last executing test programs: 25m25.387752246s ago: executing program 32 (id=784): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 23m10.158200051s ago: executing program 33 (id=2203): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000807000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x2}) 22m31.578890446s ago: executing program 34 (id=2575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 20m44.925874085s ago: executing program 35 (id=3688): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) 18m57.707643673s ago: executing program 36 (id=5074): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) 14m38.807590065s ago: executing program 37 (id=7981): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 14m27.051941686s ago: executing program 38 (id=8084): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) 14m0.836650411s ago: executing program 39 (id=8270): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m47.232479847s ago: executing program 40 (id=8361): syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 12m24.616018563s ago: executing program 41 (id=9088): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r1, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) 11m47.658836355s ago: executing program 42 (id=9304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) 10m6.118719201s ago: executing program 43 (id=10372): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x1, 0x20000000, 0x2, 0x8, 0xffffffff, 0x6, 0x0, 0x0, 0x20, 0x200}}, 0x50) 6m46.371703434s ago: executing program 44 (id=12185): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86", 0x28}], 0x2}], 0x1, 0x40800) close(r0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 6m33.912942263s ago: executing program 45 (id=12277): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) dup3(r2, r1, 0x80000) 5m35.987721249s ago: executing program 3 (id=12618): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f00000001c0)={[{}, {@dmask={'dmask', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0xea}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@errors_remount}, {@umask={'umask', 0x3d, 0x9}}, {@keep_last_dots}, {@namecase}, {@discard}, {@errors_continue}]}, 0xfd, 0x152f, &(0x7f0000002c00)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/133) socket$tipc(0x1e, 0x5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5c4) 5m35.048742651s ago: executing program 3 (id=12624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x21e}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x56}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 5m34.368498623s ago: executing program 3 (id=12631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)={[{@disable_ext_identify}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@noextent_cache}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0}) 5m33.068121601s ago: executing program 3 (id=12635): open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0xc07e, 0x67) io_setup(0x80, &(0x7f0000000480)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000240)={[{@usrjquota}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x81}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1000}}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x44d, &(0x7f0000000c80)="$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") io_submit(r1, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="96", 0xfffffe3b, 0x0, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 5m29.721824716s ago: executing program 3 (id=12646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 5m28.135083069s ago: executing program 3 (id=12652): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m26.488241363s ago: executing program 46 (id=12652): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m43.125503155s ago: executing program 9 (id=12920): setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e26, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}]}}}}}}}, 0x0) 4m42.368313355s ago: executing program 9 (id=12921): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) r2 = dup(r0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000300)={0xff, 0x84, 0xff, 0xa, 0x1, "ab5aa80d00", 0x1ff, 0xffffffc0}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xa) 4m40.697412247s ago: executing program 9 (id=12924): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x222400, 0x120) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1, r1}) 4m38.556548316s ago: executing program 9 (id=12929): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 4m36.197312584s ago: executing program 9 (id=12935): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008c"], 0xdd12}], 0x1}, 0x20040051) 4m31.103728012s ago: executing program 9 (id=12943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)='<', 0xffdc, 0x24040005, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 4m25.989401033s ago: executing program 47 (id=12943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)='<', 0xffdc, 0x24040005, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2m11.33916911s ago: executing program 8 (id=13669): sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2m8.86960729s ago: executing program 8 (id=13684): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000480)='\a\x00', 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 2m8.630169949s ago: executing program 8 (id=13685): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 2m8.411821503s ago: executing program 8 (id=13686): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x111509e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x109188a, 0x0) 2m8.135722002s ago: executing program 8 (id=13688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004540)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xfffffffffffffffe, 0xa003, 0x80000000, {0xc, 0x9, 0x6, 0x7d, 0x4, 0x3f47, 0xc05, 0x6, 0xd, 0x8000, 0x0, 0x0, r2, 0xe6f, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m3.505293665s ago: executing program 8 (id=13720): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x200844, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=t,gid=', @ANYRESHEX=0xee01]) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 2m2.431666492s ago: executing program 48 (id=13720): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x200844, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=t,gid=', @ANYRESHEX=0xee01]) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 1m37.079272072s ago: executing program 7 (id=13857): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x8000}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x8002}, 0x90) 1m36.180391112s ago: executing program 7 (id=13860): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2e}], 0x1, 0x2020, 0x0) 1m35.834298421s ago: executing program 7 (id=13863): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x9, 0xf06}}}}]}, 0x44}}, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=@newtfilter={0xf1c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xef0, 0x2, [@TCA_BPF_NAME={0xeec, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0xf1c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m35.155330606s ago: executing program 7 (id=13866): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0xfeca) 1m33.773772351s ago: executing program 7 (id=13871): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m30.575418915s ago: executing program 7 (id=13885): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 1m29.429353778s ago: executing program 49 (id=13885): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 5.543005186s ago: executing program 0 (id=14435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) 5.289158181s ago: executing program 6 (id=14437): syz_emit_ethernet(0x42, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 5.171039592s ago: executing program 0 (id=14438): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x5, 0xfbffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x90, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) 4.992422445s ago: executing program 6 (id=14440): syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) pwritev2(r0, 0x0, 0x0, 0x400, 0x6, 0xa) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0xfffff, 0xfffffffffffffffe) 4.931385894s ago: executing program 0 (id=14441): socket(0x10, 0x3, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19517b", @ANYRES16=0x0, @ANYBLOB="000400000000000000000d0000000500190005000000050018004d00000006000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 4.650052587s ago: executing program 4 (id=14444): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.579404992s ago: executing program 2 (id=14451): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x12) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 2.413869442s ago: executing program 4 (id=14454): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.384714832s ago: executing program 0 (id=14455): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x151) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1.995845161s ago: executing program 4 (id=14457): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000680)={[&(0x7f0000000580)='=rrors=continue']}, 0x0) 1.899852336s ago: executing program 5 (id=14458): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x100) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) 1.899602158s ago: executing program 0 (id=14459): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.836358379s ago: executing program 2 (id=14460): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="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", 0x886) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 1.823888335s ago: executing program 4 (id=14461): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 1.643775414s ago: executing program 6 (id=14463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000040900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000300003802c000080080003400000000220000b801c000980090001006c617374000000000c0002800800014000000400140000001000010000"], 0xe0}}, 0x0) 1.609348195s ago: executing program 5 (id=14464): creat(&(0x7f0000000140)='./file0\x00', 0x40) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 1.315369856s ago: executing program 5 (id=14466): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/22, 0x16, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 1.245391688s ago: executing program 1 (id=14467): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000008401050064010100000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe800000000000000000000000000000010000000000000000080000000800000000000000000000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a0101010000000000000000000000000735000000"], 0x23c}}, 0x0) 1.205591779s ago: executing program 4 (id=14468): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="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", 0x581, 0x6d91fb6106d891cc, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4043, 0xffffffffffffff9b, 0x0, 0x0, 0x0) 1.132492313s ago: executing program 5 (id=14469): r0 = userfaultfd(0x80001) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x3fa, 0xdc0e804142efc812, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x24080) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00005b1000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/15, 0x13}], 0x1d) 1.13069163s ago: executing program 2 (id=14470): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 1.072126245s ago: executing program 4 (id=14471): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 1.003646833s ago: executing program 6 (id=14472): listen(0xffffffffffffffff, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 926.667797ms ago: executing program 1 (id=14473): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0xa5, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 924.88082ms ago: executing program 0 (id=14474): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) io_uring_setup(0x524, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x412, &(0x7f0000000280)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0x4431, &(0x7f0000008940)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents64(r0, &(0x7f0000000080)=""/175, 0xaf) 843.96239ms ago: executing program 5 (id=14475): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 843.716368ms ago: executing program 1 (id=14476): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2/../file0\x00', 0x2028, 0x150) 779.879079ms ago: executing program 2 (id=14477): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @loopback, 0xb3}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) 696.099979ms ago: executing program 6 (id=14478): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900", 0x2c}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 475.329037ms ago: executing program 2 (id=14479): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) write$qrtrtun(r0, &(0x7f0000000480)="38e47d2f0fb7", 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[0x7], &(0x7f00000003c0)=[0x2], 0x0, 0x1}}, 0x3c) 396.622068ms ago: executing program 1 (id=14480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000140), &(0x7f0000000440)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 241.479952ms ago: executing program 6 (id=14481): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x1b1}], 0x1, 0x12000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x30000004}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 237.852511ms ago: executing program 5 (id=14482): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x124) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='^\x00', &(0x7f0000000080)='./file0\x00', r0) 209.781486ms ago: executing program 1 (id=14483): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 95.306728ms ago: executing program 2 (id=14484): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) 0s ago: executing program 1 (id=14485): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0xa, 0x5, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@empty, 0x28, 0x10, 0x6a324e3064b6528a}]}, 0x38}}, 0x40004) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ystem error report for type 5 error -117 [ 1458.478665][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1458.494571][ C0] EXT4-fs (loop2): initial error at time 1778581354: ext4_xattr_inode_iget:437 [ 1458.505035][ C0] EXT4-fs (loop2): last error at time 1778581354: ext4_xattr_inode_iget:437 [ 1458.505140][ T9346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.13058: Parent and EA inode have the same ino 15 [ 1458.571018][ T9346] loop2: lost filesystem error report for type 5 error -117 [ 1458.582008][ T9346] EXT4-fs (loop2): 1 orphan inode deleted [ 1458.675329][ T9346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.071275][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13067'. [ 1460.099431][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13067'. [ 1460.670671][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.331612][ T9400] loop2: detected capacity change from 0 to 4096 [ 1462.709799][ T9400] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1462.806849][ T9400] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex [ 1462.839762][ T9400] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex [ 1462.865004][ T9411] loop8: detected capacity change from 0 to 256 [ 1464.380855][ T9438] batadv_slave_0: entered promiscuous mode [ 1464.835555][ T9437] batadv_slave_0: left promiscuous mode [ 1466.145430][ T9007] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1466.193420][ T9007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1466.222704][ T9007] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1466.307048][ T9007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1466.372779][ T9007] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1466.460775][ T9007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1466.501899][ T9007] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1466.559648][ T9007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1467.066624][ T9457] loop2: detected capacity change from 0 to 32768 [ 1467.443019][ T9457] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.13094 (9457) [ 1468.413891][ T9457] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1468.448789][ T9457] BTRFS info (device loop2): using blake2b checksum algorithm [ 