T11690] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 446.480115][ T5621] Bluetooth: hci6: command tx timeout [ 446.550974][T11690] usb 7-1: Using ep0 maxpacket: 8 [ 446.556558][T11690] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 446.558267][T11690] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 446.558292][T11690] usb 7-1: config 0 has no interface number 0 [ 446.558334][T11690] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.558359][T11690] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 446.558387][T11690] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.558416][T11690] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.558460][T11690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.597539][T11690] usb 7-1: config 0 descriptor?? [ 446.628726][T11690] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 446.640086][ T5621] Bluetooth: hci0: command tx timeout [ 446.927723][T13141] usb 7-1: USB disconnect, device number 7 [ 446.927826][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 446.958850][T13141] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 446.998646][ T5731] infiniband syz1: ib_query_port failed (-19) [ 447.188950][T14733] ldusb: No device or device unplugged -19 [ 447.189019][T14733] ldusb: No device or device unplugged -19 [ 447.189039][T14733] ldusb: No device or device unplugged -19 [ 447.189057][T14733] ldusb: No device or device unplugged -19 [ 447.557695][T14544] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.566305][T14544] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.576883][T14544] bridge_slave_0: entered allmulticast mode [ 447.589621][T14544] bridge_slave_0: entered promiscuous mode [ 447.662695][T14544] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.662831][T14544] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.663010][T14544] bridge_slave_1: entered allmulticast mode [ 447.670314][T14544] bridge_slave_1: entered promiscuous mode [ 447.833017][T14750] ALSA: mixer_oss: invalid OSS volume '0x0000000000000009' [ 448.114726][ T7281] hsr_slave_0: left promiscuous mode [ 448.125337][ T7281] hsr_slave_1: left promiscuous mode [ 448.560251][ T5621] Bluetooth: hci6: command tx timeout [ 448.720813][ T5621] Bluetooth: hci0: command tx timeout [ 449.301779][ T7281] team0 (unregistering): Port device team_slave_1 removed [ 449.376448][ T7281] team0 (unregistering): Port device team_slave_0 removed [ 449.860294][T14544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.900635][T14544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.640402][ T5621] Bluetooth: hci6: command tx timeout [ 450.690395][T14544] team0: Port device team_slave_0 added [ 450.699683][T14592] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.699985][T14592] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.700126][T14592] bridge_slave_0: entered allmulticast mode [ 450.733005][T14592] bridge_slave_0: entered promiscuous mode [ 450.760871][T14544] team0: Port device team_slave_1 added [ 450.892290][T14592] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.892422][T14592] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.892574][T14592] bridge_slave_1: entered allmulticast mode [ 450.899410][T14592] bridge_slave_1: entered promiscuous mode [ 451.036399][T14544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.036442][T14544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.041795][T14544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.050363][T14544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.050378][T14544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.050408][T14544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.191608][T14592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.314237][T14592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.573027][T14592] team0: Port device team_slave_0 added [ 451.723747][T14592] team0: Port device team_slave_1 added [ 451.777404][T14831] overlayfs: failed to clone upperpath [ 451.828173][ T31] audit: type=1800 audit(1787768186.778:272): pid=14834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2217" name="console" dev="configfs" ino=43599 res=0 errno=0 [ 451.842230][T14544] hsr_slave_0: entered promiscuous mode [ 451.843355][T14544] hsr_slave_1: entered promiscuous mode [ 451.847531][T14544] debugfs: 'hsr0' already exists in 'hsr' [ 451.847552][T14544] Cannot create hsr debugfs directory [ 452.262015][T14592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.262057][T14592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.262112][T14592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.628996][T14838] loop7: detected capacity change from 0 to 8192 [ 453.208969][T14845] loop1: detected capacity change from 0 to 1024 [ 453.248260][T14592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.248295][T14592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.248344][T14592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.308710][T14848] loop6: detected capacity change from 0 to 128 [ 453.313009][T14842] xt_hashlimit: size too large, truncated to 1048576 [ 453.424966][T14848] FAT-fs (loop6): bogus