last executing test programs: 52m49.871536714s ago: executing program 32 (id=118): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt(r0, 0xffffffff, 0x485, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x13}, 0x50) 52m49.732064318s ago: executing program 33 (id=108): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@shortname_mixed}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@uni_xlate}, {@shortname_mixed}, {@utf8}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r4, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 51m45.899014599s ago: executing program 34 (id=312): setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) 48m43.942335418s ago: executing program 35 (id=1056): prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb29e0100, 0x0, 0x0, 0x0, 0x0, 0x0) 45m3.361724158s ago: executing program 36 (id=1729): syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902600003010048f30904000000010100000a240106000a0002010209040080000002000009040101010102000009050109080000037f0725010c000200090402"], 0x0) io_uring_setup(0x6ed6, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bind$inet(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x1c) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x47) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 43m31.115292779s ago: executing program 37 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r5}) 43m25.726361274s ago: executing program 38 (id=1946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 43m5.503911122s ago: executing program 39 (id=1984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x2000c080) 42m27.94957966s ago: executing program 40 (id=2030): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)="6a6f8ede", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 40m54.19890478s ago: executing program 3 (id=2259): fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.incfs.size\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r2 = syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x8, 0x2000}, 0x0, &(0x7f0000000000), 0x0) io_uring_enter(r2, 0x1, 0xffffffff, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="c3", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x80) syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x48000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) 40m50.643497273s ago: executing program 3 (id=2269): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, 0x0}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x7, 0x1}, 0x8) 40m49.87903148s ago: executing program 3 (id=2271): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000004c0)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x80001009, 0xb, 0x0, 'queue1\x00', 0xfffffffc}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x261f]}}], 0xffc8) 40m46.659647274s ago: executing program 3 (id=2274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) 40m45.995013105s ago: executing program 3 (id=2278): socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) memfd_create(&(0x7f0000000180)='/dev/ptmx\x00', 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x87c}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0xffffffffffffff38, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r5, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x2400c046) 40m43.309675745s ago: executing program 3 (id=2283): socket$inet_tcp(0x2, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r0]) 40m24.80343807s ago: executing program 41 (id=2283): socket$inet_tcp(0x2, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r0]) 40m18.782747589s ago: executing program 6 (id=2358): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) mount(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x6020, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r3, r4, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() umount2(0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 40m18.277173021s ago: executing program 6 (id=2362): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x98f90e}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) 40m16.320509848s ago: executing program 6 (id=2368): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount$afs(&(0x7f0000000200)=@cell={0x23, '', 'syz1', '.readonly'}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000e0), 0x0, 0x0) 40m13.918211283s ago: executing program 6 (id=2373): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c0007800800064000000000050001000600"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000906000073797a310000000005a80600", @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0xc000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 40m10.319588033s ago: executing program 6 (id=2375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) write$sndseq(r5, &(0x7f00000000c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x80, {0x0, 0xfb}, {}, @result={0x0, 0x2}}], 0x1c) 40m8.261532254s ago: executing program 6 (id=2378): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, 0x0) 39m51.902865451s ago: executing program 42 (id=2378): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, 0x0) 37m33.247286342s ago: executing program 0 (id=2672): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4001"], 0x87) 37m28.402459106s ago: executing program 0 (id=2678): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0}) io_uring_setup(0x62d2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) setsockopt$inet_mtu(r5, 0x111, 0xa, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x2000008, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYBLOB="03f6ff588a0aff69643d", @ANYBLOB=',max_read=0x00000000320d53e']) 37m26.861090052s ago: executing program 0 (id=2683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000) 37m24.8135772s ago: executing program 0 (id=2685): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)) r2 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r1, 0x2) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001040), &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001300)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001500)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r2, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x0, 0x0, 0x1000, 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 37m24.073622959s ago: executing program 0 (id=2687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) 37m22.202581602s ago: executing program 0 (id=2689): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0x2, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc91d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x29b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 37m4.560582381s ago: executing program 43 (id=2689): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0x2, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc91d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x29b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 29m56.567050721s ago: executing program 9 (id=3515): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0}) io_uring_setup(0x62d2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) setsockopt$inet_mtu(r6, 0x111, 0xa, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r4, 0x0, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, 0x0, 0x0, 0x0) shutdown(r7, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x2000008, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYBLOB="03f6ff588a0aff69643d", @ANYBLOB=',max_read=0x00000000320d53e']) 29m54.746839159s ago: executing program 9 (id=3520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 29m53.825953409s ago: executing program 9 (id=3523): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) 29m52.29668237s ago: executing program 9 (id=3526): r0 = socket$inet6(0xa, 0x2, 0x8000) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x8}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x50) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10000001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000000c0)=0x28) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8c0c8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_off}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa70}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000080)=r7, 0x4) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x1, 0x400c405) 29m51.011919998s ago: executing program 9 (id=3529): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29m49.021488809s ago: executing program 9 (id=3532): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x5c, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x290}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1010, 0x3}, 0x30, 0x0) landlock_restrict_self(r4, 0x8) 29m31.929716619s ago: executing program 44 (id=3532): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x5c, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x290}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1010, 0x3}, 0x30, 0x0) landlock_restrict_self(r4, 0x8) 50.796507426s ago: executing program 2 (id=10945): syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r0], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x404c091) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 49.32339175s ago: executing program 2 (id=10950): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101a00, 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000200)=0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 46.744028598s ago: executing program 2 (id=10955): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 46.261272089s ago: executing program 4 (id=10956): syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r1], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 40.491314495s ago: executing program 4 (id=10963): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 39.058563101s ago: executing program 2 (id=10966): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=0x0], 0x1, 0x489, &(0x7f0000000580)="$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") chown(&(0x7f0000000500)='./file2\x00', 0x0, 0x0) 38.403707103s ago: executing program 2 (id=10969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 37.870898329s ago: executing program 4 (id=10971): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x346}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@euid_gt}, {@uid_eq}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f00000003c0)="976e", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) 37.428551053s ago: executing program 2 (id=10973): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-3 -4\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) 37.086739404s ago: executing program 4 (id=10976): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x3, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "050109"}}, 0x11b) 36.628510884s ago: executing program 4 (id=10977): recvmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000005480)=[{0x0}, {&(0x7f0000005240)=""/217, 0xd9}], 0x2}, 0x200}], 0x1, 0x40000062, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x4000051, 0x40002022, 0x0) 36.435169731s ago: executing program 4 (id=10978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0\n\x00', 0x2) 34.967421438s ago: executing program 7 (id=10983): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 34.470868222s ago: executing program 7 (id=10985): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e") 31.908963298s ago: executing program 7 (id=10991): unshare(0x22020400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 31.768557063s ago: executing program 7 (id=10993): syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904"], 0x0) 28.303079056s ago: executing program 7 (id=11003): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000440)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='fc', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f00000007c0)='nn-0x3333333333333333:pn-0x4444444444444444', 0x2b) symlinkat(&(0x7f0000000800)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 27.966862021s ago: executing program 7 (id=11004): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='10240\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='1\n', 0x2) 20.938352354s ago: executing program 45 (id=10973): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-3 -4\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) 19.936039507s ago: executing program 46 (id=10978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0\n\x00', 0x2) 12.41828867s ago: executing program 1 (id=11039): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './trace\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3c42, 0x0) read(r3, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 12.279121753s ago: executing program 8 (id=11041): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc00) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000200)=[{0x3, 0x10, 0x800}], 0x1) semget(0x3, 0x4, 0x39c) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r2, &(0x7f00000000c0)=[{0x1, 0xff80, 0x1400}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) 11.646672027s ago: executing program 8 (id=11044): recvmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000005480)=[{0x0}, {&(0x7f0000005240)=""/217, 0xd9}], 0x2}, 0x200}], 0x1, 0x40000062, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x4000051, 0x40002022, 0x0) 11.481834141s ago: executing program 47 (id=11004): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='10240\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='1\n', 0x2) 11.470130944s ago: executing program 1 (id=11046): sched_setscheduler(0x0, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) pipe2(0x0, 0x4800) 11.153303648s ago: executing program 1 (id=11047): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[], 0x0, 0x1b6, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000003080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) copy_file_range(r2, &(0x7f00000001c0), r1, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r1, 0xc) 10.919095343s ago: executing program 5 (id=11048): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write(r0, &(0x7f00000005c0)='transport=loop,nqn=testsubsys', 0x1d) close(r0) 10.337990716s ago: executing program 8 (id=11049): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 10.116530012s ago: executing program 1 (id=11050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) r3 = socket(0x2, 0x80805, 0x0) setns(0xffffffffffffffff, 0x64000000) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x84, 0x487, 0x0, 0x0) 6.472821176s ago: executing program 1 (id=11051): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./config\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f00000006c0)='1\n\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000740)='1\n\x00', 0x2) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write(r5, &(0x7f0000000980)='transport=loop,nqn=testsubsys', 0x1d) close(r5) close(0xffffffffffffffff) 6.294053138s ago: executing program 8 (id=11052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x73219}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 6.115190042s ago: executing program 5 (id=11053): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz1\x00', {0x0, 0xfffd, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xa, 0x0, 0x1, 0x0, 0x0, 0xf5b1, 0xd6, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xffffffff, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x3b, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0xa], [0x3, 0xfffff41a, 0xaed, 0x0, 0x4, 0x7, 0x2000000, 0xedc0, 0xfffffffc, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x500, 0xfffffffd, 0xfffffffd, 0x4, 0x5, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffffb86], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0xfffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x100000, 0x2, 0xfffffffc, 0x0, 0xffffffff, 0xfffffffd, 0x7f631ab5, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8c68, 0x6, 0x0, 0x9, 0x200, 0x0, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x2], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x40000, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x54c, 0xffffffff, 0x0, 0x0, 0xce1d, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xc4e, 0x0, 0xea, 0x0, 0xffffffff, 0x0, 0x8000000, 0x4, 0x7f, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) 5.896069319s ago: executing program 8 (id=11054): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x4, 0x5]}}}}, 0x1b) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x8, "315dcd4542a9"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e"], 0x1f0}}, 0x0) 5.385624679s ago: executing program 5 (id=11055): modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x0, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.08071071s ago: executing program 8 (id=11056): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, 0x0, 0x0) 4.796597108s ago: executing program 5 (id=11057): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3000000000000000370b46eacfc1aaaebcf156e549e884bcabc1333f344f31cc30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d08077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0xfe, 0x1d0, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 4.727223808s ago: executing program 1 (id=11058): syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r0 