1468.505192][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1468.520122][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1468.553099][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1468.670974][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1468.732765][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1468.830302][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1468.900380][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1468.909467][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.984808][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.002915][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1469.003756][ T9457] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1469.023165][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.039880][ T8606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.229027][ T9457] BTRFS error (device loop2): open_ctree failed: -12 [ 1469.243292][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.250454][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.044842][ T9527] netlink: 'syz.8.13109': attribute type 15 has an invalid length. [ 1470.092785][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13109'. [ 1470.263043][ T9527] netlink: 'syz.8.13109': attribute type 15 has an invalid length. [ 1470.281994][ T8606] netdevsim netdevsim8 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1470.318414][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13109'. [ 1470.334969][ T8606] netdevsim netdevsim8 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1470.393701][ T8606] netdevsim netdevsim8 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1470.443968][ T8606] netdevsim netdevsim8 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1470.527475][ T9534] overlayfs: failed to clone upperpath [ 1471.581091][ T9532] loop2: detected capacity change from 0 to 131072 [ 1471.595675][ T9532] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 1471.602417][ T9532] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1471.633934][ T9532] F2FS-fs (loop2): invalid crc value [ 1471.745611][ T9532] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1471.767863][ T9532] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1471.778429][ T9532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1471.813691][ T31] audit: type=1800 audit(1778581367.365:949): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13112" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 1471.943011][ T9548] fuse: fd is not a fuse device [ 1472.831514][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13120'. [ 1472.870242][ T8605] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1473.217452][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.642619][ T9574] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1473.757125][ T9574] bond1: (slave lo): Enslaving as an active interface with an up link [ 1473.812680][ T9574] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1474.424298][ T9590] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1474.505771][ T9590] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1474.539158][ T9590] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.617947][ T9590] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1475.763795][ T9007] veth0_vlan: entered promiscuous mode [ 1476.029252][ T9007] veth1_vlan: entered promiscuous mode [ 1476.348306][ T9007] veth0_macvtap: entered promiscuous mode [ 1476.453311][ T9007] veth1_macvtap: entered promiscuous mode [ 1476.610904][ T9644] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.13139'. [ 1476.637995][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.723878][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.812247][ T9646] loop2: detected capacity change from 0 to 128 [ 1476.835864][ T8605] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.873188][ T9646] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1476.895001][ T2758] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.927661][ T9646] hpfs: filesystem error: improperly stopped [ 1476.945730][ T9646] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1476.978095][ T2758] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.019354][ T2758] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.036706][ T9646] hpfs: You really don't want any checks? You are crazy... [ 1477.110164][ T9646] hpfs: hpfs_map_sector(): read error [ 1477.149980][ T9646] hpfs: code page support is disabled [ 1477.226363][ T9646] hpfs: hpfs_map_4sectors(): unaligned read [ 1477.272341][ T9646] hpfs: hpfs_map_4sectors(): unaligned read [ 1477.323375][ T9646] hpfs: filesystem error: unable to find root dir [ 1477.589466][ T9646] hpfs: hpfs_map_4sectors(): unaligned read [ 1477.660181][ T9646] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1477.700485][T29396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.754465][T29396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.984373][T29398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.021225][T29398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.232699][ T9675] overlayfs: failed to clone lowerpath [ 1478.456206][ T8866] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1478.662782][ T8866] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1478.720160][ T8866] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1478.776444][ T8866] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1478.829768][ T8866] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1478.908465][ T8866] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1478.982156][ T8866] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1479.026636][ T8866] usb 9-1: Product: syz [ 1479.054257][ T8866] usb 9-1: SerialNumber: syz [ 1479.101867][ T9678] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1479.137524][ T9700] netlink: 'syz.2.13158': attribute type 6 has an invalid length. [ 1479.384685][ T9678] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1479.430231][ T9678] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1479.537378][ T9707] input: syz0 as /devices/virtual/input/input79 [ 1479.685883][ T9709] loop7: detected capacity change from 0 to 2048 [ 1479.732826][ T9709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1480.142635][ T9678] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1480.185501][ T9678] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1480.440209][ T9724] syzkaller1: entered allmulticast mode [ 1480.464664][ T8866] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1480.500419][ T8866] cdc_ncm 9-1:1.0: setting tx_max = 16384 [ 1480.796596][ T8866] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1480.901582][ T8866] usb 9-1: USB disconnect, device number 17 [ 1480.980635][ T8866] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1482.026143][ T9755] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1483.205022][ T8866] IPVS: starting estimator thread 0... [ 1483.332546][ T9787] IPVS: using max 32 ests per chain, 76800 per kthread [ 1483.575492][ T9791] loop2: detected capacity change from 0 to 128 [ 1483.615321][ T9791] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 1484.458252][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.280062][ T9827] tipc: Started in network mode [ 1485.312626][ T9827] tipc: Node identity ac14140f, cluster identity 4711 [ 1485.383346][ T9827] tipc: Enabled bearer , priority 10 [ 1485.428980][ T9834] loop8: detected capacity change from 0 to 512 [ 1485.481952][ T9834] EXT4-fs: Ignoring removed orlov option [ 1485.539388][ T9834] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1485.575604][ T9834] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1485.670240][ T9834] EXT4-fs (loop8): 1 truncate cleaned up [ 1485.822214][ T9834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1486.216908][ T2518] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.502687][ T1355] tipc: Node number set to 2886997007 [ 1486.666812][ T9868] loop8: detected capacity change from 0 to 512 [ 1486.675562][ T9864] loop7: detected capacity change from 0 to 2048 [ 1486.707764][ T9868] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1486.764566][ T9868] EXT4-fs (loop8): 1 truncate cleaned up [ 1486.783752][ T9868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1486.813354][ T9868] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.13213: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1486.839944][ T9868] EXT4-fs (loop8): Remounting filesystem read-only [ 1486.861394][ T9864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1487.091240][ T9864] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1487.175156][ T2518] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1487.301430][ T9864] EXT4-fs (loop7): Remounting filesystem read-only [ 1487.309917][ T9864] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 1487.615584][ T9007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.456431][ T9905] loop8: detected capacity change from 0 to 2048 [ 1488.557311][ T9905] hpfs: hpfs_map_sector(): read error [ 1488.782356][ T9915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1489.073288][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13231'. [ 1489.400582][ T9933] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1489.634001][ T9941] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13238'. [ 1489.922547][ T9947] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 1490.254452][ T1355] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1490.455252][ T1355] usb 9-1: Using ep0 maxpacket: 32 [ 1490.478216][ T1355] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1490.509596][ T1355] usb 9-1: config 0 has no interface number 0 [ 1490.539805][ T1355] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1490.569245][ T1355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.579175][ T1355] usb 9-1: Product: syz [ 1490.583349][ T1355] usb 9-1: Manufacturer: syz [ 1490.590619][ T1355] usb 9-1: SerialNumber: syz [ 1490.620937][ T1355] usb 9-1: config 0 descriptor?? [ 1490.703394][ T9977] loop2: detected capacity change from 0 to 8 [ 1490.752789][ T9977] SQUASHFS error: Unable to read directory block [629:46] [ 1491.108419][ T1355] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1491.174245][ T1355] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1491.521308][ T9997] pim6reg1: left promiscuous mode [ 1491.548389][ T9997] pim6reg1: left allmulticast mode [ 1491.630283][ T1355] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1491.674218][ T1355] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1491.762045][ T1355] usb 9-1: USB disconnect, device number 18 [ 1492.067296][T10009] binder: 10007:10009 ioctl 40046205 0 returned -22 [ 1492.769342][T10028] ceph: No mds server is up or the cluster is laggy [ 1495.703737][T10113] could not open pipe file descriptor [ 1495.787530][T10107] loop8: detected capacity change from 0 to 4096 [ 1497.025219][T10133] loop7: detected capacity change from 0 to 512 [ 1497.068297][T10133] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1497.119232][T10133] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1497.185376][T10133] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 1497.274154][T10133] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1497.333072][T10133] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.13306: Failed to acquire dquot type 1 [ 1497.390887][T10133] loop7: lost filesystem error report for type 5 error -5 [ 1497.395563][T10133] EXT4-fs (loop7): Remounting filesystem read-only [ 1497.402822][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1497.402847][ C1] EXT4-fs (loop7): initial error at time 1778581392: ext4_acquire_dquot:7034 [ 1497.402878][ C1] EXT4-fs (loop7): last error at time 1778581392: ext4_acquire_dquot:7034 [ 1497.616219][T10133] EXT4-fs (loop7): 1 truncate cleaned up [ 1497.651810][T10133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1497.882000][ T9007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.989580][T10149] loop8: detected capacity change from 0 to 4096 [ 1498.007254][T10152] loop2: detected capacity change from 0 to 512 [ 1498.033555][T10152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1498.101162][T10149] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1498.265441][T10152] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.13313: corrupted in-inode xattr: e_value size too large [ 1498.290475][T10149] ntfs3(loop8): Failed to load $Extend (-22). [ 1498.340476][T10149] ntfs3(loop8): Failed to initialize $Extend. [ 1498.422072][T10152] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1498.423115][T10152] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.13313: couldn't read orphan inode 15 (err -117) [ 1498.433576][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1498.433602][ C0] EXT4-fs (loop2): initial error at time 1778581393: ext4_iget_extra_inode:5128: inode 15 [ 1498.433642][ C0] EXT4-fs (loop2): last error at time 1778581393: ext4_iget_extra_inode:5128: inode 15 [ 1498.562427][T10152] loop2: lost filesystem error report for type 5 error -117 [ 1498.570201][T10152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.662572][T10163] overlayfs: invalid redirect ((null)) [ 1499.059775][T10174] netlink: 27 bytes leftover after parsing attributes in process `syz.7.13318'. [ 1499.078018][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.364384][T10199] loop8: detected capacity change from 0 to 512 [ 1500.373521][T10196] loop2: detected capacity change from 0 to 512 [ 1500.442123][T10199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1500.464552][T10196] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.13326: corrupted in-inode xattr: e_value size too large [ 1500.533697][T10199] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.626412][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13329'. [ 1500.658058][T10196] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1500.661665][T10196] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.13326: couldn't read orphan inode 15 (err -117) [ 1500.671127][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1500.671150][ C1] EXT4-fs (loop2): initial error at time 1778581396: ext4_iget_extra_inode:5128: inode 15 [ 1500.671189][ C1] EXT4-fs (loop2): last error at time 1778581396: ext4_iget_extra_inode:5128: inode 15 [ 1500.825759][T10196] loop2: lost filesystem error report for type 5 error -117 [ 1500.828334][T10196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1500.889143][ T31] audit: type=1800 audit(1778581396.412:950): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13328" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1501.197933][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.437256][ T2518] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.512926][T10219] loop2: detected capacity change from 0 to 32768 [ 1502.576734][T10219] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1502.631902][T10219] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1502.733390][T10219] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 1502.751162][ T1357] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1502.760116][ T1357] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1503.179778][ T1357] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 419ms [ 1503.214212][ T1357] gfs2: fsid=syz:syz.0: jid=0: Done [ 1503.258284][T10219] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1503.588097][T10248] loop7: detected capacity change from 0 to 2048 [ 1503.684204][T10248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1503.823811][T10248] EXT4-fs error (device loop7): ext4_ext_precache:648: inode #2: comm syz.7.13341: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1504.023101][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1504.087367][ T9007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.115479][T10266] loop8: detected capacity change from 0 to 256 [ 1505.457875][ T1355] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1505.653030][ T1355] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1505.701296][ T1355] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.742039][ T1355] usb 9-1: config 220 has no interface number 2 [ 1505.781153][ T1355] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1505.825778][ T1355] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1505.855402][ T1355] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1505.876353][ T1355] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1505.923212][ T1355] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1505.960859][ T1355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.009651][ T1355] usb 9-1: Product: syz [ 1506.030870][ T1355] usb 9-1: Manufacturer: syz [ 1506.033724][T10277] loop2: detected capacity change from 0 to 256 [ 1506.058029][ T1355] usb 9-1: SerialNumber: syz [ 1506.082172][T10277] exfat: Deprecated parameter 'utf8' [ 1506.162019][T10277] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1506.559207][ T31] audit: type=1800 audit(1778581402.068:951): pid=10266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13346" name="file1" dev="loop8" ino=1049023 res=0 errno=0 [ 1506.613709][ T1355] usb 9-1: selecting invalid altsetting 0 [ 1506.683625][ T1355] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1506.712536][ T1355] uvcvideo 9-1:220.0: No valid video chain found. [ 1506.748487][ T1355] usb 9-1: selecting invalid altsetting 0 [ 1506.755130][ T1355] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1506.779507][ T1355] usb 9-1: USB disconnect, device number 19 [ 1507.699689][T10307] loop2: detected capacity change from 0 to 2048 [ 1507.906882][T10307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.972213][T10307] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.338343][ T8868] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1508.523208][ T8868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.594179][ T8868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1508.642384][ T8868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 110, changing to 7 [ 1508.672702][ T8868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 25967, setting to 1024 [ 1508.745509][ T8868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1508.798347][ T8868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.846980][ T8868] usb 3-1: Product: syz [ 1508.870834][ T8868] usb 3-1: Manufacturer: syz [ 1508.897782][ T8868] usb 3-1: SerialNumber: syz [ 1510.016122][ T8868] cdc_ncm 3-1:1.0: bind() failure [ 1510.028911][T10354] netlink: 52 bytes leftover after parsing attributes in process `syz.7.13370'. [ 1510.079632][ T8868] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1510.115696][ T8868] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1510.157139][ T8868] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1510.205102][T10354] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1510.217962][ T8868] usb 3-1: USB disconnect, device number 37 [ 1510.866569][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.534390][T10374] loop8: detected capacity change from 0 to 256 [ 1511.600467][T10374] exfat: Deprecated parameter 'namecase' [ 1511.677821][T10374] exfat: Deprecated parameter 'namecase' [ 1511.798761][T10374] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1512.937063][T10367] loop7: detected capacity change from 0 to 32768 [ 1512.983129][T10367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.13374 (10367) [ 1513.089556][T10367] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1513.147629][T10367] BTRFS info (device loop7): using crc32c checksum algorithm [ 1513.334088][T10367] BTRFS info (device loop7): enabling ssd optimizations [ 1513.348849][T10367] BTRFS info (device loop7): turning on flush-on-commit [ 1513.361706][T10367] BTRFS info (device loop7): enabling free space tree [ 1513.371057][T10367] BTRFS info (device loop7): enabling auto defrag [ 1513.379093][T10367] BTRFS info (device loop7): use lzo compression, level 1 [ 1513.387808][T10367] BTRFS info (device loop7): max_inline set to 4096 [ 1513.714923][ T1355] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1513.731557][T10445] BTRFS critical (device loop7 state E): emergency shutdown [ 1513.892008][ T31] audit: type=1800 audit(1778581409.402:952): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.13374" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1513.932006][ T1355] usb 3-1: Using ep0 maxpacket: 32 [ 1513.997632][ T1355] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1514.023300][ T1355] usb 3-1: config 0 has no interface number 0 [ 1514.053838][ T1355] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1514.116343][ T1355] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1514.162772][ T1355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.183359][ T2758] BTRFS error (device loop7 state E): cow_file_range failed, root=5 inode=260 start=0 len=4096 cur_offset=0 cur_alloc_size=0: -5 [ 1514.192744][ T1355] usb 3-1: Product: syz [ 1514.237770][ T1355] usb 3-1: Manufacturer: syz [ 1514.261408][ T2758] BTRFS error (device loop7 state E): failed to run delalloc range, root=5 ino=260 folio=0 submit_bitmap=0 start=0 len=4096: -5 [ 1514.267087][ T1355] usb 3-1: SerialNumber: syz [ 1514.329132][ T1355] usb 3-1: config 0 descriptor?? [ 1514.518826][ T9007] BTRFS info (device loop7 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1514.926689][T10462] loop8: detected capacity change from 0 to 128 [ 1515.015372][ T5282] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1515.519941][ T1355] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1515.549318][ T1355] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1515.577452][ T1355] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1515.640876][ T1355] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1515.664460][T10478] netlink: 'syz.8.13403': attribute type 4 has an invalid length. [ 1515.711194][ T1355] usb 3-1: USB disconnect, device number 38 [ 1515.885689][T10483] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.13405'. [ 1516.394993][T10493] tls_set_device_offload_rx: netdev not found [ 1516.460297][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13409'. [ 1516.832263][T10504] overlayfs: failed to clone upperpath [ 1517.284150][T10508] loop8: detected capacity change from 0 to 4096 [ 1517.489966][T10508] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1517.555700][T10508] ntfs3(loop8): Failed to load $Extend (-22). [ 1517.603146][T10508] ntfs3(loop8): Failed to initialize $Extend. [ 1517.924164][ T2518] ntfs3(loop8): ino=9, ntfs_sync_fs failed, -22. [ 1519.817705][T10547] loop8: detected capacity change from 0 to 131072 [ 1519.839061][T10547] F2FS-fs (loop8): Test dummy encryption mode enabled [ 1519.863192][T10547] F2FS-fs (loop8): invalid crc value [ 1519.965759][T10547] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1519.988920][T10547] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1520.865260][ T31] audit: type=1800 audit(1778581416.367:953): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13434" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1524.524336][T10618] loop7: detected capacity change from 0 to 131072 [ 1524.544784][T10618] F2FS-fs (loop7): Test dummy encryption mode enabled [ 1524.556994][T10618] F2FS-fs (loop7): invalid crc value [ 1524.670146][T10618] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1524.706232][T10618] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1524.796559][ T8866] kernel write not supported for file bpf-map (pid: 8866 comm: kworker/1:7) [ 1525.853152][T10651] loop2: detected capacity change from 0 to 4096 [ 1526.317806][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1526.719364][T10666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1527.027581][T10651] ntfs3(loop2): ino=21, "file1" failed to extend initialized size to 666475. [ 1528.984253][T10700] loop8: detected capacity change from 0 to 40427 [ 1529.016628][T10700] F2FS-fs (loop8): build fault injection rate: 174 [ 1529.023240][T10700] F2FS-fs (loop8): build fault injection type: 0x3bfe8c [ 1529.039482][T10700] F2FS-fs (loop8): invalid crc value [ 1529.144082][T10700] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1529.169521][T10700] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1529.247804][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13477'. [ 1529.328504][T10700] F2FS-fs (loop8): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2e2/0x8f0 [ 1529.372180][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13477'. [ 1529.409452][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13477'. [ 1529.445939][T10700] syz.8.13473: attempt to access beyond end of device [ 1529.445939][T10700] loop8: rw=2049, sector=45096, nr_sectors = 280 limit=40427 [ 1529.503524][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13477'. [ 1529.739442][ T2518] syz-executor: attempt to access beyond end of device [ 1529.739442][ T2518] loop8: rw=2049, sector=45376, nr_sectors = 8 limit=40427 [ 1529.895710][ T2518] CPU: 1 UID: 0 PID: 2518 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1529.895751][ T2518] Tainted: [L]=SOFTLOCKUP [ 1529.895761][ T2518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1529.895776][ T2518] Call Trace: [ 1529.895787][ T2518] [ 1529.895799][ T2518] dump_stack_lvl+0xe8/0x150 [ 1529.895834][ T2518] f2fs_stop_checkpoint+0x3c7/0x590 [ 1529.895871][ T2518] f2fs_write_end_io+0x1274/0x1740 [ 1529.895931][ T2518] __submit_merged_bio+0x256/0x6a0 [ 1529.895968][ T2518] __submit_merged_write_cond+0x3c9/0x4e0 [ 1529.896024][ T2518] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1529.896086][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896128][ T2518] f2fs_write_data_pages+0x287e/0x34f0 [ 1529.896160][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896190][ T2518] ? __lock_acquire+0x6b5/0x2cf0 [ 1529.896261][ T2518] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1529.896347][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896377][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896408][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896438][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896470][ T2518] ? __bfs+0x153/0x290 [ 1529.896498][ T2518] ? __pfx_hlock_conflict+0x10/0x10 [ 1529.896538][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896582][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896612][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896642][ T2518] ? __lock_acquire+0x146e/0x2cf0 [ 1529.896708][ T2518] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1529.896742][ T2518] do_writepages+0x32e/0x550 [ 1529.896773][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896806][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896841][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.896871][ T2518] ? do_raw_spin_unlock+0xf5/0x210 [ 1529.896914][ T2518] filemap_fdatawrite+0x1e9/0x2f0 [ 1529.896949][ T2518] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1529.897023][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.897056][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.897092][ T2518] ? do_raw_spin_unlock+0xf5/0x210 [ 1529.897137][ T2518] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1529.897190][ T2518] f2fs_write_checkpoint+0x9df/0x26a0 [ 1529.897224][ T2518] ? __lock_acquire+0x6b5/0x2cf0 [ 1529.897292][ T2518] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1529.897324][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.897421][ T2518] kill_f2fs_super+0x314/0x730 [ 1529.897464][ T2518] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1529.897512][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.897542][ T2518] ? lockdep_hardirqs_on+0x7a/0x110 [ 1529.897579][ T2518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1529.897626][ T2518] deactivate_locked_super+0xbc/0x130 [ 1529.897670][ T2518] cleanup_mnt+0x437/0x4d0 [ 1529.897708][ T2518] ? _raw_spin_unlock_irq+0x23/0x50 [ 1529.897747][ T2518] task_work_run+0x1d9/0x270 [ 1529.897789][ T2518] ? __pfx_task_work_run+0x10/0x10 [ 1529.897840][ T2518] exit_to_user_mode_loop+0xf3/0x4d0 [ 1529.897865][ T2518] ? rcu_is_watching+0x15/0xb0 [ 1529.897899][ T2518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.897928][ T2518] do_syscall_64+0x33e/0xf80 [ 1529.897963][ T2518] ? trace_irq_disable+0x3b/0x140 [ 1529.898010][ T2518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.898036][ T2518] RIP: 0033:0x7f37a999e017 [ 1529.898061][ T2518] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1529.898082][ T2518] RSP: 002b:00007ffcaa5f7ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1529.898108][ T2518] RAX: 0000000000000000 RBX: 00007f37a9a32120 RCX: 00007f37a999e017 [ 1529.898126][ T2518] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcaa5f7d60 [ 1529.898143][ T2518] RBP: 00007ffcaa5f7d60 R08: 00007ffcaa5f8d60 R09: 00000000ffffffff [ 1529.898161][ T2518] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcaa5f8df0 [ 1529.898179][ T2518] R13: 00007f37a9a32120 R14: 00000000001753c1 R15: 00007ffcaa5f8e30 [ 1529.898221][ T2518] [ 1530.306751][ T2518] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1530.648376][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1530.834892][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1532.112443][T10747] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13491'. [ 1532.186585][T10747] bridge0: port 3(syz_tun) entered disabled state [ 1532.193434][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.200804][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.863579][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1534.089474][T10798] loop8: detected capacity change from 0 to 16 [ 1534.139269][T10798] erofs (device loop8): rootino(nid 36) is not a directory(i_mode 127766) [ 1534.640504][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13512'. [ 1534.987379][ T8870] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1535.174792][ T198] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1535.204428][ T8870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.265715][ T8870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.322177][ T8870] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1535.392777][ T8870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.470635][ T8870] usb 3-1: config 0 descriptor?? [ 1535.997259][ T8870] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 1536.062024][ T8870] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1536.179617][ T8870] cp2112 0003:10C4:EA90.0034: Part Number: 0x00 Device Version: 0x00 [ 1536.598237][ T8870] cp2112 0003:10C4:EA90.0034: error setting SMBus config [ 1536.697074][ T8870] cp2112 0003:10C4:EA90.0034: probe with driver cp2112 failed with error -71 [ 1536.823490][ T8870] usb 3-1: USB disconnect, device number 39 [ 1536.831816][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13522'. [ 1536.960134][T10837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.999613][T10800] loop7: detected capacity change from 0 to 131072 [ 1537.029641][T10800] F2FS-fs (loop7): Test dummy encryption mode enabled [ 1537.038929][T10800] F2FS-fs (loop7): invalid crc value [ 1537.336246][T10800] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1537.579492][T10836] fido_id[10836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1537.912617][T10858] netlink: 'syz.1.13524': attribute type 4 has an invalid length. [ 1539.550308][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1540.308827][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13541'. [ 1540.397660][T10907] geneve2: entered promiscuous mode [ 1541.669174][T10932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1542.464914][T10930] loop7: detected capacity change from 0 to 131072 [ 1542.494606][T10930] F2FS-fs (loop7): invalid crc value [ 1542.577342][T10930] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1542.597238][T10930] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1544.596639][ T8894] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1544.842216][ T8894] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1544.913662][ T8894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.960332][ T8894] usb 9-1: Product: syz [ 1545.001214][ T8894] usb 9-1: Manufacturer: syz [ 1545.048630][ T8894] usb 9-1: SerialNumber: syz [ 1545.126711][ T8894] usb 9-1: config 0 descriptor?? [ 1545.432392][ T8894] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1545.484966][ T8870] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1545.679395][ T8870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1545.739994][ T8870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.791523][ T8870] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1545.837664][ T8870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.904139][ T8870] usb 3-1: config 0 descriptor?? [ 1545.953707][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.003020][ T8870] hub 3-1:0.0: USB hub found [ 1546.234824][ T8870] hub 3-1:0.0: 1 port detected [ 1546.663205][ T8894] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1546.709142][ T8894] usb 9-1: USB