last executing test programs: 2m16.630912592s ago: executing program 5 (id=767): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2m9.741117849s ago: executing program 5 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r5) 1m59.458166238s ago: executing program 5 (id=806): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000020)='nfs\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0xecca9000) syz_clone3(&(0x7f0000001e80)={0x2281100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sequencer(0xffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)="e9fd0dec01d1e26831c0bed67a87", 0xe}, 0x1, 0x0, 0x0, 0x40000dc}, 0x24004014) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) 1m57.893562468s ago: executing program 5 (id=812): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$kcm(0x11, 0x2, 0x0) close(0x3) socket(0x11, 0x2, 0x10001) socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 1m56.15580567s ago: executing program 5 (id=815): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, &(0x7f00000002c0)=0x10) r1 = epoll_create1(0x80000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r3) r4 = epoll_create1(0x0) dup2(r2, r1) epoll_wait(r4, &(0x7f0000000200)=[{}], 0x1, 0x254) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) 1m54.592159496s ago: executing program 5 (id=823): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002", 0x12) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4008811) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 1m38.12066883s ago: executing program 32 (id=823): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002", 0x12) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4008811) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 1m33.217339386s ago: executing program 1 (id=860): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x100, 0x4) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) poll(&(0x7f0000000100), 0x0, 0x3ff) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) 1m27.370283947s ago: executing program 3 (id=872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m26.97653813s ago: executing program 3 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='lzo-rle', 0x7) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000009780)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) close(r3) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') 1m26.584014879s ago: executing program 3 (id=875): close(0x3) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1m24.894362329s ago: executing program 3 (id=877): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = shmget$private(0x0, 0x14000, 0x78000000, &(0x7f0000fe9000/0x14000)=nil) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800}, 0xae36, 0xc3, 0x0, 0xa, 0x0, 0x0, 0x7}) 1m22.83850086s ago: executing program 3 (id=879): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="50a9ad436945ae5b7720bab8c4da6a1693e9e76372957cc9d38988f029f346f1c04c6a575206f271e97c9d4c34413238a93ff3ef1604cc2be96d7576b5332e981477c7005362ee4fcc32d8501068e0d9baf7b5f73c2e22fc941db65a2718c254d854ec124d9d79a2"], 0x1, 0x4e1, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 1m20.906687387s ago: executing program 3 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fffffff}, 0x1c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) signalfd(r3, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="2e003300d0000036050211000001080211000000505050505050"], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403008800000010102030109022000010100803209040000"], 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyUSB0\x00', 0x2, 0x0) 1m20.666607923s ago: executing program 1 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x2, 0x800, 0x3}) flock(r1, 0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x2, 0xfffff7ff, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000200)={0x1, 0x65, 0x2}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000001900)=[{0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="dfee4c1ba04f091a4e42fa8234f185c206931c4d6bcbcaeab8843407b6d2f77d9813cd1eb00b99310824cc8187c707a6e136dd46cb1204f4f1e03bdc59a33a1f4189087bc09f0fcca020215319ed0151c7f1", 0x52}, {&(0x7f0000000300)="dc1a94e76c5c0a4a804d2863e89fb98039c6a2d7f9fd31113d341ed759d05b9e9d507c90ea9ced9a60e4f4c0486353a78170e805daa4788b2a495a9e26af7a36325c6a78fb06bf04757849edb8a5be1bdceeb5e32523aba6b5e07874e8f4113758362362175cea7198732c9d08de6b0a104e6b93c4888cb9fdbfcb3ed6", 0x7d}, {&(0x7f00000003c0)="87a4e554e2dec04a2315b0e25a218e2690136b0f3cfaa1e06ac3317b6624f02495350f0012d9fb049834971c5af4fe2dd2e978724487929b0464ea3b6330f96dc135ef90e750e37331f3", 0x4a}, {&(0x7f0000000440)="2ab864479a1a8d0744a6ab066af0573a0368a071423a1d", 0x17}, {&(0x7f0000000480)="391f358e593192bb51", 0x9}], 0x5, &(0x7f0000000880), 0x0, 0x40044}], 0x2, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='off', 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="a9fdec5511111f54d35cd96a7b543ca1db15f9d45cfeb992aab45864271efffd794e89b4cc92fca624a28e86c84da4a8f2e0c229e661e3b2dd14905acafaf1a8b1c1ae7a8a1a71f5238180f1d4ffbb8007dd6e36195e66a87303c75c1bcf4de70b310846c1a6dda128e2a3947afb2f58ea76d2b3d22a35b1842d7b7a6cc3c9439701e9128f8b343bcdc41056a4d603726b3d7202b68ab7d5c5af31997425b78443471b0fe5f7c00e97d401fd154baff31190a8b3deebd9320f421506d0e50c0e208cbf24200a7ad7c9a3b0df3f5c83a9884c5d1caa0e3a3c26a2b7e6554457da21674183", @ANYRES64=r3, @ANYRES64=r3, @ANYRES64=r4, @ANYRES32=r6, @ANYRESDEC=r1, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4042814}, 0x20000000) 1m17.083002424s ago: executing program 1 (id=886): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x8040) socket$xdp(0x2c, 0x3, 0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 1m13.462272516s ago: executing program 1 (id=893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xe}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0xf5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x2, 0x98c6}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) syz_clone(0x253f5a00, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000005100), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000005140)={0xa, @capture={0x1000, 0x1, {0x10001, 0x2}, 0x2000, 0x8}}) 1m8.169826236s ago: executing program 1 (id=901): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000009c0)='./file1\x00', 0x300401a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x0, 0x2b6, &(0x7f0000000a00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000001a00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x18b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m5.105866992s ago: executing program 33 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fffffff}, 0x1c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) signalfd(r3, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="2e003300d0000036050211000001080211000000505050505050"], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403008800000010102030109022000010100803209040000"], 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyUSB0\x00', 0x2, 0x0) 1m3.608378444s ago: executing program 1 (id=907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) shutdown(r0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x2400c018}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="2a0005"], 0x12) 47.310334476s ago: executing program 34 (id=907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) shutdown(r0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x2400c018}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="2a0005"], 0x12) 42.766260485s ago: executing program 4 (id=929): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0x0) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000180)={0x7ffffffc, 0x401, {}, {0xee00}, 0x6, 0x2}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@rnullb, r4, 0x0) write(r3, &(0x7f0000000000)="bc5154f23facdd5dd02bc92c72", 0xd) 42.542264792s ago: executing program 4 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) socket(0x2, 0x80805, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) munmap(&(0x7f000040e000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 42.193017284s ago: executing program 4 (id=931): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) inotify_init() socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r4, 0x12) 41.764119379s ago: executing program 4 (id=932): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.602298874s ago: executing program 4 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000200)="6a2f0527a2e2002f353158bb12250191f08af86afc2a13d121263e55580fee5602477a32d148af928dc8d474bf9bc29fa24dd6aa0b13c9d78480ba4d8533d4c54863c9577a86edce823c9b46fee1689ea91d38f8514607af30bf76a8af6d504713d8dc82") r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) 38.72125843s ago: executing program 4 (id=934): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x40000) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000000), 0x4) r6 = dup3(r4, r5, 0x0) write$tun(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write(r3, &(0x7f0000000100)='0fc5:1227:ed', 0xc) 22.409048127s ago: executing program 35 (id=934): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x40000) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000000), 0x4) r6 = dup3(r4, r5, 0x0) write$tun(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write(r3, &(0x7f0000000100)='0fc5:1227:ed', 0xc) 12.361454194s ago: executing program 2 (id=958): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) unshare(0x28000600) statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) 9.082064268s ago: executing program 0 (id=963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 5.912386806s ago: executing program 2 (id=964): bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r0 = socket(0x2d, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, r2, 0xc}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fanotify_init(0x40, 0x80000) readv(r6, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001500)=""/4080, 0xff0) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f00000004c0)=""/91, 0xfffffd43}], 0x2}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCCONS(r8, 0x541d) close_range(r7, 0xffffffffffffffff, 0x0) 5.906191782s ago: executing program 0 (id=965): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x8, 0x4}, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/nf_conntrack\x00') r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xd0, 0x9, 0x2, 0x1, 0x7c163b79, 0x1000}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f00000002c0)) 5.560831426s ago: executing program 2 (id=966): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0xbffffffa) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.124440546s ago: executing program 2 (id=967): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f00000000c0)=0x9a) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0xa) sendfile(r6, r6, 0x0, 0x1002000ff) 4.748376025s ago: executing program 0 (id=968): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="20f7ffffffff01f4ffbd7000fddbdf250a0000000000000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x200c5c, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noload}]}, 0xff, 0x459, &(0x7f00000009c0)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r1, &(0x7f00000001c0)=',%\x00', 0x40100, &(0x7f0000000240)={@_ha_fsid={[0xb6ba, 0xe]}, {0x9, 0x5, 0x9, 0xde}}, 0x3, &(0x7f0000000280)={@_ha_fsid}, 0x0}, {[0x1, 0x4, 0x0, 0x5]}, 0xc, 0x11, &(0x7f0000000380)=""/17}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000880)={'mangle\x00', 0x0, [0x10, 0x0, 0x4b76f31b, 0x0, 0x2]}, &(0x7f0000000900)=0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000010000103"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, r4, 0x805, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000040) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r5, 0xe3036000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x114, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x103}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004000}, 0x44000) stat(&(0x7f0000000540)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@empty, @in6=@private2}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) 3.821562686s ago: executing program 0 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) close(r1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='255', 0x3) close(r2) close(0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r3, &(0x7f00000005c0)='3', 0x1) 3.689214915s ago: executing program 2 (id=970): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r4 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) 3.452691985s ago: executing program 0 (id=971): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) landlock_restrict_self(r3, 0x7) r4 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.085661443s ago: executing program 0 (id=972): openat$zero(0xffffffffffffff9c, 0x0, 0x40400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x4f, 0x43, 0x43]}, 0x38) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000080)=ANY=[], 0x2, 0x374, &(0x7f0000000600)="$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") 0s ago: executing program 2 (id=973): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(0xffffffffffffffff, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001740), 0x27, 0x50000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300)=[{}], 0x1, 0x0) kernel console output (not intermixed with test programs): 18162][ T5979] EXT4-fs (loop2): 1 truncate cleaned up [ 101.468925][ T5979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.747886][ T31] audit: type=1800 audit(1786038952.381:3): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.33" name="file0" dev="overlay" ino=56 res=0 errno=0 [ 101.748433][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.861085][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.931020][ T5990] batadv_slave_1: entered promiscuous mode [ 102.055350][ T5999] loop2: detected capacity change from 0 to 16 [ 102.133727][ T5999] erofs (device loop2): mounted with root inode @ nid 36. [ 102.199888][ T5999] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 102.208834][ T5999] syz.2.34: attempt to access beyond end of device [ 102.208834][ T5999] loop2: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 102.232898][ T5758] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.246575][ T5999] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 102.258501][ T5999] erofs (device loop2): read error -117 @ 0 of nid 89 [ 102.265518][ T31] audit: type=1800 audit(1786038952.901:4): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.34" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 102.285655][ T5999] syz.2.34: attempt to access beyond end of device [ 102.285655][ T5999] loop2: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 102.304782][ T5999] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4100 [ 102.323839][ T5999] erofs (device loop2): read error -5 @ 1 of nid 89 [ 102.331132][ T5999] syz.2.34: attempt to access beyond end of device [ 102.331132][ T5999] loop2: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 102.344762][ T5999] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4100 [ 102.358412][ T5999] erofs (device loop2): read error -5 @ 1 of nid 89 [ 102.529641][ T5758] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 102.573104][ T5758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.664714][ T6014] loop0: detected capacity change from 0 to 512 [ 102.676085][ T6013] loop2: detected capacity change from 0 to 128 [ 102.710543][ T6009] bridge1: entered promiscuous mode [ 102.722125][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 102.723834][ T6014] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.776175][ T6009] team0: Port device bridge1 added [ 102.792223][ T6014] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.44: bad orphan inode 131083 [ 102.868466][ T6014] loop0: lost filesystem error report for type 5 error -117 [ 102.872488][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 102.886709][ C0] EXT4-fs (loop0): initial error at time 1786038953: ext4_orphan_get:1425 [ 102.895246][ C0] EXT4-fs (loop0): last error at time 1786038953: ext4_orphan_get:1425 [ 102.910132][ T6014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.976076][ T31] audit: type=1800 audit(1786038953.601:5): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.44" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 103.013277][ T6014] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.44: path /6/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 103.055867][ T6023] Illegal XDP return value 4294967294 on prog (id 5) dev syz_tun, expect packet loss! [ 103.126284][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.234128][ T6030] loop0: detected capacity change from 0 to 512 [ 103.261873][ T6030] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 103.281573][ T6030] UDF-fs: Scanning with blocksize 512 failed [ 103.306684][ T6030] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 103.324840][ T6030] UDF-fs: Scanning with blocksize 1024 failed [ 103.338608][ T6030] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 103.357443][ T6030] UDF-fs: Scanning with blocksize 2048 failed [ 103.369546][ T6032] binder: 6031:6032 unknown command 0 [ 103.378711][ T6032] binder: 6031:6032 ioctl c0306201 200000000080 returned -22 [ 103.394876][ T6030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 103.399297][ T6032] binder: BINDER_SET_CONTEXT_MGR already set [ 103.411797][ T6032] binder: 6031:6032 ioctl 4018620d 2000000002c0 returned -16 [ 103.417208][ T6030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.760907][ T5758] [drm] Initialized gud 1.0.0 for 6-1:1.0 on minor 1 [ 104.466378][ T5758] gud 6-1:1.0: [drm] Cannot find any crtc or sizes [ 104.478793][ T6039] binder: 6038:6039 ioctl c0306201 200000000080 returned -14 [ 104.528954][ T6039] binder: 6038:6039 ioctl c0306201 2000000003c0 returned -14 [ 104.600169][ T6047] binder: 6046:6047 ioctl c0306201 200000000080 returned -14 [ 104.647868][ T6047] binder: 6046:6047 ioctl c0306201 2000000003c0 returned -14 [ 104.681528][ T5792] gud 6-1:1.0: [drm] Cannot find any crtc or sizes [ 104.695497][ T6048] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 104.898124][ T5765] usb 6-1: USB disconnect, device number 2 [ 105.140264][ T6064] fuse: fd is not a fuse device [ 105.387240][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 105.401043][ T5792] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.465472][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 105.566669][ T5792] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 105.590905][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.634459][ T5792] usb 4-1: Product: syz [ 105.643602][ T5792] usb 4-1: Manufacturer: syz [ 105.655768][ T5792] usb 4-1: SerialNumber: syz [ 106.876848][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'. [ 107.524614][ T5765] usb 4-1: USB disconnect, device number 2 [ 108.053292][ T6121] loop5: detected capacity change from 0 to 32768 [ 108.062608][ T6121] btrfs: Deprecated parameter 'usebackuproot' [ 108.068689][ T6121] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 108.090135][ T6121] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.82 (6121) [ 108.126089][ T6121] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.136319][ T6121] BTRFS info (device loop5): using crc32c checksum algorithm [ 108.143875][ T6121] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 108.210334][ T69] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 108.224809][ T6121] BTRFS error (device loop5): failed to load root extent [ 108.232251][ T6121] BTRFS warning (device loop5): try to load backup roots slot 1 [ 108.242411][ T100] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 108.294235][ T6121] BTRFS warning (device loop5): couldn't read tree root [ 108.301223][ T6121] BTRFS warning (device loop5): try to load backup roots slot 2 [ 108.310267][ T69] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 108.372514][ T6121] BTRFS warning (device loop5): couldn't read tree root [ 108.379536][ T6121] BTRFS warning (device loop5): try to load backup roots slot 3 [ 108.400778][ T6121] BTRFS info (device loop5): rebuilding free space tree [ 108.438108][ T6121] BTRFS info (device loop5): disabling free space tree [ 108.445183][ T6121] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.454933][ T6121] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.488367][ T6121] BTRFS info (device loop5): checking UUID tree [ 108.496000][ T6121] BTRFS info (device loop5): enabling ssd optimizations [ 108.503012][ T6121] BTRFS info (device loop5): turning on async discard [ 108.509825][ T6121] BTRFS info (device loop5): enabling disk space caching [ 108.517018][ T6121] BTRFS info (device loop5): force clearing of disk cache [ 108.524202][ T6121] BTRFS info (device loop5): enabling auto defrag [ 108.530649][ T6121] BTRFS info (device loop5): trying to use backup root at mount time [ 108.538819][ T6121] BTRFS info (device loop5): use zstd compression, level 3 [ 108.886203][ T5623] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.061969][ T6168] loop2: detected capacity change from 0 to 8192 [ 110.119018][ T6168] FAT-fs (loop2): bogus logical sector size 3 [ 110.161429][ T6168] FAT-fs (loop2): Can't find a valid FAT filesystem [ 110.605575][ T6195] openvswitch: netlink: Flow actions attr not present in new flow. [ 111.373095][ T979] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.552935][ T979] usb 6-1: Using ep0 maxpacket: 32 [ 111.593425][ T979] usb 6-1: config 9 has an invalid interface number: 178 but max is 0 [ 111.664603][ T979] usb 6-1: config 9 has no interface number 0 [ 111.681666][ T979] usb 6-1: config 9 interface 178 has no altsetting 0 [ 111.704716][ T979] usb 6-1: New USB device found, idVendor=06a3, idProduct=f921, bcdDevice=89.69 [ 111.716154][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.735713][ T979] usb 6-1: Product: syz [ 111.761065][ T979] usb 6-1: Manufacturer: syz [ 111.785739][ T979] usb 6-1: SerialNumber: syz [ 111.971913][ T6223] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 112.003736][ T6223] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 112.053560][ T6218] loop3: detected capacity change from 0 to 4096 [ 112.216573][ T979] usb 6-1: USB disconnect, device number 3 [ 112.249313][ T6218] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 112.387415][ T6218] ntfs3(loop3): ino=1a, mi_enum_attr [ 112.403415][ T6218] ntfs3(loop3): ino=1a, mi_enum_attr [ 112.421219][ T6218] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 112.516008][ T31] audit: type=1800 audit(1786038963.151:6): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.112" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 112.668202][ T6217] ntfs3(loop3): ino=1e, "file1" attr_set_size_ex [ 113.090549][ T6247] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.148428][ T6246] loop3: detected capacity change from 0 to 8 [ 113.897534][ T6260] syz.0.125 uses obsolete (PF_INET,SOCK_PACKET) [ 113.957307][ T6263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.965600][ T6263] IPv6: NLM_F_CREATE should be set when creating new route [ 114.063917][ T6269] fuse: fd is not a fuse device [ 114.212648][ T6272] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 114.550939][ T6276] Zero length message leads to an empty skb [ 115.554629][ T31] audit: type=1326 audit(1786038966.141:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbd9e0d9 code=0x7ffc0000 [ 115.683579][ T31] audit: type=1326 audit(1786038966.141:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbd9e0d9 code=0x7ffc0000 [ 115.735685][ T31] audit: type=1326 audit(1786038966.141:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f26cbd9e0d9 code=0x7ffc0000 [ 115.824567][ T31] audit: type=1326 audit(1786038966.141:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbd9e0d9 code=0x7ffc0000 [ 115.864264][ T31] audit: type=1326 audit(1786038966.141:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbd9e0d9 code=0x7ffc0000 [ 115.953335][ T5765] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.997019][ T31] audit: type=1326 audit(1786038966.141:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbd9e0d9 code=0x7ffc0000 [ 116.061792][ T31] audit: type=1326 audit(1786038966.141:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f26cbd9e0d9 code=0x7ffc0000 [ 116.090043][ T31] audit: type=1326 audit(1786038966.141:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f26cbd9de42 code=0x7ffc0000 [ 116.164988][ T6295] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.171350][ T31] audit: type=1326 audit(1786038966.141:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.4.135" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26cbd5e90e code=0x7ffc0000 [ 116.217217][ T5765] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 116.240302][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.289384][ T5765] usb 2-1: Product: syz [ 116.305579][ T5765] usb 2-1: Manufacturer: syz [ 116.326627][ T5765] usb 2-1: SerialNumber: syz [ 116.788133][ T6298] fuse: fd is not a fuse device [ 117.420786][ T5765] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 117.546198][ T6304] loop3: detected capacity change from 0 to 32768 [ 117.602836][ T5765] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 117.605483][ T6304] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 117.622157][ T6304] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 117.661046][ T6304] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 117.677500][ T979] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 117.940014][ T979] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 118.630446][ T979] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 690ms [ 118.668036][ T979] gfs2: fsid=syz:syz.0: jid=0: Done [ 118.692238][ T6304] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 119.153482][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 119.153503][ T31] audit: type=1800 audit(1786038969.771:30): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.142" name="file1" dev="loop3" ino=9378 res=0 errno=0 [ 119.311280][ T5765] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 119.344510][ T5765] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 119.358538][ T5765] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 119.415534][ T5765] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 119.450964][ T5765] usb 2-1: USB disconnect, device number 3 [ 121.184005][ T5765] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 121.199994][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 121.247736][ T6346] fuse: fd is not a fuse device [ 121.392855][ T5765] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.428930][ T5765] usb 3-1: no configurations [ 121.449988][ T5765] usb 3-1: can't read configurations, error -22 [ 122.059181][ T6356] mount: server 127.0.0.1 not responding, timed out [ 122.135242][ T6361] configfs-gadget.g1 gadget.0: HOST MAC 32:db:62:4e:a2:d2 [ 122.150765][ T6361] configfs-gadget.g1 gadget.0: MAC fe:67:55:42:09:05 [ 122.346083][ T6368] fuse: fd is not a fuse device [ 122.402512][ T5339] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.584659][ T5339] usb 1-1: Dual-Role OTG device on HNP port [ 122.623292][ T5339] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 122.656075][ T5339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.130563][ T5339] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 124.180367][ T5339] rndis_host 1-1:1.2 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 32:db:62:4e:a2:d2 [ 124.883563][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 125.014202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.074182][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 125.095697][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 125.129006][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.241103][ T9] i2c-tiny-usb 3-1:1.0: version 1.00 found at bus 003 address 004 [ 126.109833][ T6443] syzkaller0: entered promiscuous mode [ 126.138204][ T6443] syzkaller0: entered allmulticast mode [ 126.264875][ T6439] sd 0:0:1:0: PR command failed: 1026 [ 126.303860][ T6447] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 126.331404][ T6439] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 126.398231][ T6439] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 126.625732][ T9] (null): failure reading functionality [ 126.668128][ T9] i2c i2c-1: failure reading functionality [ 126.731800][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 126.752227][ T9] usb 3-1: USB disconnect, device number 4 [ 126.812671][ T5758] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.967203][ T6465] mtrr: base(0x20000000) is not aligned on a size(0x40000000) boundary [ 126.988600][ T5758] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 127.017100][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.070893][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.106220][ T5758] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.141646][ T5758] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.190894][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.244049][ T5758] usb 4-1: config 0 descriptor?? [ 127.407322][ T6477] loop1: detected capacity change from 0 to 128 [ 127.752861][ T5758] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 128.974755][ T5758] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 129.068309][ T5758] usb 4-1: USB disconnect, device number 3 [ 129.343352][ T6494] fido_id[6494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 129.430137][ T6502] Bluetooth: (null): Invalid header checksum [ 129.513047][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 130.240610][ T6526] loop2: detected capacity change from 0 to 512 [ 130.318995][ T6526] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 130.900074][ T6545] CIFS: Attempting to mount //127.0.0.1/share [ 130.980706][ T6547] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 131.013421][ T6545] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 131.022951][ T6545] CIFS: VFS: cifs_mount failed w/return code = -11 [ 131.449434][ T6572] veth0: entered allmulticast mode [ 131.968490][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 132.095443][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.105394][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.393433][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 133.432467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.589682][ T6607] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 133.629198][ T6607] netlink: 40 bytes leftover after parsing attributes in process `syz.3.227'. [ 133.673375][ T6607] dummy0: entered promiscuous mode [ 133.739889][ T6606] dummy0: left promiscuous mode [ 133.847388][ T6606] bridge1: port 1(dummy0) entered blocking state [ 134.265016][ T6606] bridge1: port 1(dummy0) entered disabled state [ 134.311071][ T6606] dummy0: entered allmulticast mode [ 134.370668][ T6606] dummy0: entered promiscuous mode [ 134.440416][ T6623] loop1: detected capacity change