last executing test programs: 24m42.099222431s ago: executing program 32 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bedd7888c1ef50d9de72e9b0e5287a0dd9a544c6c706469eca4d4c532cf7a9a601d84816936e3b42627788fab858f1041da4801a13aff75576c7febfed5dc7e13cc72be00500d1b99ee982d02ac62c0c49f8f6e0f8359b2b2efb0cb47163cab766c94882779a4b8190e165568e8923bad4195bf7309fe56542ffdc0a3fbcf8432b647c21ebf0a0ad3db5e8d0ebc6a05a2d3918f7cb3ec71e658e0f2a11685a60"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000920a", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@iv={0x90, 0x117, 0x2, 0x7b, "2aff84e950b563656b60d5bb6ab24f3f9679941122db790d4737b2334b8854943ce8952cd85f6d298833b1832560c092ce83a9f785d48fe34273b1841f9413cd12c2058e86fcb01f5ebbfe09cf7c7b124095259bb7bd90f7841cae359c2b19a581e5a43d8ea826328439999c7f5e0d197d43c4fadf66c714d9dc3e"}], 0x90}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf808", 0x55) 24m25.486800081s ago: executing program 33 (id=22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mprotect(&(0x7f000082b000/0x2000)=nil, 0x2000, 0x1000000) 24m9.66058997s ago: executing program 34 (id=36): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000200), &(0x7f0000000040)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 23m52.408982976s ago: executing program 35 (id=48): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000200), &(0x7f0000000040)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19m49.35669284s ago: executing program 36 (id=220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 19m43.26947277s ago: executing program 37 (id=225): syz_open_dev$usbfs(&(0x7f0000000680), 0x76, 0x183301) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0xfff, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) dup2(r3, 0xffffffffffffffff) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 19m29.271341832s ago: executing program 1 (id=246): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x5000000, 0x86000) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close(r0) eventfd2(0x8, 0x1) 19m25.171120899s ago: executing program 1 (id=250): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) eventfd2(0x8, 0x1) 19m20.91030585s ago: executing program 1 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x325, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x24030000, 0x0, 0x4050000}, 0x4008040) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x100000000}]}) r7 = io_uring_setup(0x15c0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000040)={r6}, 0x1) sendto$inet(r8, &(0x7f0000000300)="1adf2c312cdac461e14660166bc281102720a614ce4c76ff14780a8aa1ca24bdda160eeaf02e8c5617d7dd9fe6ac72d8e234a7976e4758eea0404aa4cce87c2660e1f7e4d16b3c0e09c7cf988900000000c3d85b4d78b91b", 0x58, 0x0, 0x0, 0x0) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19m5.138712204s ago: executing program 38 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x325, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x24030000, 0x0, 0x4050000}, 0x4008040) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x100000000}]}) r7 = io_uring_setup(0x15c0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000040)={r6}, 0x1) sendto$inet(r8, &(0x7f0000000300)="1adf2c312cdac461e14660166bc281102720a614ce4c76ff14780a8aa1ca24bdda160eeaf02e8c5617d7dd9fe6ac72d8e234a7976e4758eea0404aa4cce87c2660e1f7e4d16b3c0e09c7cf988900000000c3d85b4d78b91b", 0x58, 0x0, 0x0, 0x0) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12m31.128721752s ago: executing program 39 (id=594): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000300)=0xa8) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) 12m23.105478548s ago: executing program 40 (id=601): syz_open_dev$video(0x0, 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb", 0x1b) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x2, 0x714, 0x4e23, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6000000000000000, 0xffff, 0x8251c, 0x2, 0xb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffb}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x27f, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "eee9e1", 0x249, 0x32, 0x1, @private1, @mcast2, {[@dstopts={0x62, 0x1d, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0x3, [0x10]}}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x7c, "6570015cc17188b957b4cb9e98577c5d8303c91fc8a66470652685c202731cd40332153c2b558aa2b6f3308246585007c1cc96b09970fcf2bb43f27f3214c515b56105ebc4457693cf1ad775be127fb2e1a2c34ac4bb46b2d40cae25fdaa860348d79c9da4233b1dd0106a7f6c13e21f36fabdc66f46714eae44ef5c"}, @pad1, @generic={0x2, 0x29, "916698dc3ab6ac39b5fb9347c210651092b20d5775d1424d4f2c18815eb3ff140c6179726e4b4923c0"}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x16, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, @fragment={0x88, 0x0, 0x7, 0x0, 0x0, 0x1a, 0x66}, @srh={0x87, 0x8, 0x4, 0x4, 0x70, 0x58, 0xb, [@empty, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private1]}], "d83d2d5b3d488b22a71357895f1fc249b9c7f5cc2ce9c72c1b2b2c294e099a1b2a69c66d61d9b53536ceb4cac47e806a43664962b1d5925eb991df1051af15e6907c981326a1b68c36e68ee6952ca7f140b3756fd610174414a2a67cc8da800e1a645ff226938e63d2069c1244c1881918c502cf9b898772cca9fdae7b516cea644468a462d909e2dd9cf2294196d17bbd3bc38fae5686f6793b0b8a92972524c9f554c6f5761c86b5f80bf9c98ff83ffe5a32d3367ef0c3081278c1804ab55d05d2881f2975a5ab0d2f89f4956f577873f0faa6a1d7c723c7cf1e873a9ff83cacc659aecf4f27e65688273c83e693b00dff412573c7d009b3"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 10m57.884765426s ago: executing program 41 (id=694): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002840)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1100}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x2a00) listxattr(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000300)={0x0, 0x7, 0x41f, '\x00', &(0x7f00000002c0)=0xe0}) unshare(0x6a040000) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x80047453, &(0x7f0000000280)=0x800) 8m52.1408322s ago: executing program 0 (id=824): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) eventfd2(0x8, 0x1) 8m48.875138122s ago: executing program 0 (id=830): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)={0x20000002}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) ioctl$RTC_PIE_OFF(r2, 0x7006) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2000}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8m43.209552844s ago: executing program 0 (id=836): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x200088c4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000880)) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0}) read$FUSE(r2, &(0x7f00000079c0)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_clone3(&(0x7f0000000300)={0x100000400, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1, {r2}}, 0x58) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) 8m37.904126485s ago: executing program 0 (id=843): socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x1c, 0x43, 0x101, 0x70bd2d, 0x25dfdbfb, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000180), 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000000)=0x6, 0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 8m22.435578894s ago: executing program 42 (id=843): socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x1c, 0x43, 0x101, 0x70bd2d, 0x25dfdbfb, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000180), 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000000)=0x6, 0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 6m41.915522227s ago: executing program 4 (id=960): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00"/14], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 6m40.041760503s ago: executing program 4 (id=962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bedd7888c1ef50d9de72e9b0e5287a0dd9a544c6c706469eca4d4c532cf7a9a601d84816936e3b42627788fab858f1041da4801a13aff75576c7febfed5dc7e13cc72be00500d1b99ee982d02ac62c0c49f8f6e0f8359b2b2efb0cb47163cab766c94882779a4b8190e165568e8923bad4195bf7309fe56542ffdc0a3fbcf8432b647c21ebf0a0ad3db5e8d0ebc6a05a2d3918f7cb3ec71e658e0f2a11685a60"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000920a", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@iv={0x90, 0x117, 0x2, 0x7b, "2aff84e950b563656b60d5bb6ab24f3f9679941122db790d4737b2334b8854943ce8952cd85f6d298833b1832560c092ce83a9f785d48fe34273b1841f9413cd12c2058e86fcb01f5ebbfe09cf7c7b124095259bb7bd90f7841cae359c2b19a581e5a43d8ea826328439999c7f5e0d197d43c4fadf66c714d9dc3e"}], 0x90}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf808", 0x55) 6m30.466690931s ago: executing program 4 (id=970): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 6m23.657396091s ago: executing program 1 (id=859): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) eventfd2(0x8, 0x1) 6m21.260982491s ago: executing program 4 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 6m19.463346465s ago: executing program 4 (id=979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mprotect(&(0x7f000082b000/0x2000)=nil, 0x2000, 0x1000000) 6m18.983299138s ago: executing program 1 (id=981): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x5000000, 0x86000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x2c0000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) eventfd2(0x8, 0x1) 6m13.441671243s ago: executing program 4 (id=983): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r3, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 6m12.612760959s ago: executing program 1 (id=987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x420000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000526e906c2ffd30dd026191c21aab496bd5d10e01ac"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x8, 0x7ffffffffffffffe, 0x5cfc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5m58.19366837s ago: executing program 43 (id=983): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r3, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 5m55.284116799s ago: executing program 44 (id=987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x420000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000526e906c2ffd30dd026191c21aab496bd5d10e01ac"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x8, 0x7ffffffffffffffe, 0x5cfc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m4.173273017s ago: executing program 3 (id=1383): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 1m3.633555977s ago: executing program 3 (id=1387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000017000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) socket(0x2, 0x80805, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1m2.862803727s ago: executing program 3 (id=1395): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_tables_names\x00') lseek(r0, 0xfffd, 0x0) 1m2.315871444s ago: executing program 3 (id=1401): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x800, 0x4) 1m1.849862213s ago: executing program 3 (id=1405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x8, 0x6, 0x2, 0x2, 0x1, 0x6, 0x0, 0xb, 0x2, [0x6c, 0x1, 0x2, 0x7, 0xad9, 0x6, 0x2, 0x1]}}) 1m1.411331743s ago: executing program 3 (id=1408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x94512, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESHEX], 0x0, 0x1237, &(0x7f00000013c0)="$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") bind$inet(r1, &(0x7f0000019080)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) syz_clone3(&(0x7f000000dd80)={0x30a00480, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 51.024172836s ago: executing program 8 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x54}}, 0x0) 49.344589253s ago: executing program 8 (id=1484): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x770, [{0x1, 0x2}]}, @typedef={0x2}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001500)=""/4096, 0x40, 0x1000, 0x1}, 0x28) 48.971087072s ago: executing program 8 (id=1486): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) fcntl$notify(r0, 0x402, 0x80000030) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='ns\x00') getdents64(r2, &(0x7f00000002c0)=""/141, 0x8d) 48.55723566s ago: executing program 8 (id=1491): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xc01, 0x19d) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)) 48.02742168s ago: executing program 8 (id=1495): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x6c033, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x6c033, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x3, 0x0, 0x40, 0x8}, 0x20) madvise(&(0x7f0000114000/0x1000)=nil, 0x1000, 0x65) 47.211017365s ago: executing program 8 (id=1502): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) 46.206503248s ago: executing program 45 (id=1408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x94512, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESHEX], 0x0, 0x1237, &(0x7f00000013c0)="$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") bind$inet(r1, &(0x7f0000019080)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) syz_clone3(&(0x7f000000dd80)={0x30a00480, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 31.968644474s ago: executing program 46 (id=1502): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) 29.882774035s ago: executing program 2 (id=1585): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0xfffffffd}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x42}, 0x28) 29.618520611s ago: executing program 2 (id=1587): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x3) 29.184607008s ago: executing program 2 (id=1589): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r0, 0x15, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) 28.931708516s ago: executing program 2 (id=1591): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RXATTRCREATE(r2, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) umount2(&(0x7f0000000300)='./file0\x00', 0x0) 28.628369154s ago: executing program 2 (id=1594): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x8004042) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.74407854s ago: executing program 2 (id=1600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_clone3(&(0x7f0000006b80)={0x288000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, &(0x7f0000002140), 0x8004, &(0x7f0000004600)=ANY=[]) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) 12.624047553s ago: executing program 47 (id=1600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_clone3(&(0x7f0000006b80)={0x288000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, &(0x7f0000002140), 0x8004, &(0x7f0000004600)=ANY=[]) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) 6.634956911s ago: executing program 7 (id=1658): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x404485d}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @local}, 0x14) sendto$packet(r6, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r5, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 6.033570394s ago: executing program 7 (id=1662): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) umount2(&(0x7f00000000c0)='./cgroup\x00', 0x0) 5.853561261s ago: executing program 9 (id=1665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x250, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 5.696992394s ago: executing program 7 (id=1666): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002f80)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$kcm(0x29, 0xc, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5.479127292s ago: executing program 9 (id=1668): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 4.974394932s ago: executing program 9 (id=1669): r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}, {0x2, 0x6, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 4.274033723s ago: executing program 9 (id=1671): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) fanotify_init(0x40, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000640), 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x15, 0x0, @void}, 0x10) syz_io_uring_setup(0xc2f, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x15f}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$netlink(r4, 0x10e, 0x4, 0x0, &(0x7f0000000100)) 3.580297769s ago: executing program 9 (id=1674): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008, 0x7}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0xe71}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) 3.205202965s ago: executing program 9 (id=1675): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2880) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x62000000) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x76, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e25, 0x417, @private0={0xfc, 0x0, '\x00', 0x9}, 0x7}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280), &(0x7f00000001c0)=0x8) 3.07126467s ago: executing program 6 (id=1676): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 2.396852715s ago: executing program 6 (id=1678): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 2.219927623s ago: executing program 7 (id=1679): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2, 0x8}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.093510716s ago: executing program 5 (id=1680): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000280)=0x7, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xfff8, 0x3, @private1={0xfc, 0x1, '\x00', 0x40}, 0x2}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6020400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='io.stat\x00', 0x5000000, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0xff27) 1.845044987s ago: executing program 5 (id=1681): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xa793}, 0x8) 1.839819488s ago: executing program 7 (id=1682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) write$tun(r0, &(0x7f0000000240)={@void, @void, @eth={@local, @random="5da477244596", @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x63, 0x2000, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback}, {0xa040, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6e, 0x100, @val=0x80}}}}}}}}, 0x36) 1.399229719s ago: executing program 5 (id=1683): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x8008002) 1.317589543s ago: executing program 6 (id=1684): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) 1.127884383s ago: executing program 6 (id=1685): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000a40)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b50", 0x33}], 0x1) 796.754067ms ago: executing program 7 (id=1686): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x4b, 0x38, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a5703000000b52ecdf3e8761b8bc2e3bdbbff5ee018d48c7c38b457193baf26"}}) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, 0x0) tgkill(r3, 0x0, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) 796.541894ms ago: executing program 6 (id=1687): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x8, {0x0, r1, 0x3}}, 0x18) 796.356301ms ago: executing program 5 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) shutdown(0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000012003909000019000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64"], 0x3c}}, 0x0) 487.441643ms ago: executing program 6 (id=1689): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_freeze_timeout', 0x0, 0xed) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 320.904875ms