last executing test programs: 2m45.877658591s ago: executing program 32 (id=47): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0xfffffffffffffffc, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m22.500946888s ago: executing program 3 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800107b, r1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xb65c, 0x10, 0x4, 0x219}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m20.786060287s ago: executing program 3 (id=124): socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m18.62543034s ago: executing program 3 (id=134): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000010) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 2m17.915915754s ago: executing program 3 (id=137): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x23, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 2m15.064291472s ago: executing program 3 (id=143): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 2m14.34630719s ago: executing program 3 (id=147): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) 2m13.543992866s ago: executing program 33 (id=147): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) 1m42.458595464s ago: executing program 2 (id=247): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1m42.011754294s ago: executing program 2 (id=248): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000780)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a41c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78a57a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420800000000000000c1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1212e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b8393dee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x104b) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 1m41.052850763s ago: executing program 2 (id=252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 1m32.173332883s ago: executing program 4 (id=270): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x3120050, &(0x7f0000000080)=ANY=[@ANYBLOB="b6e7a1cc4c18e20909d0f764a2a94f223a9eb2f339a7b47a196943ab806d050b70d0496bd4fa12f8c9554136b902654c5f2afcb7669c768c3177c3d540ef34a137a76dc8c63e786707ce3098d614fc742da31fac6603b6fb03caa5f59780aadd904a2fd32893f8f1c2d8da73a9d28aa52cb96e8fb826729203f4e60aad978ec6e191f722e1dd9a45fca3b9f4cae7fd1e185255d07af1553548a31a85ba8611a8e7c1536665c590017e4f7585832011f5926066265317214ad1121fdba251e2ca7e81543334d1139512f7caad3ba3d4aa0c44b8123085e85ccb720e29459d68", @ANYRES64], 0x0, 0x14fd, &(0x7f0000004740)="$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") r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xffff}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_RTT={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x3}]}}]}, 0x64}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) 1m30.335752698s ago: executing program 4 (id=274): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x2, 0xfffd, 0x3}, 'syz0\x00', 0x3c}) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xa2c2, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21, 0x1, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m29.731575851s ago: executing program 4 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1m26.479099725s ago: executing program 4 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 1m25.743666364s ago: executing program 4 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4, r2}, 0x10) 1m24.745825837s ago: executing program 4 (id=292): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x4a, 0x0) 1m23.516556468s ago: executing program 34 (id=292): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x4a, 0x0) 1m1.856536282s ago: executing program 2 (id=252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 53.518338397s ago: executing program 6 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x1, 0x5a41, &(0x7f000000ba80)="$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") r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) io_setup(0x2, &(0x7f0000002380)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x201600}]) 52.382049253s ago: executing program 6 (id=419): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 48.394141002s ago: executing program 6 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001002dbd70007edbdf2500000000", @ANYRES32=r4, @ANYBLOB="000000000000000010001280080001007369740004000280"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 47.803371464s ago: executing program 6 (id=440): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x800}}, {@nodecompose}, {@type={'type', 0x3d, "f268d651"}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b2, &(0x7f0000000280)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 47.261409837s ago: executing program 6 (id=444): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000006200)='./bus\x00', &(0x7f0000000000), 0x4002, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) 46.506132962s ago: executing program 6 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 45.809188421s ago: executing program 35 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 43.252203263s ago: executing program 0 (id=468): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xfeffffff, r1, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 42.850692208s ago: executing program 0 (id=471): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 42.470096479s ago: executing program 0 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001002dbd70007edbdf2500000000", @ANYRES32=r4, @ANYBLOB="000000000000000010001280080001007369740004000280"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 42.078885931s ago: executing program 0 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f00000012c0)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 41.660472509s ago: executing program 0 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 41.109743371s ago: executing program 8 (id=486): mq_timedsend(0xffffffffffffffff, &(0x7f0000000780)="9f1cae6c1f481ed8497d0dee7899b842ef04eb9a2f1648c74e58e86187c5df687285256b402c9773c11b1890f25da73a9d2d99e147cc22fc3cd0b419613f0f0c760c302e047e631f499cdeeef2781d8337a4ef930bea84cdf94d0f0197ab62a912337d75bed7e2a533c2a4fc0cee49222f34f8d57aa84c5ae3d601d060145a9e4cd4fdda49da344f", 0x88, 0xfffffffe, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 40.897812828s ago: executing program 8 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001002dbd70007edbdf2500000000", @ANYRES32=r4, @ANYBLOB="000000000000000010001280080001007369740004000280"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 38.009880592s ago: executing program 0 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 37.835693098s ago: executing program 8 (id=496): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x20024c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046, 0x100000}) 36.745860678s ago: executing program 36 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 36.485412224s ago: executing program 8 (id=500): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000040)={0x40, 0x19, 0x1, '\x00'}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 29.952211757s ago: executing program 2 (id=252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 25.915829718s ago: executing program 8 (id=518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x12) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x5f65bd31, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) shutdown(r0, 0x1) 24.026157692s ago: executing program 8 (id=522): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x111042, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000005c0)="5fe09f805f31800f7e3e89bd56df5588cd3a41d39571e84e43acf73c65b3cbd3f827531ec8c9c86bb865814f774d32aea75aadf4fbc48fda44bd0b1d52fb113b3334ecceb0b2be14495ab6af281dcd4e74f7e3a21098ff3adbbcdd47310dfebf75aa8ef529b12f660b00787a635acb91c8ccc2e3f95598b4bce7b8b40ef43c7c17b433b9880ebef10cc19abf50fe8e43b59f399171ae2b1f153f7c5c1351dcbc580617221025fc41b20685cdb4ceabd0d3145cd619ffb3870dbd042e5d8da335331812e04ce550256752c1e01d8a7eb9d4eea9c87733d151a3605fdc1c0f3ea9b62b6c00fac7ba8391aab9916688d2dc0059786c08414cfb9e50b844a9706fa79fd2f9829df70a0fd66b2f5650ad75a06d91a0340dff8d88799124b7737c45ee3a585a2feb9b0daa3a5e967e70cdbcecb0ae45a39dca72ee5ff21c2c6a910cadc99bb48092b4e2a1f6c9a95953b75056c3289264b9ccb692dd3312193ef55f6f131a4bf98718ee46ce8ad3968621966261c83cd97c182c7deb7154149e774c8a90359cafdc9fba384c1198bb4d32625e538262236d789177e941e9e2d9632fef1df98c46dffc9539e162b40a8375b1edb42f536a2c475f3e818110b50e089afdde0b4e4318da4b0a6923502f871c9445dc1908f6c6516bc3c9b71e255bf8e0bec74ffe54062c3e217bc11417fe2d05c4cbcee612ca83e96b98607cf4122099b4694ed25c8cc8e0b48869a09fa9918972f4c1edc61b7418425fd44418739e8871e35573a6336c5bf4db382d16654296fa4155a57c08316a8e2c8c533acf7c1d2f06bef11bb43beae9b8345cbbc8b206300db48202b3f18e43d5eb4ef81ea2fab03763a9f29639db34d166f169f8937e2daa55ede16b6f6631f3c6c6384951f48e8ab4e704a34584e5e26cc0cc62d125f3e43e2998736b79fff5582feab75e6e9692405013d52c8ddbd2a0f01100a7b1a3e6019c9cdfdf3671f5beaae5178134279742257d1c5cae6a3ffafb740fd99962c9a1ef4799b08f07f221d75e23c498abf910d391058542778563766f23ea3c965d00e06f02324b5460f71e2769dbea5ecae2f1f637c6c59b721e2d31c3bef16cc8c624ec5c3f4fee728c97fe2c4dc7bc8a06a239ac6b9a809521b462a2f1575c5f8c1eeada05beff543b154a25a3ec4c25ae559f44c3b4fc38e61ebac2a1581d897f2af95c0037893a7079052b3859a603073720f9bd0064af05419fa593436742d898b6f123c255c6f51e64e63e82b8850585d97c781aa18f8a443606063ea43dcf5885ce1633e3d7fe992a5d6e7fee8f99bfbb4c550d70c89eb182a208b531be24a409df8cbf6a0fe5b92f066017c4bd32fa23b5cd2605fbc9553006aee496efd41ca19548d999db930f9aeb5b642a976650cbe753e9dc198add24918622eb2d5c33400a97fd2cb86e454fd252d95990ea47c06c986b2cb71402a19c1ac89e8d1e4d1d3e9705461d82d43c395ebbd07717093dc6a74ab911c2bb1f1ac192a3d693fd688b182f6337b446105b83b01eac5ee02417182739c0685213772b68b81b0cc020232e2e4d5cb5db31da5b55c26c5bdcb7c23db5bff3da102397b4aa4e67f0cd529512006039f41eb43d2e0426bcb57ecc234c179e8df30c83a77c38c30d2a828d0ae606472de3c413b3233644622eeb0dc1b900ec1834ba61dd639e8ca3119c72acda99e35c1796cf259cb8ec9567173b43bbc090d0014eb2c2848dc119aa1366931bff1accc2029e82fa3d6f4bd7d9c0e6192dbc069c5f716b114f4969c1fec4366153df3448759483ff1cb52b7e6f096d9772cfcca98046f683f6c05b2c8626a0a30961eb61fa1a23d14160e1b29b6a79ec02444118f7e415d3c18471675fa2ee55af3ddae820dfe3b26c8cb3a92403eecd90b4c6ad236afa971a0e1f8ccee357626d8731df90bcee628a329a0c02f8e7e8caa06c8ae69eefccc81e89904738f7122b274c8ad83c705e713555092a7abd2f929582ee56c0a6958a64b2dba058d2e24b6cd9a23d322693c85e7163cac650bfe33f2d4c9d87b50c41bfc48d28470df9423a5d9139e59a360aa294da329630ad3f49e89eb63c636804fac42d1e085f06108686ef6534f1443c13c79e8490deadbd8fa411f908a5c09f7b3fa35da7d61afd05bb9fc7bde0eb00dee2287d4a1a44d11c7de6cb189c3831dbdad0874f952c0181b486d986a60d48b3f256503cf4c7a8052b409100c808683134fd5331b25385ddd750b3e33f79fe59eac13246f6d732c8c7b70cb165059e9ae8e7e92e9aebfa49230cfdf6bcd3f1aaf8664d3a7bc38f249c33802dd7b7001851e82a408fec2fe72340c620fdab9c403592ce0edf41cb3ce907aaf3fd020247c85272b692ed92c949c8feb24457b436c29200b771f91c0cd42cb6b55e8f4be46a3283edf47e0c3ff4087d78e30acfad1aa045eb85c3b835146db4d09a44857192622cc7a8300e783d0753f46a678ec0af43fa425477a49d7993720db029084a3d492c8e76e5f5eb726925ac2bdb0502aa2ab01f61d60615397501a4207f78a3f07e9a2925b3272d3314b6f0b45524c643f10bcb0a55bdd28203399c0b34cf615e06bce358f3e174c82ddf13fb0677b3090dbe3a4ae0108c7a37c11ef48ec2671ae88669a74ab666113d4c90b182baca1958f056c50cbbc6f2a352f379b2944cd77f8deddd85257a85964ea4fe1917e1caec52a42d913170001a24dcf3be300da79535bc648f7ea5250ae78ea56a8fb6f0ec55618322a258776d32f8495e65d3c39076571ade804deb64e9a417e8c2e6f16d2a6ad6be1f79cadba76d45ab29583e62d93cfdb0ea04c0edaa242f0b79da7bbddceaf63bc6906694c7f989f5cb409c509bcc259fe37e40b7c599a1798879ad080f7c4e5924223710f0dab96d9ac990d272be18a31163a7735b9bdb2a210c7d2214cbd764fd10ccea511959b84fe9f461f96ad11adc43c1e8382ae048479600e2969a9115828686c13584d39a81b75667b5945448e6cb2b42f4a209f46da58f9733a0ad7966344ddd55e8c8e25d949aa1a78583c78e704dcb2af901c26687a227bb81b5868b50bb179716ac664b4cdf1e1d05f8b26f09c0b3fe6456f2171acfdadb2b939657465d32bc4d934405779dda1bf04c7e6bc5657463efcc3a085d3a11cbf11ba9031d816c92c05c180113cf1baeba5705a642b990fba518e1ec5fea0c70b97ec9edd40c6be0a8273152412dee736fd78805105865460c503d2c8dd39c070dc541abb7abf66c2428ed5ef2ab30f604fb5b99192bb489d3e5881ab56ad5bdf781d1d926d15b44f5e0619cb46eaae9bdfbe6dd3a171fdfbc80e779ff2ceea44de176b856d734f6e954e99285df2c710d808600f5efab6e615fd99d2be10786166b5a5e20412ce6152182985d242ac15854d5a79a4903cd0a3deca8a086a66cb1db409911738667352dd123c48d5e0b137596fb537d9a2b931d241a545a9e5968e6083eea4082d1f2f319593203554383754afc6984a9c26dcf4e0e1ed08d31e0fd08445e68b768dda26086dfdcc7ffa877402488b4cf1090da74facbff22c0db4c8875a65dde6def6348ef94f420c9d448fc6f12def3f98612b6e7432e834ff7917ae17c7d8b5d8f6ab611f01e49f322eb468f971c949b840cead34f60d69bccc31bd463f4d322ce7f0ee058174411bba86cd699147b7f7300593b18724b94e0f8c27644cedf1968b24c27154fc8bbc9edc4f4f90d9cce9763dc62408defa9bf67a4a93705e08528cefaa22dfd54c69fba7dbe05939cc8c240438e158039f598bd51e673859b1c26c38dd59d027f103eccb7845bfaacb1487e746724a624f99d28f71c8115b21ffe2d9edc71bc1032adb0ccd46a2c3524dbe761bee9c937f5f0fcdc7f4946da928a4f2de3a9c07713b4a88b78922a93b16a9f08e829079849b42f0290e09f4ce6bdf725c0daea1d27b88ebb9236595c43c3e17b63be6ecf4b5d6a9f43cc449a408ccb182e841d49739c75fd3f46f1e07a2aca73134b01e93b0fccee631003ae55f79d0dfea36b0e91f3d1695e8ef4ef783aaf6c6dcb6588fd90849640e204f423a7a4539b6906e5ba6c69fdd2cfa914eb69a6dfdafbb257d5800a987c9ff07ac0f784c1ce0e7183f4a41a01bed5ec8eb36bb0e8b00d02bb4c487094a39060d791a823ddf7fdbf6af6f17e9a8bfe9264579d0e3c8c028ca7ccf2b4850d5b8ff095053211f947501732792428ed0c2c84137fd8cacabe7842279e080fec1597134a465d7fbee3148b8f49c6a376c84d14e4d077f8ce694f2c29eef4419dec1992c9de3bc2cc758713abbf4a2a560d7bcadf03e2117a1b7843850ec0cda6d2b82b4e37dc3bae6713b152c1a76709c875060810dbd937fe124e2a70a4ba5ca8fe59bd1c8b5053f0130092b24ff17718e0143f2f6c97d9fdc52be9dd7c470fbb6d61dfdc829e0061eb2f5c458df3a91fd6fe7b365d8c96caec56dd4ce64b7a505a07a45620b8cff845a679c1c7993099348bffcde258102ee50d4fb7bfee64b2a80e5c33799141c8511476f5b5462eb70be04b92025ff56948544aefb4f5de5addabcd0ae93652dcca4770b9b7a97e1af85d88f8e195518737fad7991ecd60f2ecb2ace2797af8c7123fe1e11cc71480b25fd58b8aec953f1c0a234c9bac16fb63693ba75d4d95d1e8606af5a6799c9798cadb4753a3e7739a81b0d4b767ac6bc09ac90da2be82362babf136da9537d208dd0735989a25789e08a24f9e27b14fa20891573dbf83f7762603d2fc1d4c863bafc35c2573795a885db4c1b4dfd11764c7d137552c71c41aede478990e7e6817b024c058e55c6f31378cc7e5d0c0eeba178a464f8c11b41460f3524926916b31d5316ec93304d0e280b545b02baa334889839cdbe0fb7c3d760021211d7c59a221490c9fe75ca7504ea4fa8bf62933ac2f88f0e69ec8fc4f02c1b4ed87c4876fc91573e9c33104339fc87b5234496f95b9540cbab0a3c30a2b9ef19adca24d819f1d5cca2a88fa835e885176bf5775584407f86881e954a913fca2e726aaa95fbb0649e4e94f2278b5531f7bb3d42c882dd00d594ceb388bccfbd5fca473d9efd319a1d76c7cfb795249f945c7aacee5532465b5577e39032e5269f214effe6387d808500c29d3249f14f8149a096618048eff1ff2e9016e341cffec0aec4ce243cab349cf47e908a0fba5453fe1379466e801fb064d702184f9342fee9835f4c2276620868a23023ed1980da5ce90c4eff2bdbf1c2417d17433043627438b4788b9ef33b5ddc1a826547d6930d9e9bb81fdcbaba04948d6ad9431ee3515ff312866e57c7d68b5532c4fa8ff68d71f8e1320352bb8bc77abad618f1582ce7dfa94873665cadf89d05ae35edfff8f4b5bded397ee0cf2d90ff9543d98a4776356a3d609575deb32a9f403b098c58188552cc5f07f37c51969e86f0bc8facecd891026b2a2abd32232626519a25d965f8b9cb6931cd0348e3b5a3466c05a485c2ebadeaf514a969a44277bee15091053689e2e3555e6dd12338e95bb71b031a131f44ce1a2076583821f08d3669976ade6ac506d71cc057394fad6d63a7d12e9159b9c809c217eeb79c4d3975be13e3b3e861a6525a47e004a0611cdb55a2c0a40884c17313877ac758535e8e3083fa85219c00e1ca47af8ae8c9eed8be899f19ae04256b1080f7b7f63747a02ae23d017bb6fb5728d317c15467f99ce90d308f4c082ea692f899ef860f311babfb617067e30631661471cffd17c047c5c59326ca4ea727e4ab44228b3f4e033c1d72492de94bda71f5a3b356aa8f0385c4cf0526aa0aeb4b13cf9b93264c23f11696487de1de063466ede4ed15300f644aa18ffa9f881bda4cab7edc3acaa2518cfa0a035b346303b9f40ae40ca6215c0b36f0f6fe8131fa40855c787ad106e46dcbacf0101a52e8d3ff0507df40478da726680004d28d9eec77fc5def31c9ee44bf73d3a0051d81a5a8219cb2dc6ac4bdfa1c2168e6a714e77a2a05efe2567bec0450ece876b0a1a3ae5e0928522f3d05421eb1dcc09dd648e8399a931e42c6d1f2d5882e13e5dff7831ff7997a4699be418923e22903cfdb134bbe7de8d3e9d2198f8e77d41068d475a122b642a39fe4bfe9fbf6e6418f422ef43534ee634564614b36a709613c8938befbde5e21548c0084cf9c4103a10d5ad678413a7580f7cdb0472a0cc677028e7a71ac179450d8e64f80e1582ab42cf3e39312f3300859006f6d240e78db07ed9b14100454e9d7b2544773f0aa41c6d4834b1f162279648089cd45f674ae5be723e3792760b3d1366caf6b4a45002b07153b69796620e3afd0236936af80d7c02d9fa44b476e6417ab21be9519b6eb59fa995ba42d0bc9e4840f14ce3504e60ab31351a6fd6995ff2395bb02a736f9ebc05e866ecbb697d3bcd3c8a3ed5e3d7227d6f7f6b613e5734c8f4037d5fdceaf1f5d311f285a7d6229eada44834bbfefb3accb493e76ba7612144feaf7a7e3abde04814483278a69e1760cd8b0992edd07be241dacece48e1f4f5c0229e234313ee6437e7903819d7c4bcaf369e6b8cebf3e71de1382c18719c865c09fcf00f20479a2b7c39fc2595e229712be4f35fcf0fb535ac9059b7fcabe145be3142f2a78da521330626c20e03d834e72aff57a2b3dca229bf74869a733c83131987de77a4a2f9d18774a19a44e8d617eabee0fe42a6b68ddb0c273aa6fbb8510fc3c56ac686a46acc4587e2af65621a8c3aaf63e073f7cf02832cadb729046b8858a42832df4688b6b3532ff33b00deb7b260ee3af9eddec62dd0fe3b1b65642c9d629d00708c1d50ad36946fc846db97b95e04bd229abd3d644998382c171596ab5d9e5a38f21c52a8b0b630a8b008c9b4641a4f656b0719879992bbe469abf09715867aadc76e47eefba063d5341e211654438c8508a1827450ab16e64cec334f9f48d2d2755c7f59c5105819c86397434b224cacc4657a84fac455518e8a2006e2a3235e9c6a03d66e6b671b775887c5cde2657287377cc72e0e08c7e96ff7ffacbf26c684fb393b508a0d1408eb84416e8592661b3fdf16d89aa9596b825abafd192f72dab7136b121d0ce7e245018e9d76acc6cbf307486bcc59ef700736fa83e314d1d51f654b8cc88216904f5046cbe25fc45551c6ca191e25a7df51e06823b4a4d19050ed012bd235cf865e72a9a03c97442502049227e9b0581ae14a4c59079977656a79dcad8a8a84106864f7568fd474a8c9b6b29aea11e0d2237868716903b552267196c267cf46223f8ec8b992f6fa1928ac9e23c495675393fa0c0849169d788d485996ef58bb2e80a7314bd91587665cc726bbe65456c943e1d1002b6a60f4f7dd2122112422dd971c0ed65e8664386a384bb76361273e167bcad8bb479d59186f959ef2cab7fd87da84eba0a743a8bc2752acec11691d05dc9362b620bde2543b04abbbc41a854f75b9890dcf651e6a11cb68bdff52a51488f4362a1bcefad219c9576ea48ed69a068e9c37c0b7fb9494ebe60005062aaad62fbe6f845996dcc667655e06fcbfca10c066665a5b5f6c5c143bd2cded219521371466c33caef2488b74d74e1272a71cf9af397b914668eea58a64b38ef098c10820886e1afd5e7c0ae18e2512be8ad5d957ac62f19319544195fe8234ab4fddf065ba0383186ad5e333928ddb42ea4c5810c56cb05ab6f292f1cf1b70d1c52b05cfa51207a4b80578ddeb8e055f93f845ec5091d6670d7e77b3def68ecdcd2e3295510c4dd2805934eb1b3895455f2dd00d6541503edc8dc041b5d917a331d67accbd721ca02716ed620406dacdb54827b6ae62e4225dd835c9000c52a4a655585dad6c6bcf21417f36cfd977aa2dd955d69b9ca305779948d85f368dfdce9ab24ec3fe44b234d0e476f3140ef2afeb45b550d5a09976f29e010eb8727f19840dda96d8351272d76f3248b9b0332224bfadc02d8f30b63bb357cdc6bf19a8a1a0ddc40b50b0abb47a6d0d7b44de40de8ceb804dc36cc3289529063604639ff2f98dfb7ef341801a8013cbce08921df97d2cfdfe29851cfcfccce3eaa7bd8d37a65faa3dd21bd492a01c7c542bd835bd8294a31abad15a6aa062efcc6128d8fb6aafef05e4fcd9a441de822519cd5c95e8c58c4b25757f1f7cf981828c283f6c351a2402b9de863524af9a7008974b622154e144d979684ed2d3b75bcf1dae864953210f57dc007efb47ee23e9e9c1b52cb6e311a4d6086df8e298f7188e26f7b1101e38f6bc750d383aa3163415d8528553f507a601da877cd1885d3213ce434dfbd50eb8f4d57b9e59c6293dc1f5d20e1baafbf79f243d402d319a5fc4bb175ae9c98e286149809222fc5c9d5920373ed79d7b06e544979a7b7313a6eeb56f9dfb70dae49f322b8df43003f5cf7360585fe857dd5f9e945553e1b9ef9eb4550de4ef3aad1ccea870d41bf65c4fda86e7dfdb3b833a09791c04cf0b44c4993edd0b02be17194d654b2e87018bebfdb2521611e198fd511a3a4061b7d068aa4cfba2c90f638f4b62520e865cc57775987cfb86d55d6fd01927f3cb0b41cec35131c766e9e8917fe02cbd62bcbb6215f47299e5f776645a7732d93d7cf1b718f44a7dc230e4252f3d59141b2d3d77bbf60516526e76d249364fee14baba65ec521f43c612a7ce17c7e981d7622ae75cf6f9fc5db93015cd0a449e6618cee4174d2fbb8716cb19e0a3740f07a9458c9d10eef5866d949ffa9158f1598a5a6cf4d38501d6e22e3bb5290e8e8f810555d9fa25edd110735a92d02c9caca2820e53813aef381d6a4f370dc69e0c91ec11c27302ce117e6a635781ff3e9bda0f05f17a63acea2cec2fee84e7298014e984a225295d59c52adb41e38e52658c652adef7404e9405221918d12e050e6a4aed622879f9a0f3947f8c482f36f82e1a52ae1bf8273858f132027135a347f6e4778b46e5d5e121ba43fc1f421b8ac4e4945e7fa3629fc9f44f099c56b5ff574a4d4c00bad6c8e8a56344ac36da96a7567de4f01029190b4cfd076de5ea5e1c5106c70da701879f8c0f1de99aa1dca780d96ea5491a0bb4963194c95233c250029099430413cc2cedd386d9860c071f376b844f210c2d7d2909ad33ccfb088d9f32be7a267b087de308c232fa97ebc194d49827f6fafb890448d5302af3c5ea6377e1619ce5ea30bd8e8d773bf8386c55a8281c5dcc5c39e0b4e3e9a4fc9b3833303c2f520128f11130c788ff5a3d26029ff4402199383d655d06cfd7be565a5bd88a375629a57264c0ae6d2410bffd09fe43700c69334e0f6328fc1c4a2c557ef4d896fbd362bb93faac1e7505ae8bba7db66951e894f93a08a8474eca1d15afe247b096b54338c6456a44dcb86ccfc0f59a47a283e52c78f1c697babd375b1ecc1560eb97ff777b1d162f61b1f5a0eb1557f9d50eeb70310bef49a7fd5e980a96cde03f2e118219f0a8c7a390b0b3081a84e4c1c743b1521d11e0eda13a4497f2628966747aa350733ffc21e1b6c2f38b85debded8daf4cfbcfacb3d2f915a9f0ca912454b42c9fd25319cf910b93ce7ac5111c24fbb5499d31018742a27df9f3b81611e439f0d9da463cdafd87f5a42803c23129e3562cc75ad5168edc437bdc9a192df3aaab97f82e336b8360d868af59c5268f470fc29bce750c31a1ab0fcb72453e1ee79eb266e4283bb7243c5a6f6f3c42e5ff4eea817f9348f51997105da3dfc7aaaebfd47ceb369ab35682408ed987ff2bba6551de17984aeb22b6bd221e134043767aac0439f6cdb3ec51adcde70d8823f0f0a97d8e4bd2a8a8d918775b3dcfb72fa6b32d2b326532c1432c68167043dff805d2238dff7ca2e7fa00541a3eba89b0e91496c948ba844990c17be372b3807fc6a058e025e680fe08c8bb992cdf458c19bf69e46a4e90797aee179613ab30094a5d349ba64d91e20d2368beca24e951e889d076b80d8e62dae87e42da233f6163fa860d1338e28b262763a22a3d39a6c65eeff9546d0250711713049014297daef46c285926306dc4504a10f6aa10bf049e4f13096e449ef75338e8d0129a57c752954f8924d6f0586c979fc23d6ad6107fb20a7eee861b1c37059ec579ffe7131cda4bc2f4f00eb25bcbc530b1a49d1e26ff4c3ca909e82bb500922b7c749185ddd4015540f9086a468663e2e0eadf83eb559c045080346357cee0ac2563b06aae5c7579fc834871267318ac268617be4b3c686ab7e971a7f09b9cbdc2a0b528dadb2d8305f1df685cd7dccf0ab3f7fbe3b68741d6db21e91d20b46f3acab5be25afb38c67ac288310bcf7d642bdb2233b06fb3f37fd45ea28a84c7f92689aa3059ab0645a47d3f9cd4b07a94e9de2b1d639822ff4eea57eb2ac426017cbe9f2c12d9bad276618fa62e2a528e4c8551d814786f8eb31c43c3e165b2d1ba6c609a2d0519a4c10c198eb0c4efab44c8b31a299d22987abcb95816f5ad0eb21c003d8d987210dcbc997f8d11fcbb823ab7f0b4a0db64655c97761b590ecbff8b45fbaf474586d4ab5f8f72846d049641243ebc2fc3c0d653563dab5c3a6c8e039ca056ae9e4f96a1845c1faaea857d32284e69993102d530688ff00fb17d7e0ec699d62d5b255da9f2eca0faedd00391a612d13d1fb36f2438d3544e464f3faa3a178720259ea7fb53960785d84266a7069eb50e119be28f055eb262c3ab63ac28546c80677e11ef7463f43e606094251af3acee26be8a3d89475b0bdbb29ce63830ab75f68aff3f66e394cd921a5a4e5a95ca697ea3ea1e10711f8f65158ee12b3511deed38acd3fe7a4fde07f176d8e4fd919885f28aeeaaa162ee7713916af85b7b0ac0a0c12d2f3f9249a980a92e81ef2d22ef4245e3ce1abfd6133f436d29fec34a333e7b31919c172ac3bfd7ffd53aecdfde29d0c420930e0f8586ba12c65d93b4b2012fdbda2fb7a7701109ff1b87c10e9d86b15864f4b5fc028a73fe73e5f325c87003c056253c530acbc74ff1269ea9e7ebc3d06552f5d3a2b5292bef8362e6912f53f5d89149927c54fd27e8ff7157653d91fe20c08412583e7d7d41fc661cade9c069916c904d253c1cdf90ec1af32bd6052c6e8e1db00a9a6bf6a2c8b6852e85cc80c346c517fc86f20c9473a91f83644d0dc138eeebb14ec5b620a580f33ff966625f1c309cf380e0b114dba4c5c25d0cfb8678ff17c72e7b11094ea8a7de2a6fba8b8f51ed7360f1cc886bf39dfa1f8b19185a03b84b163f484aa4c8e7f565b3c589ec3502546fc4a5354e7722d8e65abf058301c9fc8e1c3889f23ff674af35fa42e157fdaada4f7d2cffeab64d3ccde933f12554b6322d1a2c9920432f7a334ad7f206b2b794c53bff2896de8a2dccab36717e4b1f0a571d4b906de430cc97135fe7e752e838f64d5aaba326a76772aa2373ed73fefa6889c83f9e1f970bef165a307b6e97d560a5cbbb85971f832a38f9916c41caa33ad37977097618798008190f790b901e2c12097405c6389da9f55427950b672c213c242b93deae3b5f90a3d8ceb72e27e5dc54e5b3a28f22787bc1118f0448573d190", 0x2000, &(0x7f0000003180)={&(0x7f0000000540)={0x50, 0xffffffffffffffda, 0x6, {0x7, 0x29, 0x4, 0x250208, 0xfff, 0xd9b, 0x3000000, 0x3, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000002ac0)=ANY=[@ANYBLOB="757365722e706f6c69636500a394a92214f2cfad7347dbd75c67e1924d8fe03df8774520ef158af5ad54a5363f98fe56092689ea268d3ef2268a90d12e5169c73368632f5642559abed4df6fd8c87bd3f2706df899da057716db5e86fd058495cbe0360bbf26000e3129b3b3e8b31a176e64e2bfea65ff95432385feea3225f271a3f3bf6733f8dcb6c4d9a21e6dd20cb4df0a90d4f871f0cf6558b75dacd96a8ed01d9a795543bfd069a03df0a2"]) 7.854371746s ago: executing program 2 (id=252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 