from 0 to 2048 [ 134.539649][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.638200][ C0] Unknown status report in ack skb [ 135.134621][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 136.204234][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.422273][ T6657] loop2: detected capacity change from 0 to 256 [ 138.280924][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 139.088769][ T6660] loop3: detected capacity change from 0 to 32768 [ 139.266321][ T6660] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.481867][ T6660] XFS (loop3): Ending clean mount [ 139.521809][ T6705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.539560][ T6705] block device autoloading is deprecated and will be removed. [ 139.555605][ T5631] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.234373][ T6723] loop2: detected capacity change from 0 to 32768 [ 140.260571][ T6723] (syz.2.260,6723,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.274127][ T6723] (syz.2.260,6723,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.337339][ T6723] JBD2: Ignoring recovery information on journal [ 140.393960][ T6723] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 140.512447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.809018][ T5628] ocfs2: Unmounting device (7,2) on (node local) [ 140.913647][ T6724] lo: entered allmulticast mode [ 141.003077][ T6727] lo: left allmulticast mode [ 141.064539][ T6736] lo: entered allmulticast mode [ 141.525216][ T6749] loop2: detected capacity change from 0 to 40427 [ 141.550441][ T6749] F2FS-fs (loop2): invalid crc value [ 141.681837][ T6749] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 141.697034][ T6749] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 141.705947][ T6749] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 141.717057][ T6749] F2FS-fs (loop2): Start checkpoint disabled! [ 141.734706][ T6749] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 141.742517][ T6749] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 141.880629][ T6749] syz.2.263: attempt to access beyond end of device [ 141.880629][ T6749] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 141.908826][ T6749] syz.2.263: attempt to access beyond end of device [ 141.908826][ T6749] loop2: rw=2049, sector=45096, nr_sectors = 56 limit=40427 [ 141.924072][ T6749] syz.2.263: attempt to access beyond end of device [ 141.924072][ T6749] loop2: rw=2049, sector=77920, nr_sectors = 40 limit=40427 [ 141.956141][ T6749] syz.2.263: attempt to access beyond end of device [ 141.956141][ T6749] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 141.975136][ T6749] syz.2.263: attempt to access beyond end of device [ 141.975136][ T6749] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 141.989766][ T6749] syz.2.263: attempt to access beyond end of device [ 141.989766][ T6749] loop2: rw=2049, sector=77832, nr_sectors = 8 limit=40427 [ 142.003925][ T6749] syz.2.263: attempt to access beyond end of device [ 142.003925][ T6749] loop2: rw=2049, sector=77840, nr_sectors = 8 limit=40427 [ 142.018095][ T6749] syz.2.263: attempt to access beyond end of device [ 142.018095][ T6749] loop2: rw=2049, sector=77848, nr_sectors = 8 limit=40427 [ 142.032311][ T6749] syz.2.263: attempt to access beyond end of device [ 142.032311][ T6749] loop2: rw=2049, sector=77856, nr_sectors = 8 limit=40427 [ 142.046604][ T6749] syz.2.263: attempt to access beyond end of device [ 142.046604][ T6749] loop2: rw=2049, sector=77864, nr_sectors = 8 limit=40427 [ 142.162459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 142.291416][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 143.223372][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 143.223406][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 143.223421][ T5930] Workqueue: writeback wb_workfn (flush-7:2) [ 143.223458][ T5930] Call Trace: [ 143.223467][ T5930] [ 143.223477][ T5930] dump_stack_lvl+0xe8/0x150 [ 143.223514][ T5930] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 143.223561][ T5930] f2fs_write_end_io+0x124b/0x1710 [ 143.223618][ T5930] __submit_merged_bio+0x258/0x6a0 [ 143.223648][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.223676][ T5930] ? rcu_is_watching+0x15/0xb0 [ 143.223720][ T5930] __submit_merged_write_cond+0x3c9/0x4e0 [ 143.223772][ T5930] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 143.223828][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.223866][ T5930] f2fs_write_data_pages+0x2a27/0x36f0 [ 143.223938][ T5930] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.223983][ T5930] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 143.224047][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.224084][ T5930] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 143.224131][ T5930] ? __lock_acquire+0x683/0x2cf0 [ 143.224184][ T5930] ? __lock_acquire+0x683/0x2cf0 [ 143.224217][ T5930] ? __lock_acquire+0x683/0x2cf0 [ 143.224249][ T5930] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.224280][ T5930] do_writepages+0x338/0x560 [ 143.224321][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.224349][ T5930] ? reacquire_held_locks+0x104/0x190 [ 143.224386][ T5930] ? writeback_sb_inodes+0x450/0x1b00 [ 143.224425][ T5930] __writeback_single_inode+0x12e/0xf90 [ 143.224466][ T5930] writeback_sb_inodes+0x9de/0x1b00 [ 143.224495][ T5930] ? __lock_acquire+0x683/0x2cf0 [ 143.224535][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.224572][ T5930] ? do_raw_spin_unlock+0xf5/0x210 [ 143.224606][ T5930] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 143.224690][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.224718][ T5930] ? rcu_is_watching+0x15/0xb0 [ 143.224754][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.224782][ T5930] ? queue_io+0x2d3/0x470 [ 143.224817][ T5930] wb_writeback+0x41c/0xad0 [ 143.224850][ T5930] ? queue_io+0x251/0x470 [ 143.224887][ T5930] ? __pfx_wb_writeback+0x10/0x10 [ 143.224914][ T5930] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.224960][ T5930] wb_workfn+0x431/0x10f0 [ 143.225005][ T5930] ? __pfx_wb_workfn+0x10/0x10 [ 143.225029][ T5930] ? irqentry_exit+0x218/0x8f0 [ 143.225055][ T5930] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.225078][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225106][ T5930] ? irqentry_exit+0x218/0x8f0 [ 143.225129][ T5930] ? trace_irq_disable+0x3b/0x140 [ 143.225166][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225193][ T5930] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.225223][ T5930] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.225252][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225284][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225321][ T5930] ? rcu_is_watching+0x15/0xb0 [ 143.225356][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225388][ T5930] ? process_scheduled_works+0xa20/0x14e0 [ 143.225415][ T5930] process_scheduled_works+0xa8e/0x14e0 [ 143.225475][ T5930] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.225509][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225537][ T5930] ? assign_work+0x3cf/0x5d0 [ 143.225569][ T5930] worker_thread+0xa47/0xfb0 [ 143.225600][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225645][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225673][ T5930] ? __kthread_parkme+0x71/0x1f0 [ 143.225716][ T5930] kthread+0x388/0x470 [ 143.225752][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 143.225777][ T5930] ? __pfx_kthread+0x10/0x10 [ 143.225812][ T5930] ret_from_fork+0x514/0xb70 [ 143.225850][ T5930] ? __pfx_ret_from_fork+0x10/0x10 [ 143.225884][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.225913][ T5930] ? __switch_to+0xc89/0x1420 [ 143.225945][ T5930] ? __pfx_kthread+0x10/0x10 [ 143.225981][ T5930] ret_from_fork_asm+0x1a/0x30 [ 143.226036][ T5930] [ 143.622874][ T5930] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 143.652455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.662453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.752448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 143.772441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.962448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.073384][ T6771] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.179463][ T6816] loop5: detected capacity change from 0 to 2048 [ 145.214775][ T6825] fuse: fd is not a fuse device [ 145.511006][ T6830] loop1: detected capacity change from 0 to 512 [ 145.567241][ T6830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.709932][ T6830] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.926853][ T6830] EXT4-fs (loop1): 1 truncate cleaned up [ 145.972883][ T6830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.138908][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 147.136570][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.229895][ T6886] loop1: detected capacity change from 0 to 2048 [ 148.261872][ T6886] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 148.348486][ T6886] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 148.368792][ T6886] UDF-fs: Scanning with blocksize 512 failed [ 148.422644][ T6886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.441267][ T6889] overlayfs: failed to clone upperpath [ 148.718003][ T31] audit: type=1800 audit(1786038999.351:31): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.291" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 148.878509][ T6903] MTD: Couldn't look up './dev/mtdblock0': -2 [ 150.077941][ T6914] warning: `syz.0.299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.138771][ T6939] overlayfs: failed to clone upperpath [ 151.992244][ T6962] loop3: detected capacity change from 0 to 128 [ 152.330728][ T31] audit: type=1800 audit(1786039002.961:32): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.316" name="id" dev="configfs" ino=12348 res=0 errno=0 [ 152.367425][ T5758] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.554039][ T5758] usb 3-1: Using ep0 maxpacket: 16 [ 152.582279][ T5758] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.626250][ T5758] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.675654][ T5758] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 152.726141][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.775331][ T5758] usb 3-1: SerialNumber: syz [ 153.368850][ T5758] usb 3-1: 0:2 : does not exist [ 153.845989][ T6993] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 154.203405][ T5758] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 154.624389][ T5758] usb 3-1: USB disconnect, device number 5 [ 155.131589][ T7009] syz_tun: entered allmulticast mode [ 155.160789][ T7009] lo: entered allmulticast mode [ 155.260188][ T7007] syz_tun: left allmulticast mode [ 156.924076][ T7046] fuse: fd is not a fuse device [ 156.960248][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.969697][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.473721][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.528592][ T7029] loop3: detected capacity change from 0 to 32768 [ 157.561730][ T7036] loop5: detected capacity change from 0 to 32768 [ 157.630375][ T7036] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.336 (7036) [ 157.890232][ T7036] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 157.935852][ T7036] BTRFS info (device loop5): using blake2b checksum algorithm [ 158.198105][ T7036] BTRFS info (device loop5): enabling ssd optimizations [ 158.225170][ T7036] BTRFS info (device loop5): turning on async discard [ 158.237258][ T7036] BTRFS info (device loop5): enabling free space tree [ 158.245235][ T7036] BTRFS info (device loop5): use zstd compression, level 3 [ 158.312545][ T6795] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.364355][ T6795] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.426103][ T6795] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.480982][ T6795] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.506610][ T31] audit: type=1800 audit(1786039009.121:33): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.336" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 158.629398][ T31] audit: type=1800 audit(1786039009.261:34): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.345" name="/" dev="fuse" ino=1 res=0 errno=0 [ 159.165837][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.279579][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.318725][ T7127] loop3: detected capacity change from 0 to 1024 [ 160.676796][ T31] audit: type=1326 audit(1786039011.311:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.358" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e259e0d9 code=0x7fc00000 [ 160.769204][ T31] audit: type=1326 audit(1786039011.401:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.358" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f60e259e0d9 code=0x7fc00000 [ 160.872342][ T31] audit: type=1326 audit(1786039011.471:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.358" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60e2597e57 code=0x7fc00000 [ 160.981986][ T31] audit: type=1326 audit(1786039011.471:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.358" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60e253f459 code=0x7fc00000 [ 161.033402][ T31] audit: type=1326 audit(1786039011.471:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.358" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f60e253f51d code=0x7fc00000 [ 161.133442][ T31] audit: type=1326 audit(1786039011.481:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.358" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f60e259e0d9 code=0x7fc00000 [ 161.449477][ T31] audit: type=1800 audit(1786039012.081:41): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.360" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 161.681317][ T5623] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 161.923117][ T7154] syzkaller0: entered promiscuous mode [ 161.940542][ T7154] syzkaller0: entered allmulticast mode [ 161.985773][ T7154] tipc: Started in network mode [ 161.999706][ T7154] tipc: Node identity 92c2a269f125, cluster identity 4711 [ 162.052131][ T7154] tipc: Enabled bearer , priority 0 [ 162.088431][ T7152] tipc: Resetting bearer [ 162.094456][ T7161] loop1: detected capacity change from 0 to 512 [ 162.097687][ T7161] EXT4-fs: Ignoring removed bh option [ 162.203670][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.217637][ T7152] tipc: Disabling bearer [ 162.225209][ T7161] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.518714][ T7171] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.370: lblock 23 mapped to illegal pblock 18 (length 1) [ 162.562209][ T7171] EXT4-fs (loop1): Remounting filesystem read-only [ 162.689133][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.862765][ T5758] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.053819][ T5758] usb 4-1: Using ep0 maxpacket: 16 [ 163.120836][ T5758] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 163.121028][ T5758] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.289676][ T5758] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.428641][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.466150][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.377'. [ 163.550312][ T5758] usb 4-1: Product: syz [ 163.611149][ T5758] usb 4-1: Manufacturer: syz [ 163.692608][ T5758] usb 4-1: SerialNumber: syz [ 163.750856][ T5758] usb 4-1: 0:2 : does not exist [ 163.975856][ T5758] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 164.182550][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.191416][ T5758] usb 