disconnect, device number 20 [ 1547.113767][ T8868] hub 3-1:0.0: activate --> -90 [ 1547.524384][ T8870] usb 3-1: USB disconnect, device number 40 [ 1550.002474][ T31] audit: type=1326 audit(1778581445.487:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.2.13595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f445a59cdd9 code=0x0 [ 1551.513775][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13601'. [ 1551.856107][T11091] bond1: entered promiscuous mode [ 1551.904323][T11091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1552.114101][T11101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1552.151570][T11101] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1552.194342][T11101] bond1: (slave sit1): Error -95 calling set_mac_address [ 1552.261741][T11115] netlink: 27 bytes leftover after parsing attributes in process `syz.6.13605'. [ 1552.942677][T11125] loop8: detected capacity change from 0 to 256 [ 1552.977025][T11084] loop7: detected capacity change from 0 to 40427 [ 1552.978373][T11125] exfat: Deprecated parameter 'utf8' [ 1553.049357][T11084] F2FS-fs (loop7): invalid crc value [ 1553.052352][T11125] exfat: Deprecated parameter 'namecase' [ 1553.099486][T11125] exfat: Deprecated parameter 'namecase' [ 1553.105200][T11125] exfat: Deprecated parameter 'utf8' [ 1553.227816][T11125] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1553.283102][T11125] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 1553.451879][ T31] audit: type=1800 audit(1778581448.935:955): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13607" name="file1" dev="loop8" ino=1049025 res=0 errno=0 [ 1553.509297][ T31] audit: type=1800 audit(1778581448.965:956): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13607" name="file1" dev="loop8" ino=1049025 res=0 errno=0 [ 1553.547086][T11084] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1554.162722][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13615'. [ 1554.209973][T11154] loop2: detected capacity change from 0 to 512 [ 1554.269117][T11154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1554.356404][T11154] EXT4-fs (loop2): 1 truncate cleaned up [ 1554.406579][T11154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1554.786368][ T31] audit: type=1804 audit(1778581450.274:957): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.13617" name="file1" dev="tmpfs" ino=1158 res=1 errno=0 [ 1555.115202][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1555.754779][T11177] xt_hashlimit: size too large, truncated to 1048576 [ 1557.290510][T11209] xt_connbytes: Forcing CT accounting to be enabled [ 1557.297537][T11209] set match dimension is over the limit! [ 1557.701267][T11217] netlink: 'syz.6.13630': attribute type 1 has an invalid length. [ 1557.950311][T11217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1558.053064][T11225] bond1: (slave lo): Releasing backup interface [ 1558.131556][T11225] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1558.270570][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 1558.385911][T11225] bridge_slave_0: left allmulticast mode [ 1558.415352][T11225] bridge_slave_0: left promiscuous mode [ 1558.470319][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069776400: rx timeout, send abort [ 1558.486353][T11225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.719178][T11225] bridge_slave_1: left allmulticast mode [ 1558.734216][T11243] netlink: 'syz.6.13637': attribute type 1 has an invalid length. [ 1558.758747][T11243] netlink: 'syz.6.13637': attribute type 4 has an invalid length. [ 1558.768936][T11225] bridge_slave_1: left promiscuous mode [ 1558.784528][T11243] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.13637'. [ 1558.811171][T11225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.884045][T11225] bond0: (slave bond_slave_0): Releasing backup interface [ 1558.966085][T11225] bond0: (slave bond_slave_1): Releasing backup interface [ 1558.978980][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069776400: abort rx timeout. Force session deactivation [ 1559.175671][T11225] team0: Port device team_slave_0 removed [ 1559.283557][T11225] team0: Port device team_slave_1 removed [ 1559.316154][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1559.325203][T11225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1559.368876][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1559.428656][T11225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.567162][T11225] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1559.599272][T11225] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1560.634147][T11283] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.13652'. [ 1563.915603][T11308] overlayfs: failed to resolve './file0': -2 [ 1564.501036][T11335] xt_hashlimit: size too large, truncated to 1048576 [ 1564.635212][T11332] loop7: detected capacity change from 0 to 2048 [ 1564.831491][T11332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1566.324970][T21474] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1566.389125][ T1357] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1566.416590][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13682'. [ 1566.576125][ T1357] usb 3-1: Using ep0 maxpacket: 32 [ 1566.609777][ T1357] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1566.639410][ T1357] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1566.665026][ T1357] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1566.684235][ T1357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1566.697586][ T1357] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1566.723953][ T1357] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1566.772451][ T1357] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1566.812450][ T1357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.841990][ T1357] usb 3-1: config 0 descriptor?? [ 1567.127431][ T1357] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1567.493759][ C0] usblp0: nonzero read bulk status received: -71 [ 1567.494379][ T8866] usb 3-1: USB disconnect, device number 41 [ 1567.507871][T11371] usblp0: error -71 reading from printer [ 1567.554331][ T8866] usblp0: removed [ 1567.971449][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13695'. [ 1568.912076][T11422] netlink: 'syz.5.13700': attribute type 1 has an invalid length. [ 1569.059242][T11424] gretap1: entered allmulticast mode [ 1569.097305][T11424] bond2: (slave gretap1): making interface the new active one [ 1569.111637][T11424] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1572.410239][T21474] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1572.542023][T21474] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1572.582059][T21474] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.609552][T21474] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1573.104150][T21474] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1573.144648][T21474] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1573.193590][T21474] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.210645][ T8897] IPVS: starting estimator thread 0... [ 1573.225104][T21474] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1573.332779][T11495] IPVS: using max 29 ests per chain, 69600 per kthread [ 1573.616711][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 1573.686750][T21474] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1573.691071][T29412] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1573.718120][T21474] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1573.733313][T21474] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.744013][T29412] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1573.754997][T21474] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1573.768926][T29412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1573.790469][T29412] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1573.804198][T29412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1574.137169][T21474] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1574.182169][T21474] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1574.225845][T21474] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.265530][T21474] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1574.353343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 1574.742379][T11522] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 1575.634860][ T5629] Bluetooth: hci2: command 0x1003 tx timeout [ 1575.645981][ T5683] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1575.876725][ T5683] Bluetooth: hci6: command tx timeout [ 1576.249166][T11556] netlink: 'syz.6.13742': attribute type 1 has an invalid length. [ 1576.594191][T21474] bond0 (unregistering): Released all slaves [ 1576.641146][T21474] bond1 (unregistering): Released all slaves [ 1576.798586][T11556] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1576.807830][T11560] erspan0: entered allmulticast mode [ 1576.867618][T11560] bond5: (slave erspan0): making interface the new active one [ 1576.883358][T11560] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 1576.938854][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1577.135445][T21474] tipc: Left network mode [ 1577.958155][ T5683] Bluetooth: hci6: command tx timeout [ 1578.635462][T21474] veth1_macvtap: left promiscuous mode [ 1578.672247][T21474] veth0_macvtap: left promiscuous mode [ 1578.720638][T21474] veth1_vlan: left promiscuous mode [ 1578.770576][T21474] veth0_vlan: left promiscuous mode [ 1579.051126][T11607] loop2: detected capacity change from 0 to 32768 [ 1579.058885][T11607] btrfs: Deprecated parameter 'usebackuproot' [ 1579.064965][T11607] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1579.075676][T11607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.13755 (11607) [ 1579.136882][T11607] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1579.147129][T11607] BTRFS info (device loop2): using crc32c checksum algorithm [ 1579.254591][T12256] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1579.290575][T11607] BTRFS error (device loop2): failed to load root extent [ 1579.298047][T11607] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1579.306336][T29396] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1579.325820][T11607] BTRFS warning (device loop2): couldn't read tree root [ 1579.334243][T11607] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1579.343136][T29396] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1579.381578][T11607] BTRFS warning (device loop2): couldn't read tree root [ 1579.391693][T11607] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1579.478405][T11607] BTRFS info (device loop2): rebuilding free space tree [ 1579.510179][T11607] BTRFS info (device loop2): checking UUID tree [ 1579.524980][T11607] BTRFS info (device loop2): enabling ssd optimizations [ 1579.532023][T11607] BTRFS info (device loop2): turning on async discard [ 1579.538902][T11607] BTRFS info (device loop2): enabling free space tree [ 1579.546505][T11607] BTRFS info (device loop2): force clearing of disk cache [ 1579.553737][T11607] BTRFS info (device loop2): trying to use backup root at mount time [ 1579.562049][T11607] BTRFS info (device loop2): force zlib compression, level 3 [ 1579.693981][ T1357] libceph: connect (1)[c::]:6789 error -101 [ 1579.722399][ T1357] libceph: mon0 (1)[c::]:6789 connect error [ 1579.758795][T11627] ceph: No mds server is up or the cluster is laggy [ 1579.767550][ T1357] libceph: connect (1)[c::]:6789 error -101 [ 1579.774568][ T1357] libceph: mon0 (1)[c::]:6789 connect error [ 1580.038699][ T5683] Bluetooth: hci6: command tx timeout [ 1580.245203][ T6700] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1582.119167][ T5683] Bluetooth: hci6: command tx timeout [ 1582.630627][T11679] tipc: Failed to remove unknown binding: 66,1,1/0:619236442/619236444 [ 1582.649868][T11679] tipc: Failed to remove unknown binding: 66,1,1/0:619236442/619236444 [ 1582.864162][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1584.217297][T11503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.252542][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.281411][T11503] bridge_slave_0: entered allmulticast mode [ 1584.331916][T11503] bridge_slave_0: entered promiscuous mode [ 1584.375898][T11503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.412357][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.437527][T11503] bridge_slave_1: entered allmulticast mode [ 1584.476729][T11503] bridge_slave_1: entered promiscuous mode [ 1584.543101][T11725] loop2: detected capacity change from 0 to 64 [ 1584.693654][T11503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.757151][T11503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.969070][T11503] team0: Port device team_slave_0 added [ 1585.018654][T11503] team0: Port device team_slave_1 added [ 1585.271201][T11503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1585.311492][T11503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1585.421237][T11503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1585.489749][T11503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1585.508310][T11503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1585.571169][T11503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.904928][T11503] hsr_slave_0: entered promiscuous mode [ 1585.938092][T11503] hsr_slave_1: entered promiscuous mode [ 1585.976553][T11503] debugfs: 'hsr0' already exists in 'hsr' [ 1586.009840][T11503] Cannot create hsr debugfs directory [ 1589.795001][T11792] loop2: detected capacity change from 0 to 128 [ 1591.156025][T11814] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.13812'. [ 1591.752771][ T5683] Bluetooth: Wrong link type (-71) [ 1593.119598][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13829'. [ 1594.104773][T11880] netlink: 'syz.6.13835': attribute type 1 has an invalid length. [ 1594.289269][T11840] loop7: detected capacity change from 0 to 40427 [ 1594.314200][T11840] F2FS-fs (loop7): build fault injection rate: 174 [ 1594.350726][T11880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1594.368724][T11840] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 1594.433994][T11840] F2FS-fs (loop7): invalid crc value [ 1595.141988][T11897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13840'. [ 1595.181662][T11503] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1595.192757][T11840] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1595.229769][T11902] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13840'. [ 1595.236220][T11840] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1595.256287][T11503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1595.271047][T11503] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1595.293714][T11503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1595.305057][T11503] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1595.389369][T11503] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1595.416394][T11503] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1595.460726][T11503] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1595.575696][T11915] fuse: fd is not a fuse device [ 1595.941388][T11503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.041242][T11503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.140119][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.147349][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.235856][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.243086][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.799704][T11937] lo: entered allmulticast mode [ 1596.844726][T11937] lo: left allmulticast mode [ 1598.195864][ T2758] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1598.375532][T11975] FAULT_FLAG_ALLOW_RETRY missing 801 [ 1598.414790][T11975] CPU: 1 UID: 0 PID: 11975 Comm: syz.6.13856 Tainted: G L syzkaller #0 PREEMPT(full) [ 1598.414832][T11975] Tainted: [L]=SOFTLOCKUP [ 1598.414842][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1598.414858][T11975] Call Trace: [ 1598.414868][T11975] [ 1598.414880][T11975] dump_stack_lvl+0xe8/0x150 [ 1598.414916][T11975] handle_userfault+0x1532/0x17f0 [ 1598.414972][T11975] ? __pfx___folio_put+0x10/0x10 [ 1598.415009][T11975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.415047][T11975] ? __pfx_handle_userfault+0x10/0x10 [ 1598.415104][T11975] ? handle_mm_fault+0xee/0x3170 [ 1598.415144][T11975] handle_mm_fault+0x1bd7/0x3170 [ 1598.415196][T11975] ? handle_mm_fault+0xee/0x3170 [ 