6.791419608s ago: executing program 9 (id=583): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x12}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 6.598475431s ago: executing program 9 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 5.998110718s ago: executing program 9 (id=586): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x61, 0x40001002, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000680)={[{@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x57e, &(0x7f0000000740)="$eJzs3c9rHFUcAPDvbJL+rk2hFPUggR6s1G6axB8VhNajaLFg73VJtqFk0y3ZTWlioe3BXrxIEUQsiH+Ad4/Ff8Cr/0BBC0VK0IOXldnMpmuym22StUmczwemfW9mku+8efNevrOzywaQWyPpP4WIVyLiqyTiSNu2wcg2jizvt/T01mS6JNFofPpHEkm2rrV/kv1/MKu8HBE/fxFxqrA2bm1hcaZUqZTnsvpoffb6aG1h8fTV2dJ0ebp8bXxi4uzbE+PvvftO39r6xsW/vv3k4Ydnvzyx9M2Pj4/eT+J8HMq2tbdjC+60V0ZiJDsnQ3F+1Y5jfQi2kyTbfQBsykA2zocinQOOxEA26oH/v9sR0QByKjH+IadaeUDr3r5P98G7xpMPlm+A1rZ/cPm1kdjXvDc6sJT8684ovd8d7kP8NMZPvz+4ny7R43WI232IB9By525EnBkcXDv/Jdn8t3lnmi8er291jLz9/YHt9DDNf97slP8UVvKf6JD/HOwwdjej9/gvPO5DmK7S/O/9jvnvytQ1PJDVDjdzvqHkytVK+UxEvBQRJ2Nob1pf73nO2aVHjW7b2vO/dEnjt3LB7DgeD+5t+4GBiKlSvbTFZq94cjfi1Wf5bxJr5v99zVx3df+n5+PicvFwrxjHyw9e67atd/vb9T8DbvwQ8XrH/n/2RCtZ//nkaPN6GG1dFWv9ee/4L93ib6z9/Zf2/4H12z+ctD+vrW08xvf7/i5327bR63/m3PL1vye51KzvydbfLNXrc2MRe5KP164ff/bzrXpr/7T9J0+sP/91uv73R8Rnz9n+e8fudd11J/T/1Ib6f+OFRx99/l23+M/X/281SyezNc8z/3U6nF87HOBWzh0AAAAAAADsNIWIOBRJobhSLhSKxeX3dxyLA4VKtVY/daU6f20qmp+VHY6hQutJ95G290OMZe+HbdXHV9UnIuJoRHw9sL9ZL05WK1Pb3XgAAAAAAAAAAAAAAAAAAADYIQ52+fx/6reB7T464D/nK78hv3qO/3580xOwI/n7D/ll/EN+Gf+QX8Y/5JfxD/ll/EN+Gf+QX8Y/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NXFCxfSpbH09NZkWp+6sTA/U71xeqpcmynOzk8WJ6tz14vT1ep0pVycrM72+n2VavX62HjM3xytl2v10drC4uXZ6vy1+uWrs6Xp8uXy0AtpFQAAAAAAAAAAAAAAAAAAAOwutYXFmVKlUp5T6Fo4FzviMDZdSHr18rnsYthUiEYjdvn52U2FSy8s1jZPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5p8AAAD//50bNYs=") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0109220c"], 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) 5.131633248s ago: executing program 9 (id=590): socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 4.402169776s ago: executing program 5 (id=593): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x4c}}, 0x0) 4.003528772s ago: executing program 7 (id=595): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x9362, 0x0) 3.991083067s ago: executing program 9 (id=596): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.734103289s ago: executing program 5 (id=597): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, 0x0) fallocate(r2, 0x3, 0x9100, 0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.733478792s ago: executing program 1 (id=598): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 3.609052945s ago: executing program 7 (id=599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.382669427s ago: executing program 1 (id=600): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 3.314055789s ago: executing program 9 (id=601): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 3.247247141s ago: executing program 7 (id=602): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x1, 0x2, 0x0, 0xfbff, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 3.225897329s ago: executing program 5 (id=603): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000580)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.071848041s ago: executing program 1 (id=604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = syz_clone(0x24805000, 0x0, 0xfffffffffffffe6e, &(0x7f00000001c0), 0x0, 0x0) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.914067758s ago: executing program 5 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x36, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) 1.893997659s ago: executing program 5 (id=606): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x6ec6, 0x7, 0x5, 0x3c3c}, 0x3e, [0x9, 0x8, 0x8, 0x2, 0x5334, 0x400, 0x80000010, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x10001, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0x3, 0x8, 0x0, 0x0, 0x202, 0x8000, 0x1, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x6, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x9, 0x1, 0x104, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x7ffe, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffe9c, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd2, 0x7, 0x8, 0x7, 0x4, 0x8, 0x10, 0x7, 0x7, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe57, 0x4, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x8, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x7, 0x9, 0x6, 0x1010000, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401], [0x108e, 0x7fff, 0xfffffffe, 0x4, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x401, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x8000002, 0x5, 0x2, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x3ff, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x14de, 0x2, 0xe, 0x7f, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) clock_adjtime(0x0, 0x0) 1.612947921s ago: executing program 5 (id=607): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x109202, 0x52) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300", @ANYRESDEC], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.563786352s ago: executing program 1 (id=608): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0e238a86b018e04", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0x81}], 0x1}}], 0x2, 0x4008) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6, 0x1}}, './file0\x00'}) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 914.107877ms ago: executing program 1 (id=609): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20015, 0x23, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263ab442fc5c2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) link(&(0x7f0000000280)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 731.950222ms ago: executing program 7 (id=610): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 445.641302ms ago: executing program 7 (id=611): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') 134.135904ms ago: executing program 7 (id=612): openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x79, 0x1, 0x401}}}, 0x7) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@dax_inode}, {@prjquota}]}, 0x1, 0xb91b, &(0x7f0000000880)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): er: syz [ 161.719030][ T48] usb 3-1: config 0 descriptor?? [ 162.002790][ T6553] loop2: detected capacity change from 0 to 64 [ 162.208709][ T5819] usb 3-1: USB disconnect, device number 4 [ 162.221341][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.221411][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.444162][ T49] bridge_slave_1: left allmulticast mode [ 162.471771][ T49] bridge_slave_1: left promiscuous mode [ 162.480108][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.527555][ T49] bridge_slave_0: left allmulticast mode [ 162.527734][ T6568] loop4: detected capacity change from 0 to 512 [ 162.543804][ T49] bridge_slave_0: left promiscuous mode [ 162.577613][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.219831][ T5837] Bluetooth: hci4: command tx timeout [ 163.223052][ T6568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.259823][ T6568] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.610149][ T6583] input: syz0 as /devices/virtual/input/input6 [ 163.709601][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 163.709627][ T30] audit: type=1326 audit(1750079412.836:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.723290][ T30] audit: type=1326 audit(1750079412.846:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.723368][ T30] audit: type=1326 audit(1750079412.846:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.733806][ T30] audit: type=1326 audit(1750079412.866:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.757986][ T30] audit: type=1326 audit(1750079412.886:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.758075][ T30] audit: type=1326 audit(1750079412.886:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.760530][ T30] audit: type=1326 audit(1750079412.886:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.760933][ T30] audit: type=1326 audit(1750079412.896:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.766003][ T30] audit: type=1326 audit(1750079412.896:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.789121][ T30] audit: type=1326 audit(1750079412.916:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a298e929 code=0x7ffc0000 [ 163.844502][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.103408][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.216289][ T6596] cgroup: Invalid name [ 165.037007][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.070277][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.084868][ T49] bond0 (unregistering): Released all slaves [ 165.290431][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.309046][ T5837] Bluetooth: hci4: command tx timeout [ 165.336111][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.409681][ T5985] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.608938][ T5985] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.647498][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.674260][ T5985] usb 1-1: Product: syz [ 165.678489][ T5985] usb 1-1: Manufacturer: syz [ 165.713111][ T5985] usb 1-1: SerialNumber: syz [ 165.814772][ T5985] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.881827][ T48] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.267774][ T6628] tipc: Failed to remove unknown binding: 66,1,1/0:493576709/493576711 [ 166.282627][ T49] hsr_slave_0: left promiscuous mode [ 166.308214][ T49] hsr_slave_1: left promiscuous mode [ 166.324080][ T6628] tipc: Failed to remove unknown binding: 66,1,1/0:493576709/493576711 [ 166.333742][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.369070][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.408076][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.444835][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.478810][ T6631] loop6: detected capacity change from 0 to 1024 [ 166.569392][ T49] veth1_macvtap: left promiscuous mode [ 166.597592][ T49] veth0_macvtap: left promiscuous mode [ 166.619945][ T49] veth1_vlan: left promiscuous mode [ 166.631954][ T49] veth0_vlan: left promiscuous mode [ 166.747673][ T6631] hfsplus: xattr searching failed [ 166.811110][ T6638] hfsplus: xattr searching failed [ 167.060331][ T5985] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.078530][ T48] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 167.089386][ T48] ath9k_htc: Failed to initialize the device [ 167.130457][ T48] usb 1-1: ath9k_htc: USB layer deinitialized [ 167.231458][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.251385][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.284467][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.310973][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.399757][ T5985] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.409097][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.420118][ T5837] Bluetooth: hci4: command tx timeout [ 167.628703][ T5985] usb 3-1: config 0 descriptor?? [ 167.774644][ T48] usb 1-1: USB disconnect, device number 5 [ 168.124709][ T5985] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 168.246021][ T5985] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 168.776958][ T6648] ubi31: attaching mtd0 [ 168.841568][ T6648] ubi31: scanning is finished [ 168.847011][ T6648] ubi31: empty MTD device detected [ 169.396469][ T6648] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 169.404468][ T6648] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 169.416722][ T6648] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 169.449786][ T6648] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 169.468118][ T6648] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 169.497501][ T6648] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 169.507691][ T6648] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 10347957 [ 169.521201][ T6648] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 169.536393][ T6641] loop6: detected capacity change from 0 to 32768 [ 169.543134][ T5837] Bluetooth: hci4: command tx timeout [ 169.558674][ T5913] usb 3-1: USB disconnect, device number 5 [ 169.570725][ T6652] ubi31: background thread "ubi_bgt31d" started, PID 6652 [ 170.048411][ T6641] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 170.048450][ T6641] allowing incompatible features above 0.0: (unknown version) [ 170.048473][ T6641] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 170.144780][ T6641] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 170.177037][ T6641] bcachefs (loop6): initializing new filesystem [ 170.262306][ T6641] bcachefs (loop6): going read-write [ 170.394399][ T49] team0 (unregistering): Port device team_slave_1 removed [ 170.518393][ T6641] bcachefs (loop6): marking superblocks [ 170.524977][ T49] team0 (unregistering): Port device team_slave_0 removed [ 170.688884][ T6641] bcachefs (loop6): initializing freespace [ 170.746215][ T6674] loop2: detected capacity change from 0 to 4096 [ 170.791156][ T6641] bcachefs (loop6): done initializing freespace [ 170.881224][ T6641] bcachefs (loop6): reading snapshots table [ 170.902136][ T6641] bcachefs (loop6): reading snapshots done [ 171.187738][ T6641] bcachefs (loop6): loop6: Superblock write was silently dropped! (seq 0 expected 42) [ 171.223046][ T6641] bcachefs (loop6): done starting filesystem [ 171.409043][ T6641] syz.6.180 (6641) used greatest stack depth: 17928 bytes left [ 171.493332][ T6141] bcachefs (loop6): shutting down [ 171.522904][ T6141] bcachefs (loop6): going read-only [ 171.588818][ T6141] bcachefs (loop6): finished waiting for writes to stop [ 171.612821][ T6141] bcachefs (loop6): flushing journal and stopping allocators, journal seq 4 [ 171.624611][ T6679] loop8: detected capacity change from 0 to 16384 [ 171.998624][ T6141] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 5 [ 172.046454][ T6141] bcachefs (loop6): clean shutdown complete, journal seq 6 [ 172.079328][ T6141] bcachefs (loop6): marking filesystem clean [ 172.186641][ T6141] bcachefs (loop6): shutdown complete [ 172.208867][ T6681] loop8: detected capacity change from 16384 to 0 [ 172.607435][ T6653] netlink: 'syz.0.183': attribute type 5 has an invalid length. [ 173.030294][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.041623][ T6685] batadv_slave_0: entered promiscuous mode [ 173.576188][ T6695] loop0: detected capacity change from 0 to 40427 [ 173.586510][ T6695] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 173.594493][ T6695] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.694104][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 173.713872][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 173.745525][ T6695] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.752736][ T6695] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.923980][ T6703] ipvlan2: entered promiscuous mode [ 173.937421][ T6695] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 173.945791][ T6695] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 173.953483][ T6695] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 173.961188][ T6695] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 173.968768][ T6695] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 173.976906][ T6695] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 173.984573][ T6695] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 174.028782][ T6695] syz.0.195: attempt to access beyond end of device [ 174.028782][ T6695] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 174.228955][ T6690] loop4: detected capacity change from 0 to 32768 [ 174.276650][ T6690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.192 (6690) [ 174.402761][ T6690] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.458940][ T6690] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 174.496328][ T6690] BTRFS info (device loop4): using free-space-tree [ 175.806349][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.834169][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.853057][ T6741] loop1: detected capacity change from 0 to 256 [ 175.885245][ T6550] bridge_slave_0: entered allmulticast mode [ 175.929454][ T6550] bridge_slave_0: entered promiscuous mode [ 175.993951][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.010347][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.016540][ T5836] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.027901][ T6550] bridge_slave_1: entered allmulticast mode [ 176.030706][ T6550] bridge_slave_1: entered promiscuous mode [ 176.128616][ T6741] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 176.161951][ T6741] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 176.537822][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.634534][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.340813][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 177.340838][ T30] audit: type=1326 audit(1750079426.476:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e929 code=0x0 [ 177.796890][ T6550] team0: Port device team_slave_0 added [ 177.952391][ T6550] team0: Port device team_slave_1 added [ 178.374493][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.411358][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.566122][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.633281][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.665067][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.774297][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.792445][ T6745] loop2: detected capacity change from 0 to 32768 [ 178.945645][ T6745] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.088722][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.6.205'. [ 179.322751][ T6745] XFS (loop2): Ending clean mount [ 179.367216][ T6781] loop4: detected capacity change from 0 to 512 [ 179.383082][ T6745] XFS (loop2): Quotacheck needed: Please wait. [ 179.427758][ T6781] EXT4-fs: Ignoring removed nobh option [ 179.467098][ T6781] EXT4-fs: Ignoring removed orlov option [ 179.519743][ T6781] EXT4-fs: Invalid want_extra_isize 188 [ 179.537383][ T6745] XFS (loop2): Quotacheck: Done. [ 179.643868][ T6550] hsr_slave_0: entered promiscuous mode [ 179.661117][ T30] audit: type=1800 audit(1750079428.796:35): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.208" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 179.682477][ T6550] hsr_slave_1: entered promiscuous mode [ 179.688857][ T6550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.739682][ T6550] Cannot create hsr debugfs directory [ 179.798910][ T5851] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.849721][ T5819] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 179.900945][ T48] libceph: connect (1)[c::]:6789 error -101 [ 179.946253][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 179.953397][ T6788] ceph: No mds server is up or the cluster is laggy [ 180.091219][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 180.118000][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 180.149104][ T5819] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 180.162958][ T6794] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 180.172200][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.187839][ T5819] usb 5-1: Product: syz [ 180.198623][ T5819] usb 5-1: Manufacturer: syz [ 180.207003][ T5819] usb 5-1: SerialNumber: syz [ 180.262190][ T6798] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 180.264118][ T5819] usb 5-1: config 0 descriptor?? [ 180.548473][ T5819] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 180.826530][ T5819] usb 5-1: USB disconnect, device number 4 [ 181.655731][ T6550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 181.716882][ T6550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.032804][ T6550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.127017][ T6550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.378227][ T6841] input: syz1 as /devices/virtual/input/input9 [ 182.876080][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.968403][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.034732][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.041948][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.115732][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.122962][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.484914][ T6856] loop2: detected capacity change from 0 to 512 [ 183.593740][ T6856] EXT4-fs: Ignoring removed oldalloc option [ 183.627785][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.652227][ T6856] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.746824][ T6856] EXT4-fs (loop2): 1 truncate cleaned up [ 183.770853][ T6856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.556454][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.642857][ T6881] loop4: detected capacity change from 0 to 128 [ 184.849355][ T6881] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 185.086706][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.179705][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.489673][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 185.679744][ T6888] sd 0:0:1:0: PR command failed: 1026 [ 185.840163][ T6888] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 185.859527][ T5899] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 185.871395][ T6888] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 185.899938][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.983665][ T5899] pvrusb2: Hardware description: Terratec Grabster AV400 [ 186.027871][ T5899] pvrusb2: ********** [ 186.069767][ T5899] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 186.117329][ T5899] pvrusb2: Important functionality might not be entirely working. [ 186.180238][ T5899] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 186.241621][ T5899] pvrusb2: ********** [ 186.280431][ T2341] pvrusb2: Invalid write control endpoint [ 186.554160][ T6885] pvrusb2: Invalid write control endpoint [ 186.630076][ T10] usb 3-1: USB disconnect, device number 6 [ 186.631943][ T6906] input: syz0 as /devices/virtual/input/input10 [ 186.645900][ T2341] pvrusb2: Invalid write control endpoint [ 186.699274][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 186.741160][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 186.769871][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 186.870153][ T2341] pvrusb2: Device being rendered inoperable [ 186.908157][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 186.951315][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 187.014863][ T2341] pvrusb2: Attached sub-driver cx25840 [ 187.055041][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 187.110234][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 187.561168][ T6920] ubi: mtd0 is already attached to ubi31 [ 188.603554][ T6550] veth0_vlan: entered promiscuous mode [ 188.678998][ T6550] veth1_vlan: entered promiscuous mode [ 188.822537][ T6550] veth0_macvtap: entered promiscuous mode [ 188.869144][ T6550] veth1_macvtap: entered promiscuous mode [ 188.948580][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.960321][ T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.026305][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.161796][ T6550] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.177554][ T6550] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.199866][ T6550] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.212753][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 189.260170][ T48] usb 3-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=32.82 [ 189.275615][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.284175][ T6550] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.317040][ T48] usb 3-1: Product: syz [ 189.352279][ T48] usb 3-1: Manufacturer: syz [ 189.356950][ T48] usb 3-1: SerialNumber: syz [ 189.424279][ T48] usb 3-1: config 0 descriptor?? [ 189.448851][ T48] gspca_main: spca501-2.14.0 probing 1776:501c [ 190.108203][ T48] gspca_spca501: reg write: error -110 [ 190.130267][ T48] spca501 3-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 190.137277][ T48] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 190.200060][ T48] usb 3-1: USB disconnect, device number 7 [ 190.475280][ T4491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.520058][ T4491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.707177][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.725460][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.769827][ T6953] input: syz1 as /devices/virtual/input/input11 [ 191.585895][ T6937] loop6: detected capacity change from 0 to 32768 [ 191.719781][ T6964] netlink: 'syz.1.259': attribute type 4 has an invalid length. [ 192.245353][ T6972] loop7: detected capacity change from 0 to 16384 [ 192.430238][ T6973] loop7: detected capacity change from 16384 to 16383 [ 193.727647][ T6970] loop0: detected capacity change from 0 to 32768 [ 194.277023][ T6993] ubi: mtd0 is already attached to ubi31 [ 194.456409][ T6970] btrfs: Deprecated parameter 'usebackuproot' [ 194.676999][ T6970] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 194.796622][ T6970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.250 (6970) [ 194.914497][ T6970] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.008628][ T6970] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 195.099715][ T6970] BTRFS info (device loop0): disk space caching is enabled [ 195.106999][ T6970] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 195.189812][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 195.258018][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 195.258485][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 195.341669][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 195.405241][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 195.415035][ T5906] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.435721][ T7008] syz_tun: entered allmulticast mode [ 195.470026][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 195.470413][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 195.494783][ T5906] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.530338][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 195.530827][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 195.534237][ T7007] syz_tun: left allmulticast mode [ 195.577171][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 195.577588][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 195.599656][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.650728][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 195.651349][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 195.703192][ T6970] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 195.713675][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 195.784911][ T6970] BTRFS error (device loop0): open_ctree failed: -12 [ 195.813191][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 195.847485][ T5906] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.920673][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.928762][ T5906] usb 2-1: Product: syz [ 195.973746][ T5906] usb 2-1: Manufacturer: syz [ 196.040348][ T5906] cdc_wdm 2-1:1.0: skipping garbage [ 196.103851][ T5906] cdc_wdm 2-1:1.0: skipping garbage [ 196.506560][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.516112][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.526326][ T7028] loop6: detected capacity change from 0 to 40427 [ 196.526628][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.536871][ T5906] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 196.542465][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.549631][ T5906] cdc_wdm 2-1:1.0: Unknown control protocol [ 196.558406][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.588615][ T7028] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 196.596523][ T7028] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 196.631973][ T7028] F2FS-fs (loop6): invalid crc value [ 196.729700][ T7028] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 196.736807][ T7028] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 196.752952][ T5906] usb 2-1: USB disconnect, device number 3 [ 196.933520][ T7028] syz.6.261: attempt to access beyond end of device [ 196.933520][ T7028] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 197.735220][ T6141] syz-executor: attempt to access beyond end of device [ 197.735220][ T6141] loop6: rw=2051, sector=77832, nr_sectors = 56 limit=40427 [ 197.857326][ T6141] F2FS-fs (loop6): Issue discard(9729, 9729, 7) failed, ret: -5 [ 198.060044][ T7057] loop1: detected capacity change from 0 to 128 [ 198.165084][ T7057] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 198.335310][ T7057] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.593574][ T7031] chnl_net:caif_netlink_parms(): no params data found [ 198.663028][ T51] Bluetooth: hci5: command tx timeout [ 199.124812][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.652256][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.679726][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.687095][ T7031] bridge_slave_0: entered allmulticast mode [ 199.711113][ T7031] bridge_slave_0: entered promiscuous mode [ 199.801455][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.808675][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.884859][ T7031] bridge_slave_1: entered allmulticast mode [ 199.936285][ T7031] bridge_slave_1: entered promiscuous mode [ 200.373641][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.412074][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.743071][ T51] Bluetooth: hci5: command tx timeout [ 201.197891][ T7031] team0: Port device team_slave_0 added [ 201.245801][ T7031] team0: Port device team_slave_1 added [ 201.496987][ T7090] loop4: detected capacity change from 0 to 256 [ 201.569405][ T7093] loop7: detected capacity change from 0 to 16384 [ 201.670711][ T7097] loop6: detected capacity change from 0 to 8 [ 201.725225][ T7097] SQUASHFS error: zlib decompression failed, data probably corrupt [ 201.733465][ T7097] SQUASHFS error: Failed to read block 0x4e8: -5 [ 201.740905][ T30] audit: type=1800 audit(1750079450.876:36): pid=7097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.271" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 201.773071][ T7097] SQUASHFS error: Failed to read block 0x6e6: -5 [ 201.779909][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.787202][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.795887][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.802258][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.809671][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.816484][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.824682][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.832044][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.838923][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.845264][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.852731][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.860577][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.866809][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.874217][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.881170][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.887384][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.896487][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.903361][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.909654][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.916961][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.923834][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.930113][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.937394][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.944365][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.950651][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.958063][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.964950][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.971255][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 201.978542][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 201.985513][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 201.991787][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.000208][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.007032][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.014065][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.021416][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.028227][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.034573][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.041910][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.048728][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.055012][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.062346][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.069173][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.075462][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.083042][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.089901][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.098490][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.106253][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.113154][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.119409][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.126777][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.133679][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.139938][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.147247][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.154139][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.160416][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.167696][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.174591][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.180982][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.188284][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.195391][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.203503][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.210866][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.217732][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.224014][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.231386][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.238262][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.244546][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.251914][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.258754][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.265218][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.272571][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.279395][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.285667][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.292997][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.299874][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.307823][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.315204][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.322057][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.328280][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.335603][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.342649][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.348864][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.356204][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.363077][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.369300][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.376655][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.383565][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.389867][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.397160][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.406338][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.412636][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.419979][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.426814][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.433115][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.440443][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.447359][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.453659][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.460972][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.467824][ T7097] SQUASHFS error: Failed to read block 0x0: -5 [ 202.474557][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.481975][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.489312][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.496952][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.507833][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.515174][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.522042][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.529324][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.726709][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.747238][ T7098] loop7: detected capacity change from 16384 to 16383 [ 202.779746][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.824979][ T51] Bluetooth: hci5: command tx timeout [ 202.831547][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.838863][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 202.848583][ T7097] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 202.856004][ T7097] SQUASHFS error: read_indexes: reading block [6e4:0] [ 203.006446][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.129196][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.197434][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.382485][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.389960][ T7104] netlink: 'syz.6.273': attribute type 1 has an invalid length. [ 203.478171][ T7104] netlink: 'syz.6.273': attribute type 4 has an invalid length. [ 203.478598][ T7109] netlink: 'syz.6.273': attribute type 1 has an invalid length. [ 203.568424][ T7104] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.273'. [ 203.679203][ T7109] netlink: 'syz.6.273': attribute type 4 has an invalid length. [ 203.785413][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.791963][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.838502][ T7109] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.273'. [ 203.851301][ T7031] hsr_slave_0: entered promiscuous mode [ 203.858151][ T7031] hsr_slave_1: entered promiscuous mode [ 203.875758][ T7031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.883720][ T7031] Cannot create hsr debugfs directory [ 204.178328][ T7116] bridge_slave_0: left allmulticast mode [ 204.281512][ T7116] bridge_slave_0: left promiscuous mode [ 204.290168][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.371145][ T7116] bridge_slave_1: left allmulticast mode [ 204.376923][ T7116] bridge_slave_1: left promiscuous mode [ 204.382867][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.442527][ T7116] bond0: (slave bond_slave_0): Releasing backup interface [ 204.481258][ T7116] bond0: (slave bond_slave_1): Releasing backup interface [ 204.525503][ T7116] team0: Port device team_slave_0 removed [ 204.638444][ T7116] team0: Port device team_slave_1 removed [ 204.650117][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.770120][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.870447][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.900180][ T51] Bluetooth: hci5: command tx timeout [ 204.919742][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.954222][ T7117] team0: Mode changed to "loadbalance" [ 206.982964][ T7031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.787938][ T7031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.949813][ T5913] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 208.140118][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 208.159127][ T5913] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.185596][ T5913] usb 7-1: config 0 has no interface number 0 [ 208.208284][ T5913] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.219718][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.245969][ T5913] usb 7-1: Product: syz [ 208.260969][ T5913] usb 7-1: Manufacturer: syz [ 208.265743][ T5913] usb 7-1: SerialNumber: syz [ 208.285388][ T7031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.313340][ T5913] usb 7-1: config 0 descriptor?? [ 208.402324][ T5913] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.535393][ T7031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.618838][ T5913] usb 7-1: qt2_attach - failed to power on unit: -71 [ 208.639905][ T5913] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 208.695490][ T5913] usb 7-1: USB disconnect, device number 2 [ 208.951506][ T7168] loop1: detected capacity change from 0 to 8192 [ 209.031974][ T7168] vfat: Unknown parameter '¡Ù˜¢zï H¦ŒòU1Z¸ÓIè‘®õ•ÜMGŠÃ*0Žü7Ðjê‰ÀR?H>÷@Œ`‡ñ«e/.ùO+˜{FÚN\?tZ~è94ÅN$´ŽÀ'^-‡Ütk'ËöRƹ_'"åŒ÷RÎ!&Yn×e[HxLAk"÷' [ 209.195204][ T77] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.780203][ T77] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.937572][ T7031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.211878][ T77] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.311564][ T7031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.364040][ T7031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.488202][ T7031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.845710][ T77] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.185726][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.206658][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.219278][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.250533][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.265101][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.965657][ T7217] loop6: detected capacity change from 0 to 2048 [ 212.041710][ T7217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.170163][ T7236] loop0: detected capacity change from 0 to 8 [ 213.189218][ T7236] SQUASHFS error: zlib decompression failed, data probably corrupt [ 213.197276][ T7236] SQUASHFS error: Failed to read block 0x4e8: -5 [ 213.211902][ T7236] SQUASHFS error: Failed to read block 0x6e6: -5 [ 213.218313][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.226197][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.233127][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.239423][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.246971][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.253914][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.262271][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.269762][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.276619][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.283177][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.290618][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.297465][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.303771][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.309727][ T5837] Bluetooth: hci1: command tx timeout [ 213.311155][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.323673][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.329948][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.337234][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.344194][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.350494][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.357781][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.366449][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.372760][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.380553][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.387369][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.393835][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.401177][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.407990][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.414283][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.421606][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.428944][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.435282][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.442619][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.449442][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.455725][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.464992][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.471873][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.478091][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.485421][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.492301][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.498514][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.505846][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.512724][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.518954][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.526301][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.533168][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.539391][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.546919][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.553793][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.560043][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.569179][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.576087][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.582409][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.589758][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.596573][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.602850][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.610206][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.617063][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.623446][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.630795][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.637622][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.643888][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.651215][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.658032][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.664313][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.673517][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.680374][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.686603][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.693926][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.700812][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.707035][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.714480][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.721333][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.727552][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.734885][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.741740][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.747954][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.755286][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.762156][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.768376][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.777529][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.784398][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.790681][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.798134][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.805009][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.811289][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.818571][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.825455][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.831744][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.839052][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.845921][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.852222][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.859506][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.866464][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.874675][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.882048][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.888874][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.895199][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.902544][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.909469][ T7236] SQUASHFS error: Failed to read block 0x0: -5 [ 213.915784][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.923118][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.930043][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.937330][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.944497][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.951856][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 213.958708][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 213.966072][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.068960][ T30] audit: type=1800 audit(1750079462.346:37): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.311" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 214.253995][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.261649][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.268521][ T7236] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.276674][ T7236] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.883444][ T77] bond0 (unregistering): Released all slaves [ 215.424829][ T5837] Bluetooth: hci1: command tx timeout [ 216.095920][ T7256] overlayfs: failed to clone upperpath [ 216.539260][ T30] audit: type=1326 audit(1750079465.666:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e929 code=0x7ffc0000 [ 216.570165][ T30] audit: type=1326 audit(1750079465.696:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92ccd2ab19 code=0x7ffc0000 [ 216.877609][ T30] audit: type=1326 audit(1750079465.696:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92ccd2ab19 code=0x7ffc0000 [ 216.899940][ T30] audit: type=1326 audit(1750079465.696:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92ccd2ab19 code=0x7ffc0000 [ 216.923203][ T30] audit: type=1326 audit(1750079465.696:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92ccd2ab19 code=0x7ffc0000 [ 216.946540][ T30] audit: type=1326 audit(1750079465.696:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92ccd2ab19 code=0x7ffc0000 [ 216.968678][ T30] audit: type=1326 audit(1750079466.006:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92ccd2ab19 code=0x7ffc0000 [ 216.990866][ T30] audit: type=1326 audit(1750079466.006:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e929 code=0x7ffc0000 [ 217.029684][ T30] audit: type=1326 audit(1750079466.006:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e929 code=0x7ffc0000 [ 217.160940][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.256901][ T7267] capability: warning: `syz.0.320' uses 32-bit capabilities (legacy support in use) [ 217.460300][ T5837] Bluetooth: hci1: command tx timeout [ 217.478221][ T77] hsr_slave_0: left promiscuous mode [ 217.484687][ T77] hsr_slave_1: left promiscuous mode [ 217.511777][ T7273] loop6: detected capacity change from 0 to 128 [ 217.512148][ T77] veth1_macvtap: left promiscuous mode [ 217.526111][ T77] veth0_macvtap: left promiscuous mode [ 217.532200][ T77] veth1_vlan: left promiscuous mode [ 217.540194][ T77] veth0_vlan: left promiscuous mode [ 217.598849][ T7273] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 217.781610][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 218.751108][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 218.761008][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 218.769439][ T5837] Bluetooth: hci4: hardware error 0x00 [ 218.939817][ T5985] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 219.111757][ T5985] usb 7-1: Using ep0 maxpacket: 16 [ 219.148993][ T5985] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 219.163167][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.194976][ T5985] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 219.208320][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.216992][ T5985] usb 7-1: Product: syz [ 219.276503][ T5985] usb 7-1: Manufacturer: syz [ 219.290614][ T5985] usb 7-1: SerialNumber: syz [ 219.319059][ T5985] usb 7-1: config 0 descriptor?? [ 219.344017][ T5985] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 219.363968][ T5985] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 219.539759][ T51] Bluetooth: hci1: command tx timeout [ 219.790391][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.335'. [ 219.971645][ T5985] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 219.978888][ T5985] em28xx 7-1:0.0: Config register raw data: 0x2f [ 219.986809][ T5985] em28xx 7-1:0.0: I2S Audio (1 sample rate(s)) [ 219.994289][ T5985] em28xx 7-1:0.0: No AC97 audio processor [ 220.380294][ T7304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 220.819918][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 220.883761][ T5899] usb 7-1: USB disconnect, device number 3 [ 221.022003][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.032161][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.164037][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.307925][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.315181][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.574417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.581673][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.018966][ T7202] chnl_net:caif_netlink_parms(): no params data found [ 222.275062][ T7325] loop6: detected capacity change from 0 to 40427 [ 222.302482][ T7325] F2FS-fs (loop6): build fault injection rate: 690 [ 222.349156][ T7325] F2FS-fs (loop6): invalid crc value [ 222.465416][ T7325] F2FS-fs (loop6): Start checkpoint disabled! [ 222.488376][ T7325] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 222.531184][ T7325] syz.6.341: attempt to access beyond end of device [ 222.531184][ T7325] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 222.738905][ T7341] bridge_slave_0: left allmulticast mode [ 222.785357][ T3473] kworker/u8:8: attempt to access beyond end of device [ 222.785357][ T3473] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 222.816803][ T7341] bridge_slave_0: left promiscuous mode [ 222.842964][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.866406][ T3473] CPU: 1 UID: 0 PID: 3473 Comm: kworker/u8:8 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 222.866454][ T3473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.866479][ T3473] Workqueue: writeback wb_workfn (flush-7:6) [ 222.866551][ T3473] Call Trace: [ 222.866562][ T3473] [ 222.866575][ T3473] dump_stack_lvl+0x16c/0x1f0 [ 222.866639][ T3473] f2fs_handle_critical_error+0x621/0x9f0 [ 222.866686][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.866732][ T3473] ? f2fs_build_fault_attr+0x53/0x1f0 [ 222.866781][ T3473] f2fs_write_end_io+0x785/0xc20 [ 222.866834][ T3473] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 222.866888][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.866944][ T3473] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 222.866991][ T3473] bio_endio+0x70d/0x850 [ 222.867032][ T3473] submit_bio_noacct+0x56d/0x1eb0 [ 222.867091][ T3473] __submit_merged_bio+0x33c/0x770 [ 222.867147][ T3473] __submit_merged_write_cond+0x319/0x3f0 [ 222.867210][ T3473] f2fs_write_cache_pages+0x2067/0x2570 [ 222.867302][ T3473] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 222.867356][ T3473] ? ret_from_fork+0x5d7/0x6f0 [ 222.867415][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.867461][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.867505][ T3473] ? unwind_get_return_address+0x59/0xa0 [ 222.867568][ T3473] ? arch_stack_walk+0x88/0x100 [ 222.867630][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.867743][ T3473] ? __pfx___page_table_check_zero+0x10/0x10 [ 222.867790][ T3473] ? mark_held_locks+0x49/0x80 [ 222.867848][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.867894][ T3473] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.867955][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.868008][ T3473] f2fs_write_data_pages+0x4ad/0xd90 [ 222.868074][ T3473] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 222.868145][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.868190][ T3473] ? __lock_acquire+0xb8a/0x1c90 [ 222.868249][ T3473] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 222.868316][ T3473] do_writepages+0x27a/0x600 [ 222.868383][ T3473] ? __pfx_do_writepages+0x10/0x10 [ 222.868439][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.868484][ T3473] ? reacquire_held_locks+0xcd/0x1f0 [ 222.868542][ T3473] ? writeback_sb_inodes+0x3a4/0xf90 [ 222.868607][ T3473] __writeback_single_inode+0x160/0xfb0 [ 222.868672][ T3473] ? __pfx___writeback_single_inode+0x10/0x10 [ 222.868730][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.868775][ T3473] ? do_raw_spin_unlock+0x172/0x230 [ 222.868817][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.868870][ T3473] writeback_sb_inodes+0x601/0xf90 [ 222.868952][ T3473] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 222.869010][ T3473] ? __lock_acquire+0xb8a/0x1c90 [ 222.869134][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.869180][ T3473] ? rcu_is_watching+0x12/0xc0 [ 222.869224][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.869275][ T3473] ? queue_io+0x3f6/0x520 [ 222.869333][ T3473] wb_writeback+0x419/0xb70 [ 222.869403][ T3473] ? __pfx_wb_writeback+0x10/0x10 [ 222.869461][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.869518][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.869563][ T3473] ? mark_held_locks+0x49/0x80 [ 222.869628][ T3473] wb_workfn+0x14d/0xbe0 [ 222.869693][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.869738][ T3473] ? try_to_wake_up+0x157/0x1680 [ 222.869784][ T3473] ? __pfx_wb_workfn+0x10/0x10 [ 222.869849][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.869898][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.869949][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.869992][ T3473] ? rcu_is_watching+0x12/0xc0 [ 222.870046][ T3473] process_one_work+0x9cf/0x1b70 [ 222.870105][ T3473] ? __pfx_process_one_work+0x10/0x10 [ 222.870144][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.870199][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.870243][ T3473] ? assign_work+0x1a0/0x250 [ 222.870317][ T3473] worker_thread+0x6c8/0xf10 [ 222.870377][ T3473] ? __pfx_worker_thread+0x10/0x10 [ 222.870417][ T3473] kthread+0x3c5/0x780 [ 222.870451][ T3473] ? __pfx_kthread+0x10/0x10 [ 222.870487][ T3473] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.870531][ T3473] ? rcu_is_watching+0x12/0xc0 [ 222.870577][ T3473] ? __pfx_kthread+0x10/0x10 [ 222.870613][ T3473] ret_from_fork+0x5d7/0x6f0 [ 222.870668][ T3473] ? __pfx_kthread+0x10/0x10 [ 222.870703][ T3473] ret_from_fork_asm+0x1a/0x30 [ 222.870767][ T3473] [ 223.308710][ T7341] bridge_slave_1: left allmulticast mode [ 223.314517][ T7341] bridge_slave_1: left promiscuous mode [ 223.320487][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.331584][ T3473] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 223.386619][ T7352] loop0: detected capacity change from 0 to 164 [ 223.402302][ T7341] bond0: (slave bond_slave_0): Releasing backup interface [ 223.486108][ T7352] Unable to read rock-ridge attributes [ 223.511992][ T7341] bond0: (slave bond_slave_1): Releasing backup interface [ 223.844785][ T7341] team0: Port device team_slave_0 removed [ 223.874501][ T7358] xt_cgroup: xt_cgroup: no path or classid specified [ 224.264830][ T7341] team0: Port device team_slave_1 removed [ 224.286451][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.298945][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.426493][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.451334][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.793892][ T7367] loop1: detected capacity change from 0 to 64 [ 224.804333][ T7346] team0: Mode changed to "loadbalance" [ 224.812877][ T7367] hfs: Unknown parameter 'ÿ0x0000000000000000' [ 225.058893][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.124366][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.149963][ T7202] bridge_slave_0: entered allmulticast mode [ 225.158145][ T7202] bridge_slave_0: entered promiscuous mode [ 225.230936][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.263764][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.286143][ T7202] bridge_slave_1: entered allmulticast mode [ 225.331900][ T7202] bridge_slave_1: entered promiscuous mode [ 225.818880][ T7376] loop6: detected capacity change from 0 to 8192 [ 225.900063][ T7202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.920212][ T7376] vfat: Unknown parameter '¡Ù˜¢zï H¦ŒòU1Z¸ÓIè‘®õ•ÜMGŠÃ*0Žü7Ðjê‰ÀR?H>÷@Œ`‡ñ«e/.ùO+˜{FÚN\?tZ~è94ÅN$´ŽÀ'^-‡Ütk'ËöRƹ_'"åŒ÷RÎ!&Yn×e[HxLAk"÷' [ 226.019002][ T7202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.456069][ T7202] team0: Port device team_slave_0 added [ 226.652820][ T7202] team0: Port device team_slave_1 added [ 226.680837][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.072390][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.079390][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.179860][ T7202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.276349][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.331140][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.458509][ T7202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.014113][ T7202] hsr_slave_0: entered promiscuous mode [ 228.062018][ T7202] hsr_slave_1: entered promiscuous mode [ 228.098501][ T7202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.125137][ T7202] Cannot create hsr debugfs directory [ 228.407026][ T7031] veth0_vlan: entered promiscuous mode [ 228.649353][ T7449] loop1: detected capacity change from 0 to 512 [ 228.674885][ T7031] veth1_vlan: entered promiscuous mode [ 228.752578][ T7449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.770101][ T7449] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.257710][ T7031] veth0_macvtap: entered promiscuous mode [ 229.363087][ T7031] veth1_macvtap: entered promiscuous mode [ 229.627482][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.628253][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.718096][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.753594][ T7031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.790892][ T7031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.819660][ T7031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.828434][ T7031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.913574][ T7483] netlink: 'syz.1.370': attribute type 2 has an invalid length. [ 229.947061][ T5986] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 229.952289][ T7202] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 229.963851][ T7483] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.370'. [ 229.985324][ T7202] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 230.000037][ T7483] nbd: must specify a device to reconfigure [ 230.039236][ T7483] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 230.074152][ T7202] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 230.140556][ T7202] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 230.150804][ T5986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.179778][ T5986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.212931][ T5986] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.258218][ T5986] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.277780][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.321464][ T5986] usb 7-1: config 0 descriptor?? [ 230.395657][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.439916][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.541325][ T7500] block device autoloading is deprecated and will be removed. [ 230.692403][ T7437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.727332][ T7437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.791720][ T5986] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 230.857339][ T5986] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 230.859004][ T7202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.976272][ T7202] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.039492][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.046779][ T7438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.094621][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.101889][ T7438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.385197][ T7511] netlink: 156 bytes leftover after parsing attributes in process `syz.1.379'. [ 231.462025][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 231.468097][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 231.468694][ T7512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'. [ 231.630397][ T7202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.641043][ T7202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.937107][ T7433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.125514][ T7433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.184343][ C1] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 232.204961][ T5913] usb 7-1: USB disconnect, device number 4 [ 232.345399][ T7433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.503397][ T7433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.594989][ T7202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.095989][ T7433] bridge_slave_1: left allmulticast mode [ 233.110149][ T7433] bridge_slave_1: left promiscuous mode [ 233.161542][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.173594][ T7527] ceph: No mds server is up or the cluster is laggy [ 233.181258][ T48] libceph: connect (1)[c::]:6789 error -101 [ 233.187367][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 233.287305][ T7433] bridge_slave_0: left allmulticast mode [ 233.325734][ T7433] bridge_slave_0: left promiscuous mode [ 233.368699][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.628309][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.641104][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.648923][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.660819][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.680456][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.780890][ T51] Bluetooth: hci5: command tx timeout [ 235.975347][ T7631] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.986450][ T7631] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 236.100630][ T48] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 236.137335][ T7433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.156230][ T7433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.172188][ T7433] bond0 (unregistering): Released all slaves [ 236.287707][ T48] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.319544][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.339206][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 236.363296][ T48] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.393107][ T48] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.405449][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.433254][ T48] usb 7-1: config 0 descriptor?? [ 236.532732][ T7637] loop1: detected capacity change from 0 to 2048 [ 236.604126][ T7637] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 236.629694][ T7637] UDF-fs: Scanning with blocksize 512 failed [ 236.676341][ T7637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.868888][ T48] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 236.945603][ T48] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 237.062967][ T5200] udevd[5200]: worker [5856] terminated by signal 33 (Unknown signal 33) [ 237.073023][ T5200] udevd[5200]: worker [5856] failed while handling '/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:047F:FFFF.0005/hidraw/hidraw0' [ 237.685911][ T7433] hsr_slave_0: left promiscuous mode [ 237.699053][ T7433] hsr_slave_1: left promiscuous mode [ 237.722782][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.731913][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.751108][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.768838][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.807839][ T7433] veth1_macvtap: left promiscuous mode [ 237.810472][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.402'. [ 237.813858][ T7433] veth0_macvtap: left promiscuous mode [ 237.837957][ T7433] veth1_vlan: left promiscuous mode [ 237.845849][ T7433] veth0_vlan: left promiscuous mode [ 237.859863][ T51] Bluetooth: hci5: command tx timeout [ 238.118753][ T5913] usb 7-1: USB disconnect, device number 5 [ 238.439432][ T7666] loop0: detected capacity change from 0 to 128 [ 238.452488][ T7666] EXT4-fs: Ignoring removed nobh option [ 238.528440][ T7666] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.586885][ T7666] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.789803][ T7672] loop6: detected capacity change from 0 to 64 [ 238.868449][ T5842] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.272767][ T7679] input: syz0 as /devices/virtual/input/input14 [ 239.838507][ T7433] team0 (unregistering): Port device team_slave_1 removed [ 239.941897][ T51] Bluetooth: hci5: command tx timeout [ 240.363547][ T7695] loop6: detected capacity change from 0 to 32768 [ 240.433570][ T7695] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_target=invalid device 79,nojournal_transaction_names [ 240.433616][ T7695] allowing incompatible features above 0.0: (unknown version) [ 240.433639][ T7695] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 240.475599][ T7695] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 240.484096][ T7695] bcachefs (loop6): initializing new filesystem [ 240.502530][ T7695] bcachefs (loop6): going read-write [ 240.515319][ T7433] team0 (unregistering): Port device team_slave_0 removed [ 240.540752][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 240.653893][ T7695] bcachefs (loop6): marking superblocks [ 240.670918][ T7695] bcachefs (loop6): initializing freespace [ 240.691989][ T7695] bcachefs (loop6): done initializing freespace [ 240.703424][ T7695] bcachefs (loop6): reading snapshots table [ 240.709390][ T7695] bcachefs (loop6): reading snapshots done [ 240.757192][ T7695] bcachefs (loop6): done starting filesystem [ 240.790484][ T10] usb 1-1: config 0 has no interfaces? [ 240.834373][ T10] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 240.876258][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.925601][ T10] usb 1-1: Product: syz [ 240.956086][ T10] usb 1-1: Manufacturer: syz [ 240.968565][ T10] usb 1-1: SerialNumber: syz [ 240.995206][ T10] usb 1-1: config 0 descriptor?? [ 241.082171][ T6141] bcachefs (loop6): shutting down [ 241.087386][ T6141] bcachefs (loop6): going read-only [ 241.096932][ T6141] bcachefs (loop6): finished waiting for writes to stop [ 241.113857][ T6141] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3 [ 241.207166][ T6141] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4 [ 241.221791][ T6141] bcachefs (loop6): clean shutdown complete, journal seq 5 [ 241.243899][ T6141] bcachefs (loop6): marking filesystem clean [ 241.255458][ T48] usb 1-1: USB disconnect, device number 6 [ 241.353109][ T6141] bcachefs (loop6): shutdown complete [ 241.708510][ T7202] veth0_vlan: entered promiscuous mode [ 241.933263][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.420'. [ 241.990348][ T7202] veth1_vlan: entered promiscuous mode [ 242.019818][ T51] Bluetooth: hci5: command tx timeout [ 242.303072][ T7202] veth0_macvtap: entered promiscuous mode [ 242.326332][ T7720] syz.0.433 uses obsolete (PF_INET,SOCK_PACKET) [ 242.343524][ T7202] veth1_macvtap: entered promiscuous mode [ 242.447469][ T7559] chnl_net:caif_netlink_parms(): no params data found [ 242.674178][ T5934] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 242.733005][ T5934] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 242.867640][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.134534][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.362514][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.388688][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.423116][ T7559] bridge_slave_0: entered allmulticast mode [ 243.442013][ T7559] bridge_slave_0: entered promiscuous mode [ 243.485124][ T7202] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.533848][ T7202] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.561924][ T7731] capability: warning: `syz.0.424' uses deprecated v2 capabilities in a way that may be insecure [ 243.579655][ T7202] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.598673][ T7202] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.648509][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.706855][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.714681][ T7559] bridge_slave_1: entered allmulticast mode [ 243.726813][ T7559] bridge_slave_1: entered promiscuous mode [ 244.052362][ T7559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.106667][ T7559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.331734][ T7559] team0: Port device team_slave_0 added [ 244.353289][ T7559] team0: Port device team_slave_1 added [ 244.680778][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.687856][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.757997][ T7559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.775492][ T7751] loop1: detected capacity change from 0 to 128 [ 244.795523][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.822818][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.866988][ T51] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 244.883102][ T7559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.924735][ T7756] loop0: detected capacity change from 0 to 128 [ 244.955254][ T7757] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 244.969050][ T7757] FAT-fs (loop1): Filesystem has been set read-only [ 244.984430][ T7756] EXT4-fs (loop0): Test dummy encryption mode enabled [ 245.015649][ T7756] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.031983][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.049881][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.065173][ T7756] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.227139][ T7756] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 245.291115][ T7756] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 245.334118][ T7559] hsr_slave_0: entered promiscuous mode [ 245.389082][ T7559] hsr_slave_1: entered promiscuous mode [ 245.406805][ T7559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.424468][ T5842] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.427227][ T7559] Cannot create hsr debugfs directory [ 245.556284][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 245.556310][ T30] audit: type=1804 audit(1750079495.687:222): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.438" name="/newroot/101/file0" dev="tmpfs" ino=577 res=1 errno=0 [ 245.588996][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.598834][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.885266][ T7771] loop6: detected capacity change from 0 to 1024 [ 245.964631][ T7775] netlink: 186232 bytes leftover after parsing attributes in process `syz.0.441'. [ 246.120275][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 246.205117][ T6141] hfsplus: bad catalog entry type [ 246.280055][ T6141] hfsplus: bad catalog entry type [ 246.314958][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.354859][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.380640][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.397637][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.417028][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.447821][ T7556] hfsplus: b-tree write err: -5, ino 4 [ 246.470795][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.509185][ T10] usb 2-1: config 0 descriptor?? [ 246.679428][ T7780] ceph: No mds server is up or the cluster is laggy [ 246.686827][ T48] libceph: connect (1)[c::]:6789 error -101 [ 246.719264][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 246.995843][ T10] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 247.036760][ T7793] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 247.061378][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 247.110699][ T7793] netlink: 'syz.0.447': attribute type 4 has an invalid length. [ 247.151319][ T7797] netlink: 'syz.8.449': attribute type 1 has an invalid length. [ 247.181250][ T7798] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 247.203500][ T7793] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.447'. [ 247.237936][ T7556] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.238941][ T7798] netlink: 'syz.0.447': attribute type 4 has an invalid length. [ 247.264182][ T7798] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.447'. [ 247.479072][ T7556] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.672515][ T7556] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.830382][ T7556] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.934442][ T10] usb 2-1: USB disconnect, device number 4 [ 247.994210][ T7559] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.036485][ T7559] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.082401][ T7559] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.137730][ T7559] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.401839][ T7556] bridge_slave_1: left allmulticast mode [ 248.436649][ T7556] bridge_slave_1: left promiscuous mode [ 248.454041][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.473965][ T7556] bridge_slave_0: left allmulticast mode [ 248.487925][ T7556] bridge_slave_0: left promiscuous mode [ 248.502196][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.663857][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.674873][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.684442][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.700848][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.711298][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.870783][ T7829] loop1: detected capacity change from 0 to 32768 [ 250.058078][ T7829] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 250.550454][ T7556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.567581][ T5835] ocfs2: Unmounting device (7,1) on (node local) [ 250.606094][ T7556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.659028][ T7556] bond0 (unregistering): Released all slaves [ 250.819949][ T5837] Bluetooth: hci3: command tx timeout [ 251.554493][ T7881] loop0: detected capacity change from 0 to 1024 [ 251.583340][ T7881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.609982][ T7556] hsr_slave_0: left promiscuous mode [ 251.627262][ T7881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.642435][ T7556] hsr_slave_1: left promiscuous mode [ 251.648769][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.677081][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.701024][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.718521][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.825478][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.861373][ T7556] veth1_macvtap: left promiscuous mode [ 251.868240][ T7556] veth0_macvtap: left promiscuous mode [ 251.895962][ T7556] veth1_vlan: left promiscuous mode [ 251.906292][ T7556] veth0_vlan: left promiscuous mode [ 252.903335][ T5837] Bluetooth: hci3: command tx timeout [ 253.604340][ T7914] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.768515][ T7556] team0 (unregistering): Port device team_slave_1 removed [ 253.837709][ T7556] team0 (unregistering): Port device team_slave_0 removed [ 254.985964][ T5837] Bluetooth: hci3: command tx timeout [ 255.891388][ T7959] loop1: detected capacity change from 0 to 8 [ 256.288912][ T7559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.745563][ T7559] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.816618][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.823939][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.867345][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.7.499'. [ 256.895172][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.902392][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.957271][ T7824] chnl_net:caif_netlink_parms(): no params data found [ 257.090821][ T5837] Bluetooth: hci3: command tx timeout [ 257.338690][ T7977] netlink: 'syz.7.501': attribute type 1 has an invalid length. [ 257.459746][ T5913] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 257.518319][ T7977] bond1: entered promiscuous mode [ 257.542189][ T7977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.562556][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.572957][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.581448][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.604142][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.613423][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.645842][ T5913] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 257.674187][ T7980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.687155][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.717450][ T5913] usb 9-1: config 0 descriptor?? [ 257.723470][ T7980] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 257.746201][ T7980] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 257.767240][ T7980] bond1: (slave ip6gre1): making interface the new active one [ 257.775147][ T7980] ip6gre1: entered promiscuous mode [ 257.784233][ T7980] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 257.901982][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.918818][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.926158][ T7824] bridge_slave_0: entered allmulticast mode [ 257.960361][ T7824] bridge_slave_0: entered promiscuous mode [ 257.981220][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.988370][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.001803][ T7824] bridge_slave_1: entered allmulticast mode [ 258.015772][ T7824] bridge_slave_1: entered promiscuous mode [ 258.119311][ T7556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.253170][ T7556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.283563][ T7824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.297878][ T7824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.339124][ T7556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.457713][ T7556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.483587][ T7824] team0: Port device team_slave_0 added [ 258.524756][ T7824] team0: Port device team_slave_1 added [ 258.699359][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.717171][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.749457][ T7824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.766360][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.775823][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.803098][ T7824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.039419][ T7824] hsr_slave_0: entered promiscuous mode [ 259.046459][ T7824] hsr_slave_1: entered promiscuous mode [ 259.054721][ T7824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.063935][ T7824] Cannot create hsr debugfs directory [ 259.325557][ T7556] bridge_slave_1: left allmulticast mode [ 259.333225][ T7556] bridge_slave_1: left promiscuous mode [ 259.344462][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.353050][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805464e400: rx timeout, send abort [ 259.363239][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805464e400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 259.391949][ T7556] bridge_slave_0: left allmulticast mode [ 259.397642][ T7556] bridge_slave_0: left promiscuous mode [ 259.425483][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.584137][ T5913] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 259.600360][ T5913] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 259.624539][ T5913] asix 9-1:0.0: probe with driver asix failed with error -71 [ 259.655914][ T5913] usb 9-1: USB disconnect, device number 2 [ 259.705104][ T51] Bluetooth: hci2: command tx timeout [ 259.935028][ T7556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.946944][ T7556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.958873][ T7556] bond0 (unregistering): Released all slaves [ 260.026323][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 260.125556][ T7559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.422300][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.430169][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.437377][ T7983] bridge_slave_0: entered allmulticast mode [ 260.454017][ T7983] bridge_slave_0: entered promiscuous mode [ 260.515207][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.525094][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.533621][ T7983] bridge_slave_1: entered allmulticast mode [ 260.542110][ T7983] bridge_slave_1: entered promiscuous mode [ 260.577371][ T7556] hsr_slave_0: left promiscuous mode [ 260.584549][ T7556] hsr_slave_1: left promiscuous mode [ 260.591305][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.598771][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.608761][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.616429][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.639103][ T7556] veth1_macvtap: left promiscuous mode [ 260.645312][ T7556] veth0_macvtap: left promiscuous mode [ 260.651266][ T7556] veth1_vlan: left promiscuous mode [ 260.656614][ T7556] veth0_vlan: left promiscuous mode [ 261.121758][ T7556] team0 (unregistering): Port device team_slave_1 removed [ 261.173471][ T7556] team0 (unregistering): Port device team_slave_0 removed [ 261.646563][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.665315][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.684225][ T7559] veth0_vlan: entered promiscuous mode [ 261.769029][ T7559] veth1_vlan: entered promiscuous mode [ 261.780732][ T51] Bluetooth: hci2: command tx timeout [ 261.782611][ T7983] team0: Port device team_slave_0 added [ 261.798479][ T7983] team0: Port device team_slave_1 added [ 261.808938][ T7824] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 261.873476][ T7824] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 261.886651][ T7824] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 261.936271][ T7824] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 261.953574][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.961304][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.987922][ T7983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.008044][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.015167][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.044881][ T7983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.137280][ T7983] hsr_slave_0: entered promiscuous mode [ 262.143925][ T7983] hsr_slave_1: entered promiscuous mode [ 262.202106][ T7559] veth0_macvtap: entered promiscuous mode [ 262.225759][ T7559] veth1_macvtap: entered promiscuous mode [ 262.347650][ T7559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.386613][ T7559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.438647][ T7559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.453818][ T7559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.464468][ T7559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.473466][ T7559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.638963][ T7824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.861724][ T7824] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.902296][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.909477][ T7433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.925550][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.932739][ T7433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.953045][ T7555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.963309][ T7555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.101179][ T7474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.109076][ T7474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.372896][ T7983] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.386078][ T7983] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.411230][ T7983] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.435010][ T7983] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.596083][ T7555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.694320][ T7824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.735173][ T7555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.808058][ T7983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.858389][ T7555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.870139][ T51] Bluetooth: hci2: command tx timeout [ 263.963340][ T7983] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.058302][ T7555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.132444][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.139707][ T7433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.203292][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.210548][ T7433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.587917][ T7824] veth0_vlan: entered promiscuous mode [ 264.601123][ T7555] bridge_slave_1: left allmulticast mode [ 264.606800][ T7555] bridge_slave_1: left promiscuous mode [ 264.639373][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.668396][ T7555] bridge_slave_0: left allmulticast mode [ 264.674443][ T7555] bridge_slave_0: left promiscuous mode [ 264.686928][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.897880][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.908334][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.921786][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.931838][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.941384][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 265.146635][ T7555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.158328][ T7555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.172027][ T7555] bond0 (unregistering): Released all slaves [ 265.207063][ T7824] veth1_vlan: entered promiscuous mode [ 265.236890][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.243309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.267794][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.428405][ T7824] veth0_macvtap: entered promiscuous mode [ 265.479017][ T7824] veth1_macvtap: entered promiscuous mode [ 265.656759][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.736130][ T7555] hsr_slave_0: left promiscuous mode [ 265.747334][ T7555] hsr_slave_1: left promiscuous mode [ 265.760979][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.768445][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.787966][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.799455][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.828855][ T7555] veth1_macvtap: left promiscuous mode [ 265.838429][ T7555] veth0_macvtap: left promiscuous mode [ 265.844742][ T7555] veth1_vlan: left promiscuous mode [ 265.850141][ T7555] veth0_vlan: left promiscuous mode [ 265.940217][ T5837] Bluetooth: hci2: command tx timeout [ 266.277573][ T7555] team0 (unregistering): Port device team_slave_1 removed [ 266.314327][ T7555] team0 (unregistering): Port device team_slave_0 removed [ 266.670924][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.733651][ T7824] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.755619][ T7824] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.764585][ T7824] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.773634][ T7824] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.936670][ T7983] veth0_vlan: entered promiscuous mode [ 266.984592][ T5837] Bluetooth: hci5: command tx timeout [ 267.002300][ T7983] veth1_vlan: entered promiscuous mode [ 267.055873][ T8033] chnl_net:caif_netlink_parms(): no params data found [ 267.197513][ T7444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.214888][ T7444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.323028][ T7983] veth0_macvtap: entered promiscuous mode [ 267.337283][ T7444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.344712][ T7983] veth1_macvtap: entered promiscuous mode [ 267.358397][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.366606][ T7444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.378609][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.387333][ T8033] bridge_slave_0: entered allmulticast mode [ 267.395584][ T8033] bridge_slave_0: entered promiscuous mode [ 267.428968][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.441738][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.449020][ T8033] bridge_slave_1: entered allmulticast mode [ 267.458222][ T8033] bridge_slave_1: entered promiscuous mode [ 267.496324][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.552114][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.580924][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.616808][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.690583][ T7983] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.699366][ T7983] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.718872][ T7983] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.741219][ T7983] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.120732][ T8033] team0: Port device team_slave_0 added [ 268.217596][ T8033] team0: Port device team_slave_1 added [ 268.548424][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.576362][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.655114][ T8033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.726750][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.747394][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.782843][ T8033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.048126][ T8033] hsr_slave_0: entered promiscuous mode [ 269.057080][ T8033] hsr_slave_1: entered promiscuous mode [ 269.069938][ T5837] Bluetooth: hci5: command tx timeout [ 269.101735][ T8033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.109359][ T8033] Cannot create hsr debugfs directory [ 269.155088][ T7555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.168865][ T7555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.290251][ T7453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.303397][ T7453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.595284][ T8063] loop8: detected capacity change from 0 to 512 [ 269.653985][ T8063] EXT4-fs: Ignoring removed nobh option [ 269.776064][ T8063] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.522: iget: bad i_size value: 38620345925642 [ 269.855895][ T8063] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.522: couldn't read orphan inode 15 (err -117) [ 269.918403][ T8063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.183245][ T8033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.218419][ T8033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.246793][ T8033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.263238][ T7202] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.272754][ T8033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.289774][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 270.440588][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 270.459646][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.489421][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.501075][ T10] usb 6-1: Product: syz [ 270.505274][ T10] usb 6-1: Manufacturer: syz [ 270.519138][ T10] usb 6-1: SerialNumber: syz [ 270.538408][ T10] usb 6-1: config 0 descriptor?? [ 270.651028][ T7444] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.791298][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.835565][ T7444] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.896027][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.978522][ T7444] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.038051][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.103473][ T7444] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.140544][ T51] Bluetooth: hci5: command tx timeout [ 271.158377][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.165593][ T7556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.206924][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.214131][ T7555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.466521][ T7444] bridge_slave_1: left allmulticast mode [ 271.482963][ T7444] bridge_slave_1: left promiscuous mode [ 271.488858][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.508503][ T7444] bridge_slave_0: left allmulticast mode [ 271.515741][ T7444] bridge_slave_0: left promiscuous mode [ 271.528738][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.203611][ T5985] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 272.233493][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 272.262717][ T10] usb 6-1: USB disconnect, device number 3 [ 272.359688][ T5985] usb 2-1: Using ep0 maxpacket: 16 [ 272.398260][ T5985] usb 2-1: config 9 has an invalid interface number: 144 but max is 0 [ 272.411935][ T5985] usb 2-1: config 9 has no interface number 0 [ 272.434188][ T5985] usb 2-1: config 9 interface 144 has no altsetting 0 [ 272.459295][ T5985] usb 2-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 272.474396][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.489540][ T5985] usb 2-1: Product: syz [ 272.505430][ T5985] usb 2-1: Manufacturer: syz [ 272.517849][ T5985] usb 2-1: SerialNumber: syz [ 272.542074][ T5985] r8152-cfgselector 2-1: Unknown version 0x0000 [ 272.569978][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.589849][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.605983][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.626019][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.639542][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.757201][ T7444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.796531][ T7444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.822741][ T7444] bond0 (unregistering): Released all slaves [ 272.903928][ T5985] r8152 2-1:9.144: Expected endpoints are not found [ 272.951714][ T5985] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 273.229453][ T5837] Bluetooth: hci5: command tx timeout [ 274.740431][ T5837] Bluetooth: hci1: command tx timeout [ 275.740107][ T7444] hsr_slave_0: left promiscuous mode [ 275.791124][ T7444] hsr_slave_1: left promiscuous mode [ 275.802071][ T7444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.831281][ T7444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.859083][ T7444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.899644][ T7444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.033163][ T7444] veth1_macvtap: left promiscuous mode [ 276.044279][ T5985] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 276.065652][ T7444] veth0_macvtap: left promiscuous mode [ 276.075520][ T7444] veth1_vlan: left promiscuous mode [ 276.084852][ T7444] veth0_vlan: left promiscuous mode [ 276.223731][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.249827][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.274338][ T5985] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 276.293130][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.349645][ T5985] usb 2-1: config 0 descriptor?? [ 276.557509][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.539'. [ 276.792362][ T5985] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 276.819832][ T5837] Bluetooth: hci1: command tx timeout [ 276.827936][ T5985] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 276.870759][ T5985] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 277.160096][ C1] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71 [ 277.163050][ T9] usb 2-1: USB disconnect, device number 6 [ 277.511612][ T8167] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 277.524126][ T30] audit: type=1804 audit(1750079527.647:223): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.543" name="/newroot/8/file0" dev="tmpfs" ino=61 res=1 errno=0 [ 277.524911][ T8167] ref_ctr increment failed for inode: 0x3d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807c98e0c0 [ 277.585110][ T7444] team0 (unregistering): Port device team_slave_1 removed [ 277.742532][ T7444] team0 (unregistering): Port device team_slave_0 removed [ 277.806281][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c5f5c00: rx timeout, send abort [ 277.814778][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807914f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 278.314550][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c5f5c00: abort rx timeout. Force session deactivation [ 278.903200][ T5837] Bluetooth: hci1: command tx timeout [ 279.398198][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.551714][ T8089] chnl_net:caif_netlink_parms(): no params data found [ 280.374676][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.386638][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.522114][ T8089] bridge_slave_0: entered allmulticast mode [ 280.543056][ T8089] bridge_slave_0: entered promiscuous mode [ 280.567217][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.598610][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.637630][ T8089] bridge_slave_1: entered allmulticast mode [ 280.655473][ T8204] overlayfs: failed to clone upperpath [ 280.669889][ T8089] bridge_slave_1: entered promiscuous mode [ 280.912051][ T8089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.980136][ T5837] Bluetooth: hci1: command tx timeout [ 280.980270][ T8089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.088451][ T8033] veth0_vlan: entered promiscuous mode [ 281.137105][ T8033] veth1_vlan: entered promiscuous mode [ 281.331880][ T8089] team0: Port device team_slave_0 added [ 281.453831][ T8089] team0: Port device team_slave_1 added [ 281.821827][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.855976][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.039788][ T8089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.096352][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.113177][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.197528][ T8089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.305041][ T8033] veth0_macvtap: entered promiscuous mode [ 282.334863][ T8226] netlink: 56 bytes leftover after parsing attributes in process `syz.7.563'. [ 282.520318][ T8033] veth1_macvtap: entered promiscuous mode [ 282.621951][ T8089] hsr_slave_0: entered promiscuous mode [ 282.720961][ T8089] hsr_slave_1: entered promiscuous mode [ 282.727410][ T8089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.737043][ T8089] Cannot create hsr debugfs directory [ 283.589061][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.664862][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.774816][ T8033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.849664][ T8033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.867489][ T8033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.867801][ T8239] overlayfs: failed to clone upperpath [ 283.896649][ T8033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.706617][ T8254] loop1: detected capacity change from 0 to 128 [ 284.953701][ T7458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.974979][ T7458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.132106][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.174733][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.344918][ T8089] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 285.368473][ T8089] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 285.396371][ T8089] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 285.418238][ T8089] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 285.897734][ T7550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.938818][ T8280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.993180][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.994184][ T8280] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 286.047013][ T7550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.081624][ T8280] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 286.118381][ T8089] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.152393][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.159645][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.197735][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.204931][ T8132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.345751][ T7550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.412430][ T7550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.625465][ T7550] bridge_slave_1: left allmulticast mode [ 286.631645][ T7550] bridge_slave_1: left promiscuous mode [ 286.639446][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.662691][ T7550] bridge_slave_0: left allmulticast mode [ 286.668368][ T7550] bridge_slave_0: left promiscuous mode [ 286.709901][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.707346][ T8300] loop9: detected capacity change from 0 to 1024 [ 287.776136][ T8300] EXT4-fs: Ignoring removed orlov option [ 287.880657][ T8300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.983811][ T8300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.233618][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.250248][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.260661][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.273412][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.277526][ T7824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.299344][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.671212][ T7550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.695641][ T7550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.713698][ T7550] bond0 (unregistering): Released all slaves [ 288.720511][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.7.591'. [ 289.370774][ T8327] batadv0: entered promiscuous mode [ 289.376959][ T8327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 289.461651][ T8327] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 289.712983][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.596'. [ 290.310989][ T7550] hsr_slave_0: left promiscuous mode [ 290.339952][ T5837] Bluetooth: hci5: command tx timeout [ 290.346898][ T7550] hsr_slave_1: left promiscuous mode [ 290.361162][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.369337][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.397137][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.429049][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.698275][ T7550] veth1_macvtap: left promiscuous mode [ 290.708645][ T7550] veth0_macvtap: left promiscuous mode [ 290.715392][ T7550] veth1_vlan: left promiscuous mode [ 290.727471][ T7550] veth0_vlan: left promiscuous mode [ 291.672089][ T8367] input: syz1 as /devices/virtual/input/input16 [ 292.269878][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 292.426141][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 292.430000][ T5837] Bluetooth: hci5: command tx timeout [ 292.433355][ T5934] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 292.480057][ T5934] usb 6-1: config 179 has no interface number 0 [ 292.518156][ T5934] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 292.576517][ T5934] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 292.597580][ T5934] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 9 [ 292.620803][ T5934] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8448, setting to 1024 [ 292.642615][ T5934] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 292.649284][ T8374] loop1: detected capacity change from 0 to 512 [ 292.669754][ T5934] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 292.693104][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.731275][ T8370] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 292.766094][ T8374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 292.806759][ T8374] System zones: 1-12 [ 292.816273][ T8374] EXT4-fs error (device loop1): ext4_iget_extra_inode:5034: inode #15: comm syz.1.609: corrupted in-inode xattr: invalid ea_ino [ 292.840838][ T8374] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.609: couldn't read orphan inode 15 (err -117) [ 292.919246][ T8374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.039517][ T5934] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input17 [ 293.167509][ T8381] overlayfs: failed to clone upperpath [ 293.193850][ T8382] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.609: invalid fast symlink length 39 [ 293.257609][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.289411][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.478071][ T5835] EXT4-fs error (device loop1): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 293.519111][ T5991] usb 6-1: USB disconnect, device number 4 [ 293.519629][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 293.533321][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 293.542401][ C1] ================================================================== [ 293.550495][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 [ 293.558473][ C1] Read of size 4 at addr ffff8880609a685c by task syz.7.612/8383 [ 293.566214][ C1] [ 293.568565][ C1] CPU: 1 UID: 0 PID: 8383 Comm: syz.7.612 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 293.568613][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.568636][ C1] Call Trace: [ 293.568648][ C1] [ 293.568662][ C1] dump_stack_lvl+0x116/0x1f0 [ 293.568725][ C1] print_report+0xcd/0x680 [ 293.568770][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.568816][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.568862][ C1] ? __phys_addr+0xe8/0x180 [ 293.568906][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 293.568945][ C1] kasan_report+0xe0/0x110 [ 293.568992][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 293.569039][ C1] do_raw_spin_lock+0x26f/0x2b0 [ 293.569079][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.569122][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.569173][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 293.569227][ C1] ? __wake_up+0x1c/0x60 [ 293.569276][ C1] __wake_up+0x1c/0x60 [ 293.569327][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 293.569369][ C1] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 293.569430][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 293.569485][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.569534][ C1] dummy_timer+0x180e/0x3a20 [ 293.569582][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.569630][ C1] ? find_held_lock+0x2b/0x80 [ 293.569675][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.569725][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.569771][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.569816][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 293.569857][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 293.569894][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 293.569950][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.569999][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 293.570034][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 293.570069][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.570113][ C1] ? mark_held_locks+0x49/0x80 [ 293.570168][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 293.570228][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 293.570263][ C1] __hrtimer_run_queues+0x202/0xad0 [ 293.570312][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 293.570353][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.570407][ C1] hrtimer_run_softirq+0x17d/0x350 [ 293.570451][ C1] handle_softirqs+0x219/0x8e0 [ 293.570499][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 293.570542][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.570597][ C1] __irq_exit_rcu+0x109/0x170 [ 293.570638][ C1] irq_exit_rcu+0x9/0x30 [ 293.570679][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 293.570736][ C1] [ 293.570748][ C1] [ 293.570762][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.570803][ C1] RIP: 0010:page_table_check_clear+0x520/0x740 [ 293.570850][ C1] Code: 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a9 01 00 00 44 8b 3b <31> ff 44 89 fe e8 16 6e 8e ff 45 85 ff 0f 85 dd 00 00 00 e8 c8 72 [ 293.570888][ C1] RSP: 0018:ffffc90003a17768 EFLAGS: 00000246 [ 293.570918][ C1] RAX: 0000000000000003 RBX: ffff88801ed183b8 RCX: dffffc0000000000 [ 293.570943][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801ed183b8 [ 293.570967][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1003da3077 [ 293.570991][ C1] R10: ffff88801ed183bb R11: 0000000000000001 R12: ffff88801ed18370 [ 293.571016][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 293.571053][ C1] ? page_table_check_clear+0x4f3/0x740 [ 293.571102][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 293.571149][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 293.571196][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 293.571268][ C1] unmap_page_range+0x24bd/0x4350 [ 293.571340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.571386][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 293.571439][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.571487][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.571533][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.571585][ C1] ? uprobe_munmap+0x20/0x5c0 [ 293.571637][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 293.571695][ C1] unmap_vmas+0x218/0x470 [ 293.571747][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 293.571795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.571845][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.571889][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 293.571927][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.571986][ C1] exit_mmap+0x1b9/0xb90 [ 293.572044][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 293.572106][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.572171][ C1] __mmput+0x12a/0x410 [ 293.572217][ C1] mmput+0x62/0x70 [ 293.572259][ C1] do_exit+0x7bc/0x2bd0 [ 293.572313][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.572359][ C1] ? __pfx_do_exit+0x10/0x10 [ 293.572411][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.572456][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 293.572509][ C1] do_group_exit+0xd3/0x2a0 [ 293.572571][ C1] __x64_sys_exit_group+0x3e/0x50 [ 293.572626][ C1] x64_sys_call+0x1530/0x1730 [ 293.572664][ C1] do_syscall_64+0xcd/0x4c0 [ 293.572701][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.572739][ C1] RIP: 0033:0x7f643af8e929 [ 293.572765][ C1] Code: Unable to access opcode bytes at 0x7f643af8e8ff. [ 293.572783][ C1] RSP: 002b:00007ffd25967fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 293.572817][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f643af8e929 [ 293.572842][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.572866][ C1] RBP: 00007ffd2596803c R08: 00000009259680cf R09: 00000000000927c0 [ 293.572892][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000006c [ 293.572915][ C1] R13: 00000000000927c0 R14: 0000000000047969 R15: 00007ffd25968090 [ 293.572953][ C1] [ 293.572966][ C1] [ 294.145059][ C1] Allocated by task 5934: [ 294.149390][ C1] kasan_save_stack+0x33/0x60 [ 294.154090][ C1] kasan_save_track+0x14/0x30 [ 294.158805][ C1] __kasan_kmalloc+0xaa/0xb0 [ 294.163433][ C1] xpad_probe+0x286/0x1ff0 [ 294.167868][ C1] usb_probe_interface+0x303/0x9c0 [ 294.173012][ C1] really_probe+0x241/0xa90 [ 294.177556][ C1] __driver_probe_device+0x1de/0x440 [ 294.182887][ C1] driver_probe_device+0x4c/0x1b0 [ 294.187948][ C1] __device_attach_driver+0x1df/0x310 [ 294.193360][ C1] bus_for_each_drv+0x159/0x1e0 [ 294.198239][ C1] __device_attach+0x1e4/0x4b0 [ 294.203034][ C1] bus_probe_device+0x17f/0x1c0 [ 294.207911][ C1] device_add+0x1148/0x1a70 [ 294.212426][ C1] usb_set_configuration+0x1187/0x1e20 [ 294.217907][ C1] usb_generic_driver_probe+0xb1/0x110 [ 294.223387][ C1] usb_probe_device+0xef/0x3e0 [ 294.228179][ C1] really_probe+0x241/0xa90 [ 294.232713][ C1] __driver_probe_device+0x1de/0x440 [ 294.238031][ C1] driver_probe_device+0x4c/0x1b0 [ 294.243096][ C1] __device_attach_driver+0x1df/0x310 [ 294.248509][ C1] bus_for_each_drv+0x159/0x1e0 [ 294.253395][ C1] __device_attach+0x1e4/0x4b0 [ 294.258196][ C1] bus_probe_device+0x17f/0x1c0 [ 294.263079][ C1] device_add+0x1148/0x1a70 [ 294.267596][ C1] usb_new_device+0xd07/0x1a20 [ 294.272385][ C1] hub_event+0x2eb7/0x4fa0 [ 294.276825][ C1] process_one_work+0x9cf/0x1b70 [ 294.281780][ C1] worker_thread+0x6c8/0xf10 [ 294.286386][ C1] kthread+0x3c5/0x780 [ 294.290464][ C1] ret_from_fork+0x5d7/0x6f0 [ 294.295090][ C1] ret_from_fork_asm+0x1a/0x30 [ 294.299871][ C1] [ 294.302196][ C1] Freed by task 5991: [ 294.306176][ C1] kasan_save_stack+0x33/0x60 [ 294.310871][ C1] kasan_save_track+0x14/0x30 [ 294.315567][ C1] kasan_save_free_info+0x3b/0x60 [ 294.320626][ C1] __kasan_slab_free+0x51/0x70 [ 294.325446][ C1] kfree+0x2b4/0x4d0 [ 294.329376][ C1] xpad_disconnect+0x1cf/0x580 [ 294.334154][ C1] usb_unbind_interface+0x1dd/0x9a0 [ 294.339382][ C1] device_remove+0x125/0x170 [ 294.344002][ C1] device_release_driver_internal+0x44b/0x620 [ 294.350105][ C1] bus_remove_device+0x22f/0x420 [ 294.355067][ C1] device_del+0x396/0x9f0 [ 294.359427][ C1] usb_disable_device+0x355/0x7d0 [ 294.364485][ C1] usb_disconnect+0x2e1/0x920 [ 294.369188][ C1] hub_event+0x1c57/0x4fa0 [ 294.373642][ C1] process_one_work+0x9cf/0x1b70 [ 294.378600][ C1] worker_thread+0x6c8/0xf10 [ 294.383211][ C1] kthread+0x3c5/0x780 [ 294.387292][ C1] ret_from_fork+0x5d7/0x6f0 [ 294.391920][ C1] ret_from_fork_asm+0x1a/0x30 [ 294.396711][ C1] [ 294.399034][ C1] Last potentially related work creation: [ 294.404752][ C1] kasan_save_stack+0x33/0x60 [ 294.409450][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 294.414682][ C1] insert_work+0x36/0x230 [ 294.419023][ C1] __queue_work+0x97e/0x10f0 [ 294.423633][ C1] queue_work_on+0x15f/0x1f0 [ 294.428258][ C1] xpad_irq_in+0x12de/0x2aa0 [ 294.432897][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 294.438303][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 294.443534][ C1] dummy_timer+0x180e/0x3a20 [ 294.448143][ C1] __hrtimer_run_queues+0x202/0xad0 [ 294.453357][ C1] hrtimer_run_softirq+0x17d/0x350 [ 294.458486][ C1] handle_softirqs+0x219/0x8e0 [ 294.463277][ C1] __irq_exit_rcu+0x109/0x170 [ 294.467976][ C1] irq_exit_rcu+0x9/0x30 [ 294.472241][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 294.477914][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.483919][ C1] [ 294.486248][ C1] Second to last potentially related work creation: [ 294.492836][ C1] kasan_save_stack+0x33/0x60 [ 294.497538][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 294.502773][ C1] insert_work+0x36/0x230 [ 294.507115][ C1] __queue_work+0x97e/0x10f0 [ 294.511724][ C1] queue_work_on+0x15f/0x1f0 [ 294.516329][ C1] xpad_irq_in+0x12de/0x2aa0 [ 294.520933][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 294.526339][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 294.531570][ C1] dummy_timer+0x180e/0x3a20 [ 294.536170][ C1] __hrtimer_run_queues+0x202/0xad0 [ 294.541387][ C1] hrtimer_run_softirq+0x17d/0x350 [ 294.546519][ C1] handle_softirqs+0x219/0x8e0 [ 294.551313][ C1] __irq_exit_rcu+0x109/0x170 [ 294.556041][ C1] irq_exit_rcu+0x9/0x30 [ 294.560319][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 294.565988][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.571990][ C1] [ 294.574319][ C1] The buggy address belongs to the object at ffff8880609a6800 [ 294.574319][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 294.588387][ C1] The buggy address is located 92 bytes inside of [ 294.588387][ C1] freed 1024-byte region [ffff8880609a6800, ffff8880609a6c00) [ 294.602203][ C1] [ 294.604532][ C1] The buggy address belongs to the physical page: [ 294.610944][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x609a0 [ 294.619714][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 294.628224][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 294.635781][ C1] page_type: f5(slab) [ 294.639777][ C1] raw: 00fff00000000040 ffff88801b841dc0 ffffea0000a77e00 dead000000000002 [ 294.648379][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 294.656978][ C1] head: 00fff00000000040 ffff88801b841dc0 ffffea0000a77e00 dead000000000002 [ 294.665668][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 294.674360][ C1] head: 00fff00000000003 ffffea0001826801 00000000ffffffff 00000000ffffffff [ 294.683051][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 294.691730][ C1] page dumped because: kasan: bad access detected [ 294.698144][ C1] page_owner tracks the page as allocated [ 294.703859][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7523, tgid 7522 (syz.1.381), ts 233122390505, free_ts 233052965342 [ 294.725168][ C1] post_alloc_hook+0x1c0/0x230 [ 294.729949][ C1] get_page_from_freelist+0x1321/0x3890 [ 294.735515][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 294.741437][ C1] alloc_pages_mpol+0x1fb/0x550 [ 294.746309][ C1] new_slab+0x23b/0x330 [ 294.750498][ C1] ___slab_alloc+0xd9c/0x1940 [ 294.755210][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 294.760616][ C1] __kvmalloc_node_noprof+0x3b1/0x620 [ 294.765999][ C1] io_alloc_cache_init+0x33/0x170 [ 294.771055][ C1] io_uring_setup+0x61d/0x2120 [ 294.775845][ C1] __x64_sys_io_uring_setup+0xc2/0x170 [ 294.781329][ C1] do_syscall_64+0xcd/0x4c0 [ 294.785876][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.791786][ C1] page last free pid 7481 tgid 7480 stack trace: [ 294.798149][ C1] free_unref_folios+0xa65/0x1800 [ 294.803206][ C1] folios_put_refs+0x56f/0x740 [ 294.807991][ C1] truncate_inode_pages_range+0x311/0xe50 [ 294.813740][ C1] blkdev_flush_mapping+0xfb/0x290 [ 294.818873][ C1] blkdev_put_whole+0xc4/0xf0 [ 294.823572][ C1] bdev_release+0x47e/0x6d0 [ 294.828098][ C1] blkdev_release+0x15/0x20 [ 294.832624][ C1] __fput+0x402/0xb70 [ 294.836631][ C1] task_work_run+0x150/0x240 [ 294.841235][ C1] do_exit+0x864/0x2bd0 [ 294.845420][ C1] do_group_exit+0xd3/0x2a0 [ 294.849952][ C1] get_signal+0x2673/0x26d0 [ 294.854476][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 294.860069][ C1] exit_to_user_mode_loop+0x84/0x110 [ 294.865369][ C1] do_syscall_64+0x3f6/0x4c0 [ 294.869975][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.875909][ C1] [ 