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="010426bd7000f8dbdf", @ANYRES32=r1], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x404c091) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800800000000000000000009500000000000000a2b8f700979c2eaa17eebf00e414733031428133ed708a07c78462ffb4491a0dcf252d567cc34b4b46a327614688b464daae0cb064e9ef6fbf5c50eaf904e88f40732846cbdd3502dcadce3299af151e877b07d2d41475d39d3c3e89842df301ac2557e7e8493b24bff640e782dc16497c5d6d4275a212c24ad217d5d29da3453ba9b06f84de681fd57b54bd891d9d5a284da2c5207820fd51153a98f12339c53b2a118921eb290843953d851ec092acd100"/209], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) unlinkat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) 4.639035025s ago: executing program 5 (id=11059): socket$inet6(0xa, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./sys\x00', 0x102) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) 0s ago: executing program 5 (id=11060): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$FUSE_INIT(r0, &(0x7f0000002800)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xc, 0x880, 0xbe, 0x9, 0xe, 0x5738, 0x0, 0x0, 0x20, 0x5}}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0199][T10557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3069.245870][T10557] 8021q: adding VLAN 0 to HW filter on device team0 [ 3069.268680][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3069.414981][T10557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3069.415002][T10557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3069.421784][T10557] veth1_vlan: left promiscuous mode [ 3069.461152][T10557] veth0_vlan: left promiscuous mode [ 3069.484375][T10557] veth0_vlan: entered promiscuous mode [ 3069.508112][T10557] veth1_vlan: entered promiscuous mode [ 3069.538356][T10557] veth1_macvtap: left promiscuous mode [ 3069.540683][T10557] veth0_macvtap: left promiscuous mode [ 3069.554460][T10557] veth0_macvtap: entered promiscuous mode [ 3069.556123][T10557] veth1_macvtap: entered promiscuous mode [ 3069.579158][T10557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3069.581571][T10557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3069.591630][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 3069.591781][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3069.620969][ T25] usb 6-1: USB disconnect, device number 38 [ 3069.648790][T10557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3069.658137][T10557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3069.669607][T10557] syz_tun: entered promiscuous mode [ 3069.813106][T10557] bond1: left promiscuous mode [ 3069.815259][T10557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3069.820134][T10557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3070.171013][T10575] netlink: 'syz.4.10478': attribute type 10 has an invalid length. [ 3070.199715][T10557] erspan0: entered promiscuous mode [ 3070.199733][T10557] erspan0: entered allmulticast mode [ 3070.199927][T10557] macvtap1: left promiscuous mode [ 3070.200112][T10557] macvtap1: left allmulticast mode [ 3070.200129][T10557] erspan0: left allmulticast mode [ 3070.326421][ T6376] lo speed is unknown, defaulting to 1000 [ 3070.389731][ T9072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3070.509340][ T6376] syz2: Port: 1 Link ACTIVE [ 3070.815274][T10581] netlink: 'syz.5.10480': attribute type 10 has an invalid length. [ 3072.146291][T27199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3072.192519][T27199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3072.205412][T27199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3072.218350][T27199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3072.219585][T27199] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3073.016511][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3073.022441][T10575] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 3073.212036][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3073.232212][T10581] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 3073.238560][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3073.238581][ C0] bridge0: topology change detected, propagating [ 3073.239015][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3073.239033][ C0] bridge0: topology change detected, propagating [ 3073.240622][ T4878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3073.240808][ T4878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3073.240851][ T4878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3074.248462][T10604] loop2: detected capacity change from 0 to 1024 [ 3074.482360][ T509] Bluetooth: hci2: command tx timeout [ 3074.663376][ T6372] net_ratelimit: 121 callbacks suppressed [ 3075.172951][T10609] loop4: detected capacity change from 0 to 1024 [ 3076.701096][ T509] Bluetooth: hci2: command tx timeout [ 3078.964880][ T509] Bluetooth: hci2: command tx timeout [ 3079.170425][T10636] lo speed is unknown, defaulting to 1000 [ 3079.704393][T10586] lo speed is unknown, defaulting to 1000 [ 3080.171912][T10645] loop1: detected capacity change from 0 to 131072 [ 3080.173584][T10645] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 3080.173613][T10645] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3080.174535][ T8998] net_ratelimit: 179 callbacks suppressed [ 3080.228590][T10645] F2FS-fs (loop1): invalid crc value [ 3080.337171][T10645] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3080.343300][T10645] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 3080.343326][T10645] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 3081.209968][ T509] Bluetooth: hci2: command tx timeout [ 3081.575463][ T3109] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 3081.890756][ T3109] usb 2-1: Using ep0 maxpacket: 32 [ 3081.896713][ T3109] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 3081.909844][ T3109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3081.909869][ T3109] usb 2-1: Product: syz [ 3081.909887][ T3109] usb 2-1: Manufacturer: syz [ 3081.909905][ T3109] usb 2-1: SerialNumber: syz [ 3081.930573][T10676] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3081.949235][ T3109] usb 2-1: config 0 descriptor?? [ 3081.961396][T10674] loop8: detected capacity change from 0 to 1024 [ 3082.305888][T10664] gre0: entered promiscuous mode [ 3082.305925][T10664] gre0: entered allmulticast mode [ 3082.630735][ T3109] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 3082.630766][ T3109] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 3083.156479][ T3109] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 3083.435009][ T3109] usb 2-1: USB disconnect, device number 69 [ 3084.972722][T10694] loop5: detected capacity change from 0 to 512 [ 3084.973868][T10694] EXT4-fs: Ignoring removed nobh option [ 3085.013788][T10694] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 3085.017621][T10694] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.10512: attempt to clear invalid blocks 1 len 1 [ 3085.017656][T10694] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3085.018185][T10694] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3085.018367][T10694] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10512: invalid indirect mapped block 1819239214 (level 0) [ 3085.018402][T10694] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3085.018797][T10694] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10512: invalid indirect mapped block 1819239214 (level 1) [ 3085.018834][T10694] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3085.020991][ C1] EXT4-fs (loop5): error count since last fsck: 4 [ 3085.021008][ C1] EXT4-fs (loop5): initial error at time 1789691026: ext4_clear_blocks:876: inode 13 [ 3085.021043][ C1] EXT4-fs (loop5): last error at time 1789691026: ext4_free_branches:1023: inode 13 [ 3085.026231][T10694] EXT4-fs (loop5): 1 truncate cleaned up [ 3085.078606][T10694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3085.197031][T10694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3085.527854][T10697] loop8: detected capacity change from 0 to 1024 [ 3085.713122][ C0] net_ratelimit: 61 callbacks suppressed [ 3087.564429][T10716] loop5: detected capacity change from 0 to 131072 [ 3087.580150][T10716] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 3087.580175][T10716] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3087.582592][T10716] F2FS-fs (loop5): invalid crc value [ 3087.659737][T10716] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3087.676025][T10716] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 3087.676050][T10716] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 3087.891425][T10702] syz_tun: left promiscuous mode [ 3088.376094][T10722] loop8: detected capacity change from 0 to 1024 [ 3090.278219][ T144] bridge_slave_1: left allmulticast mode [ 3090.278242][ T144] bridge_slave_1: left promiscuous mode [ 3090.278455][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 3090.314098][ T144] bridge_slave_0: left allmulticast mode [ 3090.314119][ T144] bridge_slave_0: left promiscuous mode [ 3090.314373][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 3090.415959][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10524'. [ 3090.468421][ T6376] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 3090.630902][ T6376] usb 9-1: Using ep0 maxpacket: 32 [ 3090.659474][ T6376] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 3090.676714][ T6376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.676732][ T6376] usb 9-1: Product: syz [ 3090.676745][ T6376] usb 9-1: Manufacturer: syz [ 3090.676758][ T6376] usb 9-1: SerialNumber: syz [ 3090.709870][ T6376] usb 9-1: config 0 descriptor?? [ 3090.718148][T10741] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3091.231956][ T7412] net_ratelimit: 117 callbacks suppressed [ 3093.166615][T10753] loop8: detected capacity change from 0 to 1024 [ 3093.186776][T10753] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3093.298419][T10753] JBD2: no valid journal superblock found [ 3093.323229][T10753] EXT4-fs (loop8): Could not load journal inode [ 3093.361542][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3093.407654][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3093.420836][ T144] bond0 (unregistering): Released all slaves [ 3094.435430][ T6376] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 3094.435451][ T6376] peak_usb 9-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 3094.696301][ T6376] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 3094.750217][ T6376] usb 9-1: USB disconnect, device number 54 [ 3094.804649][ T144] hsr_slave_0: left promiscuous mode [ 3094.931780][ T144] hsr_slave_1: left promiscuous mode [ 3094.963197][T10770] loop4: detected capacity change from 0 to 1024 [ 3094.985487][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3095.138939][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3095.670743][ T144] veth1_macvtap: left promiscuous mode [ 3095.670831][ T144] veth0_macvtap: left promiscuous mode [ 3095.672838][ T144] veth1_vlan: left promiscuous mode [ 3095.725513][ T144] veth0_vlan: left promiscuous mode [ 3097.064940][ C1] net_ratelimit: 50 callbacks suppressed [ 3097.181063][T10794] loop2: detected capacity change from 0 to 1024 [ 3098.272679][ T144] team0 (unregistering): Port device team_slave_1 removed [ 3098.338972][ T144] team0 (unregistering): Port device team_slave_0 removed [ 3099.122677][T10807] loop2: detected capacity change from 0 to 1024 [ 3099.984341][T10785] gre0: entered promiscuous mode [ 3099.984377][T10785] gre0: entered allmulticast mode [ 3100.896665][T10819] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3103.130837][ C1] net_ratelimit: 76 callbacks suppressed [ 3103.591902][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 3103.592076][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 3103.592264][T10586] bridge_slave_0: entered allmulticast mode [ 3103.594647][T10586] bridge_slave_0: entered promiscuous mode [ 3103.600311][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 3103.600424][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 3103.600592][T10586] bridge_slave_1: entered allmulticast mode [ 3103.602795][T10586] bridge_slave_1: entered promiscuous mode [ 3103.801965][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3103.840737][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3104.400281][T10835] loop2: detected capacity change from 0 to 32768 [ 3104.623453][T10835] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3104.710107][T10834] loop4: detected capacity change from 0 to 1024 [ 3104.953600][T10586] team0: Port device team_slave_0 added [ 3105.192014][T10835] XFS (loop2): Ending clean mount [ 3105.213094][T10835] XFS (loop2): Quotacheck needed: Please wait. [ 3105.583798][T10586] team0: Port device team_slave_1 added [ 3105.990821][ T25] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 3106.065132][T10835] XFS (loop2): Quotacheck: Done. [ 3106.252888][ T25] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 3106.254498][ T25] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 3106.254523][ T25] usb 2-1: config 1 has no interface number 0 [ 3106.257127][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3106.257157][ T25] usb 2-1: Product: syz [ 3106.257174][ T25] usb 2-1: Manufacturer: syz [ 3106.257191][ T25] usb 2-1: SerialNumber: syz [ 3106.270436][ T25] usb 2-1: skipping empty audio interface (v1) [ 3106.465016][ T5972] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3106.513716][ T509] Bluetooth: hci5: unexpected cc 0x206e length: 9 > 3 [ 3106.513773][ T509] Bluetooth: hci5: unexpected event for opcode 0x206e [ 3106.544263][ T25] snd-usb-audio 2-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 3106.554477][ T6376] usb 2-1: USB disconnect, device number 70 [ 3106.678849][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3106.787725][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3106.787757][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3106.787787][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3106.831064][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3106.831077][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3106.831108][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3107.338195][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10555'. [ 3107.724040][ C0] ipvlan_process_outbound: 3 callbacks suppressed [ 3107.791201][T10873] loop4: detected capacity change from 0 to 1024 [ 3107.839615][T10586] hsr_slave_0: entered promiscuous mode [ 3107.938724][T10586] hsr_slave_1: entered promiscuous mode [ 3108.402287][T10883] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3108.590299][ C0] net_ratelimit: 64 callbacks suppressed [ 3112.320649][ T5856] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 3112.489773][ T5856] usb 9-1: Using ep0 maxpacket: 32 [ 3112.490701][ T5856] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 3112.528706][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3112.528731][ T5856] usb 9-1: Product: syz [ 3112.528750][ T5856] usb 9-1: Manufacturer: syz [ 3112.528768][ T5856] usb 9-1: SerialNumber: syz [ 3112.658081][ T5856] usb 9-1: config 0 descriptor?? [ 3113.008745][ T5856] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 3113.008775][ T5856] peak_usb 9-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 3113.039948][T10915] fuse: Bad value for 'fd' [ 3113.209073][ T5856] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 3113.237317][ T5856] usb 9-1: USB disconnect, device number 55 [ 3113.325121][ T6376] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 3113.503045][ T6376] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3113.508110][ T6376] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3113.508191][ T6376] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 3113.517425][ T6376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3113.517449][ T6376] usb 2-1: Product: syz [ 3113.517467][ T6376] usb 2-1: Manufacturer: syz [ 3113.517484][ T6376] usb 2-1: SerialNumber: syz [ 3113.670067][ T6376] usb 2-1: selecting invalid altsetting 1 [ 3113.955984][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3113.973911][T10928] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3114.438225][T10932] loop8: detected capacity change from 0 to 32768 [ 3114.476202][T10932] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3114.556151][T10932] XFS (loop8): Ending clean mount [ 3114.570252][T10932] XFS (loop8): Quotacheck needed: Please wait. [ 3114.635793][T10915] net_ratelimit: 45 callbacks suppressed [ 3114.704713][ T25] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 3114.714623][ T25] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3114.806216][T10932] XFS (loop8): Quotacheck: Done. [ 3116.330078][T10963] loop5: detected capacity change from 0 to 8 [ 3116.342155][T10963] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 3116.465892][T10963] syz.5.10576 (10963): drop_caches: 2 [ 3116.732776][ T6401] udevd[6401]: incorrect cramfs checksum on /dev/loop5 [ 3117.221569][ T6401] udevd[6401]: incorrect cramfs checksum on /dev/loop5 [ 3117.569208][ T6376] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 3117.577565][ T6376] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 3117.596406][ T6376] usb 2-1: selecting invalid altsetting 1 [ 3117.596490][ T6376] cdc_ncm 2-1:1.0: bind() failure [ 3117.631394][ T6376] usb 2-1: USB disconnect, device number 71 [ 3118.091230][T10586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3118.161462][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3118.162449][T10586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3118.204480][ T5427] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3118.369308][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3118.390621][T10586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3118.546764][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3118.549850][T10586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3118.742877][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3119.639895][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3119.694314][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 