4-1: USB disconnect, device number 4 [ 165.137744][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.202551][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 165.211462][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 165.221233][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.279770][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.517611][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.528672][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.544780][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.556786][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.553413][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 166.579987][ T24] usbtmc 3-1:16.0: can't read capabilities [ 167.387782][ T24] usb 3-1: USB disconnect, device number 6 [ 169.257854][ T7270] loop3: detected capacity change from 0 to 2048 [ 169.265586][ T7270] EXT4-fs: Ignoring removed i_version option [ 169.368654][ T7270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.380946][ T7270] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.512436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 169.709071][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.793359][ T7252] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 169.977996][ T7282] Bluetooth: MGMT ver 1.23 [ 170.021344][ T7283] mmap: syz.3.400 (7283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.001790][ T979] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 172.250558][ T31] audit: type=1800 audit(1786039022.881:42): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.404" name="ipv4_address" dev="configfs" ino=13565 res=0 errno=0 [ 172.304560][ T7300] loop3: detected capacity change from 0 to 256 [ 172.306126][ T31] audit: type=1800 audit(1786039022.931:43): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.404" name="ipv4_port" dev="configfs" ino=13566 res=0 errno=0 [ 172.338987][ T979] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 172.352716][ T31] audit: type=1800 audit(1786039022.981:44): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.404" name="num" dev="configfs" ino=13567 res=0 errno=0 [ 172.375949][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.392554][ T7300] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.399232][ T979] usb 3-1: Product: syz [ 172.971398][ T7303] Bluetooth: MGMT ver 1.23 [ 173.050241][ T979] usb 3-1: Manufacturer: syz [ 173.056583][ T979] usb 3-1: SerialNumber: syz [ 173.124814][ T979] usb 3-1: can't set config #1, error -71 [ 173.178886][ T979] usb 3-1: USB disconnect, device number 7 [ 173.224109][ T31] audit: type=1800 audit(1786039023.861:45): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 173.258641][ T7307] loop5: detected capacity change from 0 to 128 [ 173.304720][ T7307] FAT-fs (loop5): data area starts beyond volume (33 > 0) [ 173.337252][ T7307] FAT-fs (loop5): Can't find a valid FAT filesystem [ 179.118534][ T7359] syz.1.423 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 179.342394][ T7359] CPU: 1 UID: 0 PID: 7359 Comm: syz.1.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.342433][ T7359] Tainted: [L]=SOFTLOCKUP [ 179.342442][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.342456][ T7359] Call Trace: [ 179.342466][ T7359] [ 179.342476][ T7359] dump_stack_lvl+0xe8/0x150 [ 179.342520][ T7359] dump_header+0xd3/0x4b0 [ 179.342555][ T7359] oom_kill_process+0x3ab/0x970 [ 179.342586][ T7359] out_of_memory+0x1064/0x1480 [ 179.342622][ T7359] ? try_charge_memcg+0xbca/0x1590 [ 179.342665][ T7359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.342708][ T7359] ? __pfx_out_of_memory+0x10/0x10 [ 179.342745][ T7359] ? do_raw_spin_unlock+0xf5/0x210 [ 179.342787][ T7359] try_charge_memcg+0xc74/0x1590 [ 179.342823][ T7359] ? __kmalloc_noprof+0x1ad/0x720 [ 179.342866][ T7359] ? __pfx_try_charge_memcg+0x10/0x10 [ 179.342907][ T7359] ? percpu_ref_tryget+0x15/0x180 [ 179.342944][ T7359] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 179.342978][ T7359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.343010][ T7359] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 179.343040][ T7359] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 179.343073][ T7359] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 179.343125][ T7359] ? __kmalloc_cache_noprof+0x150/0x660 [ 179.343156][ T7359] __kmalloc_cache_noprof+0x372/0x660 [ 179.343187][ T7359] ? __kmalloc_cache_noprof+0x150/0x660 [ 179.343217][ T7359] ? landlock_merge_ruleset+0x1a3/0x960 [ 179.343246][ T7359] ? landlock_merge_ruleset+0x1a3/0x960 [ 179.343284][ T7359] landlock_merge_ruleset+0x1a3/0x960 [ 179.343315][ T7359] ? prepare_creds+0x591/0x820 [ 179.343358][ T7359] __se_sys_landlock_restrict_self+0x2b6/0x840 [ 179.343396][ T7359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.343423][ T7359] do_syscall_64+0x174/0x580 [ 179.343448][ T7359] ? trace_irq_disable+0x3b/0x140 [ 179.343484][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.343509][ T7359] RIP: 0033:0x7ff51e79e0d9 [ 179.343530][ T7359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.343550][ T7359] RSP: 002b:00007ff51f714028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 179.343575][ T7359] RAX: ffffffffffffffda RBX: 00007ff51ea25fa0 RCX: 00007ff51e79e0d9 [ 179.343593][ T7359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 179.343608][ T7359] RBP: 00007ff51e835024 R08: 0000000000000000 R09: 0000000000000000 [ 179.343623][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.343644][ T7359] R13: 00007ff51ea26038 R14: 00007ff51ea25fa0 R15: 00007fff2175d348 [ 179.343683][ T7359] [ 179.922469][ T7359] memory: usage 8kB, limit 8kB, failcnt 21 [ 180.016770][ T7359] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 180.034922][ T7373] netlink: 'syz.3.426': attribute type 2 has an invalid length. [ 180.118144][ T7368] loop2: detected capacity change from 0 to 1024 [ 180.128231][ T7373] netlink: 'syz.3.426': attribute type 3 has an invalid length. [ 180.143260][ T7359] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 180.151043][ T7368] EXT4-fs: quotafile must be on filesystem root [ 180.180771][ T7359] Memory cgroup stats for /syz1/test: [ 180.181149][ T7359] cache 0 [ 180.190393][ T7373] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.426'. [ 180.227928][ T7359] rss 0 [ 180.237394][ T7359] rss_huge 0 [ 180.257560][ T7359] shmem 0 [ 180.272289][ T7359] mapped_file 0 [ 180.294915][ T7359] dirty 0 [ 180.306199][ T7359] writeback 0 [ 180.319361][ T7359] workingset_refault_anon 0 [ 180.340949][ T7359] workingset_refault_file 0 [ 180.377379][ T7359] swap 0 [ 180.400665][ T7359] swapcached 0 [ 180.432267][ T7359] pgpgin 0 [ 180.451322][ T7359] pgpgout 0 [ 180.472518][ T7359] pgfault 0 [ 180.493697][ T7359] pgmajfault 0 [ 180.527314][ T7359] inactive_anon 0 [ 180.552356][ T7359] active_anon 0 [ 180.585562][ T7359] inactive_file 0 [ 180.618774][ T7359] active_file 0 [ 180.639376][ T7359] unevictable 0 [ 180.669814][ T7359] hierarchical_memory_limit 8192 [ 180.708991][ T7359] hierarchical_memsw_limit 9223372036854771712 [ 180.743233][ T7359] total_cache 0 [ 180.765980][ T7359] total_rss 0 [ 180.790852][ T7359] total_rss_huge 0 [ 180.817745][ T7359] total_shmem 0 [ 180.836588][ T7359] total_mapped_file 0 [ 180.880743][ T7359] total_dirty 0 [ 180.947369][ T7359] total_writeback 0 [ 180.989744][ T7359] total_workingset_refault_anon 0 [ 181.070683][ T7359] total_workingset_refault_file 0 [ 181.168289][ T7359] total_swap 0 [ 181.247540][ T7359] total_swapcached 0 [ 181.312128][ T7359] total_pgpgin 0 [ 181.370208][ T7359] total_pgpgout 0 [ 181.451152][ T7359] total_pgfault 0 [ 181.519210][ T7359] total_pgmajfault 0 [ 181.583576][ T7359] total_inactive_anon 0 [ 181.631824][ T7359] total_active_anon 0 [ 181.668840][ T7359] total_inactive_file 0 [ 181.711284][ T7359] total_active_file 0 [ 181.741646][ T7359] total_unevictable 0 [ 181.787831][ T7359] anon_cost 0 [ 181.821698][ T7359] file_cost 0 [ 181.848155][ T7359] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.423,pid=7358,uid=0 [ 181.931134][ T7359] Memory cgroup out of memory: Killed process 7359 (syz.1.423) total-vm:102252kB, anon-rss:1432kB, file-rss:22996kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 182.008746][ T7408] overlayfs: failed to clone lowerpath [ 182.227052][ T7410] loop2: detected capacity change from 0 to 128 [ 182.303349][ T7413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.348237][ T7410] loop2: detected capacity change from 0 to 256 [ 182.384412][ T7410] exfat: Unknown parameter 'ZZke?''-?;Qh޸?;' [ 182.423185][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 182.444741][ T7413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.547085][ T7413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.892897][ T7426] syzkaller0: entered promiscuous mode [ 182.921619][ T7426] syzkaller0: entered allmulticast mode [ 184.380240][ T7443] capability: warning: `syz.3.445' uses deprecated v2 capabilities in a way that may be insecure [ 184.582798][ T7415] loop1: detected capacity change from 0 to 32768 [ 184.660328][ T7415] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.439 (7415) [ 184.777667][ T7415] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 184.833716][ T7415] BTRFS info (device loop1): using crc32c checksum algorithm [ 184.980221][ T7415] BTRFS info (device loop1): enabling ssd optimizations [ 185.043008][ T7415] BTRFS info (device loop1): turning on async discard [ 185.086073][ T7415] BTRFS info (device loop1): enabling free space tree [ 185.128891][ T7450] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 185.317401][ T7472] syzkaller0: entered promiscuous mode [ 185.425713][ T7472] syzkaller0: entered allmulticast mode [ 185.667690][ T7490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.708900][ T31] audit: type=1800 audit(1786039036.341:46): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.439" name="file1" dev="loop1" ino=271 res=0 errno=0 [ 185.795688][ T7490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.872038][ T7490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.023668][ T5617] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 186.301256][ T7505] fuse: fd is not a fuse device [ 186.455400][ T7507] syzkaller0: entered promiscuous mode [ 186.471234][ T7507] syzkaller0: entered allmulticast mode [ 188.474550][ T7539] syzkaller0: entered promiscuous mode [ 188.494841][ T7539] syzkaller0: entered allmulticast mode [ 189.883708][ T5758] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 189.946829][ T5758] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.875577][ T5758] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.011208][ T7600] loop5: detected capacity change from 0 to 2048 [ 193.075678][ T5758] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.126029][ T7600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.154728][ T5758] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.219832][ T5758] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 193.267381][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.324183][ T5758] usb 4-1: Product: syz [ 193.336975][ T5758] usb 4-1: Manufacturer: syz [ 193.348620][ T5758] usb 4-1: SerialNumber: syz [ 193.411698][ T5758] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 193.477144][ T5758] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 193.536583][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.551961][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.559733][ T5758] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 193.630318][ T5339] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.828894][ T5339] usb 2-1: Using ep0 maxpacket: 8 [ 193.857765][ T5339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.871228][ T7600] syz.5.485 (7600): drop_caches: 2 [ 193.887329][ T5339] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.955177][ T5339] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 193.985999][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.018709][ T5339] usb 2-1: Product: syz [ 194.034129][ T5339] usb 2-1: Manufacturer: syz [ 194.052607][ T5339] usb 2-1: SerialNumber: syz [ 194.062011][ T7625] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 194.329026][ T5339] usb 2-1: 1:1: invalid format type 0x1b02 is detected, processed as PCM [ 194.357937][ T5339] usb 2-1: 1:1 : sample bitwidth 199 in over sample bytes 2 [ 194.382536][ T5339] usb 2-1: 1:1: All rates were zero [ 194.395851][ T5339] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 194.408453][ T7634] syzkaller0: entered promiscuous mode [ 194.428136][ T7634] syzkaller0: entered allmulticast mode [ 194.436061][ T7637] syz_tun: entered allmulticast mode [ 194.466256][ T5758] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 194.533890][ T5339] usb 2-1: USB disconnect, device number 4 [ 194.555344][ T7641] syz_tun: left allmulticast mode [ 194.635794][ T5758] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.662337][ T5758] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 194.686775][ T5758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.946063][ T5758] usb 6-1: config 0 descriptor?? [ 194.968940][ T5758] pwc: Askey VC010 type 2 USB webcam detected. [ 195.408184][ T7589] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 195.860574][ T5758] pwc: recv_control_msg error -32 req 02 val 2b00 [ 195.890309][ T5758] pwc: recv_control_msg error -32 req 02 val 2700 [ 195.903881][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.961068][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.961915][ T979] usb 4-1: USB disconnect, device number 5 [ 196.078349][ T979] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 196.111160][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.492'. [ 196.223570][ T979] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 196.245672][ T7659] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 196.293606][ T979] ti_usb_3410_5052 4-1:2.0: device disconnected [ 196.309291][ T7659] CIFS: Attempting to mount //127.0.0.1/share [ 196.358630][ T5758] pwc: recv_control_msg error -71 req 02 val 2c00 [ 196.366353][ T5758] pwc: recv_control_msg error -71 req 04 val 1000 [ 196.381286][ T5758] pwc: recv_control_msg error -71 req 04 val 1300 [ 196.414379][ T5758] pwc: recv_control_msg error -71 req 04 val 1400 [ 196.420998][ T7659] CIFS: VFS: Error connecting to socket. Aborting operation. [ 196.436802][ T5758] pwc: recv_control_msg error -71 req 02 val 2000 [ 196.445398][ T7659] CIFS: VFS: cifs_mount failed w/return code = -4 [ 196.457495][ T5758] pwc: recv_control_msg error -71 req 02 val 2100 [ 196.467030][ T7662] fuse: fd is not a fuse device [ 196.481538][ T5758] pwc: recv_control_msg error -71 req 04 val 1500 [ 196.570058][ T5758] pwc: recv_control_msg error -71 req 02 val 2500 [ 196.685708][ T5758] pwc: recv_control_msg error -71 req 02 val 2400 [ 196.771816][ T5758] pwc: recv_control_msg error -71 req 02 val 2600 [ 196.858908][ T5758] pwc: recv_control_msg error -71 req 02 val 2900 [ 196.990898][ T5758] pwc: recv_control_msg error -71 req 02 val 2800 [ 197.104411][ T5758] pwc: recv_control_msg error -71 req 04 val 1100 [ 197.394543][ T5758] pwc: recv_control_msg error -71 req 04 val 1200 [ 198.209063][ T5758] pwc: Registered as video103. [ 198.256793][ T5758] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 198.699556][ T5758] usb 6-1: USB disconnect, device number 4 [ 199.524039][ T7676] syzkaller0: entered promiscuous mode [ 199.548090][ T7676] syzkaller0: entered allmulticast mode [ 199.749269][ T7689] fuse: fd is not a fuse device [ 199.984032][ T31] audit: type=1326 