sectors per cluster 0 [ 453.425010][T14848] FAT-fs (loop6): Can't find a valid FAT filesystem [ 453.941191][T14592] hsr_slave_0: entered promiscuous mode [ 453.952283][T14592] hsr_slave_1: entered promiscuous mode [ 453.957871][T14592] debugfs: 'hsr0' already exists in 'hsr' [ 453.957892][T14592] Cannot create hsr debugfs directory [ 455.577124][T14892] loop6: detected capacity change from 0 to 32768 [ 455.646537][T14892] JBD2: Ignoring recovery information on journal [ 455.681261][T14892] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 455.947613][T14879] syz.1.2228 (14879): drop_caches: 2 [ 456.159373][T12968] ocfs2: Unmounting device (7,6) on (node local) [ 456.662279][T14544] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 456.696933][T14544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.705971][T14544] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 456.751634][T14544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.758703][T14544] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 456.784439][T14544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.793583][T14544] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 456.818542][T14544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.089401][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.100714][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.108178][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.124234][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.137284][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.693269][T14544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.832098][T14544] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.864950][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.865082][ T7260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.926385][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.926512][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.022689][T14955] fuse: fd is not a fuse device [ 458.994237][ T7281] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.995853][ T31] audit: type=1326 audit(1787768193.948:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14974 comm="syz.1.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0639e0d9 code=0x7ffc0000 [ 458.998005][ T31] audit: type=1326 audit(1787768193.948:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14974 comm="syz.1.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fad0639e0d9 code=0x7ffc0000 [ 459.003801][ T31] audit: type=1326 audit(1787768193.958:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14974 comm="syz.1.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0639e0d9 code=0x7ffc0000 [ 459.012638][ T31] audit: type=1326 audit(1787768193.968:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14974 comm="syz.1.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0639e0d9 code=0x7ffc0000 [ 459.210145][ T5621] Bluetooth: hci3: command tx timeout [ 459.334479][T14990] fuse: fd is not a fuse device [ 459.589905][ T7281] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.648075][T14998] netlink: 'syz.5.2256': attribute type 1 has an invalid length. [ 459.665636][T15000] lo: entered promiscuous mode [ 459.755231][T15000] tunl0: entered promiscuous mode [ 459.772257][T15000] gre0: entered promiscuous mode [ 459.823862][T15000] gretap0: entered promiscuous mode [ 459.840864][T15000] erspan0: entered promiscuous mode [ 459.867356][T15000] ip_vti0: entered promiscuous mode [ 459.885736][T15000] ip6_vti0: entered promiscuous mode [ 459.933243][T15000] sit0: entered promiscuous mode [ 459.961146][T15000] ip6tnl0: entered promiscuous mode [ 459.990034][T15000] ip6gre0: entered promiscuous mode [ 460.008054][T15000] syz_tun: entered promiscuous mode [ 460.056933][T15000] ip6gretap0: entered promiscuous mode [ 460.071897][T15000] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.072571][T15000] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.087384][T15000] bridge0: left allmulticast mode [ 460.108003][T15000] bond0: entered promiscuous mode [ 460.108047][T15000] bond_slave_0: entered promiscuous mode [ 460.108251][T15000] bond_slave_1: entered promiscuous mode [ 460.133084][T15000] team0: entered promiscuous mode [ 460.133131][T15000] team_slave_1: entered promiscuous mode [ 460.163440][T15000] dummy0: entered promiscuous mode [ 460.175182][T15000] nlmon0: entered promiscuous mode [ 460.185831][T14592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.452404][T14592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.453312][T14592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.477926][T14592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.548393][T15014] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2258'. [ 460.582467][T14592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 460.858147][T14592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.067741][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 461.285858][ T5621] Bluetooth: hci3: command tx timeout [ 461.792343][T15024] netlink: 11575 bytes leftover after parsing attributes in process `syz.6.2260'. [ 461.824916][ T7281] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.839101][T14592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.854168][T14592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.067408][ T7281] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.130869][T14544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.725967][ T7281] bridge_slave_1: left allmulticast mode [ 462.726020][ T7281] bridge_slave_1: left promiscuous mode [ 462.726249][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.761857][ T31] audit: type=1804 audit(1787768197.718:277): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2266" name="file1" dev="tmpfs" ino=3237 res=1 errno=0 [ 462.763206][ T7281] bridge_slave_0: left allmulticast mode [ 462.763227][ T7281] bridge_slave_0: left promiscuous mode [ 462.763431][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.281140][ T7281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.319810][T11663] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 463.333531][ T7281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.359469][ T7281] bond0 (unregistering): Released all slaves [ 463.360320][ T5621] Bluetooth: hci3: command tx timeout [ 463.757041][T14592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.967241][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 464.020764][T15094] loop6: detected capacity change from 0 to 128 [ 464.066388][T15094] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 464.081392][T15094] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 464.162059][T14592] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.173473][T14933] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.173623][T14933] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.173759][T14933] bridge_slave_0: entered allmulticast mode [ 464.206166][T14933] bridge_slave_0: entered promiscuous mode [ 464.220904][T14933] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.221042][T14933] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.221178][T14933] bridge_slave_1: entered allmulticast mode [ 464.230283][T14933] bridge_slave_1: entered promiscuous mode [ 464.281478][ T7281] hsr_slave_0: left promiscuous mode [ 464.282331][T15094] fscrypt: loop6: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 464.300180][ T7281] hsr_slave_1: left promiscuous mode [ 464.301133][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.301155][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.314314][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.314334][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.357271][ T7281] veth1_macvtap: left promiscuous mode [ 464.357336][ T7281] veth0_macvtap: left promiscuous mode [ 464.357450][ T7281] veth1_vlan: left promiscuous mode [ 464.357522][ T7281] veth0_vlan: left promiscuous mode [ 464.404587][T12968] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.817059][T15107] dummy_hcd dummy_hcd.0: remove, state 1 [ 464.825673][T15107] usb usb1: USB disconnect, device number 1 [ 465.283919][T15107] dummy_hcd dummy_hcd.0: stopped [ 465.283957][T15107] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 465.409155][ T7281] team0 (unregistering): Port device team_slave_1 removed [ 465.439917][ T5621] Bluetooth: hci3: command tx timeout [ 465.507119][ T7281] team0 (unregistering): Port device team_slave_0 removed [ 465.847314][T15114] loop6: detected capacity change from 0 to 32768 [ 465.876302][T15114] JBD2: Ignoring recovery information on journal [ 465.924824][T15114] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 466.478588][T12968] ocfs2: Unmounting device (7,6) on (node local) [ 466.603133][T14933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.617638][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.617790][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.671810][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.671945][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.701512][T14933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.750538][T14933] team0: Port device team_slave_0 added [ 466.759872][T14933] team0: Port device team_slave_1 added [ 466.767302][T14544] veth0_vlan: entered promiscuous mode [ 467.006981][T14933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.007022][T14933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.007052][T14933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.067068][T14544] veth1_vlan: entered promiscuous mode [ 467.104348][T14933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.104396][T14933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.104428][T14933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.340818][T14933] hsr_slave_0: entered promiscuous mode [ 467.343557][T14933] hsr_slave_1: entered promiscuous mode [ 467.344451][T14933] debugfs: 'hsr0' already exists in 'hsr' [ 467.344471][T14933] Cannot create hsr debugfs directory [ 467.544560][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 467.554891][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 467.562447][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 467.571234][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 