3119.735208][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 3119.735316][ T8077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3119.772341][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 3119.772449][ T8077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3120.063646][T31948] net_ratelimit: 72 callbacks suppressed [ 3120.123242][T10996] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3120.421937][ T25] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 3120.778052][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 3120.779089][ T25] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 3120.794298][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3120.794322][ T25] usb 2-1: Product: syz [ 3120.794340][ T25] usb 2-1: Manufacturer: syz [ 3120.794358][ T25] usb 2-1: SerialNumber: syz [ 3120.806849][ T25] usb 2-1: config 0 descriptor?? [ 3121.058342][ T25] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 3121.058373][ T25] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 3121.256105][ T25] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 3121.303185][ T25] usb 2-1: USB disconnect, device number 72 [ 3121.853564][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3122.048435][T11030] loop4: detected capacity change from 0 to 4096 [ 3122.064532][T11030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3122.064553][T11030] EXT4-fs (loop4): Test dummy encryption mode enabled [ 3122.104937][T11030] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 3122.105066][T11030] System zones: 0-5 [ 3122.139413][T11030] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.10590: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 3122.139466][T11030] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 3122.140728][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 3122.140751][ C1] EXT4-fs (loop4): initial error at time 1789691060: ext4_ext_check_inode:521: inode 4 [ 3122.140787][ C1] EXT4-fs (loop4): last error at time 1789691060: ext4_ext_check_inode:521: inode 4 [ 3122.143236][T11030] EXT4-fs (loop4): Remounting filesystem read-only [ 3122.143310][T11030] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 3122.143771][T11030] EXT4-fs (loop4): mount failed [ 3124.602884][T11071] loop2: detected capacity change from 0 to 1024 [ 3125.492909][T10586] veth0_vlan: entered promiscuous mode [ 3125.574480][ C1] net_ratelimit: 54 callbacks suppressed [ 3125.584664][T11076] loop1: detected capacity change from 0 to 8 [ 3125.603598][T11076] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 3126.180198][T10586] veth1_vlan: entered promiscuous mode [ 3126.721410][ T6401] udevd[6401]: incorrect cramfs checksum on /dev/loop1 [ 3126.753219][T11077] siw: device registration error -23 [ 3126.899185][T10586] veth0_macvtap: entered promiscuous mode [ 3126.921105][T28198] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 3126.971015][T10586] veth1_macvtap: entered promiscuous mode [ 3127.243896][T11088] loop1: detected capacity change from 0 to 512 [ 3127.244841][T11088] EXT4-fs: Ignoring removed nobh option [ 3127.256791][T28198] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3127.256840][T28198] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 3127.258228][T28198] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3127.258252][T28198] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3127.261872][T28198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3127.261896][T28198] usb 9-1: Product: syz [ 3127.261913][T28198] usb 9-1: Manufacturer: syz [ 3127.261932][T28198] usb 9-1: SerialNumber: syz [ 3127.275132][T28198] usb 9-1: selecting invalid altsetting 1 [ 3127.275963][T28198] usb 9-1: unit 6 not found! [ 3127.375195][T11088] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 3127.376243][T11088] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.10605: attempt to clear invalid blocks 1 len 1 [ 3127.376279][T11088] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3127.377664][T11088] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3127.377819][T11088] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.10605: invalid indirect mapped block 1819239214 (level 0) [ 3127.377855][T11088] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3127.378251][T11088] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.10605: invalid indirect mapped block 1819239214 (level 1) [ 3127.378288][T11088] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3127.379932][T11088] EXT4-fs (loop1): 1 truncate cleaned up [ 3127.382065][T11088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3127.386702][T11088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3127.455463][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3127.515513][T28198] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3127.526482][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3127.608638][ T144] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3127.609659][ T144] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3127.609703][ T144] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3127.609744][ T144] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3127.793652][ T6232] udevd[6232]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3127.949690][T11099] loop4: detected capacity change from 0 to 4096 [ 3127.958856][T11099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3127.958878][T11099] EXT4-fs (loop4): Test dummy encryption mode enabled [ 3127.985646][T13871] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3127.996807][T11099] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 3127.996939][T11099] System zones: 0-5 [ 3127.998126][T11099] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.10606: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 3127.998175][T11099] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 3127.999585][T11099] EXT4-fs (loop4): Remounting filesystem read-only [ 3128.000438][T11099] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 3128.001681][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 3128.001703][ C1] EXT4-fs (loop4): initial error at time 1789691066: ext4_ext_check_inode:521: inode 4 [ 3128.001740][ C1] EXT4-fs (loop4): last error at time 1789691066: ext4_ext_check_inode:521: inode 4 [ 3128.002164][T11099] EXT4-fs (loop4): mount failed [ 3128.359811][T13871] usb 3-1: Using ep0 maxpacket: 16 [ 3128.431036][T13871] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3128.485664][T13871] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 3128.485717][T13871] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3128.485763][T13871] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3128.762719][T13871] usb 3-1: string descriptor 0 read error: -22 [ 3128.763593][T13871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.828040][T11091] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3129.689414][T13871] usb 3-1: USB disconnect, device number 52 [ 3129.744836][ T31] audit: type=1326 audit(1789691067.739:9569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.2.10604" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c0999e159 code=0x0 [ 3130.062072][T11118] loop1: detected capacity change from 0 to 164 [ 3130.249025][ T5856] usb 9-1: USB disconnect, device number 56 [ 3130.591570][ T3283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3130.591589][ T3283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3130.982429][T11129] loop8: detected capacity change from 0 to 1024 [ 3131.033824][ C1] net_ratelimit: 277 callbacks suppressed [ 3132.147372][ T3334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3132.147393][ T3334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3132.580572][T11138] loop4: detected capacity change from 0 to 1024 [ 3132.630771][T11138] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3132.648945][T11138] JBD2: no valid journal superblock found [ 3132.666750][T11138] EXT4-fs (loop4): Could not load journal inode [ 3133.062456][T11142] siw: device registration error -23 [ 3133.576398][T11143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3133.767356][T11165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10624'. [ 3134.052801][T11170] loop2: detected capacity change from 0 to 1024 [ 3134.074702][T11170] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3134.088030][T11170] JBD2: no valid journal superblock found [ 3134.105534][T11170] EXT4-fs (loop2): Could not load journal inode [ 3134.277195][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 3134.277281][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 3134.816637][T11177] loop1: detected capacity change from 0 to 32768 [ 3134.850475][T11181] loop7: detected capacity change from 0 to 1024 [ 3134.855771][T11177] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3134.858034][T11181] EXT4-fs: Ignoring removed bh option [ 3134.931947][T11181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3134.960971][T11177] XFS (loop1): Ending clean mount [ 3134.965620][T11177] XFS (loop1): Quotacheck needed: Please wait. [ 3135.153631][T11177] XFS (loop1): Quotacheck: Done. [ 3135.910908][T11199] loop4: detected capacity change from 0 to 1024 [ 3136.220460][T11204] siw: device registration error -23 [ 3136.493017][ C1] net_ratelimit: 121 callbacks suppressed [ 3137.224673][T31674] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3137.319747][T10586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3137.804858][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10638'. [ 3138.233120][T11213] loop4: detected capacity change from 0 to 32768 [ 3138.305568][T11213] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3138.321699][T11218] loop1: detected capacity change from 0 to 1024 [ 3138.333956][T11218] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3138.340827][T11218] JBD2: no valid journal superblock found [ 3138.355410][T11218] EXT4-fs (loop1): Could not load journal inode [ 3138.426065][T11213] XFS (loop4): Ending clean mount [ 3138.439311][T11213] XFS (loop4): Quotacheck needed: Please wait. [ 3138.840521][T11229] loop2: detected capacity change from 0 to 512 [ 3138.841591][T11229] EXT4-fs: Ignoring removed nobh option [ 3138.954547][T11229] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 3138.956382][T11229] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.10642: attempt to clear invalid blocks 1 len 1 [ 3138.956414][T11229] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3138.957388][T11229] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3138.957532][T11229] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.10642: invalid indirect mapped block 1819239214 (level 0) [ 3138.957565][T11229] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3138.958411][T11229] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.10642: invalid indirect mapped block 1819239214 (level 1) [ 3138.958447][T11229] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3138.962645][ C0] EXT4-fs (loop2): error count since last fsck: 4 [ 3138.962668][ C0] EXT4-fs (loop2): initial error at time 1789691076: ext4_clear_blocks:876: inode 13 [ 3138.962704][ C0] EXT4-fs (loop2): last error at time 1789691076: ext4_free_branches:1023: inode 13 [ 3138.962926][T11229] EXT4-fs (loop2): 1 truncate cleaned up [ 3138.964956][T11229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3139.035165][T11229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3139.036809][T11213] XFS (loop4): Quotacheck: Done. [ 3139.457521][ T7097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3140.757643][T11235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.637807][T11256] FAULT_INJECTION: forcing a failure. [ 3141.637807][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 3141.637845][T11256] CPU: 1 UID: 0 PID: 11256 Comm: syz.2.10649 Tainted: G L syzkaller #0 PREEMPT(full) [ 3141.637880][T11256] Tainted: [L]=SOFTLOCKUP [ 3141.637891][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 3141.637907][T11256] Call Trace: [ 3141.637918][T11256] [ 3141.637930][T11256] dump_stack_lvl+0xe8/0x150 [ 3141.637974][T11256] should_fail_ex+0x410/0x560 [ 3141.638016][T11256] should_failslab+0xa8/0x100 [ 3141.638052][T11256] ? mas_alloc_nodes+0x291/0x350 [ 3141.638082][T11256] kmem_cache_alloc_noprof+0xa1/0x600 [ 3141.638128][T11256] ? mas_alloc_nodes+0x291/0x350 [ 3141.638168][T11256] mas_alloc_nodes+0x291/0x350 [ 3141.638203][T11256] mas_preallocate+0x42a/0x840 [ 3141.638231][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.638263][T11256] ? rcu_is_watching+0x16/0xb0 [ 3141.638297][T11256] ? trace_kmem_cache_alloc+0x29/0xe0 [ 3141.638338][T11256] ? __pfx_mas_preallocate+0x10/0x10 [ 3141.638383][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.638414][T11256] ? __mas_set_range+0x11a/0x3a0 [ 3141.638454][T11256] __split_vma+0x2fb/0xa60 [ 3141.638493][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.638524][T11256] ? mas_next_slot+0xc91/0xd70 [ 3141.638558][T11256] ? __pfx___split_vma+0x10/0x10 [ 3141.638607][T11256] ? mas_find+0x6d6/0xcb0 [ 3141.638643][T11256] vms_gather_munmap_vmas+0x4e3/0x1370 [ 3141.638695][T11256] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 3141.638740][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.638771][T11256] ? mas_walk+0x37e/0x490 [ 3141.638810][T11256] mmap_region+0x928/0x2270 [ 3141.638841][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.638891][T11256] ? __pfx_mmap_region+0x10/0x10 [ 3141.638937][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.638974][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639005][T11256] ? lock_acquire+0x115/0x350 [ 3141.639045][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639078][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639162][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639193][T11256] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 3141.639246][T11256] ? preempt_schedule_thunk+0x16/0x40 [ 3141.639280][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639311][T11256] ? mm_get_unmapped_area+0xd3/0x100 [ 3141.639354][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639385][T11256] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 3141.639421][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639451][T11256] ? cap_mmap_addr+0xaf/0x100 [ 3141.639480][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639511][T11256] ? security_mmap_addr+0x71/0x240 [ 3141.639539][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639580][T11256] do_mmap+0xe0a/0x1300 [ 3141.639626][T11256] ? __pfx_do_mmap+0x10/0x10 [ 3141.639658][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639695][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639741][T11256] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 3141.639769][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639800][T11256] ? down_write_killable+0x17e/0x240 [ 3141.639840][T11256] ? __pfx_down_write_killable+0x10/0x10 [ 3141.639876][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.639906][T11256] ? apparmor_mmap_file+0xbe/0xe0 [ 3141.639939][T11256] vm_mmap_pgoff+0x272/0x4e0 [ 3141.639972][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.640010][T11256] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3141.640044][T11256] ? rcu_is_watching+0x16/0xb0 [ 3141.640081][T11256] ? ksys_mmap_pgoff+0xf3/0x760 [ 3141.640116][T11256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3141.640147][T11256] ? __x64_sys_mmap+0x7f/0x140 [ 3141.640179][T11256] do_syscall_64+0x166/0x520 [ 3141.640209][T11256] ? trace_irq_disable+0x3b/0x140 [ 3141.640236][T11256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3141.640270][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3141.640297][T11256] RIP: 0033:0x7f9c0999e159 [ 3141.640320][T11256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3141.640343][T11256] RSP: 002b:00007f9c0a8a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3141.640370][T11256] RAX: ffffffffffffffda RBX: 00007f9c09c25fa0 RCX: 00007f9c0999e159 [ 3141.640391][T11256] RDX: 000000000200000f RSI: 0000000000000039 RDI: 000000110c230000 [ 3141.640409][T11256] RBP: 00007f9c09a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 3141.640428][T11256] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 3141.640445][T11256] R13: 00007f9c09c26038 R14: 00007f9c09c25fa0 R15: 00007ffffe1fd658 [ 3141.640486][T11256] [ 3141.926059][T10981] net_ratelimit: 208 callbacks suppressed [ 3142.170299][T11261] siw: device registration error -23 [ 3142.448558][T11262] loop7: detected capacity change from 0 to 4096 [ 3142.458786][T11262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3142.458806][T11262] EXT4-fs (loop7): Test dummy encryption mode enabled [ 3142.461409][T11262] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 3142.461543][T11262] System zones: 0-5 [ 3142.462789][T11262] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.10651: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 3142.462835][T11262] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 3142.463239][T11262] EXT4-fs (loop7): Remounting filesystem read-only [ 3142.463311][T11262] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 3142.463764][T11262] EXT4-fs (loop7): mount failed [ 3142.566600][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10652'. [ 3142.990226][T11271] loop5: detected capacity change from 0 to 512 [ 3142.991069][T11271] EXT4-fs: Ignoring removed nobh option [ 3143.145318][T11280] loop7: detected capacity change from 0 to 8 [ 3143.167272][T11280] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 3143.248703][T11271] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 3143.268193][T11271] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.10653: attempt to clear invalid blocks 1 len 1 [ 3143.268234][T11271] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3143.273748][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 3143.273779][ C0] EXT4-fs (loop5): initial error at time 1789691080: ext4_clear_blocks:876: inode 13 [ 3143.273817][ C0] EXT4-fs (loop5): last error at time 1789691080: ext4_clear_blocks:876: inode 13 [ 3143.342090][T11280] syz.7.10654 (11280): drop_caches: 2 [ 3143.382714][T11271] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3143.382876][T11271] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10653: invalid indirect mapped block 1819239214 (level 0) [ 3143.382903][T11271] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3143.400676][T11271] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10653: invalid indirect mapped block 1819239214 (level 1) [ 3143.400714][T11271] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3143.431976][T11271] EXT4-fs (loop5): 1 truncate cleaned up [ 3143.433771][T11271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3143.459422][T11271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3143.931376][ T6232] udevd[6232]: incorrect cramfs checksum on /dev/loop7 [ 3144.254718][T11286] loop5: detected capacity change from 0 to 1024 [ 3144.278736][T11286] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3144.284931][T11286] JBD2: no valid journal superblock found [ 3144.308856][T11286] EXT4-fs (loop5): Could not load journal inode [ 3147.411564][ C0] net_ratelimit: 78 callbacks suppressed [ 3148.705033][T11306] loop4: detected capacity change from 0 to 131072 [ 3148.709141][T11306] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 3148.709165][T11306] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3148.713965][T11306] F2FS-fs (loop4): invalid crc value [ 3148.796244][T11306] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3148.800520][T11306] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 3148.800545][T11306] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 3149.069735][T11308] siw: device registration error -23 [ 3149.697222][T13871] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 3149.777112][T11324] loop5: detected capacity change from 0 to 1024 [ 3149.808433][T11324] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3149.812835][T11324] JBD2: no valid journal superblock found [ 3149.859828][T13871] usb 9-1: Using ep0 maxpacket: 32 [ 3149.932787][T11324] EXT4-fs (loop5): Could not load journal inode [ 3150.318288][T13871] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3150.353639][T13871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3150.353669][T13871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3150.353731][T13871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.485963][T11325] loop2: detected capacity change from 0 to 8 [ 3150.500146][T11325] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 3150.600556][T11328] loop1: detected capacity change from 0 to 1024 [ 3150.633080][T11328] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3150.664769][ T6232] udevd[6232]: incorrect cramfs checksum on /dev/loop2 [ 3150.668686][T11328] JBD2: no valid journal superblock found [ 3150.958458][T11325] syz.2.10670 (11325): drop_caches: 2 [ 3151.041388][T11328] EXT4-fs (loop1): Could not load journal inode [ 3151.246188][T13871] usb 9-1: config 0 descriptor?? [ 3151.775921][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10675'. [ 3151.815432][T13871] usbhid 9-1:0.0: can't add hid device: -71 [ 3151.815582][T13871] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 3151.838685][T13871] usb 9-1: USB disconnect, device number 57 [ 3152.212245][T11341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10668'. [ 3152.566192][T11343] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10677'. [ 3152.566214][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10677'. [ 3153.217531][ C0] net_ratelimit: 70 callbacks suppressed [ 3153.368339][T11343] geneve0: entered allmulticast mode [ 3154.167431][T11358] siw: device registration error -23 [ 3154.323829][T11352] loop2: detected capacity change from 0 to 32768 [ 3154.497006][T11352] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3154.526783][T11354] lo speed is unknown, defaulting to 1000 [ 3154.995803][T11352] XFS (loop2): Ending clean mount [ 3155.012973][T11352] XFS (loop2): Quotacheck needed: Please wait. [ 3155.458910][T11376] se_dev->se_dev_ptr already set for storage object [ 3155.636384][T11352] XFS (loop2): Quotacheck: Done. [ 3156.032852][ T5972] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3156.128941][T11387] loop5: detected capacity change from 0 to 8 [ 3156.149489][T11387] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 3156.217473][T11387] syz.5.10687 (11387): drop_caches: 2 [ 3156.724467][ T6232] udevd[6232]: incorrect cramfs checksum on /dev/loop5 [ 3157.300499][T11393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10689'. [ 3158.606007][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10693'. [ 3158.676754][ C0] net_ratelimit: 120 callbacks suppressed [ 3158.944462][T11394] lo speed is unknown, defaulting to 1000 [ 3159.063157][T11410] loop4: detected capacity change from 0 to 1024 [ 3159.124215][T11410] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3159.145812][T11410] JBD2: no valid journal superblock found [ 3159.190779][T11410] EXT4-fs (loop4): Could not load journal inode [ 3160.246109][T11418] siw: device registration error -23 [ 3162.027447][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10702'. [ 3162.028570][T11434] fuse: Bad value for 'fd' [ 3162.126037][T11437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10702'. [ 3162.318188][ T6376] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3163.213243][T11445] loop5: detected capacity change from 0 to 131072 [ 3163.215605][T11445] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 3163.215628][T11445] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3163.216406][T11445] F2FS-fs (loop5): invalid crc value [ 3163.237831][ T6376] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3163.240629][ T6376] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3163.240710][ T6376] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 3163.243662][ T6376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3163.243686][ T6376] usb 5-1: Product: syz [ 3163.243703][ T6376] usb 5-1: Manufacturer: syz [ 3163.243721][ T6376] usb 5-1: SerialNumber: syz [ 3163.374962][T11445] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3163.379853][T11445] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 3163.379876][T11445] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 3163.460590][ T6376] usb 5-1: selecting invalid altsetting 1 [ 3163.561715][T11444] gre0: left promiscuous mode [ 3163.561734][T11444] gre0: left allmulticast mode [ 3163.589206][T11444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3163.591360][T11444] 8021q: adding VLAN 0 to HW filter on device team0 [ 3163.597906][T11444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3164.031182][T11444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3164.033878][T11444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3164.040642][T11444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3164.040661][T11444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3164.047000][T11444] veth1_vlan: left promiscuous mode [ 3164.048389][T11444] veth0_vlan: left promiscuous mode [ 3164.050586][T11444] veth0_vlan: entered promiscuous mode [ 3164.053359][T11444] veth1_vlan: entered promiscuous mode [ 3164.059422][T11444] veth1_macvtap: left promiscuous mode [ 3164.060889][T11444] veth0_macvtap: left promiscuous mode [ 3164.062235][T11444] veth0_macvtap: entered promiscuous mode [ 3164.063632][T11444] veth1_macvtap: entered promiscuous mode [ 3164.070381][T11444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3164.072276][T11444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3164.073759][T11444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3164.075306][T11444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3164.080758][T11444] erspan0: entered promiscuous mode [ 3164.080781][T11444] erspan0: entered allmulticast mode [ 3164.080964][T11444] macvtap1: left promiscuous mode [ 3164.081097][T11444] macvtap1: left allmulticast mode [ 3164.081110][T11444] erspan0: left allmulticast mode [ 3164.123589][ T25] net_ratelimit: 116 callbacks suppressed [ 3164.844062][ T5633] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 3164.883891][ T5633] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3165.092711][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10709'. [ 3167.635243][T11478] loop7: detected capacity change from 0 to 131072 [ 3167.704526][T11478] F2FS-fs (loop7): Invalid log sectorsize (67108873) [ 3167.704595][T11478] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3167.706897][T11478] F2FS-fs (loop7): invalid crc value [ 3167.859059][T11481] loop1: detected capacity change from 0 to 1024 [ 3167.963281][T11478] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3167.994625][T11478] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30 [ 3167.994646][T11478] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 3169.586844][T11486] loop1: detected capacity change from 0 to 1024 [ 3169.618064][T11486] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3169.641111][T11486] JBD2: no valid journal superblock found [ 3169.641355][T11486] EXT4-fs (loop1): Could not load journal inode [ 3169.855237][ C1] net_ratelimit: 92 callbacks suppressed [ 3169.873007][ T6376] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 3169.874602][ T6376] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 3169.896017][ T6376] usb 5-1: selecting invalid altsetting 1 [ 3169.896108][ T6376] cdc_ncm 5-1:1.0: bind() failure [ 3170.142968][T11489] loop1: detected capacity change from 0 to 512 [ 3170.234073][T11489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3170.234151][T11489] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3170.378848][T11492] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 3170.673921][T31674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3171.427167][T11498] FAULT_INJECTION: forcing a failure. [ 3171.427167][T11498] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.427212][T11498] CPU: 0 UID: 0 PID: 11498 Comm: syz.1.10719 Tainted: G L syzkaller #0 PREEMPT(full) [ 3171.427248][T11498] Tainted: [L]=SOFTLOCKUP [ 3171.427258][T11498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 3171.427284][T11498] Call Trace: [ 3171.427294][T11498] [ 3171.427306][T11498] dump_stack_lvl+0xe8/0x150 [ 3171.427351][T11498] should_fail_ex+0x410/0x560 [ 3171.427388][T11498] should_failslab+0xa8/0x100 [ 3171.427425][T11498] __kmalloc_cache_noprof+0xa3/0x600 [ 3171.427455][T11498] ? __kmalloc_noprof+0x1ab/0x720 [ 3171.427479][T11498] ? __alloc_workqueue+0x169/0x1fe0 [ 3171.427505][T11498] ? __alloc_workqueue+0x169/0x1fe0 [ 3171.427541][T11498] __alloc_workqueue+0x169/0x1fe0 [ 3171.427572][T11498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3171.427603][T11498] ? vsnprintf+0xe42/0xef0 [ 3171.427657][T11498] alloc_workqueue_noprof+0xe3/0x210 [ 3171.427693][T11498] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 3171.427722][T11498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3171.427753][T11498] ? do_raw_spin_unlock+0xf5/0x200 [ 3171.427794][T11498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3171.427825][T11498] ? _raw_spin_unlock+0x28/0x50 [ 3171.427855][T11498] dm_create+0xb8d/0xf70 [ 3171.427901][T11498] dev_create+0x1f7/0x400 [ 3171.427936][T11498] ? __pfx_dev_create+0x10/0x10 [ 3171.427979][T11498] dm_ctl_ioctl+0x9ec/0xe10 [ 3171.428021][T11498] ? __pfx_dev_create+0x10/0x10 [ 3171.428051][T11498] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 3171.428117][T11498] ? __fget_files+0x2a/0x420 [ 3171.428158][T11498] ? __fget_files+0x3a2/0x420 [ 3171.428194][T11498] ? __fget_files+0x2a/0x420 [ 3171.428235][T11498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3171.428266][T11498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3171.428307][T11498] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 3171.428339][T11498] __se_sys_ioctl+0xfc/0x170 [ 3171.428370][T11498] do_syscall_64+0x166/0x520 [ 3171.428402][T11498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3171.428437][T11498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3171.428463][T11498] RIP: 0033:0x7f88cdd9e159 [ 3171.428487][T11498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3171.428510][T11498] RSP: 002b:00007f88cecb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3171.428538][T11498] RAX: ffffffffffffffda RBX: 00007f88ce025fa0 RCX: 00007f88cdd9e159 [ 3171.428558][T11498] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 3171.428576][T11498] RBP: 00007f88cde3506b R08: 0000000000000000 R09: 0000000000000000 [ 3171.428595][T11498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3171.428612][T11498] R13: 00007f88ce026038 R14: 00007f88ce025fa0 R15: 00007fff36119ad8 [ 3171.428653][T11498] [ 3172.526565][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 3172.526644][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3172.550549][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 3172.550650][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3172.613266][T11469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10707'. [ 3172.791035][T29735] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3172.845561][ T3356] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3172.863659][ T3356] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3172.863715][ T3356] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3172.958848][ T5856] usb 5-1: USB disconnect, device number 33 [ 3173.124351][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10722'. [ 3173.217815][T11515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10722'. [ 3173.415388][T11516] siw: device registration error -23 [ 3173.818991][T11525] loop4: detected capacity change from 0 to 1024 [ 3173.842476][T11525] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3173.846289][T11525] JBD2: no valid journal superblock found [ 3173.850433][T11525] EXT4-fs (loop4): Could not load journal inode [ 3173.993291][ T6376] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 3174.177683][ T6376] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3174.177745][ T6376] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 3174.182369][ T6376] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3174.182390][ T6376] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3174.217945][ T6376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3174.217969][ T6376] usb 9-1: Product: syz [ 3174.217987][ T6376] usb 9-1: Manufacturer: syz [ 3174.218005][ T6376] usb 9-1: SerialNumber: syz [ 3174.277109][ T6376] usb 9-1: selecting invalid altsetting 1 [ 3174.279651][ T6376] usb 9-1: unit 6 not found! [ 3174.488337][T11529] loop1: detected capacity change from 0 to 1024 [ 3175.295933][T31951] net_ratelimit: 137 callbacks suppressed [ 3175.465761][ T6376] usb 9-1: 2:0: cannot get min/max values for control 1 (id 2) [ 3175.714701][ T6376] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3175.889308][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3177.460614][T11542] loop2: detected capacity change from 0 to 1024 [ 3178.363318][T13268] usb 9-1: USB disconnect, device number 58 [ 3179.136721][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10735'. [ 3179.455040][T11557] loop1: detected capacity change from 0 to 1024 [ 3180.588413][T11560] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10736'. [ 3180.733840][ T5843] net_ratelimit: 134 callbacks suppressed [ 3183.129632][T11576] siw: device registration error -23 [ 3184.011515][T11566] gre0: left promiscuous mode [ 3184.011533][T11566] gre0: left allmulticast mode [ 3184.661268][T11583] loop4: detected capacity change from 0 to 32768 [ 3184.715510][T11583] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3184.760985][T11583] XFS (loop4): Ending clean mount [ 3184.764462][T11583] XFS (loop4): Quotacheck needed: Please wait. [ 3185.245786][T11583] XFS (loop4): Quotacheck: Done. [ 3185.657413][ T7097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3186.233718][ C1] net_ratelimit: 263 callbacks suppressed [ 3187.160951][T11617] loop8: detected capacity change from 0 to 512 [ 3187.223277][T11617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3187.223448][T11617] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3187.965272][ T5427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3188.138747][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10756'. [ 3190.087286][T11639] loop4: detected capacity change from 0 to 1024 [ 3190.134439][T11639] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3190.147985][T11639] JBD2: no valid journal superblock found [ 3190.176473][T11639] EXT4-fs (loop4): Could not load journal inode [ 3191.952295][ C1] net_ratelimit: 112 callbacks suppressed [ 3192.720419][T11666] loop2: detected capacity change from 0 to 1024 [ 3192.954128][ T5633] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 3193.143798][ T5633] usb 6-1: Using ep0 maxpacket: 16 [ 3193.144760][ T5633] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3193.264497][ T5633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3193.264528][ T5633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3193.264554][ T5633] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3193.264622][ T5633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3193.814453][ T5633] usb 6-1: config 0 descriptor?? [ 3194.385337][T11674] Bluetooth: MGMT ver 1.23 [ 3194.451258][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10774'. [ 3194.534080][ T5633] usbhid 6-1:0.0: can't add hid device: -71 [ 3194.534192][ T5633] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3194.547606][ T5633] usb 6-1: USB disconnect, device number 39 [ 3194.660740][ T9962] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3194.751502][T11684] loop1: detected capacity change from 0 to 164 [ 3194.964425][ T9962] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 3194.966033][ T9962] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 3194.966135][ T9962] usb 3-1: config 1 has no interface number 0 [ 3194.969378][ T9962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3194.969402][ T9962] usb 3-1: Product: syz [ 3194.969419][ T9962] usb 3-1: Manufacturer: syz [ 3194.969437][ T9962] usb 3-1: SerialNumber: syz [ 3194.979635][ T9962] usb 3-1: 3:0 : does not exist [ 3194.979654][ T9962] usb 3-1: 3:0 : does not exist [ 3195.566904][ T9962] usb 3-1: USB disconnect, device number 53 [ 3195.733328][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3196.646603][ T509] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 3196.647835][ T509] Bluetooth: hci2: command 0x0401 tx timeout [ 3196.958438][T11715] loop4: detected capacity change from 0 to 1024 [ 3196.963711][T11715] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3196.966471][T11715] JBD2: no valid journal superblock found [ 3197.001163][T11715] EXT4-fs (loop4): Could not load journal inode [ 3197.578675][ T5840] net_ratelimit: 85 callbacks suppressed [ 3197.832992][T11724] loop1: detected capacity change from 0 to 1024 [ 3197.961887][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10792'. [ 3197.994979][T11730] fuse: Bad value for 'fd' [ 3198.375659][ T5856] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 3198.787312][ T5856] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3198.806008][ T5856] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3198.806091][ T5856] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 3198.884957][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3198.884981][ T5856] usb 6-1: Product: syz [ 3198.884999][ T5856] usb 6-1: Manufacturer: syz [ 3198.885017][ T5856] usb 6-1: SerialNumber: syz [ 3199.451293][ T5856] usb 6-1: selecting invalid altsetting 1 [ 3200.265805][ T3109] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 3200.292247][ T3109] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3200.803927][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 3200.804019][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 3200.853617][T11763] loop8: detected capacity change from 0 to 32768 [ 3200.897933][T11763] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3200.940353][T11763] XFS (loop8): Ending clean mount [ 3200.943809][T11763] XFS (loop8): Quotacheck needed: Please wait. [ 3201.125705][T11763] XFS (loop8): Quotacheck: Done. [ 3201.553843][ T5427] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3201.633275][ T5856] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 3201.634157][ T5856] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 3201.680457][ T5856] usb 6-1: selecting invalid altsetting 1 [ 3201.680550][ T5856] cdc_ncm 6-1:1.0: bind() failure [ 3201.685848][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10807'. [ 3201.749218][ T5856] usb 6-1: USB disconnect, device number 40 [ 3202.800925][T11793] loop4: detected capacity change from 0 to 32768 [ 3202.862843][T11793] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3202.900809][T11793] XFS (loop4): Ending clean mount [ 3202.910282][T11793] XFS (loop4): Quotacheck needed: Please wait. [ 3203.002371][T11793] XFS (loop4): Quotacheck: Done. [ 3203.130791][ C1] net_ratelimit: 106 callbacks suppressed [ 3203.516891][ T7097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3203.623944][T11810] loop8: detected capacity change from 0 to 512 [ 3203.700176][T11810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3203.700307][T11810] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3203.952315][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10813'. [ 3204.030898][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10813'. [ 3204.030949][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10813'. [ 3204.200507][T11823] loop7: detected capacity change from 0 to 1024 [ 3204.980413][T11813] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 3205.963527][ T5427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3206.496276][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10822'. [ 3207.185112][T11861] loop4: detected capacity change from 0 to 1024 [ 3208.449904][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10830'. [ 3208.536340][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10830'. [ 3208.536363][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10830'. [ 3208.593157][ T509] Bluetooth: hci2: command 0x0401 tx timeout [ 3209.283332][ C1] net_ratelimit: 96 callbacks suppressed [ 3209.486039][T11885] siw: device registration error -23 [ 3210.596447][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10839'. [ 3211.349650][T11914] lo speed is unknown, defaulting to 1000 [ 3212.692956][T11937] loop7: detected capacity change from 0 to 1024 [ 3214.110650][T11931] loop8: detected capacity change from 0 to 512 [ 3214.128357][T11931] EXT4-fs: Ignoring removed nobh option [ 3214.145939][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10857'. [ 3214.164727][T11931] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 3214.200542][T11931] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.10850: attempt to clear invalid blocks 1 len 1 [ 3214.200573][T11931] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3214.200959][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 3214.200982][ C1] EXT4-fs (loop8): initial error at time 1789691145: ext4_clear_blocks:876: inode 13 [ 3214.201019][ C1] EXT4-fs (loop8): last error at time 1789691145: ext4_clear_blocks:876: inode 13 [ 3214.293523][T11931] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3214.293697][T11931] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.10850: invalid indirect mapped block 1819239214 (level 0) [ 3214.293735][T11931] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3214.301281][T11931] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.10850: invalid indirect mapped block 1819239214 (level 1) [ 3214.301320][T11931] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3214.308511][T11931] EXT4-fs (loop8): 1 truncate cleaned up [ 3214.319741][T11931] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3214.400970][T11931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3214.407494][T11952] loop7: detected capacity change from 0 to 1024 [ 3214.466159][T11952] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3214.498411][T11952] JBD2: no valid journal superblock found [ 3214.609085][T11952] EXT4-fs (loop7): Could not load journal inode [ 3214.916022][ C1] net_ratelimit: 116 callbacks suppressed [ 3214.955564][T11956] loop4: detected capacity change from 0 to 32768 [ 3215.029731][T11956] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3215.586530][T11956] XFS (loop4): Ending clean mount [ 3215.602369][T11956] XFS (loop4): Quotacheck needed: Please wait. [ 3215.937277][T11956] XFS (loop4): Quotacheck: Done. [ 3216.550915][T11983] loop5: detected capacity change from 0 to 1024 [ 3218.294796][T11988] netlink: 'syz.2.10866': attribute type 10 has an invalid length. [ 3218.329814][T11988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3218.344526][T11988] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 3218.794456][ T7097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3218.840993][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 3218.841659][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 3219.491842][T11993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3219.529569][T11993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3219.720818][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10872'. [ 3220.377784][ T8077] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3220.378481][ T8077] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3220.378524][ T8077] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3220.378565][ T8077] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3220.548477][ C0] net_ratelimit: 92 callbacks suppressed [ 3220.811134][T12021] loop5: detected capacity change from 0 to 512 [ 3221.473199][T12021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3221.473569][T12021] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3221.780546][T12030] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 3222.516757][ T8690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3222.996535][ T5633] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 3223.223954][ T5633] usb 2-1: Using ep0 maxpacket: 16 [ 3223.232903][ T5633] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3223.317703][ T5633] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 3223.317735][ T5633] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3223.317768][ T5633] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3223.352180][ T5633] usb 2-1: string descriptor 0 read error: -22 [ 3223.352341][ T5633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3223.371302][T12043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3223.446862][T12054] loop8: detected capacity change from 0 to 1024 [ 3223.467978][T12054] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 3223.478494][T12054] JBD2: no valid journal superblock found [ 3223.490022][T12054] EXT4-fs (loop8): Could not load journal inode [ 3223.556952][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10889'. [ 3223.601637][ T31] audit: type=1326 audit(1789691154.437:9570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12041 comm="syz.1.10884" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88cdd9e159 code=0x0 [ 3223.628436][ T5633] usb 2-1: USB disconnect, device number 73 [ 3224.352382][ T5633] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3224.513950][ T5633] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 3224.515552][ T5633] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 3224.515579][ T5633] usb 5-1: config 1 has no interface number 0 [ 3224.630865][ T5633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3224.630890][ T5633] usb 5-1: Product: syz [ 3224.630909][ T5633] usb 5-1: Manufacturer: syz [ 3224.630927][ T5633] usb 5-1: SerialNumber: syz [ 3225.383123][ T5633] usb 5-1: 3:0 : does not exist [ 3225.383143][ T5633] usb 5-1: 3:0 : does not exist [ 3225.679489][ T5633] usb 5-1: USB disconnect, device number 34 [ 3226.181107][ C0] net_ratelimit: 56 callbacks suppressed [ 3226.181546][T11676] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 3226.181930][T11676] Bluetooth: hci2: command 0x0401 tx timeout [ 3227.376698][T12097] loop1: detected capacity change from 0 to 512 [ 3227.481700][T12097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3227.481799][T12097] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3228.439437][T12092] loop4: detected capacity change from 0 to 32768 [ 3228.977893][T12092] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3229.019120][T12092] XFS (loop4): Ending clean mount [ 3229.040140][T12092] XFS (loop4): Quotacheck needed: Please wait. [ 3229.411557][T12127] loop2: detected capacity change from 0 to 8 [ 3229.417906][T12127] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 3229.481732][T31674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3229.693885][T12092] XFS (loop4): Quotacheck: Done. [ 3229.808813][T12127] syz.2.10907 (12127): drop_caches: 2 [ 3230.266689][ T6232] udevd[6232]: incorrect cramfs checksum on /dev/loop2 [ 3230.610763][T12138] loop5: detected capacity change from 0 to 1024 [ 3230.646620][T12139] loop2: detected capacity change from 0 to 1024 [ 3232.420258][ C1] net_ratelimit: 86 callbacks suppressed [ 3234.048108][ T7097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 3235.267445][T12143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3236.040876][T12173] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10925'. [ 3236.040920][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10925'. [ 3236.041270][T12173] geneve0: entered allmulticast mode [ 3238.078429][T12185] loop2: detected capacity change from 0 to 1024 [ 3238.226924][ C1] net_ratelimit: 80 callbacks suppressed [ 3241.079928][T12196] loop1: detected capacity change from 0 to 1024 [ 3243.260302][T12220] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10941'. [ 3243.260337][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10941'. [ 3243.771750][T12213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3243.772047][ C1] net_ratelimit: 81 callbacks suppressed [ 3244.154207][T12225] geneve0: left allmulticast mode [ 3246.249825][ T9962] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 3246.862647][ T9962] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 3247.184823][ T9962] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 3247.184902][ T9962] usb 9-1: config 1 has no interface number 0 [ 3247.294555][ T9962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.312165][ T9962] usb 9-1: Product: syz [ 3247.312201][ T9962] usb 9-1: Manufacturer: syz [ 3247.312225][ T9962] usb 9-1: SerialNumber: syz [ 3247.321604][ T9962] usb 9-1: 3:0 : does not exist [ 3247.321624][ T9962] usb 9-1: 3:0 : does not exist [ 3247.725471][ T5856] usb 9-1: USB disconnect, device number 59 [ 3247.849668][T11676] Bluetooth: hci2: command 0x0401 tx timeout [ 3247.849843][ T509] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 3249.577960][ C1] net_ratelimit: 84 callbacks suppressed [ 3251.206136][T12262] loop4: detected capacity change from 0 to 1024 [ 3252.285971][ T5770] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 3252.449333][ T5770] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 3252.451597][ T5770] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 3252.451622][ T5770] usb 9-1: config 1 has no interface number 0 [ 3252.455943][ T5770] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3252.455967][ T5770] usb 9-1: Product: syz [ 3252.455985][ T5770] usb 9-1: Manufacturer: syz [ 3252.456004][ T5770] usb 9-1: SerialNumber: syz [ 3252.520397][ T5770] usb 9-1: 3:0 : does not exist [ 3252.520417][ T5770] usb 9-1: 3:0 : does not exist [ 3252.768709][ T5770] usb 9-1: USB disconnect, device number 60 [ 3253.150268][T12268] loop5: detected capacity change from 0 to 131072 [ 3253.166767][T12268] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 3253.166790][T12268] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3253.167569][T12268] F2FS-fs (loop5): invalid crc value [ 3253.244382][T12268] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3253.247909][T12268] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 3253.247929][T12268] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 3253.356009][T12277] fuse: Bad value for 'fd' [ 3253.468101][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3254.257556][T11676] Bluetooth: hci2: command 0x0401 tx timeout [ 3254.257668][ T509] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 3255.019121][T29735] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3255.024648][T29735] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3255.024699][T29735] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3255.024744][T29735] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3255.056642][T12284] loop8: detected capacity change from 0 to 1024 [ 3255.064925][T12284] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3255.075512][T12284] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 3255.075632][T12284] System zones: 0-1, 3-36 [ 3255.087186][T12284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3255.095065][T12284] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.10964: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 3255.470587][ C1] net_ratelimit: 138 callbacks suppressed [ 3255.580949][ T5427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3255.636489][T12289] loop2: detected capacity change from 0 to 128 [ 3255.647963][T12289] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 3255.656732][T12289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3256.125840][T12297] loop7: detected capacity change from 0 to 512 [ 3256.202386][T12297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 3256.203756][T12297] System zones: 1-12 [ 3256.217557][T12297] EXT4-fs error (device loop7): ext4_xattr_inode_iget:473: comm syz.7.10970: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 3256.217659][T12297] loop7: lost filesystem error report for type 5 error -117 [ 3256.217844][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 3256.217865][ C1] EXT4-fs (loop7): initial error at time 1789691184: ext4_xattr_inode_iget:473 [ 3256.217892][ C1] EXT4-fs (loop7): last error at time 1789691184: ext4_xattr_inode_iget:473 [ 3256.225167][T12297] EXT4-fs (loop7): 1 orphan inode deleted [ 3256.317561][T12297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3256.612352][T12303] loop4: detected capacity change from 0 to 1024 [ 