audit(2000000011.769:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.2.510" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60e259e0d9 code=0x0 [ 200.211681][ T7699] loop3: detected capacity change from 0 to 16 [ 200.267167][ T7699] erofs (device loop3): invalid ishare xattr prefix id 0 [ 200.547934][ T7710] loop5: detected capacity change from 0 to 256 [ 200.583680][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 200.766213][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.502654][ T5757] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 201.714573][ T5757] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 201.752074][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.778722][ T5757] usb 6-1: Product: syz [ 201.798274][ T5757] usb 6-1: Manufacturer: syz [ 201.812076][ T5757] usb 6-1: SerialNumber: syz [ 202.063354][ T7736] trusted_key: encrypted_key: insufficient parameters specified [ 203.299232][ T5757] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 203.311620][ T5757] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 204.451369][ T7758] geneve1: entered promiscuous mode [ 204.486799][ T7758] macsec1: entered allmulticast mode [ 204.515053][ T7758] geneve1: entered allmulticast mode [ 204.563013][ T7758] geneve1: left allmulticast mode [ 204.588089][ T7758] geneve1: left promiscuous mode [ 204.669537][ T7760] fuse: fd is not a fuse device [ 205.636031][ T5757] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 205.690674][ T5757] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 205.735757][ T5757] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 205.757493][ T5757] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 205.768149][ T5757] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 206.786366][ T5757] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 206.827241][ T5757] usb 6-1: USB disconnect, device number 5 [ 208.107336][ T7785] MTDSB: Device #1 doesn't appear to exist [ 208.107336][ T7785] [ 208.135411][ T7787] loop3: detected capacity change from 0 to 1024 [ 208.167978][ T7787] EXT4-fs: Ignoring removed bh option [ 208.195072][ T7787] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 208.274545][ T7787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.420355][ T7783] loop5: detected capacity change from 0 to 8192 [ 208.589934][ T31] audit: type=1804 audit(2000000020.369:48): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.539" name="/newroot/73/file0/bus" dev="loop5" ino=1048614 res=1 errno=0 [ 208.704182][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.004196][ T5757] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 209.214668][ T5757] usb 2-1: Using ep0 maxpacket: 16 [ 209.237263][ T5757] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 209.273595][ T5757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.303869][ T5757] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.324418][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.342818][ T5757] usb 2-1: Product: syz [ 209.354122][ T5757] usb 2-1: Manufacturer: syz [ 209.364311][ T5757] usb 2-1: SerialNumber: syz [ 209.406761][ T5757] usb 2-1: 0:2 : does not exist [ 209.622646][ T5757] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 209.849720][ T5757] usb 2-1: USB disconnect, device number 5 [ 210.012801][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.225111][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 210.268687][ T7812] bond0: option arp_validate: invalid value (181) [ 210.686052][ T7821] binder_alloc: 7819: binder_alloc_buf, no vma [ 210.979022][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 210.990356][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 210.997059][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 211.004660][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 211.011173][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 211.972831][ T5758] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 212.016017][ T7842] fuse: fd is not a fuse device [ 212.361666][ T7847] SET target dimension over the limit! [ 213.002525][ T5758] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 213.034031][ T5758] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 213.111144][ T5758] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.162236][ T5758] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.222445][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.283752][ T5758] usb 2-1: Product: syz [ 213.936884][ T5758] usb 2-1: Manufacturer: syz [ 214.209239][ T5758] usb 2-1: SerialNumber: syz [ 214.252405][ T5758] usb 2-1: config 0 descriptor?? [ 214.341716][ T5758] usb 2-1: selecting invalid altsetting 0 [ 214.804035][ T5619] Bluetooth: hci5: link tx timeout [ 214.811917][ T5619] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.825845][ T51] Bluetooth: hci5: link tx timeout [ 214.831810][ T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.854786][ T51] Bluetooth: hci5: link tx timeout [ 214.870021][ T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.905902][ T51] Bluetooth: hci5: link tx timeout [ 214.934956][ T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.967611][ T51] Bluetooth: hci5: link tx timeout [ 215.004625][ T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.581662][ T5758] usb 2-1: USB disconnect, device number 6 [ 216.894852][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 217.363870][ T5772] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 217.469633][ T7896] loop3: detected capacity change from 0 to 128 [ 217.516452][ T7896] vfat: Bad value for 'time_offset' [ 217.562468][ T5772] usb 2-1: Using ep0 maxpacket: 8 [ 217.589283][ T5772] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 217.627128][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.661564][ T5772] usb 2-1: Product: syz [ 217.672144][ T5772] usb 2-1: Manufacturer: syz [ 217.685800][ T5772] usb 2-1: SerialNumber: syz [ 218.740735][ T7909] dvmrp0: entered allmulticast mode [ 218.745073][ T5772] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 218.756114][ T5772] usb 2-1: unit 3 not found! [ 218.907399][ T5772] usb 2-1: USB disconnect, device number 7 [ 219.656876][ T31] audit: type=1800 audit(2000000030.979:49): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.583" name="ipv4_address" dev="configfs" ino=14248 res=0 errno=0 [ 219.981321][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.044743][ T31] audit: type=1800 audit(2000000031.059:50): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.583" name="dev" dev="configfs" ino=14592 res=0 errno=0 [ 220.350467][ T7927] CIFS: Attempting to mount //::1/share [ 220.498198][ T7927] CIFS: VFS: Error connecting to socket. Aborting operation. [ 220.523211][ T7927] CIFS: VFS: cifs_mount failed w/return code = -4 [ 220.871298][ T7944] syzkaller0: entered promiscuous mode [ 220.894734][ T7944] syzkaller0: entered allmulticast mode [ 222.170690][ T7985] loop3: detected capacity change from 0 to 256 [ 222.202899][ T7983] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 222.268475][ T7985] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 222.317098][ T7983] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.488386][ T7988] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 222.549837][ T7991] 8021q: VLANs not supported on vcan0 [ 223.911084][ T37] wlan1: Trigger new scan to find an IBSS to join [ 225.092625][ T8013] binder: 8010:8013 ioctl c0306201 200000002580 returned -14 [ 228.168402][ T6792] wlan1: Trigger new scan to find an IBSS to join [ 229.843679][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.964398][ T5758] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 231.162228][ T5758] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 231.202424][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.243469][ T5758] usb 2-1: Product: syz [ 231.266352][ T5758] usb 2-1: Manufacturer: syz [ 231.296233][ T5758] usb 2-1: SerialNumber: syz [ 232.148119][ T8114] ./my_nullb_dev: Can't lookup blockdev [ 232.203377][ C0] port100 2-1:1.0: NFC: Received an invalid frame [ 232.229455][ T5758] port100 2-1:1.0: NFC: Could not get supported command types [ 232.530259][ T8121] overlayfs: failed to clone upperpath [ 232.589752][ T8121] overlayfs: failed to clone upperpath [ 232.764820][ T8133] digital: digital_start_poll: Unknown protocol [ 232.821745][ T8133] digital: digital_start_poll: Unknown protocol [ 233.727723][ T5735] usb 2-1: USB disconnect, device number 8 [ 233.735412][ T8150] tipc: Enabling of bearer rejected, failed to enable media [ 235.339393][ T5735] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.552641][ T5735] usb 3-1: Using ep0 maxpacket: 32 [ 235.614443][ T5735] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.653115][ T5735] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 235.686034][ T5735] usb 3-1: can't read configurations, error -71 [ 236.474283][ T8183] syzkaller0: entered promiscuous mode [ 236.525235][ T8183] syzkaller0: entered allmulticast mode [ 237.041220][ T8196] fuse: fd is not a fuse device [ 242.073161][ T8213] syz.5.667 (8213): drop_caches: 2 [ 242.428273][ T5619] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 247.702867][ T5619] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 247.714187][ T5619] Bluetooth: hci5: Injecting HCI hardware error event [ 247.726013][ T51] Bluetooth: hci5: hardware error 0x00 [ 248.533619][ T8288] loop2: detected capacity change from 0 to 260 [ 248.553007][ T8288] exfat: Deprecated parameter 'namecase' [ 248.559804][ T8288] exfat: Unknown parameter 'keep_l@st_dots' [ 250.524618][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 252.570774][ T8310] netlink: 'syz.1.696': attribute type 15 has an invalid length. [ 252.596924][ T8310] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.696'. [ 252.664915][ T8315] netlink: 'syz.1.696': attribute type 15 has an invalid length. [ 252.678239][ T8314] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 252.699419][ T8314] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 252.712720][ T8315] netlink: 'syz.1.696': attribute type 16 has an invalid length. [ 252.737658][ T8315] netlink: 'syz.1.696': attribute type 21 has an invalid length. [ 252.752806][ T8315] netlink: 'syz.1.696': attribute type 25 has an invalid length. [ 252.780860][ T8315] netlink: 'syz.1.696': attribute type 27 has an invalid length. [ 252.812013][ T8315] netlink: 'syz.1.696': attribute type 28 has an invalid length. [ 252.841324][ T8315] netlink: 'syz.1.696': attribute type 29 has an invalid length. [ 252.909301][ T8315] netlink: 'syz.1.696': attribute type 30 has an invalid length. [ 253.888306][ T8328] loop1: detected capacity change from 0 to 256 [ 254.990723][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.008673][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.187699][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 257.036688][ T8354] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.290411][ T8367] loop3: detected capacity change from 0 to 1024 [ 260.388368][ T8367] hfsplus: request for non-existent node 33423360 in B*Tree [ 261.229333][ T8367] hfsplus: request for non-existent node 33423360 in B*Tree [ 262.956689][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 263.699159][ T8409] loop1: detected capacity change from 0 to 8192 [ 263.735323][ T8409] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.853409][ T8417] syzkaller0: entered promiscuous mode [ 264.887864][ T8417] syzkaller0: entered allmulticast mode [ 265.838804][ T5266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.991994][ T8438] loop5: detected capacity change from 0 to 128 [ 267.043312][ T8438] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.056593][ T8438] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.128436][ T5623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.443440][ T31] audit: type=1800 audit(2000000083.214:51): pid=8456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.738" name="bus" dev="ramfs" ino=15890 res=0 errno=0 [ 273.858327][ T8493] loop5: detected capacity change from 0 to 4096 [ 274.172650][ T8493] ntfs3(loop5): Failed to load $Extend (-22). [ 274.213731][ T8493] ntfs3(loop5): Failed to initialize $Extend. [ 275.336832][ T31] audit: type=1800 audit(2000000087.113:52): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.747" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 276.420585][ T8516] syzkaller0: entered promiscuous mode [ 276.433570][ T8516] syzkaller0: entered allmulticast mode [ 278.343479][ T31] audit: type=1326 audit(2000000089.790:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.1.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7ff51e797e57 code=0x0 [ 278.485894][ T8535] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 278.853167][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 279.916719][ T31] audit: type=1800 audit(2000000091.370:54): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.763" name="idProduct" dev="configfs" ino=16543 res=0 errno=0 [ 280.222361][ T8559] : entered promiscuous mode [ 280.260776][ T8565] loop2: detected capacity change from 0 to 64 [ 280.286260][ T8560] openvswitch: : Dropping previously announced user features [ 280.298896][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 280.299656][ T8566] syzkaller0: entered promiscuous mode [ 280.355460][ T8566] syzkaller0: entered allmulticast mode [ 280.385693][ T8570] TC_ACT_REPEAT abuse ? [ 280.696669][ T5792] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 280.873822][ T5792] usb 4-1: Using ep0 maxpacket: 8 [ 280.921381][ T5792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.963416][ T5792] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 280.990674][ T5792] usb 4-1: can't read configurations, error -71 [ 281.017453][ T1011] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 281.050992][ T1011] (NULL device *): queue 0 connect admin queue failed (-111). [ 281.077151][ T1011] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 281.116201][ T1011] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 281.157376][ T8574] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:b2cfa0e8-3f77-4b26-9fcb-f0d96ca5fa3f [ 281.180488][ T8585] loop1: detected capacity change from 0 to 8 [ 281.249457][ T8585] unable to read inode lookup table [ 282.976830][ T8597] jffs2: notice: (8597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 283.240981][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 283.568139][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 283.713641][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 283.866403][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 286.020643][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 287.238166][ T13] (NULL device *): queue 0 connect admin queue failed (-111). [ 289.059326][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 289.068921][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 289.103820][ T5792] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 289.324505][ T5792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.376085][ T5792] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 289.378610][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 289.419921][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.419954][ T5792] usb 4-1: Product: syz [ 289.419972][ T5792] usb 4-1: Manufacturer: syz [ 289.419991][ T5792] usb 4-1: SerialNumber: syz [ 289.461974][ T5792] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 290.879452][ T31] audit: type=1800 audit(2000000102.240:55): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.796" name="ipv4_address" dev="configfs" ino=16134 