1598.415238][T11975] ? __pfx_handle_mm_fault+0x10/0x10 [ 1598.415272][T11975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.415302][T11975] ? follow_page_pte+0x6b5/0xe50 [ 1598.415347][T11975] ? __pfx_follow_page_pte+0x10/0x10 [ 1598.415380][T11975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.415422][T11975] __get_user_pages+0x1683/0x2720 [ 1598.415497][T11975] populate_vma_page_range+0x2be/0x3c0 [ 1598.415533][T11975] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1598.415561][T11975] ? vma_wants_writenotify+0xba/0x2c0 [ 1598.415595][T11975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.415626][T11975] ? vma_set_page_prot+0xc3/0x100 [ 1598.415662][T11975] mprotect_fixup+0x9e5/0xb60 [ 1598.415711][T11975] ? __pfx_mprotect_fixup+0x10/0x10 [ 1598.415748][T11975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.415779][T11975] ? mas_next_slot+0xc3b/0xd10 [ 1598.415836][T11975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.415867][T11975] ? apparmor_file_mprotect+0x1d0/0x400 [ 1598.415895][T11975] ? security_file_mprotect+0x1a/0x290 [ 1598.415940][T11975] do_mprotect_pkey+0x8d5/0xd20 [ 1598.415984][T11975] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1598.416047][T11975] ? rcu_is_watching+0x15/0xb0 [ 1598.416087][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.416116][T11975] __x64_sys_mprotect+0x80/0x90 [ 1598.416160][T11975] do_syscall_64+0x15f/0xf80 [ 1598.416197][T11975] ? trace_irq_disable+0x3b/0x140 [ 1598.416245][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.416271][T11975] RIP: 0033:0x7f60b2f9cdd9 [ 1598.416295][T11975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.416317][T11975] RSP: 002b:00007f60b3f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1598.416344][T11975] RAX: ffffffffffffffda RBX: 00007f60b3216090 RCX: 00007f60b2f9cdd9 [ 1598.416364][T11975] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 1598.416381][T11975] RBP: 00007f60b3032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1598.416399][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.416414][T11975] R13: 00007f60b3216128 R14: 00007f60b3216090 R15: 00007ffc3e90e168 [ 1598.416458][T11975] [ 1599.237282][T11503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.564538][ T8862] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1599.626432][ T8862] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1599.739525][ T8870] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1599.940343][ T8870] usb 3-1: Using ep0 maxpacket: 16 [ 1599.980322][ T8870] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1600.010522][ T8870] usb 3-1: config 0 has no interface number 0 [ 1600.070881][ T8870] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1600.129280][ T8870] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1600.184848][ T8870] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1600.231018][ T8870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.282004][ T8870] usb 3-1: Product: syz [ 1600.312411][ T8870] usb 3-1: Manufacturer: syz [ 1600.349424][ T8870] usb 3-1: SerialNumber: syz [ 1600.401939][ T8870] usb 3-1: config 0 descriptor?? [ 1600.432929][T11993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1600.481814][T11993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1600.557261][T12012] loop7: detected capacity change from 0 to 2048 [ 1600.644206][T12012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.750730][T11993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1600.818840][T11993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1601.033792][ T31] audit: type=1804 audit(1778581496.484:958): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.13866" name="/newroot/103/file0/bus" dev="loop7" ino=18 res=1 errno=0 [ 1601.054354][T12012] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1601.064356][T11503] veth0_vlan: entered promiscuous mode [ 1601.130665][T11503] veth1_vlan: entered promiscuous mode [ 1601.134907][T12012] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 1601.206634][T12012] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1601.206634][T12012] [ 1601.255960][T12012] EXT4-fs (loop7): Total free blocks count 0 [ 1601.288493][T12012] EXT4-fs (loop7): Free/Dirty block details [ 1601.330872][T11503] veth0_macvtap: entered promiscuous mode [ 1601.356601][T12012] EXT4-fs (loop7): free_blocks=2415919104 [ 1601.359024][T11503] veth1_macvtap: entered promiscuous mode [ 1601.390074][T12012] EXT4-fs (loop7): dirty_blocks=32 [ 1601.420889][T12012] EXT4-fs (loop7): Block reservation details [ 1601.446855][T12012] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 1601.509814][T11503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.605235][T11503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1601.611083][ T9007] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /103/file0/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1601.722645][ T9007] EXT4-fs error (device loop7): ext4_empty_dir:3101: inode #11: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1601.783746][ T8605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.804863][ T8605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.827132][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1601.864422][ T8605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.904539][ T8870] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1601.931258][ T9007] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /103/file0/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1601.957224][ T8605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.977319][ T8870] asix 3-1:0.34: probe with driver asix failed with error -71 [ 1602.047799][ T8870] usb 3-1: USB disconnect, device number 42 [ 1602.087493][ T9007] EXT4-fs error (device loop7): ext4_empty_dir:3101: inode #11: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1602.165161][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1602.250599][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1602.291130][ T9007] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /103/file0/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1602.360235][ T9007] EXT4-fs error (device loop7): ext4_empty_dir:3101: inode #11: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1602.397405][ T2758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.412115][ T2758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.471936][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1602.497982][ T9007] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /103/file0/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1602.547398][ T2758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.568202][ T2758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.593266][ T9007] EXT4-fs error (device loop7): ext4_empty_dir:3101: inode #11: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1602.705432][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1602.758740][ T9007] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /103/file0/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2130706434, rec_len=2048, size=2048 fake=0 [ 1602.837607][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1602.908500][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1602.942240][T12047] loop2: detected capacity change from 0 to 1024 [ 1602.982524][T12047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1602.990628][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1603.060736][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1603.136673][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1603.143251][T12047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1603.182901][ T9007] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 1604.565377][T29398] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1605.056112][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.436871][T12256] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.661287][T12078] all: renamed from bridge_slave_1 (while UP) [ 1605.869032][T12256] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.946485][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1606.502682][T12256] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.691630][T12108] netlink: 'syz.2.13895': attribute type 1 has an invalid length. [ 1606.982649][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1607.018372][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1607.029023][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1607.038855][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1607.056904][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1607.291427][T12108] bond2: entered promiscuous mode [ 1607.319663][T12108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1607.432170][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.532021][T12110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1607.553590][T12110] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1607.566245][T12110] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1607.688206][T12110] bond2: (slave wireguard0): making interface the new active one [ 1607.736782][T12110] wireguard0: entered promiscuous mode [ 1607.770297][T12110] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 1608.072891][T12256] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.175093][ T5629] Bluetooth: hci0: command tx timeout [ 1611.257151][ T5629] Bluetooth: hci0: command tx timeout [ 1611.349729][T12256] bridge_slave_1: left allmulticast mode [ 1611.358435][T12150] loop2: detected capacity change from 0 to 32768 [ 1611.384014][T12256] bridge_slave_1: left promiscuous mode [ 1611.424047][T12150] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.13904 (12150) [ 1611.427042][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.560116][ T1355] IPVS: starting estimator thread 0... [ 1611.597946][T12150] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1611.602471][T12256] bridge_slave_0: left allmulticast mode [ 1611.646173][T12150] BTRFS info (device loop2): using sha256 checksum algorithm [ 1611.677262][T12191] IPVS: using max 25 ests per chain, 60000 per kthread [ 1611.697793][T12256] bridge_slave_0: left promiscuous mode [ 1611.742478][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.756706][T12150] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1611.762517][T12150] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1611.805816][T12150] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1611.887046][T12150] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1612.109491][T12150] BTRFS error (device loop2): open_ctree failed: -12 [ 1612.526885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 1613.047642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 1613.360596][ T5629] Bluetooth: hci0: command tx timeout [ 1614.530594][T12256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.644107][T12256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.725358][T12256] bond0 (unregistering): Released all slaves [ 1615.004549][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13915'. [ 1615.069352][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13915'. [ 1615.421384][ T5629] Bluetooth: hci0: command tx timeout [ 1615.612360][T12256] IPVS: stopping master sync thread 9755 ... [ 1616.840652][ T8870] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1616.978291][T12256] hsr_slave_0: left promiscuous mode [ 1617.011732][T12256] hsr_slave_1: left promiscuous mode [ 1617.032071][ T8870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.038784][T12256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1617.086648][ T8870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1617.121719][ T8870] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1617.124621][T12256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.164307][ T8870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1617.196620][T12256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1617.199893][T12299] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.13941'. [ 1617.207715][T12256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.218051][ T8870] usb 3-1: SerialNumber: syz [ 1617.327805][T12256] veth1_macvtap: left promiscuous mode [ 1617.349091][T12256] veth0_macvtap: left promiscuous mode [ 1617.354665][T12256] veth1_vlan: left promiscuous mode [ 1617.373113][T12256] veth0_vlan: left promiscuous mode [ 1617.464186][ T8870] usb 3-1: 0:2 : does not exist [ 1617.632666][ T8870] usb 3-1: USB disconnect, device number 43 [ 1617.661144][ T31] audit: type=1804 audit(1778581513.104:959): pid=12308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13945" name="file0" dev="tmpfs" ino=13336 res=1 errno=0 [ 1617.892625][T12283] udevd[12283]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1618.172714][T12315] fuse: fd is not a fuse device [ 1618.186111][T12313] loop4: detected capacity change from 0 to 16 [ 1618.360875][T12313] erofs (device loop4): mounted with root inode @ nid 36. [ 1619.206280][T12332] loop4: detected capacity change from 0 to 128 [ 1619.289821][T12332] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1619.311791][T12332] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.569679][T12256] team0 (unregistering): Port device team_slave_1 removed [ 1619.609142][T11503] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1619.689445][T12256] team0 (unregistering): Port device team_slave_0 removed [ 1621.366659][T12360] netlink: 'syz.1.13961': attribute type 10 has an invalid length. [ 1621.530049][T12362] netlink: 'syz.1.13961': attribute type 10 has an invalid length. [ 1621.726443][T12256] IPVS: stop unused estimator thread 0... [ 1621.864610][T12370] netlink: 'syz.6.13964': attribute type 1 has an invalid length. [ 1622.067288][T12370] bond7: entered promiscuous mode [ 1622.100222][T12370] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1622.497728][T12374] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1622.945775][T12374] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1622.976313][T12374] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1623.115499][T12374] bond7: (slave wireguard0): making interface the new active one [ 1623.164347][T12374] wireguard0: entered promiscuous mode [ 1623.210859][T12374] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 1623.567054][T12111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.592822][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.602291][T12111] bridge_slave_0: entered allmulticast mode [ 1623.635607][T12111] bridge_slave_0: entered promiscuous mode [ 1623.750892][T12111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.789353][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.841429][T12111] bridge_slave_1: entered allmulticast mode [ 1623.872207][T12111] bridge_slave_1: entered promiscuous mode [ 1624.024814][T12405] overlayfs: failed to clone upperpath [ 1624.124366][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.198627][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.413341][T12111] team0: Port device team_slave_0 added [ 1624.447447][T12111] team0: Port device team_slave_1 added [ 1624.677805][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.696627][T12420] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13979'. [ 1624.706351][T12420] netlink: 'syz.2.13979': attribute type 2 has an invalid length. [ 1624.717429][T12420] netlink: 'syz.2.13979': attribute type 1 has an invalid length. [ 1624.761606][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.825030][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.873443][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.911342][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.989892][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.205573][T12111] hsr_slave_0: entered promiscuous mode [ 1625.235332][T12111] hsr_slave_1: entered promiscuous mode [ 1625.260810][T12111] debugfs: 'hsr0' already exists in 'hsr' [ 1625.289253][T12111] Cannot create hsr debugfs directory [ 1625.906671][T12443] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1629.443792][T29396] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1631.588646][ T8870] page_pool_release_retry() stalled pool shutdown: id 311, 1 inflight 60 sec [ 1631.977209][T12111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1632.069648][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1632.121041][T12111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1632.214155][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1632.284538][T12111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1632.317819][T12561] xt_hashlimit: max too large, truncated to 1048576 [ 1632.355510][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1632.409355][T12111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1632.517541][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1633.142595][T12111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.306710][T12111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.377019][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.384361][T12297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.478142][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.485433][T12297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.839033][T12588] netlink: 'syz.2.14018': attribute type 39 has an invalid length. [ 1634.767203][T12558] loop4: detected capacity change from 0 to 131072 [ 1634.856447][T12558] F2FS-fs (loop4): invalid crc value [ 1635.055633][T12558] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1635.067802][T12609] loop2: detected capacity change from 0 to 512 [ 1635.159428][T12609] EXT4-fs: Ignoring removed orlov option [ 1635.358283][T12609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1635.497358][T12609] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1635.698864][T12609] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:337: inode #15: comm syz.2.14022: verity file corrupted; can't find descriptor [ 1635.823135][T12609] EXT4-fs (loop2): Remounting filesystem read-only [ 1635.897989][T12609] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 1636.747046][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.397392][T12111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.022467][T12661] netlink: 136 bytes leftover after parsing attributes in process `syz.4.14034'. [ 1638.056782][T12661] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1638.146187][T12666] overlayfs: failed to clone upperpath [ 1638.598675][T12111] veth0_vlan: entered promiscuous mode [ 1638.726669][T12111] veth1_vlan: entered promiscuous mode [ 1639.107807][T12111] veth0_macvtap: entered promiscuous mode [ 1639.122930][T12111] veth1_macvtap: entered promiscuous mode [ 1639.281344][T12111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1639.377446][T12111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1639.503864][T21474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.547326][T21474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.596520][T21474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.659413][T21474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.716566][T12701] netlink: 180 bytes leftover after parsing attributes in process `syz.6.14045'. [ 1640.326230][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.372370][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14049'. [ 1640.383687][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.425611][T12709] netlink: 'syz.5.14048': attribute type 13 has an invalid length. [ 1640.780968][T12687] loop2: detected capacity change from 0 to 40427 [ 1640.840381][T12687] F2FS-fs (loop2): build fault injection rate: 771 [ 1640.871232][T12687] F2FS-fs (loop2): invalid crc value [ 1640.963863][ T8605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1641.013099][ T8605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.260519][T12687] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1641.415315][T12687] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1642.040194][ T6700] syz-executor: attempt to access beyond end of device [ 1642.040194][ T6700] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1642.140377][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1642.140418][ T6700] Tainted: [L]=SOFTLOCKUP [ 1642.140427][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1642.140443][ T6700] Call Trace: [ 1642.140452][ T6700] [ 1642.140464][ T6700] dump_stack_lvl+0xe8/0x150 [ 1642.140499][ T6700] f2fs_stop_checkpoint+0x3c7/0x590 [ 1642.140535][ T6700] f2fs_write_end_io+0x1274/0x1740 [ 1642.140596][ T6700] __submit_merged_bio+0x256/0x6a0 [ 1642.140632][ T6700] __submit_merged_write_cond+0x3c9/0x4e0 [ 1642.140687][ T6700] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1642.140748][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.140788][ T6700] f2fs_write_data_pages+0x287e/0x34f0 [ 1642.140820][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.140894][ T6700] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1642.140923][ T6700] ? is_bpf_text_address+0x26/0x2b0 [ 1642.140971][ T6700] ? arch_stack_walk+0xfb/0x150 [ 1642.141038][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141068][ T6700] ? add_lock_to_list+0xc7/0x100 [ 1642.141103][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141131][ T6700] ? __lock_acquire+0x146e/0x2cf0 [ 1642.141176][ T6700] ? irqentry_exit+0x218/0x760 [ 1642.141211][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141240][ T6700] ? trace_irq_disable+0x3b/0x140 [ 1642.141291][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141320][ T6700] ? do_raw_spin_lock+0x12b/0x2f0 [ 1642.141363][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141399][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141430][ T6700] ? do_raw_spin_unlock+0xf5/0x210 [ 1642.141469][ T6700] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1642.141503][ T6700] do_writepages+0x32e/0x550 [ 1642.141533][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141566][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141601][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141631][ T6700] ? do_raw_spin_unlock+0xf5/0x210 [ 1642.141674][ T6700] filemap_fdatawrite+0x1e9/0x2f0 [ 1642.141702][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141733][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.141765][ T6700] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1642.141858][ T6700] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1642.141913][ T6700] f2fs_write_checkpoint+0x9df/0x26a0 [ 1642.142003][ T6700] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1642.142090][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.142120][ T6700] ? kfree+0x1c5/0x640 [ 1642.142151][ T6700] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1642.142199][ T6700] kill_f2fs_super+0x314/0x730 [ 1642.142239][ T6700] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1642.142287][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.142316][ T6700] ? lockdep_hardirqs_on+0x7a/0x110 [ 1642.142351][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1642.142394][ T6700] deactivate_locked_super+0xbc/0x130 [ 1642.142432][ T6700] cleanup_mnt+0x437/0x4d0 [ 1642.142468][ T6700] ? _raw_spin_unlock_irq+0x23/0x50 [ 1642.142509][ T6700] task_work_run+0x1d9/0x270 [ 1642.142550][ T6700] ? __pfx_task_work_run+0x10/0x10 [ 1642.142600][ T6700] exit_to_user_mode_loop+0xf3/0x4d0 [ 1642.142625][ T6700] ? rcu_is_watching+0x15/0xb0 [ 1642.142660][ T6700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.142688][ T6700] do_syscall_64+0x33e/0xf80 [ 1642.142723][ T6700] ? trace_irq_disable+0x3b/0x140 [ 1642.142769][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.142794][ T6700] RIP: 0033:0x7f445a59e017 [ 1642.142817][ T6700] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1642.142839][ T6700] RSP: 002b:00007ffc4fb9ddc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1642.142865][ T6700] RAX: 0000000000000000 RBX: 00007f445a632120 RCX: 00007f445a59e017 [ 1642.142883][ T6700] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4fb9de80 [ 1642.142899][ T6700] RBP: 00007ffc4fb9de80 R08: 00007ffc4fb9ee80 R09: 00000000ffffffff [ 1642.142916][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4fb9ef10 [ 1642.142933][ T6700] R13: 00007f445a632120 R14: 00000000001909df R15: 00007ffc4fb9ef50 [ 1642.142982][ T6700] [ 1642.599874][ T6700] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1643.057048][ T1356] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1643.298928][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14066'. [ 1643.308688][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14066'. [ 1644.180903][ T1356] usb 1-1: Using ep0 maxpacket: 32 [ 1644.862545][T12802] loop2: detected capacity change from 0 to 32768 [ 1644.867119][ T1356] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.873311][T12802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.14074 (12802) [ 1644.879842][ T1356] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.901229][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14076'. [ 1644.928405][T12811] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1644.938994][T12802] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1644.949981][T12802] BTRFS info (device loop2): using crc32c checksum algorithm [ 1645.188202][T12802] BTRFS info (device loop2): enabling ssd optimizations [ 1645.195370][T12802] BTRFS info (device loop2): turning on flush-on-commit [ 1645.202988][T12802] BTRFS info (device loop2): enabling free space tree [ 1645.209794][T12802] BTRFS info (device loop2): enabling auto defrag [ 1645.216246][T12802] BTRFS info (device loop2): use lzo compression, level 1 [ 1645.225540][T12802] BTRFS info (device loop2): max_inline set to 4096 [ 1645.256070][T12297] Bluetooth: (null): Invalid header checksum [ 1645.304415][ T1356] usb 1-1: string descriptor 0 read error: -71 [ 1645.310731][ T1356] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1645.319823][ T1356] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1645.396503][ T12] Bluetooth: (null): Too short H5 packet [ 1645.417688][ T1356] usb 1-1: can't set config #4, error -71 [ 1645.462064][ T12] Bluetooth: (null): Invalid header checksum [ 1645.470766][ T1356] usb 1-1: USB disconnect, device number 37 [ 1645.907619][ T6700] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1646.066710][ T31] audit: type=1326 audit(1778581541.468:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.1.14083" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafdbf9cdd9 code=0x0 [ 1646.815069][T12874] loop4: detected capacity change from 0 to 512 [ 1646.876227][T12874] EXT4-fs: Ignoring removed orlov option [ 1646.946763][T12874] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1647.096542][T12874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1647.312954][T12874] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.14090: corrupted in-inode xattr: e_value size too large [ 1647.327080][T12874] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1647.343281][T12886] lo: Caught tx_queue_len zero misconfig [ 1647.383093][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1647.389559][ C0] EXT4-fs (loop4): initial error at time 1778581542: ext4_iget_extra_inode:5128: inode 15 [ 1647.399488][ C0] EXT4-fs (loop4): last error at time 1778581542: ext4_iget_extra_inode:5128: inode 15 [ 1647.446609][T12874] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.14090: couldn't read orphan inode 15 (err -117) [ 1647.458559][T12874] loop4: lost filesystem error report for type 5 error -117 [ 1647.552886][T12874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.103353][T12874] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1648.251976][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14094'. [ 1648.980855][T12933] netlink: 'syz.2.14109': attribute type 83 has an invalid length. [ 1649.054976][T11503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.415452][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.428032][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.435452][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.483152][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.490607][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.498006][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.591077][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.598518][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.605928][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.613322][ T8894] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 1649.731562][ T8894] hid-generic 0006:0004:0009.0036: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1649.873519][T12954] netlink: 'syz.4.14118': attribute type 1 has an invalid length. [ 1649.949687][T12954] netlink: 'syz.4.14118': attribute type 22 has an invalid length. [ 1650.024265][T12955] fido_id[12955]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1650.730796][T12987] netlink: 204 bytes leftover after parsing attributes in process `syz.5.14126'. [ 1650.771878][ T31] audit: type=1326 audit(1778581546.195:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.4.14130" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1696d9cdd9 code=0x0 [ 1650.794799][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1650.940137][T12984] loop2: detected capacity change from 0 to 4096 [ 1650.954201][T12984] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1651.168555][T12984] ntfs3(loop2): ino=0, attr_set_size_ex [ 1651.717649][T13015] fuse: Bad value for 'fd' [ 1651.925431][T13023] fuse: root generation should be zero [ 1652.289212][T13038] loop2: detected capacity change from 0 to 1024 [ 1652.357132][T13038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1652.571057][T13038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1652.771817][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1652.862439][ T31] audit: type=1326 audit(1778581548.284:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.5.14138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc79cdd9 code=0x0 [ 1653.239107][T13055] fuse: fd is not a fuse device [ 1653.661936][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.138465][T13085] overlayfs: failed to clone upperpath [ 1654.210301][T13088] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.14159'. [ 1656.572675][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1657.489035][T13138] netlink: 128 bytes leftover after parsing attributes in process `syz.5.14177'. [ 1657.528711][T13138] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1660.159645][T13196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14194'. [ 1660.618507][ T8607] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1660.661841][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1664.083698][T13305] overlayfs: failed to clone upperpath [ 1665.949306][T13342] loop2: detected capacity change from 0 to 32768 [ 1665.956809][T13342] btrfs: Deprecated parameter 'usebackuproot' [ 1665.962945][T13342] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1665.972946][T13342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.14238 (13342) [ 1665.989977][T13342] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1666.000095][T13342] BTRFS info (device loop2): using crc32c checksum algorithm [ 1666.227491][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14240'. [ 1666.238074][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14240'. [ 1666.252433][T13364] loop4: detected capacity change from 0 to 256 [ 1666.330556][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1666.409699][T13364] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1666.651275][T13364] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 1666.652522][T13342] BTRFS error (device loop2): failed to load root extent [ 1666.665207][T13342] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1666.674004][ T8607] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1666.729999][T13342] BTRFS warning (device loop2): couldn't read tree root [ 1666.738957][T13342] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1666.747213][ T8607] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1666.757609][T13342] BTRFS warning (device loop2): couldn't read tree root [ 1666.764614][T13342] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1666.851442][T13342] BTRFS info (device loop2): rebuilding free space tree [ 1666.882047][T13342] BTRFS info (device loop2): checking UUID tree [ 1666.898595][T13342] BTRFS info (device loop2): enabling ssd optimizations [ 1666.905570][T13342] BTRFS info (device loop2): disabling tree log [ 1666.913213][T13342] BTRFS info (device loop2): turning on async discard [ 1666.920006][T13342] BTRFS info (device loop2): enabling free space tree [ 1666.926764][T13342] BTRFS info (device loop2): force clearing of disk cache [ 1666.933895][T13342] BTRFS info (device loop2): enabling auto defrag [ 1666.942234][T13342] BTRFS info (device loop2): trying to use backup root at mount time [ 1666.950419][T13342] BTRFS