3256.881835][T10586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3256.886800][T12303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3257.270089][ T7097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3257.499156][T12291] loop1: detected capacity change from 0 to 32768 [ 3257.512255][T12291] ocfs2: Unknown parameter 'daitebaci' [ 3257.569956][ T25] wiimote 0005:057E:0306.000E: item fetching failed at offset 2/3 [ 3257.570606][ T25] wiimote 0005:057E:0306.000E: HID parse failed [ 3257.571097][ T25] wiimote 0005:057E:0306.000E: probe with driver wiimote failed with error -22 [ 3257.952254][T12323] loop5: detected capacity change from 0 to 128 [ 3258.194818][T12323] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[8690] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[12323] [ 3258.227180][T12323] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 3258.227206][T12323] FAT-fs (loop5): Filesystem has been set read-only [ 3258.230562][T12323] netlink: 404 bytes leftover after parsing attributes in process `syz.5.10965'. [ 3259.463390][T12335] loop1: detected capacity change from 0 to 4096 [ 3259.466531][T12335] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 3259.522547][T12333] loop5: detected capacity change from 0 to 4096 [ 3259.628345][T12333] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 3259.753683][T12335] ntfs3(loop1): ino=19, mi_enum_attr [ 3259.753713][T12335] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 3259.756510][T12335] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 3259.833740][T12333] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 3260.430980][T12347] loop8: detected capacity change from 0 to 64 [ 3261.276386][ C1] net_ratelimit: 45 callbacks suppressed [ 3261.821606][ T25] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 3261.979008][T12344] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 3261.991324][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 3261.992144][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3261.993386][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3261.993418][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3261.993484][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3261.997272][ T25] usb 6-1: config 0 descriptor?? [ 3262.055757][ T25] hub 6-1:0.0: USB hub found [ 3262.223457][ T25] hub 6-1:0.0: 26 ports detected [ 3262.224878][ T25] hub 6-1:0.0: insufficient power available to use all downstream ports [ 3262.469220][ T25] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 3262.490189][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 3262.490323][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3262.515556][ T25] usb 6-1: USB disconnect, device number 41 [ 3263.096660][ T5856] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 3263.215922][T12373] loop8: detected capacity change from 0 to 32768 [ 3263.221129][T12373] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.10995 (12373) [ 3263.264397][ T5856] usb 2-1: not running at top speed; connect to a high speed hub [ 3263.264432][ T5856] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 3263.267070][ T5856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3263.279014][ T5856] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 3263.279040][ T5856] usb 2-1: Product: syz [ 3263.279058][ T5856] usb 2-1: Manufacturer: syz [ 3263.307401][T12373] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3263.307438][T12373] BTRFS info (device loop8): using blake2b checksum algorithm [ 3263.389928][ T5856] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 3263.563413][ T5856] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 3263.565389][ T5856] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 3263.565446][ T5856] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 3263.776754][ T5856] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 3263.828711][ T5856] usb 2-1: USB disconnect, device number 74 [ 3263.940498][T12373] BTRFS info (device loop8): enabling ssd optimizations [ 3263.940522][T12373] BTRFS info (device loop8): turning on async discard [ 3263.940542][T12373] BTRFS info (device loop8): enabling free space tree [ 3263.940564][T12373] BTRFS info (device loop8): use zstd compression, level 3 [ 3264.281294][T12377] loop5: detected capacity change from 0 to 131072 [ 3264.285112][T12377] F2FS-fs (loop5): invalid crc value [ 3264.378520][ T5427] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3264.416136][T12377] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3264.430687][T12377] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 3264.507196][T12377] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 3266.209061][T12410] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 3266.209925][T12410] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 3266.575336][T12414] loop8: detected capacity change from 0 to 2048 [ 3266.611541][T12414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3266.753176][T12417] loop1: detected capacity change from 0 to 2048 [ 3266.793612][T12417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3266.908998][ C0] net_ratelimit: 62 callbacks suppressed [ 3267.197732][T31674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3267.357066][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 3267.357124][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 3269.063863][T12439] loop8: detected capacity change from 0 to 512 [ 3269.074675][T12439] EXT4-fs (loop8): Test dummy encryption mode enabled [ 3269.092327][T12439] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #12: comm syz.8.11012: corrupted in-inode xattr: invalid ea_ino [ 3269.092354][T12439] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 3269.092633][T12439] EXT4-fs (loop8): Remounting filesystem read-only [ 3269.096024][T12439] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3269.224520][ T5427] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 3269.395165][T12442] loop8: detected capacity change from 0 to 256 [ 3269.779461][ T9962] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 3269.944484][ T9962] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 3269.945761][ T9962] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3269.945794][ T9962] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3269.945854][ T9962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3269.955805][ T9962] usb 6-1: config 0 descriptor?? [ 3270.160942][ T25] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 3270.287997][T12438] loop1: detected capacity change from 0 to 40427 [ 3270.322292][ T25] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3270.323622][ T25] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3270.323645][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3270.323711][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3270.326747][ T25] usb 9-1: config 0 descriptor?? [ 3270.326953][T12438] F2FS-fs (loop1): build fault injection rate: 14 [ 3270.326967][T12438] F2FS-fs (loop1): build fault injection type: 0x30e4 [ 3270.361425][T12438] F2FS-fs (loop1): invalid crc value [ 3270.433949][ T9962] ryos 0003:1E7D:3232.000F: invalid report_size 61483 [ 3270.433966][ T9962] ryos 0003:1E7D:3232.000F: item 0 2 1 7 parsing failed [ 3270.448528][ T9962] ryos 0003:1E7D:3232.000F: parse failed [ 3270.448605][ T9962] ryos 0003:1E7D:3232.000F: probe with driver ryos failed with error -22 [ 3270.483097][T12438] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 3270.668959][ T9962] usb 6-1: USB disconnect, device number 42 [ 3270.909118][T12438] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3270.922663][T12447] bridge0: port 3(wlan1) entered blocking state [ 3270.930172][T12447] bridge0: port 3(wlan1) entered disabled state [ 3270.941516][T12438] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3270.945087][T12447] mac80211_hwsim hwsim82 wlan1: entered allmulticast mode [ 3271.018922][T12447] mac80211_hwsim hwsim82 wlan1: entered promiscuous mode [ 3271.051255][T12438] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0 [ 3271.096695][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096726][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096751][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096776][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096800][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096825][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096854][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096881][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096908][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.096932][ T25] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 3271.133853][ T25] lua 0003:1E7D:2C2E.0010: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.8-1/input0 [ 3271.358168][ T25] usb 9-1: USB disconnect, device number 61 [ 3271.405478][T12452] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10b/0xfd0 [ 3271.492431][T12452] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_mkdir+0x54d/0x640 [ 3271.501250][T12452] CPU: 1 UID: 0 PID: 12452 Comm: syz.1.11011 Tainted: G L syzkaller #0 PREEMPT(full) [ 3271.501291][T12452] Tainted: [L]=SOFTLOCKUP [ 3271.501302][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 3271.501319][T12452] Call Trace: [ 3271.501330][T12452] [ 3271.501342][T12452] dump_stack_lvl+0xe8/0x150 [ 3271.501385][T12452] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 3271.501427][T12452] ? f2fs_mkdir+0x54d/0x640 [ 3271.501461][T12452] f2fs_balance_fs+0x349/0x810 [ 3271.501514][T12452] ? f2fs_mkdir+0x54d/0x640 [ 3271.501552][T12452] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 3271.501592][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.501625][T12452] ? do_raw_spin_lock+0x12b/0x2f0 [ 3271.501666][T12452] ? __pfx_wake_up_var+0x10/0x10 [ 3271.501708][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.501742][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.501778][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.501809][T12452] ? do_raw_spin_unlock+0xf5/0x200 [ 3271.501853][T12452] f2fs_mkdir+0x54d/0x640 [ 3271.501885][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.501916][T12452] ? d_alloc+0x144/0x190 [ 3271.501961][T12452] ? __pfx_f2fs_mkdir+0x10/0x10 [ 3271.501992][T12452] ? generic_permission+0x2bf/0x670 [ 3271.502038][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.502071][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.502103][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.502139][T12452] vfs_mkdir+0x40c/0x620 [ 3271.502178][T12452] filename_mkdirat+0x285/0x510 [ 3271.502215][T12452] ? __pfx_filename_mkdirat+0x10/0x10 [ 3271.502248][T12452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3271.502279][T12452] ? do_getname+0x151/0x250 [ 3271.502316][T12452] __se_sys_mkdirat+0x35/0x150 [ 3271.502350][T12452] do_syscall_64+0x166/0x520 [ 3271.502381][T12452] ? trace_irq_disable+0x3b/0x140 [ 3271.502409][T12452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3271.502444][T12452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3271.502479][T12452] RIP: 0033:0x7f88cdd9cfc7 [ 3271.502503][T12452] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3271.502526][T12452] RSP: 002b:00007f88cec8fe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3271.502555][T12452] RAX: ffffffffffffffda RBX: 00007f88cec8fee0 RCX: 00007f88cdd9cfc7 [ 3271.502576][T12452] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 3271.502594][T12452] RBP: 00002000000007c0 R08: 0000200000000d40 R09: 0000000000000000 [ 3271.502614][T12452] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000200000000280 [ 3271.502633][T12452] R13: 00007f88cec8fea0 R14: 0000000000000000 R15: 0000000000000000 [ 3271.502673][T12452] [ 3271.507429][T12452] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 3272.353918][ T8998] net_ratelimit: 41 callbacks suppressed [ 3273.897468][T29735] IPVS: starting estimator thread 0... [ 3273.995941][T11676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3274.002250][T11676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3274.003941][T12474] IPVS: using max 30 ests per chain, 72000 per kthread [ 3274.007027][T11676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3274.027752][T11676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3274.042308][T11676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3274.415845][ T3109] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 3274.743180][ T3109] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 3274.745961][ T3109] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3274.746013][ T3109] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3274.746040][ T3109] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 3274.746069][ T3109] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3274.748949][ T3109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3274.748973][ T3109] usb 6-1: Product: syz [ 3274.748991][ T3109] usb 6-1: Manufacturer: syz [ 3274.749008][ T3109] usb 6-1: SerialNumber: syz [ 3274.851242][ T3109] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 3274.851262][ T3109] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 3274.851328][ T3109] usbserial_generic 6-1:1.0: generic converter detected [ 3274.889334][ T3109] usb 6-1: generic converter now attached to ttyUSB0 [ 3275.036207][T11676] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3275.037912][T11676] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3275.040796][T11676] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3275.056314][T11676] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3275.073075][T11676] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3275.265852][ T9962] usb 6-1: USB disconnect, device number 43 [ 3275.301416][ T9962] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 3275.302003][ T9962] usbserial_generic 6-1:1.0: device disconnected [ 3275.617900][ T5770] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 3275.791118][ T5770] usb 9-1: Using ep0 maxpacket: 8 [ 3275.796880][ T5770] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3275.807483][ T5770] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3275.807508][ T5770] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3275.807589][ T5770] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 3275.809291][ T5770] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 3275.809347][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3275.870355][ T5770] hub 9-1:1.0: bad descriptor, ignoring hub [ 3275.870378][ T5770] hub 9-1:1.0: probe with driver hub failed with error -5 [ 3275.871077][ T5770] cdc_wdm 9-1:1.0: skipping garbage [ 3275.871093][ T5770] cdc_wdm 9-1:1.0: skipping garbage [ 3275.891135][T12477] lo speed is unknown, defaulting to 1000 [ 3275.909198][ T5770] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 3275.909219][ T5770] cdc_wdm 9-1:1.0: Unknown control protocol [ 3276.267788][T11676] Bluetooth: hci0: command tx timeout [ 3276.573285][T12518] loop5: detected capacity change from 0 to 8 [ 3276.640534][T12518] SQUASHFS error: zlib decompression failed, data probably corrupt [ 3276.640568][T12518] SQUASHFS error: Failed to read block 0x9b: -5 [ 3276.640608][T12518] SQUASHFS error: Unable to read metadata cache entry [99] [ 3276.640624][T12518] SQUASHFS error: Unable to read inode 0x127 [ 3276.753637][T12518] loop5: detected capacity change from 0 to 4096 [ 3276.798582][T12519] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3276.842939][T12500] loop1: detected capacity change from 0 to 40427 [ 3277.001614][T12495] lo speed is unknown, defaulting to 1000 [ 3277.080933][T12500] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 3277.080955][T12500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 3277.203317][T12500] F2FS-fs (loop1): invalid crc value [ 3277.308766][T11676] Bluetooth: hci7: command tx timeout [ 3277.802644][T12500] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 3277.830388][T12500] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 3277.830414][T12500] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3277.914290][ C0] net_ratelimit: 107 callbacks suppressed [ 3277.947186][T31674] syz-executor: attempt to access beyond end of device [ 3277.947186][T31674] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3277.950329][T31674] CPU: 1 UID: 0 PID: 31674 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 3277.950364][T31674] Tainted: [L]=SOFTLOCKUP [ 3277.950374][T31674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 3277.950390][T31674] Call Trace: [ 3277.950401][T31674] [ 3277.950413][T31674] dump_stack_lvl+0xe8/0x150 [ 3277.950460][T31674] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 3277.950503][T31674] f2fs_write_end_bio+0x1211/0x16e0 [ 3277.950542][T31674] ? blkg_put+0x22/0x240 [ 3277.950596][T31674] __submit_merged_bio+0x258/0x6a0 [ 3277.950630][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.950661][T31674] ? rcu_is_watching+0x16/0xb0 [ 3277.950700][T31674] __submit_merged_write_cond+0x3c9/0x4e0 [ 3277.950749][T31674] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 3277.950802][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.950844][T31674] f2fs_write_data_pages+0x2a27/0x36f0 [ 3277.950884][T31674] ? __bfs+0x153/0x290 [ 3277.950911][T31674] ? __pfx_hlock_conflict+0x10/0x10 [ 3277.950984][T31674] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 3277.951080][T31674] ? __pfx_clockevents_program_event+0x10/0x10 [ 3277.951121][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951155][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951199][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951229][T31674] ? irqentry_exit+0x218/0x910 [ 3277.951258][T31674] ? trace_irq_disable+0x3b/0x140 [ 3277.951298][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951328][T31674] ? do_raw_spin_lock+0x12b/0x2f0 [ 3277.951372][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951408][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951439][T31674] ? do_raw_spin_unlock+0xf5/0x200 [ 3277.951477][T31674] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 3277.951527][T31674] do_writepages+0x338/0x560 [ 3277.951556][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951590][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951625][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951656][T31674] ? do_raw_spin_unlock+0xf5/0x200 [ 3277.951698][T31674] filemap_fdatawrite+0x1e9/0x2f0 [ 3277.951732][T31674] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 3277.951803][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951837][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.951873][T31674] ? do_raw_spin_unlock+0xf5/0x200 [ 3277.951917][T31674] f2fs_sync_dirty_inodes+0x30e/0x830 [ 3277.951962][T31674] f2fs_write_checkpoint+0xa3d/0x2710 [ 3277.951989][T31674] ? __lock_acquire+0x747/0x2de0 [ 3277.952053][T31674] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 3277.952081][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.952176][T31674] kill_f2fs_super+0x2dd/0x700 [ 3277.952214][T31674] ? __pfx_kill_f2fs_super+0x10/0x10 [ 3277.952271][T31674] ? call_rcu+0x64d/0x8b0 [ 3277.952302][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.952333][T31674] ? lockdep_hardirqs_on+0x7b/0x110 [ 3277.952362][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.952409][T31674] deactivate_locked_super+0xbc/0x110 [ 3277.952449][T31674] cleanup_mnt+0x3d3/0x460 [ 3277.952482][T31674] task_work_run+0x1d9/0x270 [ 3277.952523][T31674] ? __pfx_task_work_run+0x10/0x10 [ 3277.952565][T31674] exit_to_user_mode_loop+0x204/0x770 [ 3277.952593][T31674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3277.952624][T31674] ? rcu_is_watching+0x16/0xb0 [ 3277.952662][T31674] do_syscall_64+0x328/0x520 [ 3277.952691][T31674] ? trace_irq_disable+0x3b/0x140 [ 3277.952718][T31674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3277.952751][T31674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3277.952777][T31674] RIP: 0033:0x7f88cdd9f397 [ 3277.952799][T31674] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 3277.952822][T31674] RSP: 002b:00007fff36118d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3277.952850][T31674] RAX: 0000000000000000 RBX: 00007f88cde344bb RCX: 00007f88cdd9f397 [ 3277.952869][T31674] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36118e00 [ 3277.952886][T31674] RBP: 00007fff36118e00 R08: 00007fff36119e00 R09: 00000000ffffffff [ 3277.952905][T31674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36119e90 [ 3277.952923][T31674] R13: 00007f88cde344bb R14: 00000000002f29e2 R15: 00007fff36119ed0 [ 3277.952965][T31674] [ 3279.167205][ T509] Bluetooth: hci0: command tx timeout [ 3279.304753][T31674] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 3279.572478][T11676] Bluetooth: hci7: command tx timeout [ 3279.928471][T12477] bridge0: port 1(bridge_slave_0) entered blocking state [ 3279.928575][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 3279.940616][T12477] bridge_slave_0: entered allmulticast mode [ 3279.943299][T12477] bridge_slave_0: entered promiscuous mode [ 3279.946356][T12477] bridge0: port 2(bridge_slave_1) entered blocking state [ 3279.946467][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 3279.946646][T12477] bridge_slave_1: entered allmulticast mode [ 3279.948741][T12477] bridge_slave_1: entered promiscuous mode [ 3280.293338][T12477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3280.311587][T12477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3280.389227][T12477] team0: Port device team_slave_0 added [ 3280.393208][T12477] team0: Port device team_slave_1 added [ 3280.467401][T12477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3280.467415][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3280.467446][T12477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3280.469962][T12477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3280.469975][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3280.470014][T12477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3280.558194][T12539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3280.845667][T12477] hsr_slave_0: entered promiscuous mode [ 3280.847099][T12477] hsr_slave_1: entered promiscuous mode [ 3280.848104][T12477] debugfs: 'hsr0' already exists in 'hsr' [ 3280.848124][T12477] Cannot create hsr debugfs directory [ 3281.392227][T11676] Bluetooth: hci0: command tx timeout [ 3281.723539][T12551] loop1: detected capacity change from 0 to 256 [ 3281.755426][T12551] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 3281.755451][T12551] FAT-fs (loop1): Filesystem has been set read-only [ 3281.846254][T11676] Bluetooth: hci7: command tx timeout [ 3281.897023][ T9962] usb 9-1: USB disconnect, device number 62 [ 3281.898919][T12495] bridge0: port 1(bridge_slave_0) entered blocking state [ 3281.899033][T12495] bridge0: port 1(bridge_slave_0) entered disabled state [ 3281.899217][T12495] bridge_slave_0: entered allmulticast mode [ 3281.908365][T12502] cdc_wdm 9-1:1.0: Error autopm - -16 [ 3281.945187][T12495] bridge_slave_0: entered promiscuous mode [ 3281.957156][T12495] bridge0: port 2(bridge_slave_1) entered blocking state [ 3281.957292][T12495] bridge0: port 2(bridge_slave_1) entered disabled state [ 3281.957473][T12495] bridge_slave_1: entered allmulticast mode [ 3281.991508][T12495] bridge_slave_1: entered promiscuous mode [ 3282.126604][T12557] loop5: detected capacity change from 0 to 1024 [ 3282.153407][T12557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3282.176414][T12558] loop1: detected capacity change from 0 to 2048 [ 3282.238166][T12558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3282.727588][T31674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3282.791319][T12495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3283.027760][T12495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3283.107819][ T509] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3283.117562][ T509] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3283.126680][ T509] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3283.138628][ T509] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3283.149433][ T509] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3283.280628][T12579] loop1: detected capacity change from 0 to 8 [ 3283.318573][T12579] SQUASHFS error: zlib decompression failed, data probably corrupt [ 3283.318601][T12579] SQUASHFS error: Failed to read block 0x9b: -5 [ 3283.318638][T12579] SQUASHFS error: Unable to read metadata cache entry [99] [ 3283.318652][T12579] SQUASHFS error: Unable to read inode 0x127 [ 3283.630161][T12584] loop1: detected capacity change from 0 to 4096 [ 3283.633413][ C1] net_ratelimit: 39 callbacks suppressed [ 3283.634116][ T509] Bluetooth: hci0: command tx timeout [ 3283.666262][T12585] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3283.707739][T12495] team0: Port device team_slave_0 added [ 3283.717792][T12495] team0: Port device team_slave_1 added [ 3284.066877][ T509] Bluetooth: hci7: command tx timeout [ 3284.089195][ T4878] nvmet: connect request for invalid subsystem testsubsys! [ 3284.104098][T12581] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 3284.581147][T12495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3284.581545][T12495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3284.581890][T12495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3284.779766][T12495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3284.779812][T12495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3284.829397][T12495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3285.453239][ T509] Bluetooth: hci8: command tx timeout [ 3287.668018][T12594] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3287.706259][ T509] Bluetooth: hci8: command tx timeout [ 3288.099157][T12604] nvmet: adding nsid 1 to subsystem testsubsys [ 3288.474551][ T4878] nvmet: connect request for invalid subsystem testsubsys! [ 3288.474697][T12604] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 3288.518292][T12618] loop8: detected capacity change from 0 to 128 [ 3288.522003][T12615] FAULT_INJECTION: forcing a failure. [ 3288.522003][T12615] name failslab, interval 1, probability 0, space 0, times 0 [ 3288.522041][T12615] CPU: 0 UID: 0 PID: 12615 Comm: syz.5.11053 Tainted: G L syzkaller #0 PREEMPT(full) [ 3288.522074][T12615] Tainted: [L]=SOFTLOCKUP [ 3288.522084][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 3288.522103][T12615] Call Trace: [ 3288.522114][T12615] [ 3288.522125][T12615] dump_stack_lvl+0xe8/0x150 [ 3288.522167][T12615] should_fail_ex+0x410/0x560 [ 3288.522202][T12615] should_failslab+0xa8/0x100 [ 3288.522236][T12615] ? __kernfs_new_node+0xe6/0x980 [ 3288.522264][T12615] kmem_cache_alloc_noprof+0xa1/0x600 [ 3288.522307][T12615] ? __kernfs_new_node+0xe6/0x980 [ 3288.522341][T12615] __kernfs_new_node+0xe6/0x980 [ 3288.522380][T12615] ? __pfx___kernfs_new_node+0x10/0x10 [ 3288.522407][T12615] ? kernfs_root+0x1c/0x230 [ 3288.522434][T12615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3288.522469][T12615] ? kernfs_root+0x1c/0x230 [ 3288.522492][T12615] ? kernfs_root+0x1c/0x230 [ 3288.522514][T12615] ? kernfs_root+0x1c/0x230 [ 3288.522545][T12615] kernfs_new_node+0xea/0x140 [ 3288.522578][T12615] __kernfs_create_file+0x4b/0x2e0 [ 3288.522615][T12615] sysfs_add_file_mode_ns+0x237/0x300 [ 3288.522660][T12615] internal_create_group+0x679/0x1180 [ 3288.522715][T12615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3288.522749][T12615] ? __pfx_internal_create_group+0x10/0x10 [ 3288.522793][T12615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3288.522823][T12615] ? up_write+0x19d/0x4a0 [ 3288.522863][T12615] sysfs_create_groups+0x59/0x120 [ 3288.522907][T12615] device_add_attrs+0x12c/0x600 [ 3288.522941][T12615] ? __pfx_device_add_attrs+0x10/0x10 [ 3288.522966][T12615] ? kobject_put+0x50f/0x550 [ 3288.523002][T12615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3288.523042][T12615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3288.523072][T12615] ? device_add_class_symlinks+0x21f/0x240 [ 3288.523104][T12615] device_add+0x488/0xb80 [ 3288.523135][T12615] input_register_device+0x9d7/0x1150 [ 3288.523185][T12615] uinput_create_device+0x53e/0x690 [ 3288.523228][T12615] uinput_ioctl_handler+0x433/0x15a0 [ 3288.523267][T12615] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 3288.523313][T12615] ? __fget_files+0x2a/0x420 [ 3288.523348][T12615] ? __fget_files+0x3a2/0x420 [ 3288.523389][T12615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3288.523418][T12615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3288.523451][T12615] ? __pfx_uinput_ioctl+0x10/0x10 [ 3288.523482][T12615] __se_sys_ioctl+0xfc/0x170 [ 3288.523514][T12615] do_syscall_64+0x166/0x520 [ 3288.523542][T12615] ? trace_irq_disable+0x3b/0x140 [ 3288.523568][T12615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3288.523601][T12615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3288.523628][T12615] RIP: 0033:0x7f1b1f59e159 [ 3288.523651][T12615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3288.523672][T12615] RSP: 002b:00007f1b20476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3288.523699][T12615] RAX: ffffffffffffffda RBX: 00007f1b1f825fa0 RCX: 00007f1b1f59e159 [ 3288.523718][T12615] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 3288.523734][T12615] RBP: 00007f1b1f63506b R08: 0000000000000000 R09: 0000000000000000 [ 3288.523751][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3288.523767][T12615] R13: 00007f1b1f826038 R14: 00007f1b1f825fa0 R15: 00007ffe7acc7e58 [ 3288.523807][T12615] [ 3288.744249][T12495] hsr_slave_0: entered promiscuous mode [ 3288.918415][T12495] hsr_slave_1: entered promiscuous mode [ 3288.920300][T12495] debugfs: 'hsr0' already exists in 'hsr' [ 3288.920318][T12495] Cannot create hsr debugfs directory [ 3289.005365][T12618] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5427] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[12618] [ 3289.022258][T12618] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 3289.022282][T12618] FAT-fs (loop8): Filesystem has been set read-only [ 3289.029953][T12618] netlink: 404 bytes leftover after parsing attributes in process `syz.8.11054'. [ 3289.439296][ C1] net_ratelimit: 49 callbacks suppressed [ 3289.533382][T12631] loop5: detected capacity change from 0 to 16 [ 3289.581483][T12631] erofs (device loop5): mounted with root inode @ nid 36. [ 3289.986905][ T509] Bluetooth: hci8: command tx timeout [ 3290.411538][T12637] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 3290.432613][T12637] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 3290.482321][T12637] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 3290.499849][T12637] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 3290.501474][T12637] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 3290.547295][T12637] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 3290.547317][T12637] pci 0000:00:05.0: vgaarb: bridge control possible [ 3290.547334][T12637] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 3290.559687][T12637] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 3292.244837][ T509] Bluetooth: hci8: command tx timeout [ 3293.175965][T12634] loop1: detected capacity change from 0 to 1024 [ 3293.358876][T12639] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 3294.319902][T12574] lo speed is unknown, defaulting to 1000 [ 3294.602073][T12646] loop5: detected capacity change from 0 to 2048 [ 3294.669868][T12646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3295.072464][ C0] net_ratelimit: 60 callbacks suppressed [ 3296.313038][T12477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3296.346998][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3296.357450][T12477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3296.408841][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3296.469540][ T9962] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 3296.482792][T12477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3296.547708][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3296.550326][T12477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3296.585105][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3296.633531][ T9962] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3296.634964][ T9962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3296.640189][ T9962] usb 2-1: config 0 descriptor?? [ 3296.672155][ T9962] cp210x 2-1:0.0: cp210x converter detected [ 3297.344897][ T9962] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 3297.344955][ T9962] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 3297.377137][ T9962] usb 2-1: cp210x converter now attached to ttyUSB0 [ 3297.389660][ T9962] usb 2-1: USB disconnect, device number 75 [ 3297.438172][ T9962] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3297.440687][ T9962] cp210x 2-1:0.0: device disconnected [ 3297.781148][T12703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11067'. [ 3298.120317][T12574] bridge0: port 1(bridge_slave_0) entered blocking state [ 3298.120430][T12574] bridge0: port 1(bridge_slave_0) entered disabled state [ 3298.120621][T12574] bridge_slave_0: entered allmulticast mode [ 3298.128574][T12574] bridge_slave_0: entered promiscuous mode [ 3298.137724][T12574] bridge0: port 2(bridge_slave_1) entered blocking state [ 3298.138925][T12574] bridge0: port 2(bridge_slave_1) entered disabled state [ 3298.139166][T12574] bridge_slave_1: entered allmulticast mode [ 3298.147631][T12574] bridge_slave_1: entered promiscuous mode [ 3298.306460][T12713] loop5: detected capacity change from 0 to 32768 [ 3298.310366][T12713] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11068 (12713) [ 3298.343347][T12713] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3298.343380][T12713] BTRFS info (device loop5): using sha256 checksum algorithm [ 3298.561803][T12713] BTRFS info (device loop5): enabling ssd optimizations [ 3298.561828][T12713] BTRFS info (device loop5): turning on async discard [ 3298.561849][T12713] BTRFS info (device loop5): enabling free space tree [ 3298.681056][T12574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3298.710679][T12574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3298.733420][ T8690] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3299.066486][T12574] team0: Port device team_slave_0 added [ 3299.291891][T12574] team0: Port device team_slave_1 added [ 3299.516496][T12574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3299.516508][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3299.516551][T12574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3299.585359][T12574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3299.585372][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3299.585404][T12574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3299.939861][T12495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3299.963550][T12495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3300.007570][T12574] hsr_slave_0: entered promiscuous mode [ 3300.013083][T12574] hsr_slave_1: entered promiscuous mode [ 3300.016085][T12574] debugfs: 'hsr0' already exists in 'hsr' [ 3300.016104][T12574] Cannot create hsr debugfs directory [ 