467.581928][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.346145][T14544] veth0_macvtap: entered promiscuous mode [ 468.472465][T14544] veth1_macvtap: entered promiscuous mode [ 468.758034][T14544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.791101][T14544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.857810][T15155] overlayfs: failed to clone upperpath [ 469.102819][ T7285] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.103154][ T7285] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.103336][ T7285] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.125561][ T7285] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.334014][ T7281] bridge_slave_1: left allmulticast mode [ 469.334065][ T7281] bridge_slave_1: left promiscuous mode [ 469.334324][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.356141][ T7281] bridge_slave_0: left allmulticast mode [ 469.356173][ T7281] bridge_slave_0: left promiscuous mode [ 469.356739][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.500921][ T7281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.511528][ T7281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.521857][ T7281] bond0 (unregistering): Released all slaves [ 469.680263][ T5621] Bluetooth: hci2: command tx timeout [ 469.702024][T14592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.802963][T10185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.803006][T10185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.959728][ T7281] hsr_slave_0: left promiscuous mode [ 469.969232][ T7281] hsr_slave_1: left promiscuous mode [ 469.975637][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.345148][ T7281] team0 (unregistering): Port device team_slave_1 removed [ 470.366523][ T7281] team0 (unregistering): Port device team_slave_0 removed [ 470.797449][ T7260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.809719][ T7260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.255994][T15204] loop8: detected capacity change from 0 to 512 [ 471.317773][T15204] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.317891][T15204] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.362013][T15204] EXT4-fs warning (device loop8): verify_group_input:156: Last group not full [ 471.372756][T14933] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.393287][T14933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.396197][T14933] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 471.412925][T14933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.413450][T15129] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.413559][T15129] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.413766][T15129] bridge_slave_0: entered allmulticast mode [ 471.421396][T15129] bridge_slave_0: entered promiscuous mode [ 471.439122][T14933] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 471.466805][T14933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.474524][T15129] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.474663][T15129] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.474793][T15129] bridge_slave_1: entered allmulticast mode [ 471.484922][T15129] bridge_slave_1: entered promiscuous mode [ 471.530117][T14544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.535236][T14933] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.549068][T14933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.662893][T15129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.677345][T15129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.702009][T14592] veth0_vlan: entered promiscuous mode [ 471.760149][ T5621] Bluetooth: hci2: command tx timeout [ 471.780256][T15129] team0: Port device team_slave_0 added [ 471.793212][T15129] team0: Port device team_slave_1 added [ 471.811872][T15223] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.2308'. [ 471.816813][T14592] veth1_vlan: entered promiscuous mode [ 471.828938][T15223] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2308'. [ 471.899192][T15129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.907055][T15129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.933992][T15129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.954433][T15129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.954475][T15129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.954525][T15129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.007737][T15225] loop6: detected capacity change from 0 to 8 [ 472.018105][T15225] SQUASHFS error: Unable to read inode 0x11f [ 472.046245][T14592] veth0_macvtap: entered promiscuous mode [ 472.104921][T15225] syz.6.2309 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 472.118190][T15225] CPU: 1 UID: 0 PID: 15225 Comm: syz.6.