ago: executing program 0 (id=1574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000", 0x3d}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff", 0x88}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed", 0xae}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0", 0x99}], 0x2}}], 0x2, 0x40000000) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 191.916174ms ago: executing program 5 (id=1690): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 3.238126ms ago: executing program 0 (id=1691): r0 = syz_mount_image$erofs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[], 0x0, 0x22f, &(0x7f0000000300)="$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") fadvise64(r0, 0xd7, 0x400bc, 0x3) 0s ago: executing program 5 (id=1692): r0 = socket(0x400000000010, 0x3, 0x0) r1 = accept4$inet(r0, 0x0, 0x0, 0x800) accept4$inet(r1, 0x0, &(0x7f0000002480), 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x3c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): 8 [ 1365.362348][T13553] tpg transfer function: 0/0 [ 1365.367618][T13553] tpg Y'CbCr encoding: 0/0 [ 1365.372854][T13553] tpg quantization: 0/0 [ 1365.377565][T13553] tpg RGB range: 0/2 [ 1365.381476][T13553] vivid-000: ================== END STATUS ================== [ 1365.384200][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.395746][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.125831][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.973355][T13387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.318757][T13370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1367.410526][T13370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1367.845447][T13569] loop2: detected capacity change from 0 to 40427 [ 1367.886156][T13569] F2FS-fs (loop2): invalid crc value [ 1367.951502][T13569] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1367.961820][T13569] F2FS-fs (loop2): Start checkpoint disabled! [ 1367.977189][T13569] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1367.992988][T13569] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1368.010754][T13370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1368.115881][ T29] audit: type=1800 audit(1773563824.716:246): pid=13574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1097" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 1368.225121][T13574] bio_check_eod: 182 callbacks suppressed [ 1368.225197][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.225197][T13574] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1368.247914][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.247914][T13574] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1368.264581][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.264581][T13574] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1368.281240][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.281240][T13574] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1368.297425][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.297425][T13574] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1368.314802][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.314802][T13574] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1368.329505][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.329505][T13574] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1368.349901][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.349901][T13574] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1368.366704][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.366704][T13574] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1368.383188][T13574] syz.2.1097: attempt to access beyond end of device [ 1368.383188][T13574] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1368.926804][T13370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1369.254673][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.261868][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.511029][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1369.511091][ T6385] Tainted: [L]=SOFTLOCKUP [ 1369.511106][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1369.511131][ T6385] Workqueue: writeback wb_workfn (flush-7:2) [ 1369.511193][ T6385] Call Trace: [ 1369.511206][ T6385] [ 1369.511221][ T6385] dump_stack_lvl+0x100/0x190 [ 1369.511281][ T6385] f2fs_handle_critical_error+0x5d7/0x970 [ 1369.511324][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.511371][ T6385] ? f2fs_build_fault_attr+0x53/0x280 [ 1369.511439][ T6385] f2fs_write_end_io+0xc3f/0xf30 [ 1369.511486][ T6385] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1369.511534][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.511598][ T6385] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1369.511640][ T6385] bio_endio+0x7a3/0x910 [ 1369.511681][ T6385] submit_bio_noacct+0x64c/0x2010 [ 1369.511743][ T6385] f2fs_submit_write_bio+0x133/0x350 [ 1369.511784][ T6385] __submit_merged_bio+0x331/0x7b0 [ 1369.511832][ T6385] __submit_merged_write_cond+0x3fe/0x510 [ 1369.511886][ T6385] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1369.511942][ T6385] ? __pfx___might_resched+0x10/0x10 [ 1369.511980][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512033][ T6385] f2fs_write_cache_pages+0x21c0/0x2720 [ 1369.512108][ T6385] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1369.512159][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512214][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512261][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512307][ T6385] ? find_held_lock+0x2b/0x80 [ 1369.512355][ T6385] ? nr_blockdev_pages+0xde/0x120 [ 1369.512402][ T6385] ? nr_blockdev_pages+0xde/0x120 [ 1369.512447][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512512][ T6385] ? si_meminfo+0x118/0x230 [ 1369.512548][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512601][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512714][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512760][ T6385] ? rcu_is_watching+0x12/0xc0 [ 1369.512806][ T6385] f2fs_write_data_pages+0x799/0x16d0 [ 1369.512857][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.512916][ T6385] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1369.512982][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.513029][ T6385] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1369.513084][ T6385] do_writepages+0x278/0x600 [ 1369.513146][ T6385] ? __pfx_do_writepages+0x10/0x10 [ 1369.513203][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.513255][ T6385] __writeback_single_inode+0x164/0x13c0 [ 1369.513302][ T6385] ? find_held_lock+0x2b/0x80 [ 1369.513347][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.513396][ T6385] ? __pfx___writeback_single_inode+0x10/0x10 [ 1369.513448][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.513492][ T6385] ? do_raw_spin_unlock+0x145/0x1e0 [ 1369.513532][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.513591][ T6385] writeback_sb_inodes+0x766/0x1c70 [ 1369.513660][ T6385] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1369.513706][ T6385] ? do_raw_spin_lock+0x128/0x260 [ 1369.513746][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.513847][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.513892][ T6385] ? rcu_is_watching+0x12/0xc0 [ 1369.513931][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.513977][ T6385] ? queue_io+0x287/0x550 [ 1369.514019][ T6385] wb_writeback+0x1c0/0xbe0 [ 1369.514079][ T6385] ? __pfx_wb_writeback+0x10/0x10 [ 1369.514134][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.514180][ T6385] ? mark_held_locks+0x40/0x70 [ 1369.514236][ T6385] ? _raw_spin_unlock_irq+0x23/0x50 [ 1369.514292][ T6385] wb_workfn+0x142/0xc00 [ 1369.514343][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.514389][ T6385] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1369.514441][ T6385] ? __pfx_wb_workfn+0x10/0x10 [ 1369.514491][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.514540][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.514604][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.514643][ T6385] ? rcu_is_watching+0x12/0xc0 [ 1369.514679][ T6385] process_one_work+0xa23/0x19a0 [ 1369.514721][ T6385] ? __pfx_process_one_work+0x10/0x10 [ 1369.514747][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.514794][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.514839][ T6385] worker_thread+0x5ef/0xe50 [ 1369.514875][ T6385] ? __pfx_worker_thread+0x10/0x10 [ 1369.514904][ T6385] ? kthread+0x13a/0x450 [ 1369.514958][ T6385] ? __pfx_worker_thread+0x10/0x10 [ 1369.514983][ T6385] kthread+0x370/0x450 [ 1369.515025][ T6385] ? __pfx_kthread+0x10/0x10 [ 1369.515071][ T6385] ret_from_fork+0x754/0xd80 [ 1369.515118][ T6385] ? __pfx_ret_from_fork+0x10/0x10 [ 1369.515165][ T6385] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1369.515203][ T6385] ? __switch_to+0x7b4/0x1120 [ 1369.515235][ T6385] ? __pfx_kthread+0x10/0x10 [ 1369.515281][ T6385] ret_from_fork_asm+0x1a/0x30 [ 1369.515330][ T6385] [ 1369.994761][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.001993][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.075500][T13387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1370.089238][ T6385] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1370.094054][T13387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1371.169588][T13370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.285237][T13370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.370938][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.378227][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.689996][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.697267][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.033691][T13370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1372.078799][T13387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.093805][T13598] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1372.100404][T13598] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1372.108775][T13598] vhci_hcd vhci_hcd.0: Device attached [ 1372.123755][T13598] random: crng reseeded on system resumption [ 1372.416687][ T5901] usb 48-1: SetAddress Request (14) to port 0 [ 1372.424455][ T5901] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1372.503819][T13599] vhci_hcd: connection closed [ 1372.892106][ T6382] vhci_hcd vhci_hcd.7: stop threads [ 1372.942136][ T6382] vhci_hcd vhci_hcd.7: release socket [ 1372.974615][ T6382] vhci_hcd vhci_hcd.7: disconnect device [ 1373.166029][T13609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'. [ 1374.036801][T13370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.332347][T13370] veth0_vlan: entered promiscuous mode [ 1374.487538][T13370] veth1_vlan: entered promiscuous mode [ 1374.765988][T13370] veth0_macvtap: entered promiscuous mode [ 1374.896741][T13370] veth1_macvtap: entered promiscuous mode [ 1375.049210][T13370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1375.141063][T13370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1375.322706][ T6111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.369061][T13387] veth0_vlan: entered promiscuous mode [ 1375.406817][T13387] veth1_vlan: entered promiscuous mode [ 1375.618771][ T6386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.636644][ T6033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.734340][ T6033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.209661][T13387] veth0_macvtap: entered promiscuous mode [ 1376.392865][T13387] veth1_macvtap: entered promiscuous mode [ 1376.578611][T13387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.655690][T13387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.728753][ T6385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.916585][ T6385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.033628][T10822] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1377.106047][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.127250][ T6385] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.151124][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.169011][ T6385] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.201925][T10822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1377.265934][ T6385] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.275030][T10822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1377.325110][ T6385] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.370460][T10822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1377.726104][T10822] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1377.748276][ T5992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.810079][ T5992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.881281][T10822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.941330][T10822] usb 3-1: Product: syz [ 1377.955901][ T6383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.974244][ T6383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.984122][ T5901] usb 48-1: device descriptor read/8, error -110 [ 1378.021316][T10822] usb 3-1: Manufacturer: syz [ 1378.125159][T10822] usb 3-1: SerialNumber: syz [ 1378.174255][T10822] usb 3-1: config 0 descriptor?? [ 1378.181092][T13646] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1378.544487][ T5901] usb usb48-port1: attempt power cycle [ 1379.984069][ T5901] usb usb48-port1: unable to enumerate USB device [ 1384.765549][T13691] blktrace: Concurrent blktraces are not allowed on sg0 [ 1384.785293][T13691] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1384.809716][T13691] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1110'. [ 1385.761860][ T5927] IPVS: starting estimator thread 0... [ 1385.800219][T13699] netlink: 'syz.7.1112': attribute type 1 has an invalid length. [ 1385.808100][T13699] netlink: 'syz.7.1112': attribute type 3 has an invalid length. [ 1385.816047][T13699] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1112'. [ 1385.862737][ T5927] usb 3-1: USB disconnect, device number 6 [ 1386.166264][T13697] loop3: detected capacity change from 0 to 40427 [ 1386.378748][T13697] F2FS-fs (loop3): invalid crc value [ 1386.585904][T13697] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1386.622601][T13697] F2FS-fs (loop3): Start checkpoint disabled! [ 1386.735874][T13697] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1386.863734][T13697] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1387.039981][ T29] audit: type=1800 audit(1773563843.606:247): pid=13700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1111" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 1387.110869][T13700] bio_check_eod: 182 callbacks suppressed [ 1387.110946][T13700] syz.3.1111: attempt to access beyond end of device [ 1387.110946][T13700] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1387.147776][T13698] IPVS: using max 22 ests per chain, 52800 per kthread [ 1387.203930][T13700] syz.3.1111: attempt to access beyond end of device [ 1387.203930][T13700] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1387.221017][T13700] syz.3.1111: attempt to access beyond end of device [ 1387.221017][T13700] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1387.239011][T13700] syz.3.1111: attempt to access beyond end of device [ 1387.239011][T13700] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1387.255464][T13700] syz.3.1111: attempt to access beyond end of device [ 1387.255464][T13700] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1387.276038][T13700] syz.3.1111: attempt to access beyond end of device [ 1387.276038][T13700] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1387.292899][T13700] syz.3.1111: attempt to access beyond end of device [ 1387.292899][T13700] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1387.375255][T13700] syz.3.1111: attempt to access beyond end of device [ 1387.375255][T13700] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1387.973046][T10934] kworker/u8:1: attempt to access beyond end of device [ 1387.973046][T10934] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1388.053858][T10934] CPU: 1 UID: 0 PID: 10934 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.053919][T10934] Tainted: [L]=SOFTLOCKUP [ 1388.053933][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1388.053958][T10934] Workqueue: writeback wb_workfn (flush-7:3) [ 1388.054019][T10934] Call Trace: [ 1388.054031][T10934] [ 1388.054046][T10934] dump_stack_lvl+0x100/0x190 [ 1388.054105][T10934] f2fs_handle_critical_error+0x5d7/0x970 [ 1388.054148][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.054195][T10934] ? f2fs_build_fault_attr+0x53/0x280 [ 1388.054263][T10934] f2fs_write_end_io+0xc3f/0xf30 [ 1388.054309][T10934] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1388.054358][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.054413][T10934] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1388.054455][T10934] bio_endio+0x7a3/0x910 [ 1388.054496][T10934] submit_bio_noacct+0x64c/0x2010 [ 1388.054559][T10934] f2fs_submit_write_bio+0x133/0x350 [ 1388.054598][T10934] __submit_merged_bio+0x331/0x7b0 [ 1388.054648][T10934] __submit_merged_write_cond+0x3fe/0x510 [ 1388.054701][T10934] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1388.054756][T10934] ? __pfx___might_resched+0x10/0x10 [ 1388.054796][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.054871][T10934] f2fs_write_cache_pages+0x21c0/0x2720 [ 1388.054945][T10934] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1388.054995][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055051][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055098][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055144][T10934] ? find_held_lock+0x2b/0x80 [ 1388.055188][T10934] ? nr_blockdev_pages+0xde/0x120 [ 1388.055234][T10934] ? nr_blockdev_pages+0xde/0x120 [ 1388.055279][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055344][T10934] ? si_meminfo+0x118/0x230 [ 1388.055377][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055424][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055533][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055579][T10934] ? rcu_is_watching+0x12/0xc0 [ 1388.055618][T10934] f2fs_write_data_pages+0x799/0x16d0 [ 1388.055666][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055724][T10934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1388.055790][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.055846][T10934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1388.055901][T10934] do_writepages+0x278/0x600 [ 1388.055962][T10934] ? __pfx_do_writepages+0x10/0x10 [ 1388.056020][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.056072][T10934] __writeback_single_inode+0x164/0x13c0 [ 1388.056120][T10934] ? find_held_lock+0x2b/0x80 [ 1388.056166][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.056214][T10934] ? __pfx___writeback_single_inode+0x10/0x10 [ 1388.056262][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.056307][T10934] ? do_raw_spin_unlock+0x145/0x1e0 [ 1388.056347][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.056399][T10934] writeback_sb_inodes+0x766/0x1c70 [ 1388.056467][T10934] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1388.056513][T10934] ? do_raw_spin_lock+0x128/0x260 [ 1388.056552][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.056653][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.056699][T10934] ? rcu_is_watching+0x12/0xc0 [ 