294.878229][ C1] Memory state around the buggy address: [ 294.883865][ C1] ffff8880609a6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.891935][ C1] ffff8880609a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.900012][ C1] >ffff8880609a6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.908080][ C1] ^ [ 294.915019][ C1] ffff8880609a6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.923090][ C1] ffff8880609a6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.931159][ C1] ================================================================== [ 294.939219][ C1] Disabling lock debugging due to kernel taint [ 294.945373][ C1] ================================================================== [ 294.953449][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x27f/0x2b0 [ 294.961277][ C1] Read of size 8 at addr ffff8880609a6868 by task syz.7.612/8383 [ 294.969004][ C1] [ 294.971339][ C1] CPU: 1 UID: 0 PID: 8383 Comm: syz.7.612 Tainted: G B 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 294.971388][ C1] Tainted: [B]=BAD_PAGE [ 294.971401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.971421][ C1] Call Trace: [ 294.971434][ C1] [ 294.971448][ C1] dump_stack_lvl+0x116/0x1f0 [ 294.971505][ C1] print_report+0xcd/0x680 [ 294.971550][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.971591][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.971631][ C1] ? __phys_addr+0xe8/0x180 [ 294.971670][ C1] ? do_raw_spin_lock+0x27f/0x2b0 [ 294.971705][ C1] kasan_report+0xe0/0x110 [ 294.971746][ C1] ? do_raw_spin_lock+0x27f/0x2b0 [ 294.971786][ C1] do_raw_spin_lock+0x27f/0x2b0 [ 294.971821][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.971858][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.971903][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 294.971951][ C1] ? __wake_up+0x1c/0x60 [ 294.971994][ C1] __wake_up+0x1c/0x60 [ 294.972039][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 294.972076][ C1] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 294.972129][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 294.972179][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.972225][ C1] dummy_timer+0x180e/0x3a20 [ 294.972266][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.972316][ C1] ? find_held_lock+0x2b/0x80 [ 294.972360][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.972408][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.972449][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.972489][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 294.972526][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 294.972566][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 294.972617][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.972659][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 294.972692][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 294.972724][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.972764][ C1] ? mark_held_locks+0x49/0x80 [ 294.972814][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.972867][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 294.972897][ C1] __hrtimer_run_queues+0x202/0xad0 [ 294.972942][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 294.972978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.973026][ C1] hrtimer_run_softirq+0x17d/0x350 [ 294.973065][ C1] handle_softirqs+0x219/0x8e0 [ 294.973108][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 294.973148][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.973192][ C1] __irq_exit_rcu+0x109/0x170 [ 294.973229][ C1] irq_exit_rcu+0x9/0x30 [ 294.973266][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 294.973318][ C1] [ 294.973329][ C1] [ 294.973341][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.973377][ C1] RIP: 0010:page_table_check_clear+0x520/0x740 [ 294.973420][ C1] Code: 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a9 01 00 00 44 8b 3b <31> ff 44 89 fe e8 16 6e 8e ff 45 85 ff 0f 85 dd 00 00 00 e8 c8 72 [ 294.973454][ C1] RSP: 0018:ffffc90003a17768 EFLAGS: 00000246 [ 294.973481][ C1] RAX: 0000000000000003 RBX: ffff88801ed183b8 RCX: dffffc0000000000 [ 294.973504][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801ed183b8 [ 294.973526][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1003da3077 [ 294.973551][ C1] R10: ffff88801ed183bb R11: 0000000000000001 R12: ffff88801ed18370 [ 294.973574][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 294.973606][ C1] ? page_table_check_clear+0x4f3/0x740 [ 294.973648][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 294.973690][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 294.973731][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 294.973796][ C1] unmap_page_range+0x24bd/0x4350 [ 294.973859][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.973901][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 294.973947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.973991][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.974031][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.974071][ C1] ? uprobe_munmap+0x20/0x5c0 [ 294.974117][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 294.974168][ C1] unmap_vmas+0x218/0x470 [ 294.974215][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 294.974258][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.974303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.974343][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 294.974378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.974429][ C1] exit_mmap+0x1b9/0xb90 [ 294.974481][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 294.974540][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.974596][ C1] __mmput+0x12a/0x410 [ 294.974637][ C1] mmput+0x62/0x70 [ 294.974674][ C1] do_exit+0x7bc/0x2bd0 [ 294.974723][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.974765][ C1] ? __pfx_do_exit+0x10/0x10 [ 294.974811][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.974851][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 294.974897][ C1] do_group_exit+0xd3/0x2a0 [ 294.974947][ C1] __x64_sys_exit_group+0x3e/0x50 [ 294.974997][ C1] x64_sys_call+0x1530/0x1730 [ 294.975030][ C1] do_syscall_64+0xcd/0x4c0 [ 294.975063][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.975097][ C1] RIP: 0033:0x7f643af8e929 [ 294.975121][ C1] Code: Unable to access opcode bytes at 0x7f643af8e8ff. [ 294.975137][ C1] RSP: 002b:00007ffd25967fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 294.975167][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f643af8e929 [ 294.975189][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.975210][ C1] RBP: 00007ffd2596803c R08: 00000009259680cf R09: 00000000000927c0 [ 294.975232][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000006c [ 294.975253][ C1] R13: 00000000000927c0 R14: 0000000000047969 R15: 00007ffd25968090 [ 294.975286][ C1] [ 294.975298][ C1] [ 295.553093][ C1] Allocated by task 5934: [ 295.557426][ C1] kasan_save_stack+0x33/0x60 [ 295.562124][ C1] kasan_save_track+0x14/0x30 [ 295.566817][ C1] __kasan_kmalloc+0xaa/0xb0 [ 295.571423][ C1] xpad_probe+0x286/0x1ff0 [ 295.575850][ C1] usb_probe_interface+0x303/0x9c0 [ 295.580989][ C1] really_probe+0x241/0xa90 [ 295.585519][ C1] __driver_probe_device+0x1de/0x440 [ 295.590839][ C1] driver_probe_device+0x4c/0x1b0 [ 295.595895][ C1] __device_attach_driver+0x1df/0x310 [ 295.601308][ C1] bus_for_each_drv+0x159/0x1e0 [ 295.606185][ C1] __device_attach+0x1e4/0x4b0 [ 295.610982][ C1] bus_probe_device+0x17f/0x1c0 [ 295.615854][ C1] device_add+0x1148/0x1a70 [ 295.620380][ C1] usb_set_configuration+0x1187/0x1e20 [ 295.625862][ C1] usb_generic_driver_probe+0xb1/0x110 [ 295.631338][ C1] usb_probe_device+0xef/0x3e0 [ 295.636127][ C1] really_probe+0x241/0xa90 [ 295.640660][ C1] __driver_probe_device+0x1de/0x440 [ 295.645975][ C1] driver_probe_device+0x4c/0x1b0 [ 295.651027][ C1] __device_attach_driver+0x1df/0x310 [ 295.656429][ C1] bus_for_each_drv+0x159/0x1e0 [ 295.661301][ C1] __device_attach+0x1e4/0x4b0 [ 295.666095][ C1] bus_probe_device+0x17f/0x1c0 [ 295.670967][ C1] device_add+0x1148/0x1a70 [ 295.675482][ C1] usb_new_device+0xd07/0x1a20 [ 295.680266][ C1] hub_event+0x2eb7/0x4fa0 [ 295.684740][ C1] process_one_work+0x9cf/0x1b70 [ 295.689693][ C1] worker_thread+0x6c8/0xf10 [ 295.694338][ C1] kthread+0x3c5/0x780 [ 295.698415][ C1] ret_from_fork+0x5d7/0x6f0 [ 295.703037][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.707814][ C1] [ 295.710135][ C1] Freed by task 5991: [ 295.714138][ C1] kasan_save_stack+0x33/0x60 [ 295.718833][ C1] kasan_save_track+0x14/0x30 [ 295.723528][ C1] kasan_save_free_info+0x3b/0x60 [ 295.728585][ C1] __kasan_slab_free+0x51/0x70 [ 295.733365][ C1] kfree+0x2b4/0x4d0 [ 295.737290][ C1] xpad_disconnect+0x1cf/0x580 [ 295.742071][ C1] usb_unbind_interface+0x1dd/0x9a0 [ 295.747298][ C1] device_remove+0x125/0x170 [ 295.751915][ C1] device_release_driver_internal+0x44b/0x620 [ 295.758017][ C1] bus_remove_device+0x22f/0x420 [ 295.762976][ C1] device_del+0x396/0x9f0 [ 295.767332][ C1] usb_disable_device+0x355/0x7d0 [ 295.772377][ C1] usb_disconnect+0x2e1/0x920 [ 295.777070][ C1] hub_event+0x1c57/0x4fa0 [ 295.781505][ C1] process_one_work+0x9cf/0x1b70 [ 295.786456][ C1] worker_thread+0x6c8/0xf10 [ 295.791099][ C1] kthread+0x3c5/0x780 [ 295.795180][ C1] ret_from_fork+0x5d7/0x6f0 [ 295.799803][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.804580][ C1] [ 295.806900][ C1] Last potentially related work creation: [ 295.812611][ C1] kasan_save_stack+0x33/0x60 [ 295.817311][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 295.822544][ C1] insert_work+0x36/0x230 [ 295.826887][ C1] __queue_work+0x97e/0x10f0 [ 295.831489][ C1] queue_work_on+0x15f/0x1f0 [ 295.836088][ C1] xpad_irq_in+0x12de/0x2aa0 [ 295.840690][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 295.846092][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 295.851322][ C1] dummy_timer+0x180e/0x3a20 [ 295.855925][ C1] __hrtimer_run_queues+0x202/0xad0 [ 295.861151][ C1] hrtimer_run_softirq+0x17d/0x350 [ 295.866277][ C1] handle_softirqs+0x219/0x8e0 [ 295.871063][ C1] __irq_exit_rcu+0x109/0x170 [ 295.875790][ C1] irq_exit_rcu+0x9/0x30 [ 295.880053][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 295.885721][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.891721][ C1] [ 295.894086][ C1] Second to last potentially related work creation: [ 295.900670][ C1] kasan_save_stack+0x33/0x60 [ 295.905367][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 295.910597][ C1] insert_work+0x36/0x230 [ 295.914944][ C1] __queue_work+0x97e/0x10f0 [ 295.919548][ C1] queue_work_on+0x15f/0x1f0 [ 295.924165][ C1] xpad_irq_in+0x12de/0x2aa0 [ 295.928771][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 295.934172][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 295.939400][ C1] dummy_timer+0x180e/0x3a20 [ 295.944003][ C1] __hrtimer_run_queues+0x202/0xad0 [ 295.949224][ C1] hrtimer_run_softirq+0x17d/0x350 [ 295.954354][ C1] handle_softirqs+0x219/0x8e0 [ 295.959135][ C1] __irq_exit_rcu+0x109/0x170 [ 295.963828][ C1] irq_exit_rcu+0x9/0x30 [ 295.968089][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 295.973757][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.979772][ C1] [ 295.982093][ C1] The buggy address belongs to the object at ffff8880609a6800 [ 295.982093][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 295.996157][ C1] The buggy address is located 104 bytes inside of [ 295.996157][ C1] freed 1024-byte region [ffff8880609a6800, ffff8880609a6c00) [ 296.010158][ C1] [ 296.012494][ C1] The buggy address belongs to the physical page: [ 296.018903][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x609a0 [ 296.027674][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 296.036184][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 296.043742][ C1] page_type: f5(slab) [ 296.047758][ C1] raw: 00fff00000000040 ffff88801b841dc0 ffffea0000a77e00 dead000000000002 [ 296.056368][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 296.064970][ C1] head: 00fff00000000040 ffff88801b841dc0 ffffea0000a77e00 dead000000000002 [ 296.073657][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 296.082351][ C1] head: 00fff00000000003 ffffea0001826801 00000000ffffffff 00000000ffffffff [ 296.091037][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 296.099714][ C1] page dumped because: kasan: bad access detected [ 296.106132][ C1] page_owner tracks the page as allocated [ 296.111846][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7523, tgid 7522 (syz.1.381), ts 233122390505, free_ts 233052965342 [ 296.133158][ C1] post_alloc_hook+0x1c0/0x230 [ 296.137940][ C1] get_page_from_freelist+0x1321/0x3890 [ 296.143505][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 296.149416][ C1] alloc_pages_mpol+0x1fb/0x550 [ 296.154293][ C1] new_slab+0x23b/0x330 [ 296.158480][ C1] ___slab_alloc+0xd9c/0x1940 [ 296.163192][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 296.168599][ C1] __kvmalloc_node_noprof+0x3b1/0x620 [ 296.173983][ C1] io_alloc_cache_init+0x33/0x170 [ 296.179034][ C1] io_uring_setup+0x61d/0x2120 [ 296.183819][ C1] __x64_sys_io_uring_setup+0xc2/0x170 [ 296.189304][ C1] do_syscall_64+0xcd/0x4c0 [ 296.193821][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.199767][ C1] page last free pid 7481 tgid 7480 stack trace: [ 296.206098][ C1] free_unref_folios+0xa65/0x1800 [ 296.211144][ C1] folios_put_refs+0x56f/0x740 [ 296.215928][ C1] truncate_inode_pages_range+0x311/0xe50 [ 296.221677][ C1] blkdev_flush_mapping+0xfb/0x290 [ 296.226813][ C1] blkdev_put_whole+0xc4/0xf0 [ 296.231515][ C1] bdev_release+0x47e/0x6d0 [ 296.236041][ C1] blkdev_release+0x15/0x20 [ 296.240572][ C1] __fput+0x402/0xb70 [ 296.244579][ C1] task_work_run+0x150/0x240 [ 296.249182][ C1] do_exit+0x864/0x2bd0 [ 296.253363][ C1] do_group_exit+0xd3/0x2a0 [ 296.257890][ C1] get_signal+0x2673/0x26d0 [ 296.262413][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 296.267978][ C1] exit_to_user_mode_loop+0x84/0x110 [ 296.273319][ C1] do_syscall_64+0x3f6/0x4c0 [ 296.277920][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.283826][ C1] [ 296.286145][ C1] Memory state around the buggy address: [ 296.291775][ C1] ffff8880609a6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.299845][ C1] ffff8880609a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.307913][ C1] >ffff8880609a6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.315978][ C1] ^ [ 296.323435][ C1] ffff8880609a6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.331509][ C1] ffff8880609a6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.339573][ C1] ================================================================== [ 296.347643][ C1] ================================================================== [ 296.355709][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x265/0x2b0 [ 296.363536][ C1] Read of size 4 at addr ffff8880609a6860 by task syz.7.612/8383 [ 296.371266][ C1] [ 296.373605][ C1] CPU: 1 UID: 0 PID: 8383 Comm: syz.7.612 Tainted: G B 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 296.373654][ C1] Tainted: [B]=BAD_PAGE [ 296.373666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.373686][ C1] Call Trace: [ 296.373699][ C1] [ 296.373712][ C1] dump_stack_lvl+0x116/0x1f0 [ 296.373769][ C1] print_report+0xcd/0x680 [ 296.373809][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.373850][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.373891][ C1] ? __phys_addr+0xe8/0x180 [ 296.373929][ C1] ? do_raw_spin_lock+0x265/0x2b0 [ 296.373964][ C1] kasan_report+0xe0/0x110 [ 296.374005][ C1] ? do_raw_spin_lock+0x265/0x2b0 [ 296.374045][ C1] do_raw_spin_lock+0x265/0x2b0 [ 296.374080][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.374117][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.374162][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 296.374210][ C1] ? __wake_up+0x1c/0x60 [ 296.374253][ C1] __wake_up+0x1c/0x60 [ 296.374304][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 296.374340][ C1] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 296.374393][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 296.374442][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.374485][ C1] dummy_timer+0x180e/0x3a20 [ 296.374523][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.374567][ C1] ? find_held_lock+0x2b/0x80 [ 296.374606][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.374650][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.374692][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.374732][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 296.374768][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 296.374803][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 296.374855][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.374896][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 296.374928][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 296.374959][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.375000][ C1] ? mark_held_locks+0x49/0x80 [ 296.375049][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 296.375102][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 296.375133][ C1] __hrtimer_run_queues+0x202/0xad0 [ 296.375177][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 296.375214][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.375262][ C1] hrtimer_run_softirq+0x17d/0x350 [ 296.375307][ C1] handle_softirqs+0x219/0x8e0 [ 296.375349][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 296.375389][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.375433][ C1] __irq_exit_rcu+0x109/0x170 [ 296.375470][ C1] irq_exit_rcu+0x9/0x30 [ 296.375507][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 296.375559][ C1] [ 296.375570][ C1] [ 296.375582][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.375620][ C1] RIP: 0010:page_table_check_clear+0x520/0x740 [ 296.375663][ C1] Code: 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a9 01 00 00 44 8b 3b <31> ff 44 89 fe e8 16 6e 8e ff 45 85 ff 0f 85 dd 00 00 00 e8 c8 72 [ 296.375696][ C1] RSP: 0018:ffffc90003a17768 EFLAGS: 00000246 [ 296.375724][ C1] RAX: 0000000000000003 RBX: ffff88801ed183b8 RCX: dffffc0000000000 [ 296.375746][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801ed183b8 [ 296.375767][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1003da3077 [ 296.375789][ C1] R10: ffff88801ed183bb R11: 0000000000000001 R12: ffff88801ed18370 [ 296.375811][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 296.375843][ C1] ? page_table_check_clear+0x4f3/0x740 [ 296.375886][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 296.375928][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 296.375970][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 296.376034][ C1] unmap_page_range+0x24bd/0x4350 [ 296.376097][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.376138][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 296.376184][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.376227][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.376269][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.376313][ C1] ? uprobe_munmap+0x20/0x5c0 [ 296.376359][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 296.376411][ C1] unmap_vmas+0x218/0x470 [ 296.376458][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 296.376501][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.376544][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.376585][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 296.376619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.376670][ C1] exit_mmap+0x1b9/0xb90 [ 296.376722][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 296.376776][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.376833][ C1] __mmput+0x12a/0x410 [ 296.376874][ C1] mmput+0x62/0x70 [ 296.376911][ C1] do_exit+0x7bc/0x2bd0 [ 296.376961][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.377002][ C1] ? __pfx_do_exit+0x10/0x10 [ 296.377048][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.377088][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 296.377134][ C1] do_group_exit+0xd3/0x2a0 [ 296.377183][ C1] __x64_sys_exit_group+0x3e/0x50 [ 296.377233][ C1] x64_sys_call+0x1530/0x1730 [ 296.377266][ C1] do_syscall_64+0xcd/0x4c0 [ 296.377305][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.377339][ C1] RIP: 0033:0x7f643af8e929 [ 296.377363][ C1] Code: Unable to access opcode bytes at 0x7f643af8e8ff. [ 296.377379][ C1] RSP: 002b:00007ffd25967fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 296.377409][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f643af8e929 [ 296.377431][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.377452][ C1] RBP: 00007ffd2596803c R08: 00000009259680cf R09: 00000000000927c0 [ 296.377474][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000006c [ 296.377495][ C1] R13: 00000000000927c0 R14: 0000000000047969 R15: 00007ffd25968090 [ 296.377528][ C1] [ 296.377540][ C1] [ 296.955048][ C1] Allocated by task 5934: [ 296.959379][ C1] kasan_save_stack+0x33/0x60 [ 296.964078][ C1] kasan_save_track+0x14/0x30 [ 296.968773][ C1] __kasan_kmalloc+0xaa/0xb0 [ 296.973382][ C1] xpad_probe+0x286/0x1ff0 [ 296.977810][ C1] usb_probe_interface+0x303/0x9c0 [ 296.982952][ C1] really_probe+0x241/0xa90 [ 296.987483][ C1] __driver_probe_device+0x1de/0x440 [ 296.992798][ C1] driver_probe_device+0x4c/0x1b0 [ 296.997848][ C1] __device_attach_driver+0x1df/0x310 [ 297.003250][ C1] bus_for_each_drv+0x159/0x1e0 [ 297.008128][ C1] __device_attach+0x1e4/0x4b0 [ 297.012923][ C1] bus_probe_device+0x17f/0x1c0 [ 297.017796][ C1] device_add+0x1148/0x1a70 [ 297.022314][ C1] usb_set_configuration+0x1187/0x1e20 [ 297.027793][ C1] usb_generic_driver_probe+0xb1/0x110 [ 297.033266][ C1] usb_probe_device+0xef/0x3e0 [ 297.038057][ C1] really_probe+0x241/0xa90 [ 297.042586][ C1] __driver_probe_device+0x1de/0x440 [ 297.047899][ C1] driver_probe_device+0x4c/0x1b0 [ 297.052955][ C1] __device_attach_driver+0x1df/0x310 [ 297.058367][ C1] bus_for_each_drv+0x159/0x1e0 [ 297.063232][ C1] __device_attach+0x1e4/0x4b0 [ 297.068025][ C1] bus_probe_device+0x17f/0x1c0 [ 297.072896][ C1] device_add+0x1148/0x1a70 [ 297.077412][ C1] usb_new_device+0xd07/0x1a20 [ 297.082193][ C1] hub_event+0x2eb7/0x4fa0 [ 297.086627][ C1] process_one_work+0x9cf/0x1b70 [ 297.091579][ C1] worker_thread+0x6c8/0xf10 [ 297.096179][ C1] kthread+0x3c5/0x780 [ 297.100343][ C1] ret_from_fork+0x5d7/0x6f0 [ 297.104959][ C1] ret_from_fork_asm+0x1a/0x30 [ 297.109734][ C1] [ 297.112055][ C1] Freed by task 5991: [ 297.116034][ C1] kasan_save_stack+0x33/0x60 [ 297.120726][ C1] kasan_save_track+0x14/0x30 [ 297.125421][ C1] kasan_save_free_info+0x3b/0x60 [ 297.130480][ C1] __kasan_slab_free+0x51/0x70 [ 297.135263][ C1] kfree+0x2b4/0x4d0 [ 297.139191][ C1] xpad_disconnect+0x1cf/0x580 [ 297.143971][ C1] usb_unbind_interface+0x1dd/0x9a0 [ 297.149199][ C1] device_remove+0x125/0x170 [ 297.153818][ C1] device_release_driver_internal+0x44b/0x620 [ 297.159919][ C1] bus_remove_device+0x22f/0x420 [ 297.164900][ C1] device_del+0x396/0x9f0 [ 297.169253][ C1] usb_disable_device+0x355/0x7d0 [ 297.174304][ C1] usb_disconnect+0x2e1/0x920 [ 297.178998][ C1] hub_event+0x1c57/0x4fa0 [ 297.183429][ C1] process_one_work+0x9cf/0x1b70 [ 297.188376][ C1] worker_thread+0x6c8/0xf10 [ 297.192974][ C1] kthread+0x3c5/0x780 [ 297.197046][ C1] ret_from_fork+0x5d7/0x6f0 [ 297.201661][ C1] ret_from_fork_asm+0x1a/0x30 [ 297.206466][ C1] [ 297.208787][ C1] Last potentially related work creation: [ 297.214673][ C1] kasan_save_stack+0x33/0x60 [ 297.219367][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 297.224602][ C1] insert_work+0x36/0x230 [ 297.228951][ C1] __queue_work+0x97e/0x10f0 [ 297.233561][ C1] queue_work_on+0x15f/0x1f0 [ 297.238162][ C1] xpad_irq_in+0x12de/0x2aa0 [ 297.242765][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 297.248163][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 297.253391][ C1] dummy_timer+0x180e/0x3a20 [ 297.257992][ C1] __hrtimer_run_queues+0x202/0xad0 [ 297.263205][ C1] hrtimer_run_softirq+0x17d/0x350 [ 297.268332][ C1] handle_softirqs+0x219/0x8e0 [ 297.273110][ C1] __irq_exit_rcu+0x109/0x170 [ 297.277803][ C1] irq_exit_rcu+0x9/0x30 [ 297.282059][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 297.287719][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 297.293714][ C1] [ 297.296033][ C1] Second to last potentially related work creation: [ 297.302616][ C1] kasan_save_stack+0x33/0x60 [ 297.307307][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 297.312533][ C1] insert_work+0x36/0x230 [ 