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.118230][T15225] Tainted: [L]=SOFTLOCKUP [ 472.118240][T15225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 472.118255][T15225] Call Trace: [ 472.118265][T15225] [ 472.118275][T15225] dump_stack_lvl+0xe8/0x150 [ 472.118317][T15225] dump_header+0xd3/0x4b0 [ 472.118353][T15225] oom_kill_process+0x3ab/0x9e0 [ 472.118390][T15225] out_of_memory+0x1064/0x1480 [ 472.118419][T15225] ? try_charge_memcg+0xbce/0x1590 [ 472.118447][T15225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.118492][T15225] ? __pfx_out_of_memory+0x10/0x10 [ 472.118520][T15225] ? do_raw_spin_unlock+0xf5/0x200 [ 472.118568][T15225] try_charge_memcg+0xc78/0x1590 [ 472.118615][T15225] ? __pfx_try_charge_memcg+0x10/0x10 [ 472.118653][T15225] ? percpu_ref_tryget+0x15/0x180 [ 472.118686][T15225] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 472.118730][T15225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.118763][T15225] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 472.118804][T15225] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 472.118848][T15225] __memcg_slab_post_alloc_hook+0x92b/0xf80 [ 472.118916][T15225] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 472.118954][T15225] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 472.118991][T15225] ? __d_alloc+0x37/0x6f0 [ 472.119023][T15225] ? __d_alloc+0x37/0x6f0 [ 472.119066][T15225] __d_alloc+0x37/0x6f0 [ 472.119109][T15225] d_alloc_pseudo+0x21/0xc0 [ 472.119151][T15225] alloc_path_pseudo+0x107/0x220 [ 472.119184][T15225] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 472.119225][T15225] alloc_file_pseudo+0xa8/0x1e0 [ 472.119257][T15225] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 472.119289][T15225] ? _raw_spin_unlock+0x28/0x50 [ 472.119337][T15225] anon_inode_getfile_fmode+0xb0/0x1c0 [ 472.119372][T15225] do_eventfd+0x144/0x2a0 [ 472.119409][T15225] __x64_sys_eventfd+0x39/0x50 [ 472.119442][T15225] do_syscall_64+0x166/0x520 [ 472.119469][T15225] ? trace_irq_disable+0x3b/0x140 [ 472.119493][T15225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.119526][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.119555][T15225] RIP: 0033:0x7f5643f9e0d9 [ 472.119578][T15225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.119598][T15225] RSP: 002b:00007f5644d9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 472.119625][T15225] RAX: ffffffffffffffda RBX: 00007f5644225fa0 RCX: 00007f5643f9e0d9 [ 472.119643][T15225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008c66 [ 472.119659][T15225] RBP: 00007f5644035024 R08: 0000000000000000 R09: 0000000000000000 [ 472.119675][T15225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.119690][T15225] R13: 00007f5644226038 R14: 00007f5644225fa0 R15: 00007ffc8ec4d668 [ 472.119730][T15225] [ 472.165568][T14592] veth1_macvtap: entered promiscuous mode [ 472.274646][T15129] hsr_slave_0: entered promiscuous mode [ 472.278862][T15129] hsr_slave_1: entered promiscuous mode [ 472.280770][T15225] memory: usage 0kB, limit 0kB, failcnt 19 [ 472.280789][T15225] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 472.280806][T15225] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 472.280822][T15225] Memory cgroup stats for /syz6/test: [ 472.281685][T15225] cache 0 [ 472.281698][T15225] rss 0 [ 472.281706][T15225] rss_huge 0 [ 472.281715][T15225] shmem 0 [ 472.281724][T15225] mapped_file 0 [ 472.281734][T15225] dirty 0 [ 472.281742][T15225] writeback 0 [ 472.281751][T15225] workingset_refault_anon 0 [ 472.281761][T15225] workingset_refault_file 0 [ 472.281771][T15225] swap 0 [ 472.281780][T15225] swapcached 0 [ 472.281789][T15225] pgpgin 0 [ 472.281798][T15225] pgpgout 0 [ 472.281807][T15225] pgfault 0 [ 472.281816][T15225] pgmajfault 0 [ 472.281824][T15225] inactive_anon 0 [ 472.281833][T15225] active_anon 0 [ 472.281843][T15225] inactive_file 0 [ 472.281852][T15225] active_file 0 [ 472.281861][T15225] unevictable 0 [ 472.281870][T15225] hierarchical_memory_limit 0 [ 472.281880][T15225] hierarchical_memsw_limit 9223372036854771712 [ 472.281891][T15225] total_cache 0 [ 472.281900][T15225] total_rss 0 [ 472.281909][T15225] total_rss_huge 0 [ 472.281919][T15225] total_shmem 0 [ 472.281928][T15225] total_mapped_file 0 [ 472.281938][T15225] total_dirty 0 [ 472.281947][T15225] total_writeback 0 [ 472.281956][T15225] total_workingset_refault_anon 0 [ 472.281967][T15225] total_workingset_refault_file 0 [ 472.281977][T15225] total_swap 0 [ 472.281986][T15225] total_swapcached 0 [ 472.281996][T15225] total_pgpgin 0 [ 472.282005][T15225] total_pgpgout 0 [ 472.282015][T15225] total_pgfault 0 [ 472.282024][T15225] total_pgmajfault 0 [ 472.282033][T15225] total_inactive_anon 0 [ 472.282043][T15225] total_active_anon 0 [ 472.282052][T15225] total_inactive_file 0 [ 472.282062][T15225] total_active_file 0 [ 472.282071][T15225] total_unevictable 0 [ 472.282081][T15225] anon_cost 0 [ 472.282090][T15225] file_cost 0 [ 472.282099][T15225] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.2309,pid=15224,uid=0 [ 472.283865][T15225] Memory cgroup out of memory: Killed process 15224 (syz.6.2309) total-vm:104300kB, anon-rss:1432kB, file-rss:23140kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 472.284304][T15129] debugfs: 'hsr0' already exists in 'hsr' [ 472.284325][T15129] Cannot create hsr debugfs directory [ 472.632429][T14592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.725010][T14592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.924981][T14933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.961311][T10184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.053431][ T7260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.274794][T14933] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.281604][ T7285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.281624][ T7285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.342902][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.343018][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.391246][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.391332][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.391349][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.391587][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.464208][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.464357][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.841714][ T5621] Bluetooth: hci2: command tx timeout [ 474.518241][T15129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 474.541024][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.557542][T15129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.594008][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.602425][T15129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.633861][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.644696][T15129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.691242][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.739610][T15283] FAULT_INJECTION: forcing a failure. [ 474.739610][T15283] name failslab, interval 1, probability 0, space 0, times 0 [ 474.755284][T15283] CPU: 1 UID: 0 PID: 15283 Comm: syz.3.2322 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.755323][T15283] Tainted: [L]=SOFTLOCKUP [ 474.755333][T15283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 474.755348][T15283] Call Trace: [ 474.755358][T15283] [ 474.755369][T15283] dump_stack_lvl+0xe8/0x150 [ 474.755411][T15283] should_fail_ex+0x410/0x560 [ 474.755449][T15283] should_failslab+0xa8/0x100 [ 474.755480][T15283] __kmalloc_noprof+0xfe/0x720 [ 474.755520][T15283] ? io_cache_alloc_new+0x40/0x100 [ 474.755548][T15283] ? io_cache_alloc_new+0x40/0x100 [ 474.755584][T15283] io_cache_alloc_new+0x40/0x100 [ 474.755614][T15283] io_uring_cmd_prep+0x39a/0x600 [ 474.755652][T15283] io_submit_sqes+0xbde/0x2310 [ 474.755719][T15283] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 474.755763][T15283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.755795][T15283] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 474.755835][T15283] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 474.755877][T15283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.755906][T15283] ? rcu_is_watching+0x16/0xb0 [ 474.755936][T15283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.755974][T15283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.756003][T15283] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 474.756039][T15283] do_syscall_64+0x166/0x520 [ 474.756068][T15283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.756100][T15283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.756127][T15283] RIP: 0033:0x7f134c19e0d9 [ 474.756150][T15283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.756171][T15283] RSP: 002b:00007f134d122f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 474.756197][T15283] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f134c19e0d9 [ 474.756216][T15283] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 474.756231][T15283] RBP: 00000000000002b9 R08: 0000000000000000 R09: 0000000000000008 [ 474.756247][T15283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000800 [ 474.756263][T15283] R13: 0000200000000808 R14: 0000000000000e26 R15: 0000000000000000 [ 474.756301][T15283] [ 475.265772][T15129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.348435][T15129] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.414917][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.415048][ T7260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.454685][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.454818][ T7281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.920510][ T5621] Bluetooth: hci2: command tx timeout [ 476.255495][T14933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.045894][T15329] loop3: detected capacity change from 0 to 131072 [ 477.081054][T15329] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 477.081100][T15329] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 477.091011][T15329] F2FS-fs (loop3): invalid crc value [ 477.176475][T15329] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 477.189135][T15329] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 477.189180][T15329] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 477.354007][ T31] audit: type=1800 audit(1787768212.308:278): pid=15329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2330" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 477.665042][T14933] veth0_vlan: entered promiscuous mode [ 477.692009][T14933] veth1_vlan: entered promiscuous mode [ 477.762321][T14933] veth0_macvtap: entered promiscuous mode [ 