1388.056737][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.056783][T10934] ? queue_io+0x287/0x550 [ 1388.056826][T10934] wb_writeback+0x1c0/0xbe0 [ 1388.056888][T10934] ? __pfx_wb_writeback+0x10/0x10 [ 1388.056946][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.056991][T10934] ? mark_held_locks+0x40/0x70 [ 1388.057047][T10934] ? _raw_spin_unlock_irq+0x23/0x50 [ 1388.057103][T10934] wb_workfn+0x142/0xc00 [ 1388.057154][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.057199][T10934] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1388.057251][T10934] ? __pfx_wb_workfn+0x10/0x10 [ 1388.057302][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.057351][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.057401][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.057447][T10934] ? rcu_is_watching+0x12/0xc0 [ 1388.057494][T10934] process_one_work+0xa23/0x19a0 [ 1388.057550][T10934] ? __pfx_process_one_work+0x10/0x10 [ 1388.057583][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.057639][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.057692][T10934] worker_thread+0x5ef/0xe50 [ 1388.057740][T10934] ? __pfx_worker_thread+0x10/0x10 [ 1388.057778][T10934] ? kthread+0x13a/0x450 [ 1388.057837][T10934] ? __pfx_worker_thread+0x10/0x10 [ 1388.057870][T10934] kthread+0x370/0x450 [ 1388.057926][T10934] ? __pfx_kthread+0x10/0x10 [ 1388.057986][T10934] ret_from_fork+0x754/0xd80 [ 1388.058049][T10934] ? __pfx_ret_from_fork+0x10/0x10 [ 1388.058141][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.058196][T10934] ? __switch_to+0x7b4/0x1120 [ 1388.058242][T10934] ? __pfx_kthread+0x10/0x10 [ 1388.058305][T10934] ret_from_fork_asm+0x1a/0x30 [ 1388.058370][T10934] [ 1388.058385][T10934] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1392.923648][T11947] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1393.175251][T11947] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1393.253663][T11947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1393.318647][T11947] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1393.408178][T11947] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1393.442075][T11947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.492382][T11947] usb 7-1: Product: syz [ 1393.518225][T11947] usb 7-1: Manufacturer: syz [ 1393.584100][T11947] usb 7-1: SerialNumber: syz [ 1393.705267][T11947] usb 7-1: config 0 descriptor?? [ 1393.736007][T13738] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1393.951948][T13738] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1396.952661][T10822] usb 7-1: USB disconnect, device number 6 [ 1402.465999][T13806] vivid-000: ================= START STATUS ================= [ 1402.473931][T13806] vivid-000: Generate PTS: true [ 1402.478981][T13806] vivid-000: Generate SCR: true [ 1402.484112][T13806] tpg source WxH: 320x240 (Y'CbCr) [ 1402.489327][T13806] tpg field: 1 [ 1402.492777][T13806] tpg crop: (0,0)/320x240 [ 1402.497381][T13806] tpg compose: (0,0)/320x240 [ 1402.502054][T13806] tpg colorspace: 8 [ 1402.506074][T13806] tpg transfer function: 0/0 [ 1402.510808][T13806] tpg Y'CbCr encoding: 0/0 [ 1402.515419][T13806] tpg quantization: 0/0 [ 1402.519637][T13806] tpg RGB range: 0/2 [ 1402.523995][T13806] vivid-000: ================== END STATUS ================== [ 1402.680350][ T5927] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 1403.059778][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1403.087923][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1403.353348][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1403.367536][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1403.379159][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1403.426216][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1403.468172][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1403.851684][T13816] vivid-000: ================= START STATUS ================= [ 1403.859500][T13816] vivid-000: Generate PTS: true [ 1403.864753][T13816] vivid-000: Generate SCR: true [ 1403.869792][T13816] tpg source WxH: 320x240 (Y'CbCr) [ 1403.876063][T13816] tpg field: 1 [ 1403.879499][T13816] tpg crop: (0,0)/320x240 [ 1403.884685][T13816] tpg compose: (0,0)/320x240 [ 1403.889335][T13816] tpg colorspace: 8 [ 1403.893193][T13816] tpg transfer function: 0/0 [ 1403.897878][T13816] tpg Y'CbCr encoding: 0/0 [ 1403.902372][T13816] tpg quantization: 0/0 [ 1403.906789][T13816] tpg RGB range: 0/2 [ 1403.910771][T13816] vivid-000: ================== END STATUS ================== [ 1404.345824][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.358034][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1404.382231][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1404.397282][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1404.615434][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1404.666548][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.727728][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1404.820614][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1404.946091][ T5927] usb 3-1: string descriptor 0 read error: -71 [ 1404.980919][ T5927] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1405.053661][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.205575][ T5927] usb 3-1: can't set config #168, error -71 [ 1406.424018][ T5927] usb 3-1: USB disconnect, device number 7 [ 1407.619477][T13845] vivid-000: ================= START STATUS ================= [ 1407.627336][T13845] vivid-000: Generate PTS: true [ 1407.632378][T13845] vivid-000: Generate SCR: true [ 1407.637500][T13845] tpg source WxH: 320x240 (Y'CbCr) [ 1407.642691][T13845] tpg field: 1 [ 1407.646408][T13845] tpg crop: (0,0)/320x240 [ 1407.650823][T13845] tpg compose: (0,0)/320x240 [ 1407.656083][T13845] tpg colorspace: 8 [ 1407.661014][T13845] tpg transfer function: 0/0 [ 1407.666704][T13845] tpg Y'CbCr encoding: 0/0 [ 1407.671223][T13845] tpg quantization: 0/0 [ 1407.676144][T13845] tpg RGB range: 0/2 [ 1407.680128][T13845] vivid-000: ================== END STATUS ================== [ 1410.308134][T13861] vivid-000: ================= START STATUS ================= [ 1410.315918][T13861] vivid-000: Generate PTS: true [ 1410.320800][T13861] vivid-000: Generate SCR: true [ 1410.327127][T13861] tpg source WxH: 320x240 (Y'CbCr) [ 1410.332249][T13861] tpg field: 1 [ 1410.335672][T13861] tpg crop: (0,0)/320x240 [ 1410.340007][T13861] tpg compose: (0,0)/320x240 [ 1410.344803][T13861] tpg colorspace: 8 [ 1410.348607][T13861] tpg transfer function: 0/0 [ 1410.353214][T13861] tpg Y'CbCr encoding: 0/0 [ 1410.357723][T13861] tpg quantization: 0/0 [ 1410.361956][T13861] tpg RGB range: 0/2 [ 1410.365913][T13861] vivid-000: ================== END STATUS ================== [ 1411.044539][T13867] loop6: detected capacity change from 0 to 40427 [ 1411.107939][T13867] F2FS-fs (loop6): invalid crc value [ 1411.526942][T13867] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1411.544011][T13867] F2FS-fs (loop6): Start checkpoint disabled! [ 1411.576053][T13867] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1411.590456][T13867] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1411.671417][ T29] audit: type=1800 audit(1773563868.266:248): pid=13873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1142" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 1411.719644][T13873] syz.6.1142: attempt to access beyond end of device [ 1411.719644][T13873] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1411.736083][T13873] syz.6.1142: attempt to access beyond end of device [ 1411.736083][T13873] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1411.752725][T13873] syz.6.1142: attempt to access beyond end of device [ 1411.752725][T13873] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1412.073801][T13873] syz.6.1142: attempt to access beyond end of device [ 1412.073801][T13873] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1412.090253][T13873] syz.6.1142: attempt to access beyond end of device [ 1412.090253][T13873] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1412.107500][T13873] syz.6.1142: attempt to access beyond end of device [ 1412.107500][T13873] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1412.122840][T13873] syz.6.1142: attempt to access beyond end of device [ 1412.122840][T13873] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1412.139910][T13873] syz.6.1142: attempt to access beyond end of device [ 1412.139910][T13873] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1412.158122][T13873] syz.6.1142: attempt to access beyond end of device [ 1412.158122][T13873] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1412.176563][T13873] syz.6.1142: attempt to access beyond end of device [ 1412.176563][T13873] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1413.080172][ T127] CPU: 1 UID: 0 PID: 127 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1413.080222][ T127] Tainted: [L]=SOFTLOCKUP [ 1413.080236][ T127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1413.080264][ T127] Workqueue: writeback wb_workfn (flush-7:6) [ 1413.080325][ T127] Call Trace: [ 1413.080336][ T127] [ 1413.080347][ T127] dump_stack_lvl+0x100/0x190 [ 1413.080393][ T127] f2fs_handle_critical_error+0x5d7/0x970 [ 1413.080425][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.080460][ T127] ? f2fs_build_fault_attr+0x53/0x280 [ 1413.080511][ T127] f2fs_write_end_io+0xc3f/0xf30 [ 1413.080546][ T127] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1413.080582][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.080628][ T127] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1413.080660][ T127] bio_endio+0x7a3/0x910 [ 1413.080691][ T127] submit_bio_noacct+0x64c/0x2010 [ 1413.080738][ T127] f2fs_submit_write_bio+0x133/0x350 [ 1413.080769][ T127] __submit_merged_bio+0x331/0x7b0 [ 1413.080806][ T127] __submit_merged_write_cond+0x3fe/0x510 [ 1413.080846][ T127] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1413.080889][ T127] ? __pfx___might_resched+0x10/0x10 [ 1413.080919][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.080961][ T127] f2fs_write_cache_pages+0x21c0/0x2720 [ 1413.081017][ T127] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1413.081055][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081096][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081132][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081166][ T127] ? find_held_lock+0x2b/0x80 [ 1413.081199][ T127] ? nr_blockdev_pages+0xde/0x120 [ 1413.081234][ T127] ? nr_blockdev_pages+0xde/0x120 [ 1413.081267][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081316][ T127] ? si_meminfo+0x118/0x230 [ 1413.081345][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081393][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081486][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081521][ T127] ? rcu_is_watching+0x12/0xc0 [ 1413.081556][ T127] f2fs_write_data_pages+0x799/0x16d0 [ 1413.081595][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081643][ T127] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1413.081693][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081728][ T127] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1413.081771][ T127] do_writepages+0x278/0x600 [ 1413.081817][ T127] ? __pfx_do_writepages+0x10/0x10 [ 1413.081861][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.081901][ T127] __writeback_single_inode+0x164/0x13c0 [ 1413.081937][ T127] ? find_held_lock+0x2b/0x80 [ 1413.081971][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082008][ T127] ? __pfx___writeback_single_inode+0x10/0x10 [ 1413.082043][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082077][ T127] ? do_raw_spin_unlock+0x145/0x1e0 [ 1413.082107][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082146][ T127] writeback_sb_inodes+0x766/0x1c70 [ 1413.082198][ T127] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1413.082233][ T127] ? do_raw_spin_lock+0x128/0x260 [ 1413.082263][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082338][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082372][ T127] ? rcu_is_watching+0x12/0xc0 [ 1413.082401][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082435][ T127] ? queue_io+0x287/0x550 [ 1413.082475][ T127] wb_writeback+0x1c0/0xbe0 [ 1413.082535][ T127] ? __pfx_wb_writeback+0x10/0x10 [ 1413.082581][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082622][ T127] ? mark_held_locks+0x40/0x70 [ 1413.082664][ T127] ? _raw_spin_unlock_irq+0x23/0x50 [ 1413.082706][ T127] wb_workfn+0x142/0xc00 [ 1413.082744][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082779][ T127] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1413.082819][ T127] ? __pfx_wb_workfn+0x10/0x10 [ 1413.082857][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082897][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082934][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.082969][ T127] ? rcu_is_watching+0x12/0xc0 [ 1413.083004][ T127] process_one_work+0xa23/0x19a0 [ 1413.083047][ T127] ? __pfx_process_one_work+0x10/0x10 [ 1413.083073][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.083118][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.083158][ T127] worker_thread+0x5ef/0xe50 [ 1413.083198][ T127] ? kthread+0x13a/0x450 [ 1413.083240][ T127] ? __pfx_worker_thread+0x10/0x10 [ 1413.083265][ T127] kthread+0x370/0x450 [ 1413.083307][ T127] ? __pfx_kthread+0x10/0x10 [ 1413.083353][ T127] ret_from_fork+0x754/0xd80 [ 1413.083399][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 1413.083453][ T127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1413.083498][ T127] ? __switch_to+0x7b4/0x1120 [ 1413.083540][ T127] ? __pfx_kthread+0x10/0x10 [ 1413.083596][ T127] ret_from_fork_asm+0x1a/0x30 [ 1413.083668][ T127] [ 1414.036238][ T127] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1414.774087][T13896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1147'. [ 1418.943355][T13915] vivid-000: ================= START STATUS ================= [ 1418.951244][T13915] vivid-000: Generate PTS: true [ 1418.956477][T13915] vivid-000: Generate SCR: true [ 1418.961548][T13915] tpg source WxH: 320x240 (Y'CbCr) [ 1418.966795][T13915] tpg field: 1 [ 1418.970248][T13915] tpg crop: (0,0)/320x240 [ 1418.974725][T13915] tpg compose: (0,0)/320x240 [ 1418.979411][T13915] tpg colorspace: 8 [ 1418.983555][T13915] tpg transfer function: 0/0 [ 1418.988360][T13915] tpg Y'CbCr encoding: 0/0 [ 1418.992868][T13915] tpg quantization: 0/0 [ 1418.997206][T13915] tpg RGB range: 0/2 [ 1419.001188][T13915] vivid-000: ================== END STATUS ================== [ 1421.275433][T10822] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1421.640558][T10822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1421.704153][T10822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1421.775650][T10822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1422.998577][T10822] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1423.067204][T10822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.113717][T10822] usb 3-1: Product: syz [ 1423.138217][T10822] usb 3-1: Manufacturer: syz [ 1423.142841][T10822] usb 3-1: SerialNumber: syz [ 1423.200095][T10822] usb 3-1: config 0 descriptor?? [ 1423.290240][T13939] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1424.595060][T13959] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1425.066036][T13959] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1425.138344][T13959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1425.344831][T13959] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1425.432587][T13959] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1425.443613][T13959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.451856][T13959] usb 4-1: Product: syz [ 1425.698169][T13959] usb 4-1: Manufacturer: syz [ 1425.702895][T13959] usb 4-1: SerialNumber: syz [ 1425.758928][T13959] usb 4-1: config 0 descriptor?? [ 1425.857287][T13963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1426.506945][T13963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1426.517206][T10822] usb 3-1: USB disconnect, device number 8 [ 1426.653209][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1426.659811][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.224173][ T42] usb 4-1: USB disconnect, device number 2 [ 1441.146600][T11947] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1441.447091][T11947] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1441.573573][T11947] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1441.633651][T11947] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1441.823175][T11947] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1441.835381][T11947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.857626][T11947] usb 10-1: Product: syz [ 1441.892504][T11947] usb 10-1: Manufacturer: syz [ 1441.930608][T11947] usb 10-1: SerialNumber: syz [ 1441.967166][T11947] usb 10-1: config 0 descriptor?? [ 1442.012324][T14069] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1442.256744][T14067] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1447.863620][T11529] usb 10-1: USB disconnect, device number 7 [ 1451.757280][T11529] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1452.093761][T11529] usb 4-1: Using ep0 maxpacket: 16 [ 1452.131227][T11529] usb 4-1: config 0 has no interfaces? [ 1452.276750][T11529] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1452.293586][T11529] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1452.346260][T11529] usb 4-1: Manufacturer: syz [ 1452.788734][T11529] usb 4-1: config 0 descriptor?? [ 1453.590727][T14158] vivid-000: ================= START STATUS ================= [ 1453.598887][T14158] vivid-000: Generate PTS: true [ 1453.604050][T14158] vivid-000: Generate SCR: true [ 1453.609344][T14158] tpg source WxH: 320x240 (Y'CbCr) [ 1453.614607][T14158] tpg field: 1 [ 1453.618118][T14158] tpg crop: (0,0)/320x240 [ 1453.622512][T14158] tpg compose: (0,0)/320x240 [ 1453.627293][T14158] tpg colorspace: 8 [ 1453.631157][T14158] tpg transfer function: 0/0 [ 1453.635973][T14158] tpg Y'CbCr encoding: 0/0 [ 1453.641596][T14158] tpg quantization: 0/0 [ 1453.646749][T14158] tpg RGB range: 0/2 [ 1453.650716][T14158] vivid-000: ================== END STATUS ================== [ 1454.033510][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1188'. [ 1454.329534][T12974] Bluetooth: hci0: command 0x0406 tx timeout [ 1454.337184][T12974] Bluetooth: hci1: command 0x0406 tx timeout [ 1454.885336][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1191'. [ 1455.230546][T14170] loop6: detected capacity change from 0 to 40427 [ 1455.257341][T14170] F2FS-fs (loop6): invalid crc value [ 1455.336548][T14170] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1455.351154][T14170] F2FS-fs (loop6): Start checkpoint disabled! [ 1455.394121][T14170] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1455.415260][T14170] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1455.525297][ T29] audit: type=1800 audit(1773563912.126:249): pid=14173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1191" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 1456.005514][T14173] bio_check_eod: 20 callbacks suppressed [ 1456.005592][T14173] syz.6.1191: attempt to access beyond end of device [ 1456.005592][T14173] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1456.028738][T14173] syz.6.1191: attempt to access beyond end of device [ 