3300.016382][T12495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3300.047504][T12495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3300.059785][T12495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3300.090237][T12495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3300.172051][T12495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3300.200224][T12495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3300.418539][T12477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3300.608557][T12477] 8021q: adding VLAN 0 to HW filter on device team0 [ 3300.634935][ C0] net_ratelimit: 42 callbacks suppressed [ 3300.792232][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 3300.792342][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3300.862648][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 3300.862755][ T4878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3301.524193][T12495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3301.739891][T12495] 8021q: adding VLAN 0 to HW filter on device team0 [ 3301.760901][T29735] bridge0: port 1(bridge_slave_0) entered blocking state [ 3301.761012][T29735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3301.784541][T29735] bridge0: port 2(bridge_slave_1) entered blocking state [ 3301.784663][T29735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3302.529797][T12574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3302.564496][T12574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3302.576791][T12574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3302.641037][T12574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3302.647954][T12574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3302.704032][T12574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3302.705984][T12574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3302.750878][T12574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3302.782520][T12477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3303.060984][T12477] veth0_vlan: entered promiscuous mode [ 3303.110731][T12477] veth1_vlan: entered promiscuous mode [ 3303.161772][T12574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3303.220617][T12495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3303.243564][T12574] 8021q: adding VLAN 0 to HW filter on device team0 [ 3303.253514][T12477] veth0_macvtap: entered promiscuous mode [ 3303.280965][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 3303.281082][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3303.290750][T12477] veth1_macvtap: entered promiscuous mode [ 3303.324478][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 3303.324587][ T4878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3303.388789][T12477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3303.438646][T12477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3303.577175][ T144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.577231][ T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.577273][ T144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.577314][ T144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.860875][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3303.860891][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3304.049218][ T3283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3304.049236][ T3283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3304.080324][T12495] veth0_vlan: entered promiscuous mode [ 3304.127366][T12495] veth1_vlan: entered promiscuous mode [ 3304.298340][T12495] veth0_macvtap: entered promiscuous mode [ 3304.332044][T12495] veth1_macvtap: entered promiscuous mode [ 3304.404670][T12495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3304.447541][T12495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3304.566284][T29735] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3304.574645][T29735] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3304.578521][T16144] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3304.676686][T29735] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3304.991878][ T3361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3304.991894][ T3361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3305.149936][ T9072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3305.149953][ T9072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3305.167568][T12574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3305.422485][T12574] veth0_vlan: entered promiscuous mode [ 3305.464020][T12574] veth1_vlan: entered promiscuous mode [ 3305.553607][T12574] veth0_macvtap: entered promiscuous mode [ 3305.575654][T12574] veth1_macvtap: entered promiscuous mode [ 3305.650818][T12574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3305.678776][T12574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3305.837408][T29735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3305.838002][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3305.838845][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3305.961296][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3306.000213][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3306.000230][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3306.042467][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3306.042482][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3306.123479][ T5856] net_ratelimit: 1144 callbacks suppressed ** 3389 printk messages dropped ** [ 3311.623177][ C1] net_ratelimit: 303 callbacks suppressed [ 3317.082366][ C0] net_ratelimit: 123 callbacks suppressed [ 3322.628270][ C0] net_ratelimit: 177 callbacks suppressed [ 3328.352665][ C1] net_ratelimit: 106 callbacks suppressed [ 3333.900307][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 3333.900363][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 3333.980026][ C1] net_ratelimit: 100 callbacks suppressed [ 3339.443150][ C0] net_ratelimit: 135 callbacks suppressed [ 3344.898601][ C1] net_ratelimit: 129 callbacks suppressed [ 3350.535319][ C1] net_ratelimit: 106 callbacks suppressed [ 3356.080114][ C0] net_ratelimit: 80 callbacks suppressed [ 3361.627646][ C0] net_ratelimit: 111 callbacks suppressed [ 3367.173194][ C0] net_ratelimit: 92 callbacks suppressed [ 3373.061481][ C1] net_ratelimit: 85 callbacks suppressed [ 3378.694085][ C1] net_ratelimit: 146 callbacks suppressed [ 3384.326637][ C1] net_ratelimit: 114 callbacks suppressed [ 3389.959278][ C1] net_ratelimit: 104 callbacks suppressed [ 3395.591811][ C1] net_ratelimit: 80 callbacks suppressed [ 3400.446514][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 3400.446575][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 3401.224402][ C1] net_ratelimit: 110 callbacks suppressed [ 3406.867813][ C1] net_ratelimit: 86 callbacks suppressed [ 3408.261638][T27199] Bluetooth: hci7: command 0x0406 tx timeout [ 3408.261713][T27199] Bluetooth: hci0: command 0x0406 tx timeout [ 3412.489579][ C1] net_ratelimit: 104 callbacks suppressed [ 3416.389456][ T32] INFO: task syz.4.10978:12324 blocked for more than 143 seconds. [ 3416.389492][ T32] Tainted: G L syzkaller #0 [ 3416.389509][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3416.389523][ T32] task:syz.4.10978 state:D stack:28512 pid:12324 tgid:12321 ppid:7097 task_flags:0x400140 flags:0x00080002 [ 3416.389610][ T32] Call Trace: [ 3416.389621][ T32] [ 3416.389639][ T32] __schedule+0x17db/0x58f0 [ 3416.389711][ T32] ? __pfx___schedule+0x10/0x10 [ 3416.389754][ T32] ? schedule+0x90/0x2b0 [ 3416.389788][ T32] schedule+0x164/0x2b0 [ 3416.389820][ T32] schedule_preempt_disabled+0x13/0x30 [ 3416.389849][ T32] __mutex_lock+0x7c1/0x1550 [ 3416.389881][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 3416.389927][ T32] ? __mutex_lock+0x5d4/0x1550 [ 3416.389966][ T32] ? write_threads+0x3b1/0x610 [ 3416.390007][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 3416.390037][ T32] ? simple_strntoull+0x114/0x190 [ 3416.390091][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.390125][ T32] ? qword_get+0x5ad/0x650 [ 3416.390175][ T32] write_threads+0x3b1/0x610 [ 3416.390218][ T32] ? __pfx_write_threads+0x10/0x10 [ 3416.390266][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.390317][ T32] ? _copy_from_user+0x94/0xb0 [ 3416.390354][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.390387][ T32] ? simple_transaction_get+0x12d/0x160 [ 3416.390432][ T32] nfsctl_transaction_write+0x10f/0x160 [ 3416.390498][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 3416.390537][ T32] vfs_write+0x296/0xba0 [ 3416.390591][ T32] ? __pfx_vfs_write+0x10/0x10 [ 3416.390636][ T32] ? __fget_files+0x2a/0x420 [ 3416.390697][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.390731][ T32] ? __fget_files+0x3a2/0x420 [ 3416.390768][ T32] ? __fget_files+0x2a/0x420 [ 3416.391761][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.391802][ T32] ksys_write+0x150/0x270 [ 3416.391846][ T32] ? __pfx_ksys_write+0x10/0x10 [ 3416.391900][ T32] do_syscall_64+0x166/0x520 [ 3416.391930][ T32] ? trace_irq_disable+0x3b/0x140 [ 3416.391959][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3416.391993][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3416.392019][ T32] RIP: 0033:0x7fa6d1d9e159 [ 3416.392044][ T32] RSP: 002b:00007fa6d2c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3416.392070][ T32] RAX: ffffffffffffffda RBX: 00007fa6d2025fa0 RCX: 00007fa6d1d9e159 [ 3416.392091][ T32] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 3416.392109][ T32] RBP: 00007fa6d1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 3416.392126][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3416.392143][ T32] R13: 00007fa6d2026038 R14: 00007fa6d2025fa0 R15: 00007ffe42679e48 [ 3416.392185][ T32] [ 3416.392223][ T32] [ 3416.392223][ T32] Showing all locks held in the system: [ 3416.392236][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 3416.392269][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3416.392353][ T32] locks held by getty/5378: 2, on CPU#0: [ 3416.392372][ T32] #0: ffff88803597c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3416.392485][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 3416.392554][ T32] locks held by kworker/u8:24/9072: 3, last CPU#0: [ 3416.392573][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3416.392650][ T32] #1: ffffc9000322fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3416.392727][ T32] #2: ffff88807ceb4258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 3416.392816][ T32] locks held by kworker/u8:4/29735: 2, last CPU#0: [ 3416.392835][ T32] #0: ffff888032657140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3416.392907][ T32] #1: ffffc9000501fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3416.392989][ T32] locks held by syz.2.10973/12312: 3, on CPU#0: [ 3416.393008][ T32] #0: ffff888078ade9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 3416.393082][ T32] #1: ffff888059b6e460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 3416.393163][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 3416.393236][ T32] locks held by syz.4.10978/12324: 3, on CPU#0: [ 3416.393256][ T32] #0: ffff88807daa62b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 3416.393335][ T32] #1: ffff88807ad7e460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 3416.393416][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 3416.393487][ T32] locks held by syz.7.11004/12413: 3, on CPU#1: [ 3416.393506][ T32] #0: ffff88807b36beb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 3416.393578][ T32] #1: ffff888051fce460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 3416.393658][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 3416.393729][ T32] locks held by syz.7.11004/12415: 3, on CPU#0: [ 3416.393747][ T32] #0: ffff88807f57d0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 3416.393820][ T32] #1: ffff888051fce460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 3416.393900][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 3416.393975][ T32] locks held by syz.8.11056/12627: 3, on CPU#0: [ 3416.393993][ T32] #0: ffff88805b6d1270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 3416.394066][ T32] #1: ffff888026362460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 3416.394148][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 3416.394439][ T32] locks held by syz.8.11056/12629: 3, on CPU#1: [ 3416.394459][ T32] #0: ffff88802ce8d270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 3416.394532][ T32] #1: ffff888026362460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 3416.394614][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 3416.394690][ T32] [ 3416.394697][ T32] ============================================= [ 3416.394697][ T32] [ 3416.394706][ T32] NMI backtrace for cpu 1 [ 3416.394721][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3416.394746][ T32] Tainted: [L]=SOFTLOCKUP [ 3416.394753][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 3416.394765][ T32] Call Trace: [ 3416.394772][ T32] [ 3416.394781][ T32] dump_stack_lvl+0xe8/0x150 [ 3416.394812][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 3416.394842][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3416.394875][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 3416.394908][ T32] sys_info+0x135/0x170 [ 3416.394933][ T32] watchdog+0xfd7/0x1030 [ 3416.394960][ T32] ? watchdog+0x1c7/0x1030 [ 3416.394985][ T32] kthread+0x38b/0x480 [ 3416.395006][ T32] ? __pfx_watchdog+0x10/0x10 [ 3416.395023][ T32] ? __pfx_kthread+0x10/0x10 [ 3416.395044][ T32] ret_from_fork+0x514/0xb70 [ 3416.395066][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3416.395084][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.395108][ T32] ? __switch_to+0xc89/0x1420 [ 3416.395137][ T32] ? __pfx_kthread+0x10/0x10 [ 3416.395158][ T32] ret_from_fork_asm+0x1a/0x30 [ 3416.395201][ T32] [ 3416.395209][ T32] Sending NMI from CPU 1 to CPUs 0: [ 3416.395243][ C0] NMI backtrace for cpu 0 [ 3416.395261][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 3416.395291][ C0] Tainted: [L]=SOFTLOCKUP [ 3416.395300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 3416.395314][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3416.395342][ C0] Code: 1c 89 02 e9 5e f0 2a f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 31 24 00 fb f4 37 f0 2a f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 3416.395362][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000246 [ 3416.395383][ C0] RAX: 0000000003ed3a7b RBX: ffffffff819bb370 RCX: 8000000000000001 [ 3416.395401][ C0] RDX: 0000000000000001 RSI: ffffffff8e41399c RDI: ffffffff8c6da080 [ 3416.395418][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 3416.395436][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 3416.395454][ C0] R13: 1ffffffff1d51e00 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 3416.395475][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 3416.395494][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3416.395511][ C0] CR2: 0000562fed1b0c00 CR3: 000000000eb48000 CR4: 0000000000350ef0 [ 3416.395530][ C0] Call Trace: [ 3416.395539][ C0] [ 3416.395548][ C0] default_idle+0x9/0x20 [ 3416.395576][ C0] default_idle_call+0x72/0xb0 [ 3416.395612][ C0] do_idle+0x2e0/0x540 [ 3416.395637][ C0] ? __pfx_do_idle+0x10/0x10 [ 3416.395667][ C0] cpu_startup_entry+0x43/0x60 [ 3416.395689][ C0] rest_init+0x378/0x3a0 [ 3416.395722][ C0] ? __pfx_rest_init+0x10/0x10 [ 3416.395759][ C0] ? __pfx_kernel_init+0x10/0x10 [ 3416.395800][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 3416.395837][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.395864][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 3416.395893][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.395922][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 3416.395954][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3416.395982][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 3416.396037][ C0] start_kernel+0x392/0x3e0 [ 3416.396067][ C0] x86_64_start_reservations+0x24/0x30 [ 3416.396103][ C0] x86_64_start_kernel+0x137/0x1b0 [ 3416.396138][ C0] common_startup_64+0x13e/0x157 [ 3416.396180][ C0] [ 3416.396259][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 3417.348892][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3417.359740][ T32] Tainted: [L]=SOFTLOCKUP [ 3417.364060][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 3417.374107][ T32] Call Trace: [ 3417.377384][ T32] [ 3417.380304][ T32] vpanic+0x56d/0xa60 [ 3417.384293][ T32] ? __pfx___schedule+0x10/0x10 [ 3417.389142][ T32] ? __pfx_vpanic+0x10/0x10 [ 3417.393651][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3417.399293][ T32] panic+0xc5/0xd0 [ 3417.403016][ T32] ? __pfx_panic+0x10/0x10 [ 3417.407432][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 3417.412891][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 3417.418264][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 3417.424424][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 3417.430586][ T32] watchdog+0x1030/0x1030 [ 3417.434924][ T32] ? watchdog+0x1c7/0x1030 [ 3417.439342][ T32] kthread+0x38b/0x480 [ 3417.443409][ T32] ? __pfx_watchdog+0x10/0x10 [ 3417.448077][ T32] ? __pfx_kthread+0x10/0x10 [ 3417.452661][ T32] ret_from_fork+0x514/0xb70 [ 3417.457248][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3417.462360][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3417.467991][ T32] ? __switch_to+0xc89/0x1420 [ 3417.472680][ T32] ? __pfx_kthread+0x10/0x10 [ 3417.477264][ T32] ret_from_fork_asm+0x1a/0x30 [ 3417.482056][ T32] [ 3417.485276][ T32] Kernel Offset: disabled [ 3417.489599][ T32] Rebooting in 86400 seconds..