477.790592][T14933] veth1_macvtap: entered promiscuous mode [ 477.871653][T14933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.909285][T14933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.990750][ T7269] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.990823][ T7269] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.990864][ T7269] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.990904][ T7269] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.327570][T10185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.327611][T10185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.564479][ T7278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.564527][ T7278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.797511][T15384] fuse: fd is not a fuse device [ 478.866099][T15129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.121123][T15129] veth0_vlan: entered promiscuous mode [ 479.182602][T15129] veth1_vlan: entered promiscuous mode [ 479.367377][T15129] veth0_macvtap: entered promiscuous mode [ 479.395462][T15129] veth1_macvtap: entered promiscuous mode [ 479.447883][T15129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.474625][T15129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.527347][ T7281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.527457][ T7281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.527498][ T7281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.540158][ T7260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.988994][ T7259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.989034][ T7259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.100029][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.100065][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.359427][T15431] loop9: detected capacity change from 0 to 2048 [ 480.510639][T15436] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.559569][T15431] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 480.660909][T15431] Remounting filesystem read-only [ 480.689459][T15438] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 480.701690][T15431] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 480.704165][T15431] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 480.718010][T15431] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 480.742724][T11663] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 480.766168][T15431] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 480.982921][T11663] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 480.989347][T11663] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.989376][T11663] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 480.989418][T11663] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.028537][T11663] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 481.436745][T15452] overlayfs: failed to clone upperpath [ 481.906160][T15442] loop3: detected capacity change from 0 to 40427 [ 481.946632][T15442] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 481.946680][T15442] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 481.973394][T15442] F2FS-fs (loop3): invalid crc value [ 482.190302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 482.566403][T15442] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 482.618973][T15442] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 482.619018][T15442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 482.747368][ C1] sd 0:0:1:0: [sda] tag#3389 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 482.747445][ C1] sd 0:0:1:0: [sda] tag#3389 CDB: Read(6) 08 00 00 00 09 00 [ 483.471161][T13141] usb 7-1: USB disconnect, device number 9 [ 483.501881][T13141] idmouse 7-1:1.0: disconnected [ 484.106314][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 484.142128][T15499] fuse: fd is not a fuse device [ 487.235336][T15597] loop9: detected capacity change from 0 to 40427 [ 487.244243][T15597] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 487.244267][T15597] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 487.360156][T15597] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 487.377379][T15597] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 487.377420][T15597] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 487.601920][T15597] syz.9.2385: attempt to access beyond end of device [ 487.601920][T15597] loop9: rw=2049, sector=45096, nr_sectors = 2048 limit=40427 [ 487.608230][T15597] syz.9.2385: attempt to access beyond end of device [ 487.608230][T15597] loop9: rw=2049, sector=47144, nr_sectors = 768 limit=40427 [ 488.457282][T15638] kAFS: No cell specified [ 488.562606][ T7260] kworker/u8:12: attempt to access beyond end of device [ 488.562606][ T7260] loop9: rw=1, sector=45112, nr_sectors = 8 limit=40427 [ 489.002460][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 489.779712][T15674] loop0: detected capacity change from 0 to 2048 [ 489.848271][T15685] netlink: 'syz.6.2405': attribute type 1 has an invalid length. [ 489.856674][T15674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.856768][T15674] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.476443][T15699] gadgetfs: bound to dummy_udc driver [ 490.476515][T15699] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 490.493939][T15699] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 490.502343][T15699] CPU: 0 UID: 0 PID: 15699 Comm: syz.6.2407 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.513276][T15699] Tainted: [L]=SOFTLOCKUP [ 490.517590][T15699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 490.527637][T15699] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 490.533116][T15699] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 55 57 06 fa eb 0c e8 4e 57 06 fa eb 05 e8 47 57 06 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 d1 09 76 fa 4d 8b 36 4c 89 f7 e8 [ 490.552716][T15699] RSP: 0018:ffffc9000467f850 EFLAGS: 00010256 [ 490.558780][T15699] RAX: 0000000000000000 RBX: ffffffff8fc6c0e0 RCX: 0000000000080000 [ 490.566749][T15699] RDX: ffffc90017171000 RSI: 0000000000001d05 RDI: 0000000000001d06 [ 490.574715][T15699] RBP: ffff88802a87f000 R08: ffff888030548000 R09: 0000000000000004 [ 490.582684][T15699] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 490.590648][T15699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 490.598623][T15699] FS: 00007f5644d9e6c0(0000) GS:ffff888124ce6000(0000) knlGS:0000000000000000 [ 490.607556][T15699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.614132][T15699] CR2: 0000001b2df1eff8 CR3: 000000007b3a4000 CR4: 0000000000350ef0 [ 490.622098][T15699] Call Trace: [ 490.625364][T15699] [ 490.628287][T15699] ? __pfx_dummy_udc_start+0x10/0x10 [ 490.633576][T15699] gadget_bind_driver+0x3a8/0x9e0 [ 490.638602][T15699] ? __pfx_gadget_bind_driver+0x10/0x10 [ 490.644150][T15699] really_probe+0x254/0xae0 [ 490.648668][T15699] __driver_probe_device+0x1e8/0x360 [ 490.653957][T15699] driver_probe_device+0x4f/0x240 [ 490.658991][T15699] __driver_attach+0x339/0x600 [ 490.663767][T15699] bus_for_each_dev+0x23b/0x2c0 [ 490.668618][T15699] ? __pfx___driver_attach+0x10/0x10 [ 490.673906][T15699] ? __pfx_bus_for_each_dev+0x10/0x10 [ 490.679267][T15699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.684903][T15699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.690537][T15699] ? do_raw_spin_unlock+0xf5/0x200 [ 490.695666][T15699] bus_add_driver+0x345/0x670 [ 490.700345][T15699] driver_register+0x23a/0x320 [ 490.705122][T15699] usb_gadget_register_driver_owner+0xf9/0x270 [ 490.711272][T15699] dev_config+0xe3c/0x12a0 [ 490.715693][T15699] ? __pfx_dev_config+0x10/0x10 [ 490.720542][T15699] ? __pfx_dev_config+0x10/0x10 [ 490.725393][T15699] vfs_write+0x296/0xba0 [ 490.729644][T15699] ? __pfx_vfs_write+0x10/0x10 [ 490.734428][T15699] ? __fget_files+0x2a/0x420 [ 490.739016][T15699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.744641][T15699] ? __fget_files+0x3a2/0x420 [ 490.749318][T15699] ? __fget_files+0x2a/0x420 [ 490.753912][T15699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.759538][T15699] ksys_write+0x150/0x270 [ 490.763866][T15699] ? __pfx_ksys_write+0x10/0x10 [ 490.768717][T15699] do_syscall_64+0x166/0x520 [ 490.773297][T15699] ? trace_irq_disable+0x3b/0x140 [ 490.778315][T15699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.784371][T15699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.790264][T15699] RIP: 0033:0x7f5643f9e0d9 [ 490.794670][T15699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.814264][T15699] RSP: 002b:00007f5644d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.822668][T15699] RAX: ffffffffffffffda RBX: 00007f5644225fa0 RCX: 00007f5643f9e0d9 [ 490.830627][T15699] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000003 [ 490.838589][T15699] RBP: 00007f5644035024 R08: 0000000000000000 R09: 0000000000000000 [ 490.846546][T15699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.854509][T15699] R13: 00007f5644226038 R14: 00007f5644225fa0 R15: 00007ffc8ec4d668 [ 490.862480][T15699] [ 490.865486][T15699] Modules linked in: [ 490.872279][T15699] ---[ end trace 0000000000000000 ]--- [ 490.883636][T15699] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 490.883703][T15699] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 55 57 06 fa eb 0c e8 4e 57 06 fa eb 05 e8 47 57 06 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 d1 09 76 fa 4d 8b 36 4c 89 f7 e8 [ 490.883738][T15699] RSP: 0018:ffffc9000467f850 EFLAGS: 00010256 [ 490.883772][T15699] RAX: 0000000000000000 RBX: ffffffff8fc6c0e0 RCX: 0000000000080000 [ 490.883796][T15699] RDX: ffffc90017171000 RSI: 0000000000001d05 RDI: 0000000000001d06 [ 490.883819][T15699] RBP: ffff88802a87f000 R08: ffff888030548000 R09: 0000000000000004 [ 490.883843][T15699] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 490.883865][T15699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 490.883889][T15699] FS: 00007f5644d9e6c0(0000) GS:ffff888124ce6000(0000) knlGS:0000000000000000 [ 490.883916][T15699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.883939][T15699] CR2: 00007ff8a15f5ff8 CR3: 000000007b3a4000 CR4: 0000000000350ef0 [ 490.883968][T15699] Kernel panic - not syncing: Fatal exception [ 490.984327][T15699] Kernel Offset: disabled [ 490.988630][T15699] Rebooting in 86400 seconds..