1456.028738][T14173] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1456.056158][T14173] syz.6.1191: attempt to access beyond end of device [ 1456.056158][T14173] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1456.072776][T14173] syz.6.1191: attempt to access beyond end of device [ 1456.072776][T14173] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1456.089754][T14173] syz.6.1191: attempt to access beyond end of device [ 1456.089754][T14173] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1456.110427][T14173] syz.6.1191: attempt to access beyond end of device [ 1456.110427][T14173] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1456.196305][T14173] syz.6.1191: attempt to access beyond end of device [ 1456.196305][T14173] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1456.701355][T11947] usb 4-1: USB disconnect, device number 3 [ 1457.841730][T13661] kworker/u8:3: attempt to access beyond end of device [ 1457.841730][T13661] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1457.875539][T13661] CPU: 1 UID: 0 PID: 13661 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.875596][T13661] Tainted: [L]=SOFTLOCKUP [ 1457.875610][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1457.875639][T13661] Workqueue: writeback wb_workfn (flush-7:6) [ 1457.875736][T13661] Call Trace: [ 1457.875753][T13661] [ 1457.875767][T13661] dump_stack_lvl+0x100/0x190 [ 1457.875836][T13661] f2fs_handle_critical_error+0x5d7/0x970 [ 1457.875890][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.875934][T13661] ? f2fs_build_fault_attr+0x53/0x280 [ 1457.875993][T13661] f2fs_write_end_io+0xc3f/0xf30 [ 1457.876032][T13661] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1457.876071][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.876114][T13661] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1457.876146][T13661] bio_endio+0x7a3/0x910 [ 1457.876184][T13661] submit_bio_noacct+0x64c/0x2010 [ 1457.876234][T13661] f2fs_submit_write_bio+0x133/0x350 [ 1457.876266][T13661] __submit_merged_bio+0x331/0x7b0 [ 1457.876305][T13661] __submit_merged_write_cond+0x3fe/0x510 [ 1457.876346][T13661] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1457.876390][T13661] ? __pfx___might_resched+0x10/0x10 [ 1457.876422][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.876465][T13661] f2fs_write_cache_pages+0x21c0/0x2720 [ 1457.876526][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.876562][T13661] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1457.876608][T13661] ? lock_acquire+0x1cf/0x380 [ 1457.876659][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.876695][T13661] ? __lock_acquire+0x4a5/0x2630 [ 1457.876753][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.876787][T13661] ? __lock_acquire+0x4a5/0x2630 [ 1457.876879][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.876922][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.876960][T13661] ? rcu_is_watching+0x12/0xc0 [ 1457.876997][T13661] f2fs_write_data_pages+0x799/0x16d0 [ 1457.877064][T13661] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1457.877105][T13661] ? __lock_acquire+0x4a5/0x2630 [ 1457.877160][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.877196][T13661] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1457.877238][T13661] do_writepages+0x278/0x600 [ 1457.877292][T13661] ? __pfx_do_writepages+0x10/0x10 [ 1457.877337][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.877378][T13661] __writeback_single_inode+0x164/0x13c0 [ 1457.877414][T13661] ? find_held_lock+0x2b/0x80 [ 1457.877450][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.877488][T13661] ? __pfx___writeback_single_inode+0x10/0x10 [ 1457.877524][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.877558][T13661] ? do_raw_spin_unlock+0x145/0x1e0 [ 1457.877589][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.877629][T13661] writeback_sb_inodes+0x766/0x1c70 [ 1457.877686][T13661] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1457.877778][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.877813][T13661] ? rcu_is_watching+0x12/0xc0 [ 1457.877843][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.877877][T13661] ? queue_io+0x287/0x550 [ 1457.877911][T13661] wb_writeback+0x1c0/0xbe0 [ 1457.877962][T13661] ? __pfx_wb_writeback+0x10/0x10 [ 1457.878009][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.878044][T13661] ? mark_held_locks+0x40/0x70 [ 1457.878087][T13661] ? _raw_spin_unlock_irq+0x23/0x50 [ 1457.878143][T13661] wb_workfn+0x142/0xc00 [ 1457.878183][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.878218][T13661] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1457.878258][T13661] ? __pfx_wb_workfn+0x10/0x10 [ 1457.878298][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.878337][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.878375][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.878410][T13661] ? rcu_is_watching+0x12/0xc0 [ 1457.878448][T13661] process_one_work+0xa23/0x19a0 [ 1457.878494][T13661] ? __pfx_process_one_work+0x10/0x10 [ 1457.878538][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.878586][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.878627][T13661] worker_thread+0x5ef/0xe50 [ 1457.878666][T13661] ? __pfx_worker_thread+0x10/0x10 [ 1457.878701][T13661] ? kthread+0x13a/0x450 [ 1457.878743][T13661] ? __pfx_worker_thread+0x10/0x10 [ 1457.878769][T13661] kthread+0x370/0x450 [ 1457.878812][T13661] ? __pfx_kthread+0x10/0x10 [ 1457.878858][T13661] ret_from_fork+0x754/0xd80 [ 1457.878907][T13661] ? __pfx_ret_from_fork+0x10/0x10 [ 1457.878960][T13661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.878995][T13661] ? __switch_to+0x7b4/0x1120 [ 1457.879028][T13661] ? __pfx_kthread+0x10/0x10 [ 1457.879077][T13661] ret_from_fork_asm+0x1a/0x30 [ 1457.879131][T13661] [ 1458.833565][T13661] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1468.509873][T14251] vivid-000: ================= START STATUS ================= [ 1468.517958][T14251] vivid-000: Generate PTS: true [ 1468.523007][T14251] vivid-000: Generate SCR: true [ 1468.528248][T14251] tpg source WxH: 320x240 (Y'CbCr) [ 1468.533642][T14251] tpg field: 1 [ 1468.537091][T14251] tpg crop: (0,0)/320x240 [ 1468.541625][T14251] tpg compose: (0,0)/320x240 [ 1468.546489][T14251] tpg colorspace: 8 [ 1468.550355][T14251] tpg transfer function: 0/0 [ 1468.555102][T14251] tpg Y'CbCr encoding: 0/0 [ 1468.559619][T14251] tpg quantization: 0/0 [ 1468.563871][T14251] tpg RGB range: 0/2 [ 1468.567834][T14251] vivid-000: ================== END STATUS ================== [ 1471.769305][T14277] program syz.6.1208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1476.425269][T14299] vivid-000: ================= START STATUS ================= [ 1476.432934][T14299] vivid-000: Generate PTS: true [ 1476.437946][T14299] vivid-000: Generate SCR: true [ 1476.442822][T14299] tpg source WxH: 320x240 (Y'CbCr) [ 1476.447998][T14299] tpg field: 1 [ 1476.451358][T14299] tpg crop: (0,0)/320x240 [ 1476.455741][T14299] tpg compose: (0,0)/320x240 [ 1476.460675][T14299] tpg colorspace: 8 [ 1476.464551][T14299] tpg transfer function: 0/0 [ 1476.469135][T14299] tpg Y'CbCr encoding: 0/0 [ 1476.475023][T14299] tpg quantization: 0/0 [ 1476.479172][T14299] tpg RGB range: 0/2 [ 1476.483227][T14299] vivid-000: ================== END STATUS ================== [ 1479.359026][T14337] vivid-000: ================= START STATUS ================= [ 1479.366859][T14337] vivid-000: Generate PTS: true [ 1479.371994][T14337] vivid-000: Generate SCR: true [ 1479.377132][T14337] tpg source WxH: 320x240 (Y'CbCr) [ 1479.382318][T14337] tpg field: 1 [ 1479.385836][T14337] tpg crop: (0,0)/320x240 [ 1479.390226][T14337] tpg compose: (0,0)/320x240 [ 1479.395153][T14337] tpg colorspace: 8 [ 1479.399010][T14337] tpg transfer function: 0/0 [ 1479.403687][T14337] tpg Y'CbCr encoding: 0/0 [ 1479.408206][T14337] tpg quantization: 0/0 [ 1479.412422][T14337] tpg RGB range: 0/2 [ 1479.416434][T14337] vivid-000: ================== END STATUS ================== [ 1481.564875][T11529] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1481.756265][T11529] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1481.833613][T11529] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1481.923684][T11529] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1481.993196][T11529] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1482.013530][T11529] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.186861][T11529] usb 7-1: Product: syz [ 1482.202482][T11529] usb 7-1: Manufacturer: syz [ 1482.222707][T14353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1222'. [ 1482.592403][T11529] usb 7-1: SerialNumber: syz [ 1482.639670][T11529] usb 7-1: config 0 descriptor?? [ 1482.909677][T14353] loop3: detected capacity change from 0 to 40427 [ 1483.009430][T14347] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1483.071212][T14353] F2FS-fs (loop3): invalid crc value [ 1483.179220][T14353] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1483.206458][T14353] F2FS-fs (loop3): Start checkpoint disabled! [ 1483.237199][T14353] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1483.245546][T14353] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1483.327674][ T29] audit: type=1800 audit(1773563939.926:250): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1222" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 1483.379901][T14358] syz.3.1222: attempt to access beyond end of device [ 1483.379901][T14358] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1483.396743][T14358] syz.3.1222: attempt to access beyond end of device [ 1483.396743][T14358] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1483.575590][T14347] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1483.983295][T14358] syz.3.1222: attempt to access beyond end of device [ 1483.983295][T14358] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1484.005936][T14358] syz.3.1222: attempt to access beyond end of device [ 1484.005936][T14358] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1484.032839][T14358] syz.3.1222: attempt to access beyond end of device [ 1484.032839][T14358] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1484.050168][T14358] syz.3.1222: attempt to access beyond end of device [ 1484.050168][T14358] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1484.067076][T14358] syz.3.1222: attempt to access beyond end of device [ 1484.067076][T14358] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1484.083931][T14358] syz.3.1222: attempt to access beyond end of device [ 1484.083931][T14358] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1484.101034][T14358] syz.3.1222: attempt to access beyond end of device [ 1484.101034][T14358] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1484.121919][T14358] syz.3.1222: attempt to access beyond end of device [ 1484.121919][T14358] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1486.539130][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1486.539194][ T6033] Tainted: [L]=SOFTLOCKUP [ 1486.539209][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1486.539234][ T6033] Workqueue: writeback wb_workfn (flush-7:3) [ 1486.539305][ T6033] Call Trace: [ 1486.539320][ T6033] [ 1486.539335][ T6033] dump_stack_lvl+0x100/0x190 [ 1486.539422][ T6033] f2fs_handle_critical_error+0x5d7/0x970 [ 1486.539471][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.539519][ T6033] ? f2fs_build_fault_attr+0x53/0x280 [ 1486.539591][ T6033] f2fs_write_end_io+0xc3f/0xf30 [ 1486.539643][ T6033] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1486.539695][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.539753][ T6033] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1486.539796][ T6033] bio_endio+0x7a3/0x910 [ 1486.539839][ T6033] submit_bio_noacct+0x64c/0x2010 [ 1486.539908][ T6033] f2fs_submit_write_bio+0x133/0x350 [ 1486.539951][ T6033] __submit_merged_bio+0x331/0x7b0 [ 1486.540020][ T6033] __submit_merged_write_cond+0x3fe/0x510 [ 1486.540077][ T6033] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1486.540135][ T6033] ? __pfx___might_resched+0x10/0x10 [ 1486.540179][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.540243][ T6033] f2fs_write_cache_pages+0x21c0/0x2720 [ 1486.540327][ T6033] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1486.540378][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.540436][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.540485][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.540532][ T6033] ? find_held_lock+0x2b/0x80 [ 1486.540580][ T6033] ? nr_blockdev_pages+0xde/0x120 [ 1486.540633][ T6033] ? nr_blockdev_pages+0xde/0x120 [ 1486.540678][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.540747][ T6033] ? si_meminfo+0x118/0x230 [ 1486.540784][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.540833][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.540963][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.541017][ T6033] ? rcu_is_watching+0x12/0xc0 [ 1486.541070][ T6033] f2fs_write_data_pages+0x799/0x16d0 [ 1486.541122][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.541184][ T6033] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1486.541255][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.541303][ T6033] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1486.541361][ T6033] do_writepages+0x278/0x600 [ 1486.541429][ T6033] ? __pfx_do_writepages+0x10/0x10 [ 1486.541489][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.541544][ T6033] __writeback_single_inode+0x164/0x13c0 [ 1486.541592][ T6033] ? find_held_lock+0x2b/0x80 [ 1486.541641][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.541692][ T6033] ? __pfx___writeback_single_inode+0x10/0x10 [ 1486.541742][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.541788][ T6033] ? do_raw_spin_unlock+0x145/0x1e0 [ 1486.541834][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.541889][ T6033] writeback_sb_inodes+0x766/0x1c70 [ 1486.541963][ T6033] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1486.542018][ T6033] ? do_raw_spin_lock+0x128/0x260 [ 1486.542063][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.542177][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.542225][ T6033] ? rcu_is_watching+0x12/0xc0 [ 1486.542265][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.542312][ T6033] ? queue_io+0x287/0x550 [ 1486.542357][ T6033] wb_writeback+0x1c0/0xbe0 [ 1486.542421][ T6033] ? __pfx_wb_writeback+0x10/0x10 [ 1486.542483][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.542530][ T6033] ? mark_held_locks+0x40/0x70 [ 1486.542588][ T6033] ? _raw_spin_unlock_irq+0x23/0x50 [ 1486.542650][ T6033] wb_workfn+0x142/0xc00 [ 1486.542704][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.542751][ T6033] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1486.542806][ T6033] ? __pfx_wb_workfn+0x10/0x10 [ 1486.542858][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.542910][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.542962][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.543014][ T6033] ? rcu_is_watching+0x12/0xc0 [ 1486.543065][ T6033] process_one_work+0xa23/0x19a0 [ 1486.543130][ T6033] ? __pfx_process_one_work+0x10/0x10 [ 1486.543165][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.543230][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.543286][ T6033] worker_thread+0x5ef/0xe50 [ 1486.543338][ T6033] ? __pfx_worker_thread+0x10/0x10 [ 1486.543378][ T6033] ? kthread+0x13a/0x450 [ 1486.543443][ T6033] ? __pfx_worker_thread+0x10/0x10 [ 1486.543476][ T6033] kthread+0x370/0x450 [ 1486.543531][ T6033] ? __pfx_kthread+0x10/0x10 [ 1486.543586][ T6033] ret_from_fork+0x754/0xd80 [ 1486.543645][ T6033] ? __pfx_ret_from_fork+0x10/0x10 [ 1486.543694][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1486.543729][ T6033] ? __switch_to+0x7b4/0x1120 [ 1486.543765][ T6033] ? __pfx_kthread+0x10/0x10 [ 1486.543812][ T6033] ret_from_fork_asm+0x1a/0x30 [ 1486.543866][ T6033] [ 1487.333843][ T6033] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1488.374801][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.381224][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.750830][T14394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1229'. [ 1489.090232][T14394] loop2: detected capacity change from 0 to 40427 [ 1489.134779][T14394] F2FS-fs (loop2): invalid crc value [ 1489.233789][T14394] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1489.243754][T14394] F2FS-fs (loop2): Start checkpoint disabled! [ 1489.253908][T14394] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1489.264152][T14394] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1489.363191][ T29] audit: type=1800 audit(1773563945.956:251): pid=14397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1229" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 1489.441433][T14397] bio_check_eod: 182 callbacks suppressed [ 1489.441456][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.441456][T14397] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1489.463140][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.463140][T14397] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1489.485241][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.485241][T14397] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1489.807339][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.807339][T14397] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1489.823812][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.823812][T14397] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1489.840990][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.840990][T14397] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1489.856218][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.856218][T14397] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1489.873367][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.873367][T14397] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1489.892200][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.892200][T14397] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1489.910881][T14397] syz.2.1229: attempt to access beyond end of device [ 1489.910881][T14397] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1491.296480][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 1491.296528][ T6383] Tainted: [L]=SOFTLOCKUP [ 1491.296539][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1491.296559][ T6383] Workqueue: writeback wb_workfn (flush-7:2) [ 1491.296624][ T6383] Call Trace: [ 1491.296634][ T6383] [ 1491.296646][ T6383] dump_stack_lvl+0x100/0x190 [ 1491.296693][ T6383] f2fs_handle_critical_error+0x5d7/0x970 [ 1491.296725][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.296767][ T6383] ? f2fs_build_fault_attr+0x53/0x280 [ 1491.296818][ T6383] f2fs_write_end_io+0xc3f/0xf30 [ 1491.296853][ T6383] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1491.296890][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.296932][ T6383] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1491.296964][ T6383] bio_endio+0x7a3/0x910 [ 1491.296995][ T6383] submit_bio_noacct+0x64c/0x2010 [ 1491.297041][ T6383] f2fs_submit_write_bio+0x133/0x350 [ 1491.297072][ T6383] __submit_merged_bio+0x331/0x7b0 [ 1491.297109][ T6383] __submit_merged_write_cond+0x3fe/0x510 [ 1491.297149][ T6383] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1491.297191][ T6383] ? __pfx___might_resched+0x10/0x10 [ 1491.297221][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.297262][ T6383] f2fs_write_cache_pages+0x21c0/0x2720 [ 1491.297318][ T6383] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1491.297358][ T6383] ? kfree+0x1f6/0x6b0 [ 1491.297391][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.297431][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.297469][ T6383] ? ieee80211_inform_bss+0x8da/0x1150 [ 1491.297526][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.297636][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.297677][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.297712][ T6383] ? rcu_is_watching+0x12/0xc0 [ 1491.297752][ T6383] f2fs_write_data_pages+0x799/0x16d0 [ 1491.297801][ T6383] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1491.297851][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.297886][ T6383] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1491.297931][ T6383] do_writepages+0x278/0x600 [ 1491.297978][ T6383] ? __pfx_do_writepages+0x10/0x10 [ 1491.298023][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298063][ T6383] __writeback_single_inode+0x164/0x13c0 [ 1491.298098][ T6383] ? find_held_lock+0x2b/0x80 [ 1491.298134][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298171][ T6383] ? __pfx___writeback_single_inode+0x10/0x10 [ 1491.298207][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298242][ T6383] ? do_raw_spin_unlock+0x145/0x1e0 [ 1491.298272][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298311][ T6383] writeback_sb_inodes+0x766/0x1c70 [ 1491.298363][ T6383] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1491.298398][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298432][ T6383] ? debug_object_assert_init+0x1c4/0x300 [ 1491.298531][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298581][ T6383] ? rcu_is_watching+0x12/0xc0 [ 1491.298610][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298644][ T6383] ? queue_io+0x287/0x550 [ 1491.298677][ T6383] wb_writeback+0x1c0/0xbe0 [ 1491.298722][ T6383] ? __pfx_wb_writeback+0x10/0x10 [ 1491.298771][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298805][ T6383] ? mark_held_locks+0x40/0x70 [ 1491.298847][ T6383] ? _raw_spin_unlock_irq+0x23/0x50 [ 1491.298889][ T6383] wb_workfn+0x142/0xc00 [ 1491.298928][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.298963][ T6383] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1491.299002][ T6383] ? __pfx_wb_workfn+0x10/0x10 [ 1491.299041][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.299078][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.299119][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.299153][ T6383] ? rcu_is_watching+0x12/0xc0 [ 1491.299189][ T6383] process_one_work+0xa23/0x19a0 [ 1491.299231][ T6383] ? __pfx_process_one_work+0x10/0x10 [ 1491.299257][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.299303][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.299343][ T6383] worker_thread+0x5ef/0xe50 [ 1491.299378][ T6383] ? __pfx_worker_thread+0x10/0x10 [ 1491.299407][ T6383] ? kthread+0x13a/0x450 [ 1491.299448][ T6383] ? __pfx_worker_thread+0x10/0x10 [ 1491.299473][ T6383] kthread+0x370/0x450 [ 1491.299515][ T6383] ? __pfx_kthread+0x10/0x10 [ 1491.299561][ T6383] ret_from_fork+0x754/0xd80 [ 1491.299608][ T6383] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.299655][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.299690][ T6383] ? __switch_to+0x7b4/0x1120 [ 1491.299722][ T6383] ? __pfx_kthread+0x10/0x10 [ 1491.299774][ T6383] ret_from_fork_asm+0x1a/0x30 [ 1491.299824][ T6383] [ 1491.313674][ T6383] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1492.283301][T11947] usb 7-1: USB disconnect, device number 7 [ 1494.622040][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'. [ 1494.847874][T14436] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1233'. [ 1497.603610][T10822] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1498.755722][T10822] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1498.785216][T10822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1499.033173][T10822] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1499.186937][T10822] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1499.215224][T14475] openvswitch: netlink: Flow actions attr not present in new flow. [ 1499.260928][T10822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.318309][T10822] usb 9-1: Product: syz [ 1499.348974][T10822] usb 9-1: Manufacturer: syz [ 1499.374839][T10822] usb 9-1: SerialNumber: syz [ 1499.386818][T10822] usb 9-1: config 0 descriptor?? [ 1502.151323][T14501] loop7: detected capacity change from 0 to 40427 [ 1502.312238][T14501] F2FS-fs (loop7): invalid crc value [ 1502.419421][T14501] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1502.482100][T14501] F2FS-fs (loop7): Start checkpoint disabled! [ 1502.503307][T14501] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1502.517984][T14501] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1502.542270][T10822] usb 9-1: can't set config #0, error -71 [ 1502.588839][ T29] audit: type=1800 audit(1773563959.186:252): pid=14507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1246" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 1502.680617][T14507] bio_check_eod: 17 callbacks suppressed [ 1502.680655][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.680655][T14507] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1502.703811][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.703811][T14507] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1502.721000][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.721000][T14507] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1502.737485][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.737485][T14507] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1502.753992][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.753992][T14507] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1502.771025][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.771025][T14507] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1502.786506][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.786506][T14507] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1502.816105][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.816105][T14507] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1502.832251][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.832251][T14507] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1502.848572][T14507] syz.7.1246: attempt to access beyond end of device [ 1502.848572][T14507] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1502.942029][T10822] usb 9-1: USB disconnect, device number 6 [ 1503.725323][T14499] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1246'. [ 1503.936514][T14495] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1504.733995][ T8753] CPU: 0 UID: 0 PID: 8753 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1504.734074][ T8753] Tainted: [L]=SOFTLOCKUP [ 1504.734090][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1504.734117][ T8753] Workqueue: writeback wb_workfn (flush-7:7) [ 1504.734183][ T8753] Call Trace: [ 1504.734196][ T8753] [ 1504.734211][ T8753] dump_stack_lvl+0x100/0x190 [ 1504.734276][ T8753] f2fs_handle_critical_error+0x5d7/0x970 [ 1504.734337][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.734405][ T8753] ? f2fs_build_fault_attr+0x53/0x280 [ 1504.734479][ T8753] f2fs_write_end_io+0xc3f/0xf30 [ 1504.734530][ T8753] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1504.734582][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.734643][ T8753] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1504.734690][ T8753] bio_endio+0x7a3/0x910 [ 1504.734732][ T8753] submit_bio_noacct+0x64c/0x2010 [ 1504.734798][ T8753] f2fs_submit_write_bio+0x133/0x350 [ 1504.734843][ T8753] __submit_merged_bio+0x331/0x7b0 [ 1504.734894][ T8753] __submit_merged_write_cond+0x3fe/0x510 [ 1504.734948][ T8753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1504.735003][ T8753] ? __pfx___might_resched+0x10/0x10 [ 1504.735049][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735109][ T8753] f2fs_write_cache_pages+0x21c0/0x2720 [ 1504.735184][ T8753] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1504.735235][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735291][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735338][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735382][ T8753] ? find_held_lock+0x2b/0x80 [ 1504.735426][ T8753] ? nr_blockdev_pages+0xde/0x120 [ 1504.735472][ T8753] ? nr_blockdev_pages+0xde/0x120 [ 1504.735516][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735582][ T8753] ? si_meminfo+0x118/0x230 [ 1504.735615][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735662][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735772][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735818][ T8753] ? rcu_is_watching+0x12/0xc0 [ 1504.735865][ T8753] f2fs_write_data_pages+0x799/0x16d0 [ 1504.735915][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.735974][ T8753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1504.736047][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.736095][ T8753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1504.736150][ T8753] do_writepages+0x278/0x600 [ 1504.736212][ T8753] ? __pfx_do_writepages+0x10/0x10 [ 1504.736269][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.736319][ T8753] __writeback_single_inode+0x164/0x13c0 [ 1504.736367][ T8753] ? find_held_lock+0x2b/0x80 [ 1504.736414][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.736463][ T8753] ? __pfx___writeback_single_inode+0x10/0x10 [ 1504.736512][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.736559][ T8753] ? do_raw_spin_unlock+0x145/0x1e0 [ 1504.736599][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.736652][ T8753] writeback_sb_inodes+0x766/0x1c70 [ 1504.736722][ T8753] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1504.736769][ T8753] ? do_raw_spin_lock+0x128/0x260 [ 1504.736809][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.736903][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.736938][ T8753] ? rcu_is_watching+0x12/0xc0 [ 1504.736967][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.737002][ T8753] ? queue_io+0x287/0x550 [ 1504.737039][ T8753] wb_writeback+0x1c0/0xbe0 [ 1504.737084][ T8753] ? __pfx_wb_writeback+0x10/0x10 [ 1504.737128][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.737163][ T8753] ? mark_held_locks+0x40/0x70 [ 1504.737205][ T8753] ? _raw_spin_unlock_irq+0x23/0x50 [ 1504.737246][ T8753] wb_workfn+0x142/0xc00 [ 1504.737285][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.737324][ T8753] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1504.737366][ T8753] ? __pfx_wb_workfn+0x10/0x10 [ 1504.737405][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.737443][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.737480][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.737515][ T8753] ? rcu_is_watching+0x12/0xc0 [ 1504.737551][ T8753] process_one_work+0xa23/0x19a0 [ 1504.737593][ T8753] ? __pfx_process_one_work+0x10/0x10 [ 1504.737619][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.737665][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.737705][ T8753] worker_thread+0x5ef/0xe50 [ 1504.737745][ T8753] ? __pfx_worker_thread+0x10/0x10 [ 1504.737774][ T8753] ? kthread+0x13a/0x450 [ 1504.737820][ T8753] ? __pfx_worker_thread+0x10/0x10 [ 1504.737849][ T8753] kthread+0x370/0x450 [ 1504.737895][ T8753] ? __pfx_kthread+0x10/0x10 [ 1504.737941][ T8753] ret_from_fork+0x754/0xd80 [ 1504.737989][ T8753] ? __pfx_ret_from_fork+0x10/0x10 [ 1504.738041][ T8753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.738076][ T8753] ? __switch_to+0x7b4/0x1120 [ 1504.738108][ T8753] ? __pfx_kthread+0x10/0x10 [ 1504.738154][ T8753] ret_from_fork_asm+0x1a/0x30 [ 1504.738203][ T8753] [ 1504.739682][ T8753] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1507.445762][T14532] vivid-000: ================= START STATUS ================= [ 1507.453649][T14532] vivid-000: Generate PTS: true [ 1507.458697][T14532] vivid-000: Generate SCR: true [ 1507.463766][T14532] tpg source WxH: 320x240 (Y'CbCr) [ 1507.468998][T14532] tpg field: 1 [ 1507.472463][T14532] tpg crop: (0,0)/320x240 [ 1507.477115][T14532] tpg compose: (0,0)/320x240 [ 1507.481780][T14532] tpg colorspace: 8 [ 1507.485716][T14532] tpg transfer function: 0/0 [ 1507.490387][T14532] tpg Y'CbCr encoding: 0/0 [ 1507.494958][T14532] tpg quantization: 0/0 [ 1507.499191][T14532] tpg RGB range: 0/2 [ 1507.504383][T14532] vivid-000: ================== END STATUS ================== [ 1508.427594][T14542] blktrace: Concurrent blktraces are not allowed on sg0 [ 1514.423569][T14569] loop6: detected capacity change from 0 to 40427 [ 1514.446728][T14569] F2FS-fs (loop6): invalid crc value [ 1514.571061][T14569] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1514.580897][T14569] F2FS-fs (loop6): Start checkpoint disabled! [ 1514.588359][T14569] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1514.596858][T14569] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1514.787785][T14569] bio_check_eod: 182 callbacks suppressed [ 1514.787809][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.787809][T14569] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1514.808319][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.808319][T14569] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1514.822613][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.822613][T14569] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1514.836824][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.836824][T14569] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1514.851421][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.851421][T14569] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1514.865971][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.865971][T14569] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1514.881825][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.881825][T14569] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1514.896196][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.896196][T14569] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1514.910610][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.910610][T14569] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1514.924978][T14569] syz.6.1256: attempt to access beyond end of device [ 1514.924978][T14569] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1515.040078][ T29] audit: type=1800 audit(1773563971.376:253): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1256" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 1515.258867][T10934] CPU: 0 UID: 0 PID: 10934 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.258944][T10934] Tainted: [L]=SOFTLOCKUP [ 1515.258957][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1515.258980][T10934] Workqueue: writeback wb_workfn (flush-7:6) [ 1515.259047][T10934] Call Trace: [ 1515.259061][T10934] [ 1515.259075][T10934] dump_stack_lvl+0x100/0x190 [ 1515.259132][T10934] f2fs_handle_critical_error+0x5d7/0x970 [ 1515.259173][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.259217][T10934] ? f2fs_build_fault_attr+0x53/0x280 [ 1515.259283][T10934] f2fs_write_end_io+0xc3f/0xf30 [ 1515.259330][T10934] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1515.259378][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.259433][T10934] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1515.259476][T10934] bio_endio+0x7a3/0x910 [ 1515.259520][T10934] submit_bio_noacct+0x64c/0x2010 [ 1515.259578][T10934] f2fs_submit_write_bio+0x133/0x350 [ 1515.259610][T10934] __submit_merged_bio+0x331/0x7b0 [ 1515.259650][T10934] __submit_merged_write_cond+0x3fe/0x510 [ 1515.259692][T10934] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1515.259736][T10934] ? __pfx___might_resched+0x10/0x10 [ 1515.259766][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.259811][T10934] f2fs_write_cache_pages+0x21c0/0x2720 [ 1515.259872][T10934] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1515.259912][T10934] ? kfree+0x1f6/0x6b0 [ 1515.259938][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.259985][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260023][T10934] ? ieee80211_inform_bss+0x8da/0x1150 [ 1515.260081][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260175][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260212][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260246][T10934] ? rcu_is_watching+0x12/0xc0 [ 1515.260283][T10934] f2fs_write_data_pages+0x799/0x16d0 [ 1515.260334][T10934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1515.260387][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260423][T10934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1515.260466][T10934] do_writepages+0x278/0x600 [ 1515.260514][T10934] ? __pfx_do_writepages+0x10/0x10 [ 1515.260558][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260613][T10934] __writeback_single_inode+0x164/0x13c0 [ 1515.260662][T10934] ? find_held_lock+0x2b/0x80 [ 1515.260700][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260771][T10934] ? __pfx___writeback_single_inode+0x10/0x10 [ 1515.260810][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260844][T10934] ? do_raw_spin_unlock+0x145/0x1e0 [ 1515.260875][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.260916][T10934] writeback_sb_inodes+0x766/0x1c70 [ 1515.260972][T10934] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1515.261008][T10934] ? debug_object_activate+0x331/0x490 [ 1515.261059][T10934] ? debug_object_activate+0x331/0x490 [ 1515.261108][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.261194][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.261229][T10934] ? rcu_is_watching+0x12/0xc0 [ 1515.261259][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.261293][T10934] ? queue_io+0x287/0x550 [ 1515.261328][T10934] wb_writeback+0x1c0/0xbe0 [ 1515.261375][T10934] ? __pfx_wb_writeback+0x10/0x10 [ 1515.261422][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.261460][T10934] ? mark_held_locks+0x40/0x70 [ 1515.261502][T10934] ? _raw_spin_unlock_irq+0x23/0x50 [ 1515.261545][T10934] wb_workfn+0x142/0xc00 [ 1515.261584][T10934] ? try_to_wake_up+0x160/0x1a80 [ 1515.261627][T10934] ? __pfx_wb_workfn+0x10/0x10 [ 1515.261667][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.261718][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.261770][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.261806][T10934] ? rcu_is_watching+0x12/0xc0 [ 1515.261844][T10934] process_one_work+0xa23/0x19a0 [ 1515.261891][T10934] ? __pfx_process_one_work+0x10/0x10 [ 1515.261917][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.261966][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.262007][T10934] worker_thread+0x5ef/0xe50 [ 1515.262056][T10934] ? __pfx_worker_thread+0x10/0x10 [ 1515.262086][T10934] ? kthread+0x13a/0x450 [ 1515.262128][T10934] ? __pfx_worker_thread+0x10/0x10 [ 1515.262153][T10934] kthread+0x370/0x450 [ 1515.262196][T10934] ? __pfx_kthread+0x10/0x10 [ 1515.262243][T10934] ret_from_fork+0x754/0xd80 [ 1515.262291][T10934] ? __pfx_ret_from_fork+0x10/0x10 [ 1515.262340][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1515.262375][T10934] ? __switch_to+0x7b4/0x1120 [ 1515.262408][T10934] ? __pfx_kthread+0x10/0x10 [ 1515.262455][T10934] ret_from_fork_asm+0x1a/0x30 [ 1515.262508][T10934] [ 1515.712645][T10934] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1516.400140][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1261'. [ 1517.117507][T14598] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1261'. [ 1518.634986][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1259'. [ 1518.689311][T14613] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1259'. [ 1522.696107][T14644] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1524.038414][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1268'. [ 1524.311791][T14657] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1268'. [ 1525.990805][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 1526.054722][T14673] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1271'. [ 1526.936099][T14675] loop6: detected capacity change from 0 to 40427 [ 1527.013741][T14675] F2FS-fs (loop6): invalid crc value [ 1527.126339][T14675] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1527.161991][T14675] F2FS-fs (loop6): Start checkpoint disabled! [ 1527.185222][T14675] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1527.233725][T14675] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1527.357974][ T29] audit: type=1800 audit(1773563983.956:254): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1272" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 1527.388816][T14679] bio_check_eod: 182 callbacks suppressed [ 1527.388839][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.388839][T14679] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1527.416467][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.416467][T14679] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1527.729810][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.729810][T14679] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1527.747303][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.747303][T14679] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1527.763897][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.763897][T14679] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1527.784400][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.784400][T14679] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1527.799657][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.799657][T14679] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1527.818144][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.818144][T14679] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1527.836158][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.836158][T14679] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1527.853534][T14679] syz.6.1272: attempt to access beyond end of device [ 1527.853534][T14679] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1528.701461][ T1030] CPU: 0 UID: 0 PID: 1030 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1528.701522][ T1030] Tainted: [L]=SOFTLOCKUP [ 1528.701536][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1528.701561][ T1030] Workqueue: writeback wb_workfn (flush-7:6) [ 1528.701622][ T1030] Call Trace: [ 1528.701635][ T1030] [ 1528.701649][ T1030] dump_stack_lvl+0x100/0x190 [ 1528.701729][ T1030] f2fs_handle_critical_error+0x5d7/0x970 [ 1528.701772][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.701831][ T1030] ? f2fs_build_fault_attr+0x53/0x280 [ 1528.701900][ T1030] f2fs_write_end_io+0xc3f/0xf30 [ 1528.701946][ T1030] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1528.701994][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.702054][ T1030] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1528.702101][ T1030] bio_endio+0x7a3/0x910 [ 1528.702141][ T1030] submit_bio_noacct+0x64c/0x2010 [ 1528.702203][ T1030] f2fs_submit_write_bio+0x133/0x350 [ 1528.702242][ T1030] __submit_merged_bio+0x331/0x7b0 [ 1528.702291][ T1030] __submit_merged_write_cond+0x3fe/0x510 [ 1528.702343][ T1030] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1528.702397][ T1030] ? __pfx___might_resched+0x10/0x10 [ 1528.702434][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.702489][ T1030] f2fs_write_cache_pages+0x21c0/0x2720 [ 1528.702561][ T1030] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1528.702611][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.702666][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.702713][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.702760][ T1030] ? find_held_lock+0x2b/0x80 [ 1528.702805][ T1030] ? nr_blockdev_pages+0xde/0x120 [ 1528.702853][ T1030] ? nr_blockdev_pages+0xde/0x120 [ 1528.702898][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.702963][ T1030] ? si_meminfo+0x118/0x230 [ 1528.702997][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.703045][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.703162][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.703208][ T1030] ? rcu_is_watching+0x12/0xc0 [ 1528.703255][ T1030] f2fs_write_data_pages+0x799/0x16d0 [ 1528.703308][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.703367][ T1030] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1528.703431][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.703482][ T1030] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1528.703537][ T1030] do_writepages+0x278/0x600 [ 1528.703598][ T1030] ? __pfx_do_writepages+0x10/0x10 [ 1528.703656][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.703709][ T1030] __writeback_single_inode+0x164/0x13c0 [ 1528.703757][ T1030] ? find_held_lock+0x2b/0x80 [ 1528.703802][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.703856][ T1030] ? __pfx___writeback_single_inode+0x10/0x10 [ 1528.703903][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.703948][ T1030] ? do_raw_spin_unlock+0x145/0x1e0 [ 1528.703987][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.704039][ T1030] writeback_sb_inodes+0x766/0x1c70 [ 1528.704115][ T1030] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1528.704164][ T1030] ? do_raw_spin_lock+0x128/0x260 [ 1528.704203][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.704304][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.704350][ T1030] ? rcu_is_watching+0x12/0xc0 [ 1528.704389][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.704435][ T1030] ? queue_io+0x287/0x550 [ 1528.704478][ T1030] wb_writeback+0x1c0/0xbe0 [ 1528.704536][ T1030] ? __pfx_wb_writeback+0x10/0x10 [ 1528.704594][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.704641][ T1030] ? mark_held_locks+0x40/0x70 [ 1528.704696][ T1030] ? _raw_spin_unlock_irq+0x23/0x50 [ 1528.704750][ T1030] wb_workfn+0x142/0xc00 [ 1528.704801][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.704847][ T1030] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1528.704899][ T1030] ? __pfx_wb_workfn+0x10/0x10 [ 1528.704951][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.705001][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.705049][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.705102][ T1030] ? rcu_is_watching+0x12/0xc0 [ 1528.705149][ T1030] process_one_work+0xa23/0x19a0 [ 1528.705204][ T1030] ? __pfx_process_one_work+0x10/0x10 [ 1528.705238][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.705298][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.705351][ T1030] worker_thread+0x5ef/0xe50 [ 1528.705402][ T1030] ? kthread+0x13a/0x450 [ 1528.705458][ T1030] ? __pfx_worker_thread+0x10/0x10 [ 1528.705491][ T1030] kthread+0x370/0x450 [ 1528.705545][ T1030] ? __pfx_kthread+0x10/0x10 [ 1528.705606][ T1030] ret_from_fork+0x754/0xd80 [ 1528.705671][ T1030] ? __pfx_ret_from_fork+0x10/0x10 [ 1528.705739][ T1030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1528.705784][ T1030] ? __switch_to+0x7b4/0x1120 [ 1528.705827][ T1030] ? __pfx_kthread+0x10/0x10 [ 1528.705888][ T1030] ret_from_fork_asm+0x1a/0x30 [ 1528.705952][ T1030] [ 1529.422907][ T1030] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1531.784634][ T5214] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1531.979068][ T5214] usb 4-1: Using ep0 maxpacket: 16 [ 1532.022885][T14715] blktrace: Concurrent blktraces are not allowed on sg0 [ 1532.114917][ T5214] usb 4-1: config 0 has no interfaces? [ 1532.173130][ T5214] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1532.211987][ T5214] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1532.259612][ T5214] usb 4-1: Manufacturer: syz [ 1532.289450][ T5214] usb 4-1: config 0 descriptor?? [ 1532.982800][T14705] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1533.529881][T14706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1535.123698][ T5901] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1535.303672][ T5901] usb 8-1: Using ep0 maxpacket: 16 [ 1535.334310][ T5901] usb 8-1: config 0 has no interfaces? [ 1535.391034][ T5901] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1535.462794][ T5901] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1535.578380][ T5901] usb 8-1: Manufacturer: syz [ 1535.845554][ T5901] usb 8-1: config 0 descriptor?? [ 1536.309174][T14744] vivid-000: ================= START STATUS ================= [ 1536.316981][T14744] vivid-000: Generate PTS: true [ 1536.322036][T14744] vivid-000: Generate SCR: true [ 1536.327384][T14744] tpg source WxH: 320x240 (Y'CbCr) [ 1536.332572][T14744] tpg field: 1 [ 1536.336100][T14744] tpg crop: (0,0)/320x240 [ 1536.340492][T14744] tpg compose: (0,0)/320x240 [ 1536.345212][T14744] tpg colorspace: 8 [ 1536.349079][T14744] tpg transfer function: 0/0 [ 1536.353956][T14744] tpg Y'CbCr encoding: 0/0 [ 1536.358449][T14744] tpg quantization: 0/0 [ 1536.362658][T14744] tpg RGB range: 0/2 [ 1536.367353][T14744] vivid-000: ================== END STATUS ================== [ 1537.180316][ T9] usb 4-1: USB disconnect, device number 4 [ 1537.944095][T14759] comedi comedi0: Minor 3 could not be opened [ 1539.658905][T14765] loop9: detected capacity change from 0 to 40427 [ 1539.748795][T14765] F2FS-fs (loop9): invalid crc value [ 1539.928937][T14765] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1539.954145][T14765] F2FS-fs (loop9): Start checkpoint disabled! [ 1540.000795][T14765] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1540.011112][T14765] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1540.117095][ T29] audit: type=1800 audit(1773563996.716:255): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1288" name="bus" dev="loop9" ino=10 res=0 errno=0 [ 1540.139809][T14765] bio_check_eod: 10 callbacks suppressed [ 1540.139836][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.139836][T14765] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1540.160067][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.160067][T14765] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1540.176119][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.176119][T14765] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1540.190550][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.190550][T14765] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1540.205128][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.205128][T14765] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1540.219945][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.219945][T14765] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1540.234071][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.234071][T14765] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1540.248557][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.248557][T14765] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1540.263404][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.263404][T14765] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1540.279374][T14765] syz.9.1288: attempt to access beyond end of device [ 1540.279374][T14765] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1540.871802][T10934] CPU: 1 UID: 0 PID: 10934 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1540.871870][T10934] Tainted: [L]=SOFTLOCKUP [ 1540.871884][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1540.871919][T10934] Workqueue: writeback wb_workfn (flush-7:9) [ 1540.871981][T10934] Call Trace: [ 1540.871994][T10934] [ 1540.872009][T10934] dump_stack_lvl+0x100/0x190 [ 1540.872068][T10934] f2fs_handle_critical_error+0x5d7/0x970 [ 1540.872112][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.872159][T10934] ? f2fs_build_fault_attr+0x53/0x280 [ 1540.872227][T10934] f2fs_write_end_io+0xc3f/0xf30 [ 1540.872275][T10934] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1540.872324][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.872379][T10934] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1540.872422][T10934] bio_endio+0x7a3/0x910 [ 1540.872463][T10934] submit_bio_noacct+0x64c/0x2010 [ 1540.872529][T10934] f2fs_submit_write_bio+0x133/0x350 [ 1540.872570][T10934] __submit_merged_bio+0x331/0x7b0 [ 1540.872619][T10934] __submit_merged_write_cond+0x3fe/0x510 [ 1540.872673][T10934] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1540.872728][T10934] ? __pfx___might_resched+0x10/0x10 [ 1540.872768][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.872823][T10934] f2fs_write_cache_pages+0x21c0/0x2720 [ 1540.872905][T10934] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1540.872956][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873011][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873058][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873104][T10934] ? find_held_lock+0x2b/0x80 [ 1540.873149][T10934] ? nr_blockdev_pages+0xde/0x120 [ 1540.873196][T10934] ? nr_blockdev_pages+0xde/0x120 [ 1540.873241][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873307][T10934] ? si_meminfo+0x118/0x230 [ 1540.873339][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873387][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873494][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873541][T10934] ? rcu_is_watching+0x12/0xc0 [ 1540.873587][T10934] f2fs_write_data_pages+0x799/0x16d0 [ 1540.873637][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873695][T10934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1540.873760][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.873807][T10934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1540.873875][T10934] do_writepages+0x278/0x600 [ 1540.873937][T10934] ? __pfx_do_writepages+0x10/0x10 [ 1540.873994][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874046][T10934] __writeback_single_inode+0x164/0x13c0 [ 1540.874093][T10934] ? find_held_lock+0x2b/0x80 [ 1540.874139][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874187][T10934] ? __pfx___writeback_single_inode+0x10/0x10 [ 1540.874234][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874278][T10934] ? do_raw_spin_unlock+0x145/0x1e0 [ 1540.874323][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874374][T10934] writeback_sb_inodes+0x766/0x1c70 [ 1540.874443][T10934] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1540.874489][T10934] ? do_raw_spin_lock+0x128/0x260 [ 1540.874528][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874629][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874674][T10934] ? rcu_is_watching+0x12/0xc0 [ 1540.874712][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874758][T10934] ? queue_io+0x287/0x550 [ 1540.874801][T10934] wb_writeback+0x1c0/0xbe0 [ 1540.874865][T10934] ? __pfx_wb_writeback+0x10/0x10 [ 1540.874922][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874967][T10934] ? mark_held_locks+0x40/0x70 [ 1540.875023][T10934] ? _raw_spin_unlock_irq+0x23/0x50 [ 1540.875078][T10934] wb_workfn+0x142/0xc00 [ 1540.875128][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.875173][T10934] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1540.875225][T10934] ? __pfx_wb_workfn+0x10/0x10 [ 1540.875275][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.875325][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.875375][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.875420][T10934] ? rcu_is_watching+0x12/0xc0 [ 1540.875467][T10934] process_one_work+0xa23/0x19a0 [ 1540.875523][T10934] ? __pfx_process_one_work+0x10/0x10 [ 1540.875557][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.875618][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.875671][T10934] worker_thread+0x5ef/0xe50 [ 1540.875718][T10934] ? __pfx_worker_thread+0x10/0x10 [ 1540.875756][T10934] ? kthread+0x13a/0x450 [ 1540.875810][T10934] ? __pfx_worker_thread+0x10/0x10 [ 1540.875849][T10934] kthread+0x370/0x450 [ 1540.875905][T10934] ? __pfx_kthread+0x10/0x10 [ 1540.875969][T10934] ret_from_fork+0x754/0xd80 [ 1540.876030][T10934] ? __pfx_ret_from_fork+0x10/0x10 [ 1540.876094][T10934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.876140][T10934] ? __switch_to+0x7b4/0x1120 [ 1540.876183][T10934] ? __pfx_kthread+0x10/0x10 [ 1540.876242][T10934] ret_from_fork_asm+0x1a/0x30 [ 1540.876307][T10934] [ 1541.633719][ T5901] usb 8-1: can't set config #0, error -110 [ 1541.828290][T10934] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1542.336871][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1292'. [ 1542.402134][T14786] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1292'. [ 1544.610332][ T5927] usb 8-1: USB disconnect, device number 19 [ 1545.637758][T14809] vivid-000: ================= START STATUS ================= [ 1545.645541][T14809] vivid-000: Generate PTS: true [ 1545.650608][T14809] vivid-000: Generate SCR: true [ 1545.655721][T14809] tpg source WxH: 320x240 (Y'CbCr) [ 1545.660955][T14809] tpg field: 1 [ 1545.664971][T14809] tpg crop: (0,0)/320x240 [ 1545.669369][T14809] tpg compose: (0,0)/320x240 [ 1545.674199][T14809] tpg colorspace: 8 [ 1545.678060][T14809] tpg transfer function: 0/0 [ 1545.682708][T14809] tpg Y'CbCr encoding: 0/0 [ 1545.687258][T14809] tpg quantization: 0/0 [ 1545.691464][T14809] tpg RGB range: 0/2 [ 1545.696448][T14809] vivid-000: ================== END STATUS ================== [ 1549.510681][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.519847][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.646030][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1317'. [ 1550.077609][T14903] netlink: 'syz.9.1324': attribute type 1 has an invalid length. [ 1550.282074][T14897] loop8: detected capacity change from 0 to 8192 [ 1550.357837][T14897] ======================================================= [ 1550.357837][T14897] WARNING: The mand mount option has been deprecated and [ 1550.357837][T14897] and is ignored by this kernel. Remove the mand [ 1550.357837][T14897] option from the mount to silence this warning. [ 1550.357837][T14897] ======================================================= [ 1550.417992][T14903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1550.859149][T14931] loop2: detected capacity change from 0 to 256 [ 1550.885931][T14931] FAT-fs (loop2): bogus sectors per cluster 223 [ 1550.959752][T14931] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1551.658348][T14958] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1551.658348][T14958] The task syz.8.1337 (14958) triggered the difference, watch for misbehavior. [ 1552.940002][T14996] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1553.929539][T14996] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1553.940093][T14998] capability: warning: `syz.8.1348' uses