297.316869][ C1] __queue_work+0x97e/0x10f0 [ 297.321471][ C1] queue_work_on+0x15f/0x1f0 [ 297.326071][ C1] xpad_irq_in+0x12de/0x2aa0 [ 297.330674][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 297.336072][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 297.341301][ C1] dummy_timer+0x180e/0x3a20 [ 297.345898][ C1] __hrtimer_run_queues+0x202/0xad0 [ 297.351108][ C1] hrtimer_run_softirq+0x17d/0x350 [ 297.356233][ C1] handle_softirqs+0x219/0x8e0 [ 297.361019][ C1] __irq_exit_rcu+0x109/0x170 [ 297.365710][ C1] irq_exit_rcu+0x9/0x30 [ 297.369967][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 297.375628][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 297.381624][ C1] [ 297.383943][ C1] The buggy address belongs to the object at ffff8880609a6800 [ 297.383943][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 297.398092][ C1] The buggy address is located 96 bytes inside of [ 297.398092][ C1] freed 1024-byte region [ffff8880609a6800, ffff8880609a6c00) [ 297.411900][ C1] [ 297.414222][ C1] The buggy address belongs to the physical page: [ 297.420645][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x609a0 [ 297.429420][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 297.437928][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 297.445573][ C1] page_type: f5(slab) [ 297.449567][ C1] raw: 00fff00000000040 ffff88801b841dc0 ffffea0000a77e00 dead000000000002 [ 297.458166][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 297.466765][ C1] head: 00fff00000000040 ffff88801b841dc0 ffffea0000a77e00 dead000000000002 [ 297.475460][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 297.484146][ C1] head: 00fff00000000003 ffffea0001826801 00000000ffffffff 00000000ffffffff [ 297.492830][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 297.501502][ C1] page dumped because: kasan: bad access detected [ 297.507917][ C1] page_owner tracks the page as allocated [ 297.513632][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7523, tgid 7522 (syz.1.381), ts 233122390505, free_ts 233052965342 [ 297.534934][ C1] post_alloc_hook+0x1c0/0x230 [ 297.539715][ C1] get_page_from_freelist+0x1321/0x3890 [ 297.545283][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 297.551199][ C1] alloc_pages_mpol+0x1fb/0x550 [ 297.556069][ C1] new_slab+0x23b/0x330 [ 297.560256][ C1] ___slab_alloc+0xd9c/0x1940 [ 297.564982][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 297.570386][ C1] __kvmalloc_node_noprof+0x3b1/0x620 [ 297.575768][ C1] io_alloc_cache_init+0x33/0x170 [ 297.580821][ C1] io_uring_setup+0x61d/0x2120 [ 297.585606][ C1] __x64_sys_io_uring_setup+0xc2/0x170 [ 297.591085][ C1] do_syscall_64+0xcd/0x4c0 [ 297.595598][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.601505][ C1] page last free pid 7481 tgid 7480 stack trace: [ 297.607829][ C1] free_unref_folios+0xa65/0x1800 [ 297.612867][ C1] folios_put_refs+0x56f/0x740 [ 297.617648][ C1] truncate_inode_pages_range+0x311/0xe50 [ 297.623395][ C1] blkdev_flush_mapping+0xfb/0x290 [ 297.628527][ C1] blkdev_put_whole+0xc4/0xf0 [ 297.633243][ C1] bdev_release+0x47e/0x6d0 [ 297.638490][ C1] blkdev_release+0x15/0x20 [ 297.643023][ C1] __fput+0x402/0xb70 [ 297.647031][ C1] task_work_run+0x150/0x240 [ 297.651637][ C1] do_exit+0x864/0x2bd0 [ 297.655819][ C1] do_group_exit+0xd3/0x2a0 [ 297.660355][ C1] get_signal+0x2673/0x26d0 [ 297.664879][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 297.670445][ C1] exit_to_user_mode_loop+0x84/0x110 [ 297.675752][ C1] do_syscall_64+0x3f6/0x4c0 [ 297.680353][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.686260][ C1] [ 297.688761][ C1] Memory state around the buggy address: [ 297.694405][ C1] ffff8880609a6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 297.702480][ C1] ffff8880609a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 297.710549][ C1] >ffff8880609a6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.718610][ C1] ^ [ 297.725813][ C1] ffff8880609a6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.733883][ C1] ffff8880609a6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.741950][ C1] ================================================================== [ 297.750009][ C1] ================================================================== [ 297.758076][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x11d/0x2b0 [ 297.765905][ C1] Write of size 4 at addr ffff8880609a6858 by task syz.7.612/8383 [ 297.773725][ C1] [ 297.776059][ C1] CPU: 1 UID: 0 PID: 8383 Comm: syz.7.612 Tainted: G B 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 297.776108][ C1] Tainted: [B]=BAD_PAGE [ 297.776120][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.776140][ C1] Call Trace: [ 297.776152][ C1] [ 297.776165][ C1] dump_stack_lvl+0x116/0x1f0 [ 297.776225][ C1] print_report+0xcd/0x680 [ 297.776265][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.776311][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.776351][ C1] ? __phys_addr+0xe8/0x180 [ 297.776390][ C1] ? do_raw_spin_lock+0x11d/0x2b0 [ 297.776424][ C1] kasan_report+0xe0/0x110 [ 297.776466][ C1] ? do_raw_spin_lock+0x11d/0x2b0 [ 297.776505][ C1] kasan_check_range+0x100/0x1b0 [ 297.776555][ C1] do_raw_spin_lock+0x11d/0x2b0 [ 297.776591][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 297.776627][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.776672][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 297.776720][ C1] ? __wake_up+0x1c/0x60 [ 297.776764][ C1] __wake_up+0x1c/0x60 [ 297.776808][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 297.776845][ C1] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 297.776898][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 297.776946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.776990][ C1] dummy_timer+0x180e/0x3a20 [ 297.777028][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.777071][ C1] ? find_held_lock+0x2b/0x80 [ 297.777111][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.777155][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.777196][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.777236][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 297.777273][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 297.777312][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 297.777364][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.777405][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 297.777437][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 297.777469][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.777508][ C1] ? mark_held_locks+0x49/0x80 [ 297.777559][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 297.777611][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 297.777643][ C1] __hrtimer_run_queues+0x202/0xad0 [ 297.777687][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 297.777724][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.777771][ C1] hrtimer_run_softirq+0x17d/0x350 [ 297.777811][ C1] handle_softirqs+0x219/0x8e0 [ 297.777853][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 297.777893][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.777937][ C1] __irq_exit_rcu+0x109/0x170 [ 297.777974][ C1] irq_exit_rcu+0x9/0x30 [ 297.778011][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 297.778063][ C1] [ 297.778074][ C1] [ 297.778086][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 297.778123][ C1] RIP: 0010:page_table_check_clear+0x520/0x740 [ 297.778165][ C1] Code: 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a9 01 00 00 44 8b 3b <31> ff 44 89 fe e8 16 6e 8e ff 45 85 ff 0f 85 dd 00 00 00 e8 c8 72 [ 297.778199][ C1] RSP: 0018:ffffc90003a17768 EFLAGS: 00000246 [ 297.778225][ C1] RAX: 0000000000000003 RBX: ffff88801ed183b8 RCX: dffffc0000000000 [ 297.778248][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801ed183b8 [ 297.778269][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1003da3077 [ 297.778295][ C1] R10: ffff88801ed183bb R11: 0000000000000001 R12: ffff88801ed18370 [ 297.778317][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 297.778349][ C1] ? page_table_check_clear+0x4f3/0x740 [ 297.778391][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 297.778433][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 297.778475][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 297.778540][ C1] unmap_page_range+0x24bd/0x4350 [ 297.778603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.778645][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 297.778692][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.778734][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.778775][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.778815][ C1] ? uprobe_munmap+0x20/0x5c0 [ 297.778861][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 297.778913][ C1] unmap_vmas+0x218/0x470 [ 297.778960][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 297.779003][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.779047][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.779087][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 297.779122][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.779173][ C1] exit_mmap+0x1b9/0xb90 [ 297.779225][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 297.779280][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.779341][ C1] __mmput+0x12a/0x410 [ 297.779381][ C1] mmput+0x62/0x70 [ 297.779419][ C1] do_exit+0x7bc/0x2bd0 [ 297.779468][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.779509][ C1] ? __pfx_do_exit+0x10/0x10 [ 297.779556][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.779597][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 297.779644][ C1] do_group_exit+0xd3/0x2a0 [ 297.779694][ C1] __x64_sys_exit_group+0x3e/0x50 [ 297.779744][ C1] x64_sys_call+0x1530/0x1730 [ 297.779778][ C1] do_syscall_64+0xcd/0x4c0 [ 297.779811][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.779845][ C1] RIP: 0033:0x7f643af8e929 [ 297.779868][ C1] Code: Unable to access opcode bytes at 0x7f643af8e8ff. [ 297.779884][ C1] RSP: 002b:00007ffd25967fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 297.779914][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f643af8e929 [ 297.779936][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.779957][ C1] RBP: 00007ffd2596803c R08: 00000009259680cf R09: 00000000000927c0 [ 297.779979][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000006c [ 297.780000][ C1] R13: 00000000000927c0 R14: 0000000000047969 R15: 00007ffd25968090 [ 297.780033][ C1] [ 297.780044][ C1] [ 298.362891][ C1] Allocated by task 5934: [ 298.367218][ C1] kasan_save_stack+0x33/0x60 [ 298.371913][ C1] kasan_save_track+0x14/0x30 [ 298.376605][ C1] __kasan_kmalloc+0xaa/0xb0 [ 298.381213][ C1] xpad_probe+0x286/0x1ff0 [ 298.385640][ C1] usb_probe_interface+0x303/0x9c0 [ 298.390778][ C1] really_probe+0x241/0xa90 [ 298.395311][ C1] __driver_probe_device+0x1de/0x440 [ 298.400626][ C1] driver_probe_device+0x4c/0x1b0 [ 298.405764][ C1] __device_attach_driver+0x1df/0x310 [ 298.411164][ C1] bus_for_each_drv+0x159/0x1e0 [ 298.416031][ C1] __device_attach+0x1e4/0x4b0 [ 298.420821][ C1] bus_probe_device+0x17f/0x1c0 [ 298.425692][ C1] device_add+0x1148/0x1a70 [ 298.430200][ C1] usb_set_configuration+0x1187/0x1e20 [ 298.435677][ C1] usb_generic_driver_probe+0xb1/0x110 [ 298.441150][ C1] usb_probe_device+0xef/0x3e0 [ 298.445937][ C1] really_probe+0x241/0xa90 [ 298.450463][ C1] __driver_probe_device+0x1de/0x440 [ 298.455777][ C1] driver_probe_device+0x4c/0x1b0 [ 298.460830][ C1] __device_attach_driver+0x1df/0x310 [ 298.466234][ C1] bus_for_each_drv+0x159/0x1e0 [ 298.471120][ C1] __device_attach+0x1e4/0x4b0 [ 298.475912][ C1] bus_probe_device+0x17f/0x1c0 [ 298.480784][ C1] device_add+0x1148/0x1a70 [ 298.485293][ C1] usb_new_device+0xd07/0x1a20 [ 298.490078][ C1] hub_event+0x2eb7/0x4fa0 [ 298.494509][ C1] process_one_work+0x9cf/0x1b70 [ 298.499456][ C1] worker_thread+0x6c8/0xf10 [ 298.504053][ C1] kthread+0x3c5/0x780 [ 298.508129][ C1] ret_from_fork+0x5d7/0x6f0 [ 298.512852][ C1] ret_from_fork_asm+0x1a/0x30 [ 298.517629][ C1] [ 298.519951][ C1] Freed by task 5991: [ 298.523935][ C1] kasan_save_stack+0x33/0x60 [ 298.528624][ C1] kasan_save_track+0x14/0x30 [ 298.533316][ C1] kasan_save_free_info+0x3b/0x60 [ 298.538372][ C1] __kasan_slab_free+0x51/0x70 [ 298.543149][ C1] kfree+0x2b4/0x4d0 [ 298.547073][ C1] xpad_disconnect+0x1cf/0x580 [ 298.551843][ C1] usb_unbind_interface+0x1dd/0x9a0 [ 298.557065][ C1] device_remove+0x125/0x170 [ 298.561679][ C1] device_release_driver_internal+0x44b/0x620 [ 298.567777][ C1] bus_remove_device+0x22f/0x420 [ 298.572739][ C1] device_del+0x396/0x9f0 [ 298.577092][ C1] usb_disable_device+0x355/0x7d0 [ 298.582132][ C1] usb_disconnect+0x2e1/0x920 [ 298.586826][ C1] hub_event+0x1c57/0x4fa0 [ 298.591258][ C1] process_one_work+0x9cf/0x1b70 [ 298.596227][ C1] worker_thread+0x6c8/0xf10 [ 298.600826][ C1] kthread+0x3c5/0x780 [ 298.604897][ C1] ret_from_fork+0x5d7/0x6f0 [ 298.609510][ C1] ret_from_fork_asm+0x1a/0x30 [ 298.614286][ C1] [ 298.616610][ C1] Last potentially related work creation: [ 298.622321][ C1] kasan_save_stack+0x33/0x60 [ 298.627009][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 298.632236][ C1] insert_work+0x36/0x230 [ 298.636576][ C1] __queue_work+0x97e/0x10f0 [ 298.641177][ C1] queue_work_on+0x15f/0x1f0 [ 298.645861][ C1] xpad_irq_in+0x12de/0x2aa0 [ 298.650462][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 298.655859][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 298.661085][ C1] dummy_timer+0x180e/0x3a20 [ 298.665684][ C1] __hrtimer_run_queues+0x202/0xad0 [ 298.670896][ C1] hrtimer_run_softirq+0x17d/0x350 [ 298.676020][ C1] handle_softirqs+0x219/0x8e0 [ 298.680796][ C1] __irq_exit_rcu+0x109/0x170 [ 298.685486][ C1] irq_exit_rcu+0x9/0x30 [ 298.689753][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 298.695421][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.701420][ C1] [ 298.703741][ C1] Second to last potentially related work creation: [ 298.710320][ C1] kasan_save_stack+0x33/0x60 [ 298.715009][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 298.720236][ C1] insert_work+0x36/0x230 [ 298.724582][ C1] __queue_work+0x97e/0x10f0 [ 298.729179][ C1] queue_work_on+0x15f/0x1f0 [ 298.733778][ C1] xpad_irq_in+0x12de/0x2aa0 [ 298.738465][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 298.743863][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 298.749088][ C1] dummy_timer+0x180e/0x3a20 [ 298.753685][ C1] __hrtimer_run_queues+0x202/0xad0 [ 298.758901][ C1] hrtimer_run_softirq+0x17d/0x350 [ 298.764029][ C1] handle_softirqs+0x219/0x8e0 [ 298.768813][ C1] __irq_exit_rcu+0x109/0x170 [ 298.773504][ C1] irq_exit_rcu+0x9/0x30 [ 298.777765][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 298.783425][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.789420][ C1] [ 298.791741][ C1] The buggy address belongs to the object at ffff8880609a6800 [ 298.791741][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 298.805800][ C1] The buggy address is located 88 bytes inside of [ 298.805800][ C1] freed 1024-byte region [ffff8880609a6800, ffff8880609a6c00) [ 298.819604][ C1] [ 298.821923][ C1] The buggy address belongs to the physical page: [ 298.828334][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x609a0 [ 298.837105][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 298.845609][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 298.853159][ C1] page_type: f5(slab) [ 298.857147][ C1] raw: 00fff00000000040 ffff88801b841dc0 ffffea0000a77e00 dead000000000002 [ 298.865741][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 298.874340][ C1] head: 00fff00000000040 ffff88801b841dc0 ffffea0000a77e00 dead000000000002 [ 298.883020][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 298.891702][ C1] head: 00fff00000000003 ffffea0001826801 00000000ffffffff 00000000ffffffff [ 298.900384][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 298.909050][ C1] page dumped because: kasan: bad access detected [ 298.915458][ C1] page_owner tracks the page as allocated [ 298.921190][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7523, tgid 7522 (syz.1.381), ts 233122390505, free_ts 233052965342 [ 298.942491][ C1] post_alloc_hook+0x1c0/0x230 [ 298.947264][ C1] get_page_from_freelist+0x1321/0x3890 [ 298.952825][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 298.958736][ C1] alloc_pages_mpol+0x1fb/0x550 [ 298.963606][ C1] new_slab+0x23b/0x330 [ 298.967793][ C1] ___slab_alloc+0xd9c/0x1940 [ 298.972503][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 298.977910][ C1] __kvmalloc_node_noprof+0x3b1/0x620 [ 298.983290][ C1] io_alloc_cache_init+0x33/0x170 [ 298.988339][ C1] io_uring_setup+0x61d/0x2120 [ 298.993122][ C1] __x64_sys_io_uring_setup+0xc2/0x170 [ 298.998599][ C1] do_syscall_64+0xcd/0x4c0 [ 299.003113][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.009016][ C1] page last free pid 7481 tgid 7480 stack trace: [ 299.015343][ C1] free_unref_folios+0xa65/0x1800 [ 299.020398][ C1] folios_put_refs+0x56f/0x740 [ 299.025187][ C1] truncate_inode_pages_range+0x311/0xe50 [ 299.031022][ C1] blkdev_flush_mapping+0xfb/0x290 [ 299.036184][ C1] blkdev_put_whole+0xc4/0xf0 [ 299.040876][ C1] bdev_release+0x47e/0x6d0 [ 299.045403][ C1] blkdev_release+0x15/0x20 [ 299.049926][ C1] __fput+0x402/0xb70 [ 299.053931][ C1] task_work_run+0x150/0x240 [ 299.058529][ C1] do_exit+0x864/0x2bd0 [ 299.062713][ C1] do_group_exit+0xd3/0x2a0 [ 299.067241][ C1] get_signal+0x2673/0x26d0 [ 299.071767][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 299.077355][ C1] exit_to_user_mode_loop+0x84/0x110 [ 299.082656][ C1] do_syscall_64+0x3f6/0x4c0 [ 299.087256][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.093171][ C1] [ 299.095525][ C1] Memory state around the buggy address: [ 299.101161][ C1] ffff8880609a6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.109228][ C1] ffff8880609a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.117299][ C1] >ffff8880609a6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.125373][ C1] ^ [ 299.132313][ C1] ffff8880609a6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.140382][ C1] ffff8880609a6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.148447][ C1] ================================================================== [ 299.156506][ C1] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 299.164231][ C1] CPU: 1 UID: 0 PID: 8383 Comm: syz.7.612 Tainted: G B 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 299.175976][ C1] Tainted: [B]=BAD_PAGE [ 299.180130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.190193][ C1] Call Trace: [ 299.193475][ C1] [ 299.196324][ C1] dump_stack_lvl+0x3d/0x1f0 [ 299.200958][ C1] panic+0x71c/0x800 [ 299.204889][ C1] ? __pfx_panic+0x10/0x10 [ 299.209333][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.214995][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.220652][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.225440][ C1] ? lock_release+0x201/0x2f0 [ 299.230153][ C1] ? do_raw_spin_lock+0x11d/0x2b0 [ 299.235193][ C1] end_report+0x159/0x170 [ 299.239550][ C1] kasan_report+0xee/0x110 [ 299.243993][ C1] ? do_raw_spin_lock+0x11d/0x2b0 [ 299.249037][ C1] kasan_check_range+0x100/0x1b0 [ 299.254005][ C1] do_raw_spin_lock+0x11d/0x2b0 [ 299.258871][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.264260][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.269919][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 299.275257][ C1] ? __wake_up+0x1c/0x60 [ 299.279534][ C1] __wake_up+0x1c/0x60 [ 299.283641][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 299.289117][ C1] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 299.294537][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 299.299781][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.305448][ C1] dummy_timer+0x180e/0x3a20 [ 299.310059][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.315716][ C1] ? find_held_lock+0x2b/0x80 [ 299.320503][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.326165][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.331818][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.337473][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 299.343123][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 299.349119][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 299.354097][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.359755][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.364707][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.369657][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.375310][ C1] ? mark_held_locks+0x49/0x80 [ 299.380112][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 299.385954][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.390904][ C1] __hrtimer_run_queues+0x202/0xad0 [ 299.396132][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 299.401880][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.407813][ C1] hrtimer_run_softirq+0x17d/0x350 [ 299.412954][ C1] handle_softirqs+0x219/0x8e0 [ 299.417744][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 299.423052][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.428710][ C1] __irq_exit_rcu+0x109/0x170 [ 299.433433][ C1] irq_exit_rcu+0x9/0x30 [ 299.438577][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 299.444257][ C1] [ 299.447194][ C1] [ 299.450126][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.456127][ C1] RIP: 0010:page_table_check_clear+0x520/0x740 [ 299.462322][ C1] Code: 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a9 01 00 00 44 8b 3b <31> ff 44 89 fe e8 16 6e 8e ff 45 85 ff 0f 85 dd 00 00 00 e8 c8 72 [ 299.481957][ C1] RSP: 0018:ffffc90003a17768 EFLAGS: 00000246 [ 299.488042][ C1] RAX: 0000000000000003 RBX: ffff88801ed183b8 RCX: dffffc0000000000 [ 299.496022][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801ed183b8 [ 299.504001][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1003da3077 [ 299.511979][ C1] R10: ffff88801ed183bb R11: 0000000000000001 R12: ffff88801ed18370 [ 299.519958][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 299.527949][ C1] ? page_table_check_clear+0x4f3/0x740 [ 299.533530][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 299.539363][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 299.545803][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 299.553044][ C1] unmap_page_range+0x24bd/0x4350 [ 299.558117][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.563769][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 299.569167][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.574823][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.580477][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.586130][ C1] ? uprobe_munmap+0x20/0x5c0 [ 299.590833][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 299.596757][ C1] unmap_vmas+0x218/0x470 [ 299.601115][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 299.605993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.611650][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.617303][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 299.622260][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.627931][ C1] exit_mmap+0x1b9/0xb90 [ 299.632208][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 299.637010][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.642678][ C1] __mmput+0x12a/0x410 [ 299.646770][ C1] mmput+0x62/0x70 [ 299.650510][ C1] do_exit+0x7bc/0x2bd0 [ 299.654696][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.660352][ C1] ? __pfx_do_exit+0x10/0x10 [ 299.664968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.670618][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 299.676017][ C1] do_group_exit+0xd3/0x2a0 [ 299.680550][ C1] __x64_sys_exit_group+0x3e/0x50 [ 299.685604][ C1] x64_sys_call+0x1530/0x1730 [ 299.690295][ C1] do_syscall_64+0xcd/0x4c0 [ 299.694817][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.700725][ C1] RIP: 0033:0x7f643af8e929 [ 299.705145][ C1] Code: Unable to access opcode bytes at 0x7f643af8e8ff. [ 299.712163][ C1] RSP: 002b:00007ffd25967fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 299.720596][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f643af8e929 [ 299.728579][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.736560][ C1] RBP: 00007ffd2596803c R08: 00000009259680cf R09: 00000000000927c0 [ 299.744538][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000006c [ 299.752515][ C1] R13: 00000000000927c0 R14: 0000000000047969 R15: 00007ffd25968090 [ 299.760505][ C1] [ 299.763720][ C1] Kernel Offset: disabled [ 299.768046][ C1] Rebooting in 86400 seconds..