info (device loop2): force zlib compression, level 3 [ 1666.979040][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14240'. [ 1667.013646][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14240'. [ 1667.157323][ T6700] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1668.404240][ T1356] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1668.974237][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.748491][ T1356] usb 3-1: config 0 has no interfaces? [ 1670.632245][T13456] netlink: 'syz.6.14264': attribute type 1 has an invalid length. [ 1670.632751][ T1356] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1670.649105][ T1356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.657815][ T1356] usb 3-1: Product: syz [ 1670.665526][ T1356] usb 3-1: Manufacturer: syz [ 1670.683166][ T1356] usb 3-1: SerialNumber: syz [ 1670.704365][ T1356] usb 3-1: config 0 descriptor?? [ 1670.942991][T13456] bond8: entered promiscuous mode [ 1670.950982][T13456] bond8: entered allmulticast mode [ 1671.017719][ T1355] usb 3-1: USB disconnect, device number 44 [ 1671.122926][T13456] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1671.365325][T13463] erspan1: entered allmulticast mode [ 1671.535157][T13463] bond8: (slave erspan1): making interface the new active one [ 1671.567875][T13463] erspan1: entered promiscuous mode [ 1671.676333][T13463] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 1671.991655][T13486] loop2: detected capacity change from 0 to 512 [ 1672.027901][T13486] EXT4-fs: Ignoring removed nobh option [ 1672.083470][T13486] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1672.123258][T13486] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.14270: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1672.149337][T13486] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1672.158911][T13486] EXT4-fs (loop2): Remounting filesystem read-only [ 1672.185100][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1672.185120][ C0] EXT4-fs (loop2): initial error at time 1778581567: ext4_xattr_inode_update_ref:1037: inode 11 [ 1672.185152][ C0] EXT4-fs (loop2): last error at time 1778581567: ext4_xattr_inode_update_ref:1037: inode 11 [ 1672.225094][T13486] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.14270: ea_inode dec ref err=-117 [ 1672.240780][T13486] EXT4-fs (loop2): 1 orphan inode deleted [ 1672.248955][T13486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1672.264146][T13486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.273241][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14272'. [ 1673.361981][T13507] fuse: fd is not a fuse device [ 1674.067519][T13530] loop4: detected capacity change from 0 to 512 [ 1674.091846][T13530] EXT4-fs: Ignoring removed nobh option [ 1674.162156][T13530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1674.244387][T13530] EXT4-fs (loop4): 1 truncate cleaned up [ 1674.374134][T13530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.473952][ T31] audit: type=1800 audit(1778581569.892:963): pid=13530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14284" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1674.494639][ T31] audit: type=1800 audit(1778581569.892:964): pid=13543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14284" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1675.070055][T11503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.642922][T13583] loop2: detected capacity change from 0 to 512 [ 1675.673862][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14299'. [ 1675.683023][T13585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1675.706508][T13583] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1675.730003][T13583] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1675.797144][T13585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.881984][T13591] fuse: fd is not a fuse device [ 1675.908579][T13583] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.14300: bad orphan inode 131083 [ 1675.931090][T13583] loop2: lost filesystem error report for type 5 error -117 [ 1675.933518][T13583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.197305][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.553013][T13614] loop4: detected capacity change from 0 to 512 [ 1676.601580][T13614] EXT4-fs: Ignoring removed nobh option [ 1676.641849][T13614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1676.662945][T13614] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1676.693201][T13614] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1677.143548][T13636] loop2: detected capacity change from 0 to 512 [ 1677.205846][T13636] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1677.228060][T13636] System zones: 1-12 [ 1677.242094][T13636] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.14319: corrupted in-inode xattr: e_value size too large [ 1677.282773][T13636] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1677.319399][T13636] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.14319: couldn't read orphan inode 15 (err -117) [ 1677.377455][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1677.383918][ C0] EXT4-fs (loop2): initial error at time 1778581572: ext4_iget_extra_inode:5128: inode 15 [ 1677.393849][ C0] EXT4-fs (loop2): last error at time 1778581572: ext4_iget_extra_inode:5128: inode 15 [ 1677.430779][T13636] loop2: lost filesystem error report for type 5 error -117 [ 1677.434764][T13636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1677.614847][T13653] netlink: 'syz.5.14324': attribute type 1 has an invalid length. [ 1677.635328][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.693953][T13652] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1677.745549][T13652] overlayfs: failed to set xattr on upper [ 1677.751319][T13652] overlayfs: ...falling back to redirect_dir=nofollow. [ 1677.758159][T13652] overlayfs: ...falling back to index=off. [ 1677.767388][T13652] overlayfs: ...falling back to uuid=null. [ 1677.773271][T13652] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1678.023096][T13664] bond3: (slave geneve3): making interface the new active one [ 1678.054945][T13664] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1678.077130][ T8605] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1678.086424][ T8605] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1678.122290][ T8605] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1678.172433][ T136] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1678.319977][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14334'. [ 1678.359084][T13684] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.14335'. [ 1679.916589][T13747] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1680.216670][T13755] netlink: 80 bytes leftover after parsing attributes in process `syz.1.14357'. [ 1680.225747][T13755] netlink: 'syz.1.14357': attribute type 13 has an invalid length. [ 1680.243355][T13722] loop2: detected capacity change from 0 to 40427 [ 1680.270561][T13722] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 1680.277205][T13722] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1680.593118][T13763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14360'. [ 1680.684300][T13722] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1680.776872][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14361'. [ 1680.813223][T13722] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1680.820301][T13722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1681.006560][T13777] netlink: 'syz.5.14363': attribute type 4 has an invalid length. [ 1681.073899][T13780] netlink: 'syz.5.14363': attribute type 4 has an invalid length. [ 1681.161250][T13722] syz.2.14347: attempt to access beyond end of device [ 1681.161250][T13722] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 1681.545099][ T6700] syz-executor: attempt to access beyond end of device [ 1681.545099][ T6700] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1681.604741][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1681.604778][ T6700] Tainted: [L]=SOFTLOCKUP [ 1681.604787][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1681.604802][ T6700] Call Trace: [ 1681.604811][ T6700] [ 1681.604821][ T6700] dump_stack_lvl+0xe8/0x150 [ 1681.604851][ T6700] f2fs_stop_checkpoint+0x3c7/0x590 [ 1681.604883][ T6700] f2fs_write_end_io+0x1274/0x1740 [ 1681.604940][ T6700] __submit_merged_bio+0x256/0x6a0 [ 1681.604980][ T6700] __submit_merged_write_cond+0x3c9/0x4e0 [ 1681.605028][ T6700] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1681.605084][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605122][ T6700] f2fs_write_data_pages+0x287e/0x34f0 [ 1681.605150][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605176][ T6700] ? __lock_acquire+0x6b5/0x2cf0 [ 1681.605247][ T6700] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1681.605330][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605355][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605381][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605406][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605435][ T6700] ? __bfs+0x153/0x290 [ 1681.605463][ T6700] ? __pfx_hlock_conflict+0x10/0x10 [ 1681.605505][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605553][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605583][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605614][ T6700] ? __lock_acquire+0x146e/0x2cf0 [ 1681.605683][ T6700] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1681.605719][ T6700] do_writepages+0x32e/0x550 [ 1681.605751][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605784][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605821][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.605851][ T6700] ? do_raw_spin_unlock+0xf5/0x210 [ 1681.605898][ T6700] filemap_fdatawrite+0x1e9/0x2f0 [ 1681.605934][ T6700] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1681.606026][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.606061][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.606099][ T6700] ? do_raw_spin_unlock+0xf5/0x210 [ 1681.606146][ T6700] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1681.606203][ T6700] f2fs_write_checkpoint+0x9df/0x26a0 [ 1681.606289][ T6700] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1681.606406][ T6700] kill_f2fs_super+0x314/0x730 [ 1681.606450][ T6700] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1681.606501][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.606531][ T6700] ? lockdep_hardirqs_on+0x7a/0x110 [ 1681.606569][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.606619][ T6700] deactivate_locked_super+0xbc/0x130 [ 1681.606657][ T6700] cleanup_mnt+0x437/0x4d0 [ 1681.606693][ T6700] ? _raw_spin_unlock_irq+0x23/0x50 [ 1681.606733][ T6700] task_work_run+0x1d9/0x270 [ 1681.606777][ T6700] ? __pfx_task_work_run+0x10/0x10 [ 1681.606830][ T6700] exit_to_user_mode_loop+0xf3/0x4d0 [ 1681.606856][ T6700] ? rcu_is_watching+0x15/0xb0 [ 1681.606890][ T6700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.606919][ T6700] do_syscall_64+0x33e/0xf80 [ 1681.606955][ T6700] ? trace_irq_disable+0x3b/0x140 [ 1681.607008][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.607034][ T6700] RIP: 0033:0x7f445a59e017 [ 1681.607058][ T6700] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1681.607080][ T6700] RSP: 002b:00007ffc4fb9ddc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1681.607106][ T6700] RAX: 0000000000000000 RBX: 00007f445a632120 RCX: 00007f445a59e017 [ 1681.607124][ T6700] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4fb9de80 [ 1681.607140][ T6700] RBP: 00007ffc4fb9de80 R08: 00007ffc4fb9ee80 R09: 00000000ffffffff [ 1681.607158][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4fb9ef10 [ 1681.607174][ T6700] R13: 00007f445a632120 R14: 000000000019a4f7 R15: 00007ffc4fb9ef50 [ 1681.607221][ T6700] [ 1681.607231][ T6700] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1681.950175][T13801] batadv_slave_1: entered promiscuous mode [ 1681.967850][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1681.967888][ T6700] Tainted: [L]=SOFTLOCKUP [ 1681.967898][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1681.967913][ T6700] Call Trace: [ 1681.967923][ T6700] [ 1681.967934][ T6700] dump_stack_lvl+0xe8/0x150 [ 1681.967975][ T6700] f2fs_stop_checkpoint+0x3c7/0x590 [ 1681.968015][ T6700] f2fs_write_end_io+0x1274/0x1740 [ 1681.968079][ T6700] __submit_merged_bio+0x256/0x6a0 [ 1681.968118][ T6700] __submit_merged_write_cond+0x3c9/0x4e0 [ 1681.968176][ T6700] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1681.968240][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968284][ T6700] f2fs_write_data_pages+0x287e/0x34f0 [ 1681.968314][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968344][ T6700] ? __lock_acquire+0x6b5/0x2cf0 [ 1681.968425][ T6700] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1681.968520][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968549][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968578][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968608][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968637][ T6700] ? __bfs+0x153/0x290 [ 1681.968663][ T6700] ? __pfx_hlock_conflict+0x10/0x10 [ 1681.968705][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968751][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968781][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968810][ T6700] ? __lock_acquire+0x146e/0x2cf0 [ 1681.968879][ T6700] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1681.968914][ T6700] do_writepages+0x32e/0x550 [ 1681.968944][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.968982][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.969018][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.969047][ T6700] ? do_raw_spin_unlock+0xf5/0x210 [ 1681.969093][ T6700] filemap_fdatawrite+0x1e9/0x2f0 [ 1681.969128][ T6700] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1681.969212][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.969245][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.969282][ T6700] ? do_raw_spin_unlock+0xf5/0x210 [ 1681.969327][ T6700] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1681.969384][ T6700] f2fs_write_checkpoint+0x9df/0x26a0 [ 1681.969468][ T6700] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1681.969583][ T6700] kill_f2fs_super+0x314/0x730 [ 1681.969626][ T6700] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1681.969677][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.969707][ T6700] ? lockdep_hardirqs_on+0x7a/0x110 [ 1681.969744][ T6700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.969794][ T6700] deactivate_locked_super+0xbc/0x130 [ 1681.969833][ T6700] cleanup_mnt+0x437/0x4d0 [ 1681.969875][ T6700] ? _raw_spin_unlock_irq+0x23/0x50 [ 1681.969917][ T6700] task_work_run+0x1d9/0x270 [ 1681.969959][ T6700] ? __pfx_task_work_run+0x10/0x10 [ 1681.970016][ T6700] exit_to_user_mode_loop+0xf3/0x4d0 [ 1681.970043][ T6700] ? rcu_is_watching+0x15/0xb0 [ 1681.970077][ T6700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.970106][ T6700] do_syscall_64+0x33e/0xf80 [ 1681.970142][ T6700] ? trace_irq_disable+0x3b/0x140 [ 1681.970191][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.970217][ T6700] RIP: 0033:0x7f445a59e017 [ 1681.970241][ T6700] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1681.970261][ T6700] RSP: 002b:00007ffc4fb9ddc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1681.970288][ T6700] RAX: 0000000000000000 RBX: 00007f445a632120 RCX: 00007f445a59e017 [ 1681.970305][ T6700] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4fb9de80 [ 1681.970321][ T6700] RBP: 00007ffc4fb9de80 R08: 00007ffc4fb9ee80 R09: 00000000ffffffff [ 1681.970339][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4fb9ef10 [ 1681.970355][ T6700] R13: 00007f445a632120 R14: 000000000019a4f7 R15: 00007ffc4fb9ef50 [ 1681.970407][ T6700] [ 1681.970418][ T6700] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1682.707553][T13801] batadv_slave_1: left promiscuous mode [ 1682.900060][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14371'. [ 1682.930100][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14371'. [ 1682.971050][T13822] fuse: fd is not a fuse device [ 1683.298473][T13829] loop4: detected capacity change from 0 to 2048 [ 1683.375558][T13832] loop2: detected capacity change from 0 to 7 [ 1683.431907][T13832] loop2: [ 1683.434900][T13832] loop2: partition table partially beyond EOD, truncated [ 