deprecated v2 capabilities in a way that may be insecure [ 1554.524535][T14996] overlayfs: missing 'lowerdir' [ 1555.529949][T15010] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1555.900671][T15016] fuse: Unknown parameter '00000000000000000000' [ 1557.971868][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 1559.164870][T15096] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 1559.302673][T15096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1559.579367][T15108] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1559.814757][T15115] loop3: detected capacity change from 0 to 128 [ 1559.997594][ T29] audit: type=1800 audit(1773564016.596:256): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1384" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1560.439409][T15127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1393'. [ 1560.542834][T15130] kernel profiling enabled (shift: 63) [ 1560.579569][T15130] profiling shift: 63 too large [ 1560.995223][T15149] loop9: detected capacity change from 0 to 128 [ 1561.410034][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 1562.391845][T15184] loop2: detected capacity change from 0 to 16 [ 1562.469154][T15184] erofs (device loop2): invalid ishare xattr prefix id 0 [ 1562.838978][T15174] loop3: detected capacity change from 0 to 8192 [ 1564.630733][T15240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1567.021904][T15286] loop9: detected capacity change from 0 to 8192 [ 1567.547216][T15286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1568.471612][T15326] bridge_slave_0: left allmulticast mode [ 1568.477674][T15326] bridge_slave_0: left promiscuous mode [ 1568.483892][T15326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.509297][T15326] bridge_slave_1: left allmulticast mode [ 1568.515167][T15326] bridge_slave_1: left promiscuous mode [ 1568.520974][T15326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.573275][T15326] bond0: (slave bond_slave_0): Releasing backup interface [ 1568.600011][T15326] bond0: (slave bond_slave_1): Releasing backup interface [ 1568.664474][T15326] team0: Port device team_slave_0 removed [ 1568.770672][T15326] team0: Port device team_slave_1 removed [ 1568.778086][T15326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.785561][T15326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.814970][T15326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.822382][T15326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.866445][T15326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1569.869053][T15350] loop8: detected capacity change from 0 to 512 [ 1570.568635][T15350] FAT-fs (loop8): FAT read failed (blocknr 128) [ 1570.730137][T15345] kexec: Could not allocate control_code_buffer [ 1572.354834][T15396] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1572.406660][T15399] overlayfs: invalid redirect ((null)) [ 1572.447330][T15399] overlayfs: invalid redirect ((null)) [ 1573.870944][T15430] loop6: detected capacity change from 0 to 164 [ 1573.974916][T15430] Unable to read rock-ridge attributes [ 1574.763116][T15454] loop8: detected capacity change from 0 to 256 [ 1575.629658][T15472] block device autoloading is deprecated and will be removed. [ 1576.135042][T15487] overlayfs: failed to clone upperpath [ 1576.638673][ T29] audit: type=1326 audit(1773564033.236:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15500 comm="syz.9.1505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0411d9c799 code=0x0 [ 1576.901859][T15508] loop6: detected capacity change from 0 to 1764 [ 1576.990960][T15512] capability: warning: `syz.2.1507' uses 32-bit capabilities (legacy support in use) [ 1577.398742][T15521] support for the xor transformation has been removed. [ 1577.638276][T13025] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1577.664100][T13025] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1577.672747][T13025] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1577.703844][T13025] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1577.737542][T13025] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1578.292426][ T29] audit: type=1326 audit(1773564034.886:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15540 comm="syz.9.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0411d9c799 code=0x7fc00000 [ 1578.326909][T15539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1578.398425][ T29] audit: type=1326 audit(1773564034.886:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15540 comm="syz.9.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0411d9c799 code=0x7fc00000 [ 1579.372931][T15523] chnl_net:caif_netlink_parms(): no params data found [ 1579.905705][T10608] Bluetooth: hci6: command tx timeout [ 1580.592492][T15579] fuse: Bad value for 'fd' [ 1581.042740][T15523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.067906][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.097226][T15523] bridge_slave_0: entered allmulticast mode [ 1581.115325][T15523] bridge_slave_0: entered promiscuous mode [ 1581.142479][T15523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.195144][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.231084][T15523] bridge_slave_1: entered allmulticast mode [ 1581.254717][T15523] bridge_slave_1: entered promiscuous mode [ 1581.768491][T10934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.993551][T13025] Bluetooth: hci6: command tx timeout [ 1582.318920][T10934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.346478][T15623] overlayfs: failed to clone upperpath [ 1582.448061][T15523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.546847][T15523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.653972][T15627] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1582.723977][T15627] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1582.741518][T10934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.240782][T10934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.503842][T15523] team0: Port device team_slave_0 added [ 1583.536918][T15523] team0: Port device team_slave_1 added [ 1583.872020][T15523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.893027][T15523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.001871][T15523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.056605][T15523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.063835][T13025] Bluetooth: hci6: command tx timeout [ 1584.083705][T15523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.123942][T15523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.971596][T15523] hsr_slave_0: entered promiscuous mode [ 1585.028259][T15523] hsr_slave_1: entered promiscuous mode [ 1586.034738][T15523] debugfs: 'hsr0' already exists in 'hsr' [ 1586.040523][T15523] Cannot create hsr debugfs directory [ 1586.763657][T13025] Bluetooth: hci6: command tx timeout [ 1587.212470][T15668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.221474][T15668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.672883][T15668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1587.676195][T15693] loop6: detected capacity change from 0 to 128 [ 1587.726570][T15668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1587.751482][T15693] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1587.796545][T15693] FAT-fs (loop6): Filesystem has been set read-only [ 1587.820815][T15693] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1588.224839][T10934] bridge_slave_1: left allmulticast mode [ 1588.230556][T10934] bridge_slave_1: left promiscuous mode [ 1588.253779][T10934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.325021][T10934] bridge_slave_0: left allmulticast mode [ 1588.330716][T10934] bridge_slave_0: left promiscuous mode [ 1588.365582][T10934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.134379][T10934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.160571][T10934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.175693][T15704] loop6: detected capacity change from 0 to 256 [ 1589.198303][T10934] bond0 (unregistering): Released all slaves [ 1589.258341][T10934] bond1 (unregistering): Released all slaves [ 1589.441834][ T6111] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.481130][ T6111] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.608065][ T6111] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.663796][ T6111] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.726669][T15710] loop9: detected capacity change from 0 to 256 [ 1589.760395][T15710] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1590.626751][T10934] hsr_slave_0: left promiscuous mode [ 1590.699791][T15726] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1590.752516][T10934] hsr_slave_1: left promiscuous mode [ 1590.759022][T10934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.793691][T10934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.892409][T10934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.910720][T10934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.952043][T10934] veth1_macvtap: left promiscuous mode [ 1590.969376][T10934] veth0_macvtap: left promiscuous mode [ 1590.987757][T10934] veth1_vlan: left promiscuous mode [ 1591.005737][T10934] veth0_vlan: left promiscuous mode [ 1591.551116][T15740] x_tables: duplicate underflow at hook 1 [ 1591.598567][T10608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1591.609032][T10608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1591.619694][T10608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1591.628638][T10608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1591.643726][T10608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1592.228085][T10934] team0 (unregistering): Port device team_slave_1 removed [ 1592.286664][T10934] team0 (unregistering): Port device team_slave_0 removed [ 1592.781873][T15750] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1593.744926][T10608] Bluetooth: hci0: command tx timeout [ 1594.125667][T15777] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1590'. [ 1594.213149][T15777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.221889][T15777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.823826][T10608] Bluetooth: hci0: command tx timeout [ 1596.031822][T15741] chnl_net:caif_netlink_parms(): no params data found [ 1596.274949][T15523] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1596.327607][T15523] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1596.428694][T15523] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1596.452161][T15824] loop6: detected capacity change from 0 to 256 [ 1596.855327][T15523] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1597.189047][T15741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.206499][T15741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.233877][T15741] bridge_slave_0: entered allmulticast mode [ 1597.275286][T15741] bridge_slave_0: entered promiscuous mode [ 1597.914984][T10608] Bluetooth: hci0: command tx timeout [ 1599.935607][T15489] syz_tun (unregistering): left allmulticast mode [ 1599.997548][T10608] Bluetooth: hci0: command tx timeout [ 1600.036270][T15741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.076507][T15741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.106059][T15741] bridge_slave_1: entered allmulticast mode [ 1600.142755][T15741] bridge_slave_1: entered promiscuous mode [ 1600.458402][ T6385] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.508435][T15741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.548784][T15741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.689677][ T6385] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.771311][T15850] netem: change failed [ 1600.787549][T15741] team0: Port device team_slave_0 added [ 1600.855846][ T6385] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.962023][T15741] team0: Port device team_slave_1 added [ 1601.195662][ T6385] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.387627][T15741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.395351][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.441737][T15741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.479805][T15741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.490387][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.590134][T15741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.691941][T15523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.846065][T15741] hsr_slave_0: entered promiscuous mode [ 1602.877711][T15741] hsr_slave_1: entered promiscuous mode [ 1602.894882][T15741] debugfs: 'hsr0' already exists in 'hsr' [ 1602.900676][T15741] Cannot create hsr debugfs directory [ 1603.064456][T15523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.369857][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.377109][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.621374][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.628582][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.621639][ T6385] bond0 (unregistering): Released all slaves [ 1605.415149][T15892] loop6: detected capacity change from 0 to 512 [ 1605.828051][T15902] fuse: Bad value for 'fd' [ 1606.355201][T15910] syz_tun: entered allmulticast mode [ 1606.643770][ T6385] hsr_slave_0: left promiscuous mode [ 1606.673694][ T6385] hsr_slave_1: left promiscuous mode [ 1606.722042][ T6385] veth1_macvtap: left promiscuous mode [ 1606.748728][ T6385] veth0_macvtap: left promiscuous mode [ 1606.769364][ T6385] veth1_vlan: left promiscuous mode [ 1606.796689][ T6385] veth0_vlan: left promiscuous mode [ 1607.412013][T15937] EXT4-fs (loop14): unable to read superblock [ 1607.413592][T13959] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1607.760854][T13959] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1607.829010][T13959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1607.902113][T13959] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1607.947112][T13959] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1608.020273][T13959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.048895][T13959] usb 7-1: Product: syz [ 1608.066751][T13959] usb 7-1: Manufacturer: syz [ 1608.087878][T13959] usb 7-1: SerialNumber: syz [ 1608.194937][T13959] usb 7-1: config 0 descriptor?? [ 1608.248309][T15932] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1608.478637][T15932] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1609.074634][T15523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1609.761131][T15741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1609.848875][T15741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1609.924444][T15741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1610.026291][T15741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1610.081266][T15966] fuse: Bad value for 'fd' [ 1610.621026][T15741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.787869][T15741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.897767][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.905039][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.965571][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1610.972018][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.022291][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.029537][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1611.251109][T13959] usb 7-1: USB disconnect, device number 8 [ 1611.347067][T15523] veth0_vlan: entered promiscuous mode [ 1611.408048][T15741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1611.452336][T13025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1611.473052][T15523] veth1_vlan: entered promiscuous mode [ 1611.487313][T13025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1611.498415][T13025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1611.515450][T13025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1611.524101][T13025] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1611.662149][T15523] veth0_macvtap: entered promiscuous mode [ 1611.686303][T15523] veth1_macvtap: entered promiscuous mode [ 1611.708013][T15523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.720229][T15523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1612.066342][ T6111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.318870][ T6111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.417451][ T6111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.568685][ T6111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.535922][ T6385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.568127][ T6385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.663730][T13025] Bluetooth: hci5: command tx timeout [ 1614.218050][T15741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.334658][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.373636][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.862130][T15994] chnl_net:caif_netlink_parms(): no params data found [ 1615.037441][T16027] loop5: detected capacity change from 0 to 128 [ 1615.365097][T15741] veth0_vlan: entered promiscuous mode [ 1615.492222][T15741] veth1_vlan: entered promiscuous mode [ 1615.745518][T13025] Bluetooth: hci5: command tx timeout [ 1615.900655][T15994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.923031][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.944321][T15994] bridge_slave_0: entered allmulticast mode [ 1615.966100][T16037] 9p: Bad value for 'wfdno' [ 1615.976334][T15994] bridge_slave_0: entered promiscuous mode [ 1616.014374][T15994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.021596][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.066759][T15994] bridge_slave_1: entered allmulticast mode [ 1616.085921][T15994] bridge_slave_1: entered promiscuous mode [ 1616.294663][T16047] fuse: Bad value for 'fd' [ 1616.317292][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.432213][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.466347][T16052] loop9: detected capacity change from 0 to 256 [ 1616.662913][T16055] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1616.840894][T15994] team0: Port device team_slave_0 added [ 1616.991497][T15741] veth0_macvtap: entered promiscuous mode [ 1617.037146][T15994] team0: Port device team_slave_1 added [ 1617.156071][T15741] veth1_macvtap: entered promiscuous mode [ 1617.351119][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.373327][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.443517][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.477169][T16079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1617.586743][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.607594][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.681733][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.833356][T13025] Bluetooth: hci5: command tx timeout [ 1617.921134][T16092] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1666'. [ 1618.126557][T15741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1618.318559][T15741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1618.990240][T15994] hsr_slave_0: entered promiscuous mode [ 1619.022682][T15994] hsr_slave_1: entered promiscuous mode [ 1619.051795][T15994] debugfs: 'hsr0' already exists in 'hsr' [ 1619.073602][T15994] Cannot create hsr debugfs directory [ 1619.084009][ T127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.132501][ T127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.154682][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1672'. [ 1619.169798][ T127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.280076][ T127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.903900][T13025] Bluetooth: hci5: command tx timeout [ 1620.284204][T16112] netlink: 'syz.9.1675': attribute type 4 has an invalid length. [ 1620.680757][ T6383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1620.720824][ T6383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1620.990402][ T6382] bridge_slave_1: left allmulticast mode [ 1621.008814][ T6382] bridge_slave_1: left promiscuous mode [ 1621.027463][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.077943][ T6382] bridge_slave_0: left allmulticast mode [ 1621.100296][ T6382] bridge_slave_0: left promiscuous mode [ 1621.128781][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.925734][ T6382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.955738][ T6382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.975527][ T6382] bond0 (unregistering): Released all slaves [ 1622.077879][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.087952][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.132636][T16129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1622.835525][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1688'. [ 1623.017143][T16147] loop7: detected capacity change from 0 to 7 [ 1623.193105][T16154] loop0: detected capacity change from 0 to 16 [ 1623.221546][T16154] erofs (device loop0): invalid ishare xattr prefix id 0 [ 1623.268699][T16152] [ 1623.271057][T16152] ====================================================== [ 1623.278183][T16152] WARNING: possible circular locking dependency detected [ 1623.285297][T16152] syzkaller #0 Tainted: G L [ 1623.291497][T16152] ------------------------------------------------------ [ 1623.298602][T16152] syz.6.1689/16152 is trying to acquire lock: [ 1623.304670][T16152] ffff88801c6ada20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 1623.314903][T16152] [ 1623.314903][T16152] but task is already holding lock: [ 1623.322364][T16152] ffff8880265c4ca0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1623.333710][T16152] [ 1623.333710][T16152] which lock already depends on the new lock. [ 1623.333710][T16152] [ 1623.344287][T16152] [ 1623.344287][T16152] the existing dependency chain (in reverse order) is: [ 1623.353303][T16152] [ 1623.353303][T16152] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 1623.362061][T16152] blk_alloc_queue+0x610/0x790 [ 1623.367379][T16152] blk_mq_alloc_queue+0x174/0x290 [ 1623.372952][T16152] __blk_mq_alloc_disk+0x29/0x120 [ 1623.378530][T16152] loop_add+0x498/0xb60 [ 1623.383605][T16152] loop_init+0x1d3/0x200 [ 1623.388426][T16152] do_one_initcall+0x11d/0x760 [ 1623.393730][T16152] kernel_init_freeable+0x6e5/0x7a0 [ 1623.399472][T16152] kernel_init+0x1f/0x1e0 [ 1623.404331][T16152] ret_from_fork+0x754/0xd80 [ 1623.409473][T16152] ret_from_fork_asm+0x1a/0x30 [ 1623.414855][T16152] [ 1623.414855][T16152] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1623.422096][T16152] fs_reclaim_acquire+0xc4/0x100 [ 1623.427779][T16152] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1623.433689][T16152] __kernfs_iattrs+0x126/0x400 [ 1623.438988][T16152] __kernfs_setattr+0x4d/0x3c0 [ 1623.444296][T16152] kernfs_iop_setattr+0xda/0x130 [ 1623.450207][T16152] notify_change+0xb25/0x1330 [ 1623.455532][T16152] do_truncate+0x1df/0x240 [ 1623.460677][T16152] path_openat+0x2a55/0x31a0 [ 1623.465814][T16152] do_file_open+0x20e/0x430 [ 1623.470866][T16152] do_sys_openat2+0x10d/0x1e0 [ 1623.476098][T16152] __x64_sys_openat+0x12d/0x210 [ 1623.481562][T16152] do_syscall_64+0x106/0xf80 [ 1623.486792][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.493215][T16152] [ 1623.493215][T16152] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1623.501944][T16152] __lock_acquire+0x14b8/0x2630 [ 1623.507435][T16152] lock_acquire+0x1cf/0x380 [ 1623.512483][T16152] down_read+0x99/0x460 [ 1623.517165][T16152] kernfs_iop_getattr+0x9c/0xf0 [ 1623.522553][T16152] vfs_getattr_nosec+0x2d4/0x430 [ 1623.528053][T16152] vfs_getattr+0x4a/0x60 [ 1623.532839][T16152] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1623.539471][T16152] lo_ioctl+0x13aa/0x1bc0 [ 1623.544345][T16152] blkdev_ioctl+0x5ad/0x6f0 [ 1623.549407][T16152] __x64_sys_ioctl+0x18e/0x210 [ 1623.554700][T16152] do_syscall_64+0x106/0xf80 [ 1623.559831][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.566267][T16152] [ 1623.566267][T16152] other info that might help us debug this: [ 1623.566267][T16152] [ 1623.576490][T16152] Chain exists of: [ 1623.576490][T16152] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 1623.576490][T16152] [ 1623.591054][T16152] Possible unsafe locking scenario: [ 1623.591054][T16152] [ 1623.598671][T16152] CPU0 CPU1 [ 1623.604034][T16152] ---- ---- [ 1623.609391][T16152] lock(&q->q_usage_counter(io)#24); [ 1623.614786][T16152] lock(fs_reclaim); [ 1623.621292][T16152] lock(&q->q_usage_counter(io)#24); [ 1623.629553][T16152] rlock(&root->kernfs_iattr_rwsem); [ 1623.634935][T16152] [ 1623.634935][T16152] *** DEADLOCK *** [ 1623.634935][T16152] [ 1623.643072][T16152] 3 locks held by syz.6.1689/16152: [ 1623.648268][T16152] #0: ffff888026564448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 1623.659032][T16152] #1: ffff8880265c4ca0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1623.670940][T16152] #2: ffff8880265c4cd8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1623.682855][T16152] [ 1623.682855][T16152] stack backtrace: [ 1623.688762][T16152] CPU: 1 UID: 0 PID: 16152 Comm: syz.6.1689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1623.688811][T16152] Tainted: [L]=SOFTLOCKUP [ 1623.688824][T16152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1623.688846][T16152] Call Trace: [ 1623.688862][T16152] [ 1623.688878][T16152] dump_stack_lvl+0x100/0x190 [ 1623.688934][T16152] print_circular_bug.cold+0x178/0x1c7 [ 1623.689006][T16152] check_noncircular+0x146/0x160 [ 1623.689061][T16152] __lock_acquire+0x14b8/0x2630 [ 1623.689121][T16152] lock_acquire+0x1cf/0x380 [ 1623.689170][T16152] ? kernfs_iop_getattr+0x9c/0xf0 [ 1623.689213][T16152] ? __pfx___might_resched+0x10/0x10 [ 1623.689252][T16152] down_read+0x99/0x460 [ 1623.689286][T16152] ? kernfs_iop_getattr+0x9c/0xf0 [ 1623.689327][T16152] ? find_held_lock+0x2b/0x80 [ 1623.689366][T16152] ? __pfx_down_read+0x10/0x10 [ 1623.689419][T16152] ? kernfs_root+0xee/0x2a0 [ 1623.689455][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.689503][T16152] kernfs_iop_getattr+0x9c/0xf0 [ 1623.689545][T16152] vfs_getattr_nosec+0x2d4/0x430 [ 1623.689597][T16152] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 1623.689640][T16152] vfs_getattr+0x4a/0x60 [ 1623.689689][T16152] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1623.689738][T16152] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 1623.689800][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.689844][T16152] lo_ioctl+0x13aa/0x1bc0 [ 1623.689892][T16152] ? __pfx_lo_ioctl+0x10/0x10 [ 1623.689936][T16152] ? tomoyo_path_number_perm+0x46d/0x580 [ 1623.689995][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.690037][T16152] ? kasan_quarantine_put+0x104/0x240 [ 1623.690080][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.690120][T16152] ? blk_get_meta_cap+0xd4/0x6c0 [ 1623.690173][T16152] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1623.690218][T16152] ? tomoyo_path_number_perm+0x28f/0x580 [ 1623.690251][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.690297][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.690338][T16152] ? blkdev_common_ioctl+0x515/0x2ba0 [ 1623.690387][T16152] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1623.690443][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.690484][T16152] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1623.690532][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.690573][T16152] ? do_vfs_ioctl+0x226/0x13e0 [ 1623.690613][T16152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1623.690658][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.690699][T16152] ? find_held_lock+0x2b/0x80 [ 1623.690737][T16152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.690779][T16152] ? __pfx_lo_ioctl+0x10/0x10 [ 1623.690826][T16152] blkdev_ioctl+0x5ad/0x6f0 [ 1623.690872][T16152] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1623.690919][T16152] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1623.690971][T16152] __x64_sys_ioctl+0x18e/0x210 [ 1623.691012][T16152] do_syscall_64+0x106/0xf80 [ 1623.691062][T16152] ? irqentry_exit+0x138/0x670 [ 1623.691114][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.691150][T16152] RIP: 0033:0x7f9762b9c799 [ 1623.691181][T16152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.691216][T16152] RSP: 002b:00007f9763ab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1623.691263][T16152] RAX: ffffffffffffffda RBX: 00007f9762e16090 RCX: 00007f9762b9c799 [ 1623.691286][T16152] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 1623.691308][T16152] RBP: 00007f9762c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1623.691330][T16152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.691351][T16152] R13: 00007f9762e16128 R14: 00007f9762e16090 R15: 00007fff3580b658 [ 1623.691386][T16152] [ 1624.153840][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.163454][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.174430][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.184149][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.193505][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1624.203117][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.243722][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.253799][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.298753][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.308395][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.353594][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.363299][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.393708][T16147] ldm_validate_partition_table(): Disk read failed. [ 1624.415444][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.425203][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.436065][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.445944][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.454044][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.463672][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.471855][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1624.481702][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1624.489699][T16147] Dev loop7: unable to read RDB block 0 [ 1624.673627][T16147] loop7: unable to read partition table [ 1624.679467][T16147] loop7: partition table beyond EOD, truncated [ 1624.770689][T16147] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1624.834696][T13635] ldm_validate_partition_table(): Disk read failed. [ 1624.841902][T13635] Dev loop7: unable to read RDB block 0 [ 1624.889617][T13635] loop7: unable to read partition table [ 1624.954574][T13635] loop7: partition table beyond EOD, truncated [ 1624.962437][T16152] ldm_validate_partition_table(): Disk read failed. [ 1624.975926][T16152] Dev loop7: unable to read RDB block 0 [ 1624.984353][T16152] loop7: unable to read partition table [ 1624.990157][T16152] loop7: partition table beyond EOD, truncated [ 1625.013839][T16152] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1625.532606][ T6382] hsr_slave_0: left promiscuous mode [ 1625.568662][ T6382] hsr_slave_1: left promiscuous mode [ 1625.584162][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1625.591869][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.747540][ T6382] team0 (unregistering): Port device team_slave_1 removed [ 1625.761063][ T6382] team0 (unregistering): Port device team_slave_0 removed [ 1626.747177][ T6382] IPVS: stop unused estimator thread 0... [ 1626.986253][ T6382] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.107600][ T6382] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.236907][ T6382] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.307064][ T6382] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.558505][ T6382] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.674814][ T6382] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.825315][ T6382] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.916302][ T6382] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.116797][ T6382] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.195847][ T6382] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.281398][ T6382] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.356145][T16145] syz_tun (unregistering): left allmulticast mode [ 1628.401323][ T6382] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.535218][ T6382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.619698][ T6382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.697319][ T6382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.771588][ T6382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.914313][ T6382] bridge_slave_1: left allmulticast mode [ 1628.920095][ T6382] bridge_slave_1: left promiscuous mode [ 1628.943429][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.956440][ T6382] bridge_slave_0: left allmulticast mode [ 1628.962219][ T6382] bridge_slave_0: left promiscuous mode [ 1628.968158][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.978091][ T6382] bridge_slave_1: left allmulticast mode [ 1628.984137][ T6382] bridge_slave_1: left promiscuous mode [ 1628.989946][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.999056][ T6382] bridge_slave_0: left allmulticast mode [ 1629.005956][ T6382] bridge_slave_0: left promiscuous mode [ 1629.011677][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.025178][ T6382] bridge_slave_1: left allmulticast mode [ 1629.030871][ T6382] bridge_slave_1: left promiscuous mode [ 1629.037017][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.045856][ T6382] bridge_slave_0: left allmulticast mode [ 1629.052136][ T6382] bridge_slave_0: left promiscuous mode [ 1629.060676][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.073029][ T6382] bridge_slave_1: left allmulticast mode [ 1629.078775][ T6382] bridge_slave_1: left promiscuous mode [ 1629.084916][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.094198][ T6382] bridge_slave_0: left allmulticast mode [ 1629.099865][ T6382] bridge_slave_0: left promiscuous mode [ 1629.108025][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.119686][ T6382] bridge_slave_1: left allmulticast mode [ 1629.125656][ T6382] bridge_slave_1: left promiscuous mode [ 1629.131382][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.140920][ T6382] bridge_slave_0: left allmulticast mode [ 1629.146916][ T6382] bridge_slave_0: left promiscuous mode [ 1629.153379][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.372810][ T6382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.383344][ T6382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.393409][ T6382] bond0 (unregistering): Released all slaves [ 1629.569128][ T6382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.581547][ T6382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.597409][ T6382] bond0 (unregistering): Released all slaves [ 1629.607322][ T6382] bond1 (unregistering): Released all slaves [ 1629.828472][ T6382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.839398][ T6382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.864955][ T6382] bond0 (unregistering): Released all slaves [ 1629.969243][ T6382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.987596][ T6382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.998212][ T6382] bond0 (unregistering): Released all slaves [ 1630.070157][ T6382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1630.085121][ T6382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.097431][ T6382] bond0 (unregistering): Released all slaves [ 1630.731468][ T6382] hsr_slave_0: left promiscuous mode [ 1630.737555][ T6382] hsr_slave_1: left promiscuous mode [ 1630.748821][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.757976][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.786949][ T6382] hsr_slave_0: left promiscuous mode [ 1630.795367][ T6382] hsr_slave_1: left promiscuous mode [ 1630.801659][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.810658][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.819426][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.830248][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.843048][ T6382] hsr_slave_0: left promiscuous mode [ 1630.849332][ T6382] hsr_slave_1: left promiscuous mode [ 1630.855698][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.863089][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.872634][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.881039][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.894904][ T6382] hsr_slave_0: left promiscuous mode [ 1630.900942][ T6382] hsr_slave_1: left promiscuous mode [ 1630.907984][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.915731][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.925113][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.932577][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.944667][ T6382] hsr_slave_0: left promiscuous mode [ 1630.950652][ T6382] hsr_slave_1: left promiscuous mode [ 1630.957029][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.965291][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.973278][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.982183][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1631.008960][ T6382] veth1_macvtap: left promiscuous mode [ 1631.015491][ T6382] veth0_macvtap: left promiscuous mode [ 1631.021345][ T6382] veth1_vlan: left promiscuous mode [ 1631.028045][ T6382] veth0_vlan: left promiscuous mode [ 1631.034511][ T6382] veth1_macvtap: left promiscuous mode [ 1631.040042][ T6382] veth0_macvtap: left promiscuous mode [ 1631.045988][ T6382] veth1_vlan: left promiscuous mode [ 1631.051388][ T6382] veth0_vlan: left promiscuous mode [ 1631.058243][ T6382] veth1_macvtap: left promiscuous mode [ 1631.063820][ T6382] veth0_macvtap: left promiscuous mode [ 1631.069414][ T6382] veth1_vlan: left promiscuous mode [ 1631.075186][ T6382] veth0_vlan: left promiscuous mode [ 1631.081486][ T6382] veth1_macvtap: left promiscuous mode [ 1631.094438][ T6382] veth0_macvtap: left promiscuous mode [ 1631.100261][ T6382] veth1_vlan: left promiscuous mode [ 1631.105571][ T6382] veth0_vlan: left promiscuous mode [ 1631.543913][ T6382] team0 (unregistering): Port device team_slave_1 removed [ 1631.580057][ T6382] team0 (unregistering): Port device team_slave_0 removed [ 1631.780063][ T6382] team0 (unregistering): Port device team_slave_1 removed [ 1631.796926][ T6382] team0 (unregistering): Port device team_slave_0 removed [ 1631.931404][ T6382] team0 (unregistering): Port device team_slave_1 removed [ 1631.943310][ T6382] team0 (unregistering): Port device team_slave_0 removed [ 1632.092382][ T6382] team0 (unregistering): Port device team_slave_1 removed [ 1632.104785][ T6382] team0 (unregistering): Port device team_slave_0 removed [ 1632.249912][ T6382] team0 (unregistering): Port device team_slave_1 removed [ 1632.262237][ T6382] team0 (unregistering): Port device team_slave_0 removed