1683.661008][T13829] loop4: p3 < > p4 < > [ 1683.665631][T13829] loop4: partition table partially beyond EOD, truncated [ 1683.685475][T13829] loop4: p3 start 4284289 is beyond EOD, truncated [ 1683.722048][ T4986] loop4: p3 < > p4 < > [ 1683.726294][ T4986] loop4: partition table partially beyond EOD, truncated [ 1683.835058][ T4986] loop4: p3 start 4284289 is beyond EOD, truncated [ 1684.045938][T12283] udevd[12283]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1684.115574][T12283] udevd[12283]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1684.138733][T15256] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1684.419522][T15256] usb 3-1: Using ep0 maxpacket: 32 [ 1684.457521][T15256] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1684.518640][T15256] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1684.577234][T15256] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1684.616547][T15256] usb 3-1: Product: syz [ 1684.632183][T15256] usb 3-1: Manufacturer: syz [ 1684.652020][T15256] usb 3-1: SerialNumber: syz [ 1684.695411][T15256] usb 3-1: config 0 descriptor?? [ 1684.723729][T13847] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1684.753194][T15256] hub 3-1:0.0: bad descriptor, ignoring hub [ 1684.777039][T15256] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1685.058661][T13880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14392'. [ 1685.067752][T13880] netlink: 'syz.0.14392': attribute type 7 has an invalid length. [ 1685.075573][T13880] netlink: 'syz.0.14392': attribute type 8 has an invalid length. [ 1685.122459][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14392'. [ 1685.154205][ T8870] usb 3-1: USB disconnect, device number 45 [ 1685.720287][T13894] loop4: detected capacity change from 0 to 512 [ 1685.811982][T13894] EXT4-fs: Ignoring removed nobh option [ 1685.839159][T15275] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1685.879881][T13894] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1685.974383][T13894] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #11: block 1: comm syz.4.14396: lblock 0 mapped to illegal pblock 1 (length 1) [ 1685.988506][T13894] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1686.014539][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1686.030074][ C0] EXT4-fs (loop4): initial error at time 1778581581: ext4_map_blocks:791: inode 11: block 1 [ 1686.040167][ C0] EXT4-fs (loop4): last error at time 1778581581: ext4_map_blocks:791: inode 11: block 1 [ 1686.136278][T15275] usb 3-1: Using ep0 maxpacket: 32 [ 1686.141554][T13894] EXT4-fs (loop4): Remounting filesystem read-only [ 1686.160097][T15275] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1686.174844][T13894] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1686.205885][T13894] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 1686.223780][T13894] EXT4-fs (loop4): 1 orphan inode deleted [ 1686.224996][T15275] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1686.267293][T15275] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1686.300889][T13894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1686.310728][T15275] usb 3-1: Product: syz [ 1686.329338][T15275] usb 3-1: Manufacturer: syz [ 1686.342111][T15275] usb 3-1: SerialNumber: syz [ 1686.385710][T15275] usb 3-1: config 0 descriptor?? [ 1686.414494][T13847] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1686.425994][T15275] hub 3-1:0.0: bad descriptor, ignoring hub [ 1686.438557][T15275] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1686.451363][T11503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.838997][ T8862] usb 3-1: USB disconnect, device number 46 [ 1686.985967][T13936] input: syz0 as /devices/virtual/input/input80 [ 1687.768081][T13950] loop4: detected capacity change from 0 to 4096 [ 1687.796506][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14420'. [ 1687.818743][T13950] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1688.074023][T13957] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14421'. [ 1688.263651][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14423'. [ 1688.432452][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14423'. [ 1688.432550][ T136] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1688.491253][ T136] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1688.510233][ T136] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1688.550191][ T136] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1688.817725][T13971] tipc: Enabling of bearer rejected, already enabled [ 1688.838356][T13971] tipc: Enabling of bearer rejected, failed to enable media [ 1689.552063][T13983] sctp: [Deprecated]: syz.0.14433 (pid 13983) Use of int in max_burst socket option deprecated. [ 1689.552063][T13983] Use struct sctp_assoc_value instead [ 1689.601965][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14432'. [ 1689.745894][T13977] loop4: detected capacity change from 0 to 32768 [ 1690.130245][T13977] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1690.146152][T13996] loop2: detected capacity change from 0 to 512 [ 1690.293006][T13996] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1690.302871][T13996] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1690.328080][T13977] XFS (loop4): Ending clean mount [ 1690.394232][T13996] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1690.461827][T13996] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1690.514882][T13996] System zones: 0-2, 18-18, 34-34 [ 1690.522002][T13996] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.14436: bad orphan inode 15 [ 1690.532091][T13996] loop2: lost filesystem error report for type 5 error -117 [ 1690.537639][T13996] ext4_test_bit(bit=14, block=18) = 1 [ 1690.558826][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1690.558853][ C0] EXT4-fs (loop2): initial error at time 1778581585: ext4_orphan_get:1423 [ 1690.558883][ C0] EXT4-fs (loop2): last error at time 1778581585: ext4_orphan_get:1423 [ 1690.625265][T13996] is_bad_inode(inode)=0 [ 1690.644777][T13996] NEXT_ORPHAN(inode)=2264924160 [ 1690.662956][T13996] max_ino=32 [ 1690.681526][T13996] i_nlink=0 [ 1690.764047][T13996] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.14436: corrupted inode contents [ 1690.787659][T11503] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1690.797185][T13996] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1690.800569][T13996] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.14436: mark_inode_dirty error [ 1690.862058][T13996] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1690.929653][T13996] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.14436: corrupted inode contents [ 1690.950697][T13996] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1691.020513][T13996] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.14436: mark_inode_dirty error [ 1691.161643][T13996] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1691.210776][T13996] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.14436: mark inode dirty (error -117) [ 1691.319209][T13996] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1691.319688][T13996] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 1691.403628][T13996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1692.846802][ T6700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.069848][ T8607] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1693.935314][T14069] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 1694.553509][T14095] netlink: 'syz.6.14472': attribute type 4 has an invalid length. [ 1694.616655][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1694.698812][T14099] overlayfs: failed to clone upperpath [ 1694.897231][T14109] ref_ctr going negative. vaddr: 0x200000000002, curr val: -7112, delta: 1 [ 1694.906785][T14109] ref_ctr increment failed for inode: 0x74d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807dbf9880 [ 1695.417116][T21474] [ 1695.419469][T21474] ============================================ [ 1695.425601][T21474] WARNING: possible recursive locking detected [ 1695.431735][T21474] syzkaller #0 Tainted: G L [ 1695.437699][T21474] -------------------------------------------- [ 1695.443824][T21474] kworker/u8:1/21474 is trying to acquire lock: [ 1695.450040][T21474] ffff888032284958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1695.459886][T21474] [ 1695.459886][T21474] but task is already holding lock: [ 1695.467227][T21474] ffff88807a63ed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1695.477077][T21474] [ 1695.477077][T21474] other info that might help us debug this: [ 1695.485115][T21474] Possible unsafe locking scenario: [ 1695.485115][T21474] [ 1695.492547][T21474] CPU0 [ 1695.495807][T21474] ---- [ 1695.499096][T21474] lock(&qdisc_xmit_lock_key#4); [ 1695.504119][T21474] lock(&qdisc_xmit_lock_key#4); [ 1695.509138][T21474] [ 1695.509138][T21474] *** DEADLOCK *** [ 1695.509138][T21474] [ 1695.517259][T21474] May be due to missing lock nesting notation [ 1695.517259][T21474] [ 1695.525562][T21474] 11 locks held by kworker/u8:1/21474: [ 1695.531028][T21474] #0: ffff88802b5e2940 ((wq_completion)bond8){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1695.541915][T21474] #1: ffffc90006a67c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1695.554806][T21474] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 1695.564387][T21474] #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1695.574323][T21474] #4: ffff888028ca5228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1695.587115][T21474] #5: ffff88807a63ed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1695.597429][T21474] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1695.606325][T21474] #7: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1695.616173][T21474] #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1695.624989][T21474] #9: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1695.634932][T21474] #10: ffff888025f10228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1695.647670][T21474] [ 1695.647670][T21474] stack backtrace: [ 1695.653545][T21474] CPU: 0 UID: 0 PID: 21474 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.653574][T21474] Tainted: [L]=SOFTLOCKUP [ 1695.653582][T21474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1695.653599][T21474] Workqueue: bond8 bond_alb_monitor [ 1695.653629][T21474] Call Trace: [ 1695.653637][T21474] [ 1695.653649][T21474] dump_stack_lvl+0xe8/0x150 [ 1695.653674][T21474] print_deadlock_bug+0x279/0x290 [ 1695.653705][T21474] __lock_acquire+0x253f/0x2cf0 [ 1695.653736][T21474] ? unwind_next_frame+0xa6/0x2550 [ 1695.653770][T21474] ? sch_direct_xmit+0x15f/0x4c0 [ 1695.653798][T21474] lock_acquire+0x106/0x350 [ 1695.653821][T21474] ? sch_direct_xmit+0x15f/0x4c0 [ 1695.653857][T21474] _raw_spin_lock+0x2e/0x40 [ 1695.653884][T21474] ? sch_direct_xmit+0x15f/0x4c0 [ 1695.653909][T21474] sch_direct_xmit+0x15f/0x4c0 [ 1695.653938][T21474] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1695.653964][T21474] ? arp_create+0x190/0x980 [ 1695.654005][T21474] __dev_queue_xmit+0x180f/0x3950 [ 1695.654044][T21474] ? __dev_queue_xmit+0x2b6/0x3950 [ 1695.654082][T21474] ? arpt_do_table+0x256/0x1e30 [ 1695.654113][T21474] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1695.654153][T21474] ? __pfx_arpt_do_table+0x10/0x10 [ 1695.654184][T21474] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1695.654219][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.654247][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.654273][T21474] ? NF_HOOK+0xa2/0x3c0 [ 1695.654308][T21474] NF_HOOK+0x33a/0x3c0 [ 1695.654341][T21474] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1695.654375][T21474] ? NF_HOOK+0xa2/0x3c0 [ 1695.654406][T21474] ? __pfx_NF_HOOK+0x10/0x10 [ 1695.654445][T21474] ? lock_acquire+0x106/0x350 [ 1695.654471][T21474] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1695.654508][T21474] ? inet_addr_type_dev_table+0x25/0x190 [ 1695.654540][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.654567][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.654595][T21474] arp_xmit+0x16c/0x270 [ 1695.654626][T21474] ? arp_xmit+0x23/0x270 [ 1695.654659][T21474] arp_solicit+0xbe0/0xe40 [ 1695.654683][T21474] ? arp_solicit+0x119/0xe40 [ 1695.654703][T21474] ? __pfx_arp_solicit+0x10/0x10 [ 1695.654722][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.654754][T21474] ? __pfx_arp_solicit+0x10/0x10 [ 1695.654774][T21474] __neigh_event_send+0xf05/0x14d0 [ 1695.654807][T21474] neigh_resolve_output+0x198/0x750 [ 1695.654835][T21474] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1695.654858][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.654888][T21474] ? ip_finish_output2+0x3c2/0x1070 [ 1695.654910][T21474] ip_finish_output2+0xca9/0x1070 [ 1695.654931][T21474] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1695.654953][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.654982][T21474] ? ip_finish_output+0x40e/0x530 [ 1695.655017][T21474] ip_output+0x29f/0x450 [ 1695.655051][T21474] ? ip_output+0x5b/0x450 [ 1695.655084][T21474] iptunnel_xmit+0x621/0xd10 [ 1695.655117][T21474] ip_tunnel_xmit+0x193a/0x1f20 [ 1695.655164][T21474] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1695.655200][T21474] ? __pfx_gre_build_header+0x10/0x10 [ 1695.655237][T21474] __gre_xmit+0x19e/0x240 [ 1695.655267][T21474] ? __pfx___gre_xmit+0x10/0x10 [ 1695.655299][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.655327][T21474] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1695.655356][T21474] erspan_xmit+0xa41/0x14d0 [ 1695.655392][T21474] ? ret_from_fork_asm+0x1a/0x30 [ 1695.655419][T21474] ? __pfx_erspan_xmit+0x10/0x10 [ 1695.655455][T21474] dev_hard_start_xmit+0x2cd/0x830 [ 1695.655497][T21474] sch_direct_xmit+0x251/0x4c0 [ 1695.655526][T21474] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1695.655552][T21474] ? kthread+0x2e0/0x470 [ 1695.655584][T21474] __dev_queue_xmit+0x180f/0x3950 [ 1695.655628][T21474] ? __dev_queue_xmit+0x2b6/0x3950 [ 1695.655673][T21474] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1695.655707][T21474] ? rcu_is_watching+0x15/0xb0 [ 1695.655733][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.655759][T21474] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1695.655787][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.655813][T21474] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1695.655849][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.655877][T21474] ? alb_send_lp_vid+0x14e/0x550 [ 1695.655912][T21474] alb_send_lp_vid+0x348/0x550 [ 1695.655946][T21474] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1695.655984][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656015][T21474] alb_send_learning_packets+0x12c/0x300 [ 1695.656047][T21474] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1695.656077][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656104][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656132][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656157][T21474] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1695.656187][T21474] bond_alb_monitor+0x3d5/0x17e0 [ 1695.656219][T21474] ? bond_alb_monitor+0xf8/0x17e0 [ 1695.656248][T21474] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1695.656276][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656302][T21474] ? process_scheduled_works+0xa70/0x1860 [ 1695.656325][T21474] ? process_scheduled_works+0xa70/0x1860 [ 1695.656348][T21474] process_scheduled_works+0xb5d/0x1860 [ 1695.656370][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656413][T21474] ? __pfx_process_scheduled_works+0x10/0x10 [ 1695.656438][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656464][T21474] ? assign_work+0x3d5/0x5e0 [ 1695.656488][T21474] worker_thread+0xa53/0xfc0 [ 1695.656511][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656545][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656579][T21474] kthread+0x388/0x470 [ 1695.656607][T21474] ? __pfx_worker_thread+0x10/0x10 [ 1695.656628][T21474] ? __pfx_kthread+0x10/0x10 [ 1695.656657][T21474] ret_from_fork+0x514/0xb70 [ 1695.656680][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656706][T21474] ? __pfx_ret_from_fork+0x10/0x10 [ 1695.656729][T21474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.656754][T21474] ? __switch_to+0xc79/0x1410 [ 1695.656787][T21474] ? __pfx_kthread+0x10/0x10 [ 1695.656816][T21474] ret_from_fork_asm+0x1a/0x30 [ 1695.656852][T21474] [ 1696.665205][ T5683] Bluetooth: hci6: command 0x0406 tx timeout