res=0 errno=0 [ 290.973917][ T31] audit: type=1800 audit(2000000102.370:56): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.796" name="ipv4_port" dev="configfs" ino=16701 res=0 errno=0 [ 291.041506][ T5792] gspca_mr97310a: reg write [21] error -71 [ 291.049194][ T5792] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 291.051193][ T31] audit: type=1800 audit(2000000102.380:57): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.796" name="num" dev="configfs" ino=16702 res=0 errno=0 [ 291.071125][ T5792] usb 4-1: USB disconnect, device number 8 [ 291.081826][ T31] audit: type=1800 audit(2000000102.390:58): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.796" name="local" dev="configfs" ino=16703 res=0 errno=0 [ 291.310343][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 291.415009][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 291.422908][ T8658] loop2: detected capacity change from 0 to 512 [ 291.431845][ T8658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.493221][ T8658] EXT4-fs (loop2): 1 truncate cleaned up [ 291.501649][ T8658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.503285][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 291.733519][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 292.481903][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.284495][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 294.300260][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 294.307990][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 294.317493][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 296.399051][ T5814] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 296.409609][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 296.906772][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 296.958458][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 296.988732][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 298.603457][ T8689] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.081785][ T6792] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 299.099655][ T6792] (NULL device *): queue 0 connect admin queue failed (-111). [ 299.107307][ T6792] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 299.115111][ T6792] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 300.937173][ T8729] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 301.088657][ T8731] loop1: detected capacity change from 0 to 2048 [ 301.778028][ T8735] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.980327][ T8731] bio_check_eod: 75 callbacks suppressed [ 301.980348][ T8731] syz.1.820: attempt to access beyond end of device [ 301.980348][ T8731] loop1: rw=8388608, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 302.106118][ T100] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 302.211097][ T100] (NULL device *): queue 0 connect admin queue failed (-111). [ 302.272670][ T100] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 302.290506][ T8743] syz.1.820: attempt to access beyond end of device [ 302.290506][ T8743] loop1: rw=8388608, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 302.337996][ T100] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 303.291328][ T8759] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 303.291328][ T8759] The task syz.4.824 (8759) triggered the difference, watch for misbehavior. [ 303.756244][ T8767] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 304.501557][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 305.494738][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.825'. [ 305.527764][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 305.535549][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 305.543547][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 306.092136][ T10] IPVS: starting estimator thread 0... [ 306.782358][ T8771] bond1: (slave veth0_to_bond): making interface the new active one [ 306.853596][ T8771] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 306.875414][ T8784] IPVS: using max 32 ests per chain, 76800 per kthread [ 306.931458][ T8775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.614051][ T142] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 308.488651][ T142] (NULL device *): queue 0 connect admin queue failed (-111). [ 308.518506][ T142] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 308.533811][ T142] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 310.976719][ T100] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 311.069517][ T100] (NULL device *): queue 0 connect admin queue failed (-111). [ 311.135455][ T8815] tipc: Started in network mode [ 311.135867][ T100] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 311.195173][ T8815] tipc: Node identity 82155912c254, cluster identity 4711 [ 311.208571][ T100] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 311.243982][ T8815] tipc: Enabled bearer , priority 0 [ 312.479602][ T5758] tipc: Node number set to 1078024466 [ 313.299285][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 313.673246][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 313.719581][ T24] IPVS: starting estimator thread 0... [ 313.776227][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 313.871783][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 313.926442][ T8840] IPVS: using max 24 ests per chain, 57600 per kthread [ 315.539970][ T8839] smpboot: CPU 1 is now offline [ 315.659321][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.665880][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.280645][ T100] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 318.451006][ T100] (NULL device *): queue 0 connect admin queue failed (-111). [ 318.533193][ T100] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 318.612122][ T100] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 318.636385][ T8857] syzkaller0: entered promiscuous mode [ 318.684900][ T8857] syzkaller0: entered allmulticast mode [ 318.847407][ T8860] tipc: Enabled bearer , priority 0 [ 318.951875][ T8857] tipc: Resetting bearer [ 320.774640][ T6792] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 321.481663][ T8856] tipc: Resetting bearer [ 321.567868][ T6792] (NULL device *): queue 0 connect admin queue failed (-111). [ 321.645480][ T6792] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 321.697679][ T8856] tipc: Disabling bearer [ 321.736680][ T6792] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 321.832218][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.845814][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.853588][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.866323][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 321.875019][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.460450][ T8876] loop1: detected capacity change from 0 to 40427 [ 322.474519][ T5792] tipc: Node number set to 1676124777 [ 322.523623][ T8876] F2FS-fs (loop1): invalid crc value [ 322.600662][ T8876] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 322.612035][ T8876] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 322.619894][ T8876] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 322.630780][ T8876] F2FS-fs (loop1): Start checkpoint disabled! [ 322.660604][ T8876] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 322.668612][ T8876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 323.120469][ T8889] tipc: Enabling of bearer rejected, failed to enable media [ 323.664029][ T8891] loop2: detected capacity change from 0 to 32768 [ 323.762921][ T8891] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 324.008592][ T5619] Bluetooth: hci6: command tx timeout [ 324.025047][ T5814] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 324.527153][ T69] kworker/u8:4: attempt to access beyond end of device [ 324.527153][ T69] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 324.806538][ T8891] XFS (loop2): Ending clean mount [ 324.833614][ T8891] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 324.845414][ T8891] XFS (loop2): Unmount and run xfs_repair [ 324.851232][ T8891] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 324.858653][ T8891] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 324.867595][ T8891] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 324.876501][ T8891] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 324.885384][ T8891] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 324.894273][ T8891] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 324.903122][ T8891] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 324.912013][ T8891] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 324.920901][ T8891] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 324.930008][ T8891] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74 [ 325.009011][ T31] audit: type=1800 audit(2000000136.280:59): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.858" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 325.080713][ T8891] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 325.096620][ T8891] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 325.110872][ T5814] (NULL device *): queue 0 connect admin queue failed (-111). [ 325.119201][ T69] CPU: 0 UID: 0 PID: 69 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.119227][ T69] Tainted: [L]=SOFTLOCKUP [ 325.119233][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 325.119245][ T69] Workqueue: writeback wb_workfn (flush-7:1) [ 325.119272][ T69] Call Trace: [ 325.119279][ T69] [ 325.119287][ T69] dump_stack_lvl+0xe8/0x150 [ 325.119317][ T69] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 325.119353][ T69] f2fs_write_end_io+0x124b/0x1710 [ 325.119394][ T69] __submit_merged_bio+0x258/0x6a0 [ 325.119412][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.119435][ T69] ? rcu_is_watching+0x15/0xb0 [ 325.119468][ T69] __submit_merged_write_cond+0x3c9/0x4e0 [ 325.119507][ T69] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 325.119549][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.119578][ T69] f2fs_write_data_pages+0x2a27/0x36f0 [ 325.119601][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.119653][ T69] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 325.119719][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.119741][ T69] ? lock_acquire+0x106/0x350 [ 325.119768][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.119800][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.119821][ T69] ? unwind_next_frame+0x1baf/0x2550 [ 325.119844][ T69] ? ret_from_fork_asm+0x1a/0x30 [ 325.119888][ T69] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 325.119911][ T69] do_writepages+0x338/0x560 [ 325.119943][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.119963][ T69] ? reacquire_held_locks+0x104/0x190 [ 325.119991][ T69] ? writeback_sb_inodes+0x450/0x1b00 [ 325.120020][ T69] __writeback_single_inode+0x12e/0xf90 [ 325.120051][ T69] writeback_sb_inodes+0x9de/0x1b00 [ 325.120074][ T69] ? __lock_acquire+0x683/0x2cf0 [ 325.120119][ T69] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 325.120179][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120200][ T69] ? rcu_is_watching+0x15/0xb0 [ 325.120227][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120248][ T69] ? queue_io+0x2d3/0x470 [ 325.120274][ T69] wb_writeback+0x41c/0xad0 [ 325.120299][ T69] ? queue_io+0x251/0x470 [ 325.120327][ T69] ? __pfx_wb_writeback+0x10/0x10 [ 325.120347][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.120382][ T69] wb_workfn+0x431/0x10f0 [ 325.120417][ T69] ? __pfx_wb_workfn+0x10/0x10 [ 325.120438][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120459][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.120480][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120503][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120528][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120548][ T69] ? do_raw_spin_unlock+0xf5/0x210 [ 325.120573][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120597][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120625][ T69] ? rcu_is_watching+0x15/0xb0 [ 325.120652][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120675][ T69] ? process_scheduled_works+0xa20/0x14e0 [ 325.120711][ T69] process_scheduled_works+0xa8e/0x14e0 [ 325.120757][ T69] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.120782][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.120803][ T69] ? assign_work+0x3cf/0x5d0 [ 325.120828][ T69] worker_thread+0xa47/0xfb0 [ 325.120873][ T69] kthread+0x388/0x470 [ 325.120899][ T69] ? __pfx_worker_thread+0x10/0x10 [ 325.120918][ T69] ? __pfx_kthread+0x10/0x10 [ 325.120945][ T69] ret_from_fork+0x514/0xb70 [ 325.120973][ T69] ? __pfx_ret_from_fork+0x10/0x10 [ 325.120998][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.121019][ T69] ? __switch_to+0xc89/0x1420 [ 325.121044][ T69] ? __pfx_kthread+0x10/0x10 [ 325.121071][ T69] ret_from_fork_asm+0x1a/0x30 [ 325.121112][ T69] [ 325.622070][ T69] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 325.629861][ T69] CPU: 0 UID: 0 PID: 69 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.629888][ T69] Tainted: [L]=SOFTLOCKUP [ 325.629894][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 325.629906][ T69] Workqueue: writeback wb_workfn (flush-7:1) [ 325.629932][ T69] Call Trace: [ 325.629939][ T69] [ 325.629949][ T69] dump_stack_lvl+0xe8/0x150 [ 325.629977][ T69] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 325.630013][ T69] f2fs_write_end_io+0x124b/0x1710 [ 325.630054][ T69] __submit_merged_bio+0x258/0x6a0 [ 325.630071][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630094][ T69] ? rcu_is_watching+0x15/0xb0 [ 325.630126][ T69] __submit_merged_write_cond+0x3c9/0x4e0 [ 325.630165][ T69] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 325.630207][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630236][ T69] f2fs_write_data_pages+0x2a27/0x36f0 [ 325.630258][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630310][ T69] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 325.630371][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630392][ T69] ? lock_acquire+0x106/0x350 [ 325.630419][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630451][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630472][ T69] ? unwind_next_frame+0x1baf/0x2550 [ 325.630494][ T69] ? ret_from_fork_asm+0x1a/0x30 [ 325.630538][ T69] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 325.630562][ T69] do_writepages+0x338/0x560 [ 325.630593][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630614][ T69] ? reacquire_held_locks+0x104/0x190 [ 325.630641][ T69] ? writeback_sb_inodes+0x450/0x1b00 [ 325.630670][ T69] __writeback_single_inode+0x12e/0xf90 [ 325.630706][ T69] writeback_sb_inodes+0x9de/0x1b00 [ 325.630728][ T69] ? __lock_acquire+0x683/0x2cf0 [ 325.630774][ T69] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 325.630833][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630855][ T69] ? rcu_is_watching+0x15/0xb0 [ 325.630882][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630903][ T69] ? queue_io+0x2d3/0x470 [ 325.630929][ T69] wb_writeback+0x41c/0xad0 [ 325.630953][ T69] ? queue_io+0x251/0x470 [ 325.630981][ T69] ? __pfx_wb_writeback+0x10/0x10 [ 325.631002][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.631036][ T69] wb_workfn+0x431/0x10f0 [ 325.631071][ T69] ? __pfx_wb_workfn+0x10/0x10 [ 325.631092][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631113][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.631133][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631156][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631181][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631202][ T69] ? do_raw_spin_unlock+0xf5/0x210 [ 325.631226][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631250][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631278][ T69] ? rcu_is_watching+0x15/0xb0 [ 325.631306][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631328][ T69] ? process_scheduled_works+0xa20/0x14e0 [ 325.631349][ T69] process_scheduled_works+0xa8e/0x14e0 [ 325.631394][ T69] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.631420][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631441][ T69] ? assign_work+0x3cf/0x5d0 [ 325.631465][ T69] worker_thread+0xa47/0xfb0 [ 325.631510][ T69] kthread+0x388/0x470 [ 325.631536][ T69] ? __pfx_worker_thread+0x10/0x10 [ 325.631555][ T69] ? __pfx_kthread+0x10/0x10 [ 325.631582][ T69] ret_from_fork+0x514/0xb70 [ 325.631611][ T69] ? __pfx_ret_from_fork+0x10/0x10 [ 325.631636][ T69] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.631658][ T69] ? __switch_to+0xc89/0x1420 [ 325.631682][ T69] ? __pfx_kthread+0x10/0x10 [ 325.631715][ T69] ret_from_fork_asm+0x1a/0x30 [ 325.631759][ T69] [ 325.631793][ T69] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 326.043767][ T5814] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 326.073758][ T5814] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 326.191946][ T5628] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.235416][ T5619] Bluetooth: hci6: command tx timeout [ 327.104351][ T8929] nvmet: adding nsid 1 to subsystem testnqn [ 328.202852][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 328.469332][ T5619] Bluetooth: hci6: command tx timeout [ 329.010236][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 329.107712][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 329.184031][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 329.245231][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 329.321248][ T8939] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 330.327893][ T69] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.737356][ T51] Bluetooth: hci6: command tx timeout [ 331.475829][ T6797] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 331.548601][ T6797] (NULL device *): queue 0 connect admin queue failed (-111). [ 331.790098][ T6797] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 331.886195][ T6797] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 333.888149][ T69] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.014134][ T142] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 335.567794][ T8973] loop3: detected capacity change from 0 to 256 [ 335.575056][ T8973] udf: Unknown parameter 'PCiE[w jcr|Ӊ)FLjWRq|L4A28?+muv3.w' [ 335.775149][ T142] (NULL device *): queue 0 connect admin queue failed (-111). [ 335.878127][ T142] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 335.977304][ T142] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 338.104659][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 338.972515][ T10] IPVS: starting estimator thread 0... [ 339.017798][ T69] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.411542][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 339.466127][ T8986] IPVS: using max 34 ests per chain, 81600 per kthread [ 339.508014][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 339.709372][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 340.086527][ T69] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.294776][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 340.594989][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 340.606428][ T9002] fuse: fd is not a fuse device [ 340.639778][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.619518][ T100] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 342.644571][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.789981][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.881510][ T100] (NULL device *): queue 0 connect admin queue failed (-111). [ 342.918493][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.965685][ T100] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 343.015746][ T10] usb 2-1: Product: syz [ 343.052918][ T10] usb 2-1: Manufacturer: syz [ 343.060765][ T100] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 343.124250][ T10] usb 2-1: SerialNumber: syz [ 343.208992][ T10] usb 2-1: can't set config #1, error -71 [ 343.297505][ T10] usb 2-1: USB disconnect, device number 9 [ 345.359047][ T142] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 345.656727][ T9019] loop2: detected capacity change from 0 to 512 [ 345.680544][ T9019] EXT4-fs (loop2): Test dummy encryption mode enabled [ 345.723428][ T9019] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.892: inode has both inline data and extents flags [ 345.737248][ T9019] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 345.740189][ T9019] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.892: couldn't read orphan inode 15 (err -117) [ 345.749366][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 345.749396][ C0] EXT4-fs (loop2): initial error at time 2000000157: ext4_orphan_get:1399: inode 15 [ 345.749429][ C0] EXT4-fs (loop2): last error at time 2000000157: ext4_orphan_get:1399: inode 15 [ 345.786587][ T9019] loop2: lost filesystem error report for type 5 error -117 [ 345.790956][ T9019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.880169][ T142] (NULL device *): queue 0 connect admin queue failed (-111). [ 346.067046][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.085691][ T142] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 346.208090][ T142] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 346.541002][ T10] IPVS: starting estimator thread 0... [ 347.812229][ T9031] IPVS: using max 34 ests per chain, 81600 per kthread [ 348.346632][ T5814] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 348.561471][ T5814] (NULL device *): queue 0 connect admin queue failed (-111). [ 348.643141][ T5814] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 348.720083][ T5814] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 348.739269][ T9042] loop1: detected capacity change from 0 to 256 [ 348.792551][ T9042] vfat: Bad value for 'dmask' [ 348.900108][ T69] bridge_slave_1: left allmulticast mode [ 350.517164][ T9042] netlink: 180 bytes leftover after parsing attributes in process `syz.1.901'. [ 350.528167][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 350.548398][ T69] bridge_slave_1: left promiscuous mode [ 351.156111][ T5814] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 351.181345][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.489644][ T5814] (NULL device *): queue 0 connect admin queue failed (-111). [ 351.586636][ T69] bridge_slave_0: left allmulticast mode [ 351.594186][ T5814] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 351.695612][ T69] bridge_slave_0: left promiscuous mode [ 351.708665][ T5814] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 351.755087][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.394738][ T9061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.904'. [ 353.259413][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.273121][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.286639][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.296383][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.314183][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.870242][ T1011] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 355.629589][ T5619] Bluetooth: hci2: command tx timeout [ 355.681805][ T1011] (NULL device *): queue 0 connect admin queue failed (-111). [ 357.006420][ T1011] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 357.143643][ T1011] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 357.694165][ T5619] Bluetooth: hci2: command tx timeout [ 357.804951][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.862746][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.922176][ T69] bond0 (unregistering): Released all slaves [ 358.023288][ T9086] syz_tun: entered allmulticast mode [ 358.029333][ T9086] syz_tun: left allmulticast mode [ 359.295652][ T142] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 359.774753][ T5619] Bluetooth: hci2: command tx timeout [ 360.960949][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 361.014005][ T142] (NULL device *): queue 0 connect admin queue failed (-111). [ 361.086277][ T142] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 361.162045][ T142] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 361.216426][ T5814] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 362.582363][ T5619] Bluetooth: hci2: command tx timeout [ 363.488885][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 363.702537][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 363.777806][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 363.879279][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.932494][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 363.959861][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.019917][ T8871] bridge_slave_0: entered allmulticast mode [ 364.082560][ T8871] bridge_slave_0: entered promiscuous mode [ 364.161383][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.230950][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.280870][ T8871] bridge_slave_1: entered allmulticast mode [ 364.521575][ T8871] bridge_slave_1: entered promiscuous mode [ 366.163922][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 366.307618][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 366.394040][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 366.490729][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 366.766073][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.842883][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.831248][ T142] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 369.286063][ T142] (NULL device *): queue 0 connect admin queue failed (-111). [ 369.553658][ T142] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 370.550369][ T69] hsr_slave_0: left promiscuous mode [ 370.591680][ T142] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 370.943208][ T69] hsr_slave_1: left promiscuous mode [ 371.021305][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.111303][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.225008][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.307210][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.002649][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.019248][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.027197][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.037984][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.055824][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.435593][ T69] veth1_macvtap: left promiscuous mode [ 372.844899][ T69] veth0_macvtap: left promiscuous mode [ 372.886555][ T69] veth1_vlan: left promiscuous mode [ 372.950509][ T69] veth0_vlan: left promiscuous mode [ 373.127590][ T5814] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 373.286660][ T5814] (NULL device *): queue 0 connect admin queue failed (-111). [ 373.360579][ T5814] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 373.437588][ T5814] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 373.719844][ T9171] Process accounting resumed [ 374.174729][ T51] Bluetooth: hci4: command tx timeout [ 374.754444][ T69] team0 (unregistering): Port device team_slave_1 removed [ 374.822195][ T69] team0 (unregistering): Port device team_slave_0 removed [ 375.628509][ T6792] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 375.709419][ T6792] (NULL device *): queue 0 connect admin queue failed (-111). [ 375.754306][ T6792] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 375.794654][ T6792] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 377.178562][ T51] Bluetooth: hci4: command tx timeout [ 377.868572][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.876056][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.899673][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 378.043599][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 378.075927][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 378.136758][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 378.222567][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 378.315685][ T8871] team0: Port device team_slave_0 added [ 378.549423][ T8871] team0: Port device team_slave_1 added [ 379.593249][ T51] Bluetooth: hci4: command tx timeout [ 380.202895][ T9203] dummy_hcd dummy_hcd.0: remove, state 1 [ 380.210061][ T9203] usb usb1: USB disconnect, device number 1 [ 380.217151][ T9203] usb 1-1: USB disconnect, device number 2 [ 380.244609][ T9203] rndis_host 1-1:1.2 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 380.335218][ T6792] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 380.453135][ T6792] (NULL device *): queue 0 connect admin queue failed (-111). [ 380.505376][ T6792] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 380.555544][ T6792] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 380.799389][ T9203] dummy_hcd dummy_hcd.0: stopped [ 380.804695][ T9203] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 382.145506][ T51] Bluetooth: hci4: command tx timeout [ 383.045350][ T6792] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 383.307110][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.320665][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.328672][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.337042][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.345598][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.417137][ T6792] (NULL device *): queue 0 connect admin queue failed (-111). [ 383.529204][ T6792] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 383.604385][ T6792] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 384.575022][ T9234] capability: warning: `syz.0.941' uses 32-bit capabilities (legacy support in use) [ 385.258663][ T6792] bridge_slave_1: left allmulticast mode [ 385.289356][ T6792] bridge_slave_1: left promiscuous mode [ 385.323964][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.380808][ T6792] bridge_slave_0: left allmulticast mode [ 385.422752][ T6792] bridge_slave_0: left promiscuous mode [ 385.456544][ T5619] Bluetooth: hci0: command tx timeout [ 385.470642][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.693887][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 385.780189][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 385.828782][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 385.863402][ T6792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.880695][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 385.923187][ T6792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.993192][ T6792] bond0 (unregistering): Released all slaves [ 386.169928][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 387.533831][ T5619] Bluetooth: hci0: command tx timeout [ 388.055255][ T69] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 388.369198][ T69] (NULL device *): queue 0 connect admin queue failed (-111). [ 388.412757][ T69] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 388.513190][ T69] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 388.594959][ T6792] team0 (unregistering): Port device team_slave_1 removed [ 388.689315][ T6792] team0 (unregistering): Port device team_slave_0 removed [ 389.613754][ T5619] Bluetooth: hci0: command tx timeout [ 390.667117][ T5814] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 391.118776][ T5814] (NULL device *): queue 0 connect admin queue failed (-111). [ 391.178568][ T5814] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 391.220146][ T5814] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 391.794319][ T5619] Bluetooth: hci0: command tx timeout [ 391.916583][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.947365][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.982096][ T9075] bridge_slave_0: entered allmulticast mode [ 392.030205][ T9075] bridge_slave_0: entered promiscuous mode [ 393.399308][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.425012][ T6799] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 394.148049][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.206858][ T9075] bridge_slave_1: entered allmulticast mode [ 394.251289][ T6799] (NULL device *): queue 0 connect admin queue failed (-111). [ 394.288265][ T9075] bridge_slave_1: entered promiscuous mode [ 394.309026][ T6799] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 394.379845][ T6799] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 394.483290][ T9281] vlan2: entered allmulticast mode [ 394.488530][ T9281] veth0_vlan: entered allmulticast mode [ 394.495391][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.604024][ T9282] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 394.615886][ T9282] vlan2: left allmulticast mode [ 394.620732][ T9282] veth0_vlan: left allmulticast mode [ 394.934823][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.638983][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.869819][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 395.884512][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 395.895398][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 395.905893][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 395.916006][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 396.226438][ T9306] binder: BINDER_SET_CONTEXT_MGR already set [ 396.320101][ T9306] binder: 9304:9306 ioctl 4018620d 200000004a80 returned -16 [ 396.391819][ T9075] team0: Port device team_slave_0 added [ 396.496115][ T5814] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 396.644627][ T9075] team0: Port device team_slave_1 added [ 396.680673][ T5814] (NULL device *): queue 0 connect admin queue failed (-111). [ 396.759477][ T5814] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 396.819990][ T5814] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 398.013835][ T51] Bluetooth: hci6: command tx timeout [ 398.966099][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.993863][ T6799] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 399.049960][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.132042][ T6799] (NULL device *): queue 0 connect admin queue failed (-111). [ 399.164714][ T6799] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 399.228412][ T6799] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 399.247493][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.311568][ T9327] fuse: fd is not a fuse device [ 399.539256][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.587856][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.145694][ T51] Bluetooth: hci6: command tx timeout [ 401.805020][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 401.930910][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.975555][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 402.010719][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 402.069318][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 402.174306][ T51] Bluetooth: hci6: command tx timeout [ 402.225779][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 403.806912][ T9075] hsr_slave_0: entered promiscuous mode [ 403.860266][ T9075] hsr_slave_1: entered promiscuous mode [ 403.892795][ T9075] debugfs: 'hsr0' already exists in 'hsr' [ 403.927148][ T9075] Cannot create hsr debugfs directory [ 404.231997][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 404.253752][ T51] Bluetooth: hci6: command tx timeout [ 404.354757][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 404.413560][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 404.486013][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 404.550674][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.604257][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.646828][ T9153] bridge_slave_0: entered allmulticast mode [ 404.692707][ T9153] bridge_slave_0: entered promiscuous mode [ 404.910236][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.949877][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.993578][ T9153] bridge_slave_1: entered allmulticast mode [ 405.040370][ T9153] bridge_slave_1: entered promiscuous mode [ 405.220238][ T9365] netlink: 'syz.0.959': attribute type 2 has an invalid length. [ 405.257058][ T9365] netlink: 'syz.0.959': attribute type 2 has an invalid length. [ 405.538833][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.594941][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.575116][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 406.843624][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 407.168593][ T9381] o2cb: Local heartbeat has not been started. [ 407.174903][ T9381] o2cb: Cluster check failed. Fix errors before retrying. [ 407.182052][ T9381] (syz.0.961,9381,0):user_dlm_register:674 ERROR: status = -22 [ 407.189663][ T9381] (syz.0.961,9381,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 407.331857][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 407.372304][ T9153] team0: Port device team_slave_0 added [ 407.384190][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 407.418652][ T9153] team0: Port device team_slave_1 added [ 407.593218][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.638094][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.967384][ T9218] bridge_slave_0: entered allmulticast mode [ 408.002313][ T9218] bridge_slave_0: entered promiscuous mode [ 409.052722][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.019334][ T6799] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 410.050520][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.752169][ T9218] bridge_slave_1: entered allmulticast mode [ 410.767601][ T6799] (NULL device *): queue 0 connect admin queue failed (-111). [ 410.810590][ T9218] bridge_slave_1: entered promiscuous mode [ 410.820830][ T6799] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 410.869158][ T6799] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 410.934110][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.963195][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.070832][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.396777][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.426470][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.532573][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.621273][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.748250][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.383567][ T9153] hsr_slave_0: entered promiscuous mode [ 412.428088][ T9153] hsr_slave_1: entered promiscuous mode [ 412.476768][ T9153] debugfs: 'hsr0' already exists in 'hsr' [ 412.498647][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.509321][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.522393][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.533281][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.545388][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.596558][ T9153] Cannot create hsr debugfs directory [ 412.629868][ T9218] team0: Port device team_slave_0 added [ 412.974920][ T1011] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 413.090798][ T1011] (NULL device *): queue 0 connect admin queue failed (-111). [ 413.110353][ T9218] team0: Port device team_slave_1 added [ 413.141276][ T1011] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 413.181814][ T9442] loop2: detected capacity change from 0 to 1024 [ 413.192532][ T1011] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 413.301036][ T9442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 413.366474][ T9442] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.426294][ T9453] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.970: bg 0: block 112: padding at end of block bitmap is not set [ 414.719617][ T5619] Bluetooth: hci1: command tx timeout [ 414.854054][ T9453] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 414.866822][ T9453] EXT4-fs (loop2): This should not happen!! Data will be lost [ 414.866822][ T9453] [ 414.876514][ T9453] EXT4-fs (loop2): Total free blocks count 0 [ 414.882484][ T9453] EXT4-fs (loop2): Free/Dirty block details [ 414.888452][ T9453] EXT4-fs (loop2): free_blocks=0 [ 414.893395][ T9453] EXT4-fs (loop2): dirty_blocks=64 [ 414.899026][ T9453] EXT4-fs (loop2): Block reservation details [ 414.905048][ T9453] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 415.555388][ T100] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 415.573386][ T9452] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.970: lblock 0 mapped to illegal pblock 0 (length 1) [ 416.649964][ T5628] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 417.611276][ T5619] Bluetooth: hci1: command tx timeout [ 417.629926][ T100] (NULL device *): queue 0 connect admin queue failed (-111). [ 417.664314][ T6679] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 417.676381][ T6679] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 417.684779][ T6679] CPU: 0 UID: 101 PID: 6679 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 417.695450][ T6679] Tainted: [L]=SOFTLOCKUP [ 417.699756][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 417.709798][ T6679] RIP: 0010:dummy_queue+0x1ae/0x900 [ 417.715000][ T6679] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 bb 06 80 fa 4d 8b 24 24 49 83 c4 60 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f0 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 417.734625][ T6679] RSP: 0018:ffffc90005b7f0a0 EFLAGS: 00010216 [ 417.740692][ T6679] RAX: 000000000000000c RBX: ffff8880736a7e10 RCX: dffffc0000000000 [ 417.748649][ T6679] RDX: ffff88801e301f00 RSI: 0000000000000003 RDI: 0000000000000005 [ 417.756604][ T6679] RBP: ffff8880736a7e00 R08: ffffffff90572937 R09: 1ffffffff20ae526 [ 417.764653][ T6679] R10: dffffc0000000000 R11: ffffffff87b49370 R12: 0000000000000060 [ 417.772616][ T6679] R13: 1ffff1100e6d4fc0 R14: ffff88802557c248 R15: ffff88802557cc00 [ 417.780581][ T6679] FS: 00007ff4a845c780(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 417.789548][ T6679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.796120][ T6679] CR2: 000055adb5a80138 CR3: 000000007c158000 CR4: 0000000000350ef0 [ 417.804172][ T6679] Call Trace: [ 417.807434][ T6679] [ 417.810353][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.815989][ T6679] usb_ep_queue+0xf1/0x3c0 [ 417.820407][ T6679] eth_start_xmit+0x9a7/0x1080 [ 417.825170][ T6679] dev_hard_start_xmit+0x2cd/0x830 [ 417.830284][ T6679] sch_direct_xmit+0x257/0x4c0 [ 417.835047][ T6679] ? __pfx_sch_direct_xmit+0x10/0x10 [ 417.840334][ T6679] __dev_queue_xmit+0x177f/0x3820 [ 417.845356][ T6679] ? __dev_queue_xmit+0x29b/0x3820 [ 417.850467][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.856098][ T6679] ? _copy_from_iter+0x5d4/0x1660 [ 417.861124][ T6679] ? __pfx___dev_queue_xmit+0x10/0x10 [ 417.866491][ T6679] ? __pfx__copy_from_iter+0x10/0x10 [ 417.871768][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.877390][ T6679] ? packet_parse_headers+0x4c5/0x7a0 [ 417.882760][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.888647][ T6679] ? packet_parse_headers+0x542/0x7a0 [ 417.894023][ T6679] ? __pfx_packet_parse_headers+0x10/0x10 [ 417.899823][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.905442][ T6679] ? packet_xmit+0x68/0x330 [ 417.909937][ T6679] ? skb_put+0x112/0x210 [ 417.914178][ T6679] packet_sendmsg+0x3d95/0x5040 [ 417.919035][ T6679] ? kasan_save_free_info+0x40/0x50 [ 417.924230][ T6679] ? __kasan_slab_free+0x5c/0x80 [ 417.929166][ T6679] ? sock_read_iter+0x22a/0x2f0 [ 417.934613][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.940666][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.946301][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.951933][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.957566][ T6679] ? __pfx_packet_sendmsg+0x10/0x10 [ 417.962769][ T6679] ? __pfx_aa_sk_perm+0x10/0x10 [ 417.967629][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.973257][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.978888][ T6679] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.983868][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.989499][ T6679] ? __pfx_packet_sendmsg+0x10/0x10 [ 417.994691][ T6679] sock_sendmsg_nosec+0x13a/0x180 [ 417.999714][ T6679] sock_write_iter+0x2de/0x3e0 [ 418.004472][ T6679] ? __pfx_sock_write_iter+0x10/0x10 [ 418.009758][ T6679] do_iter_readv_writev+0x612/0x8c0 [ 418.014943][ T6679] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 418.020664][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.026294][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.031921][ T6679] ? security_file_permission+0x75/0x260 [ 418.037547][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.043167][ T6679] ? rw_verify_area+0x203/0x4c0 [ 418.048019][ T6679] vfs_writev+0x343/0x990 [ 418.052353][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.058001][ T6679] ? __pfx_vfs_writev+0x10/0x10 [ 418.062848][ T6679] ? __pfx_set_user_sigmask+0x10/0x10 [ 418.068214][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.073835][ T6679] do_writev+0x154/0x2e0 [ 418.078064][ T6679] ? __pfx_do_writev+0x10/0x10 [ 418.082812][ T6679] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.088429][ T6679] ? __secure_computing+0xe7/0x2b0 [ 418.093531][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.099578][ T6679] do_syscall_64+0x174/0x580 [ 418.104153][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.110203][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.116079][ T6679] RIP: 0033:0x7ff4a84e6407 [ 418.120477][ T6679] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 418.140105][ T6679] RSP: 002b:00007ffddf5e9ce0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 418.148504][ T6679] RAX: ffffffffffffffda RBX: 00007ff4a845c780 RCX: 00007ff4a84e6407 [ 418.156457][ T6679] RDX: 0000000000000002 RSI: 00007ffddf5e9d40 RDI: 0000000000000003 [ 418.164406][ T6679] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000 [ 418.172360][ T6679] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffddf5e9d80 [ 418.180312][ T6679] R13: 0000559614818690 R14: 00007ffddf5e9dd0 R15: 00007ffddf5f9fa0 [ 418.188276][ T6679] [ 418.191275][ T6679] Modules linked in: [ 418.195259][ T6679] ---[ end trace 0000000000000000 ]--- [ 418.200797][ T6679] RIP: 0010:dummy_queue+0x1ae/0x900 [ 418.206070][ T6679] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 bb 06 80 fa 4d 8b 24 24 49 83 c4 60 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f0 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 418.225696][ T6679] RSP: 0018:ffffc90005b7f0a0 EFLAGS: 00010216 [ 418.231757][ T6679] RAX: 000000000000000c RBX: ffff8880736a7e10 RCX: dffffc0000000000 [ 418.239737][ T6679] RDX: ffff88801e301f00 RSI: 0000000000000003 RDI: 0000000000000005 [ 418.247719][ T6679] RBP: ffff8880736a7e00 R08: ffffffff90572937 R09: 1ffffffff20ae526 [ 418.255889][ T6679] R10: dffffc0000000000 R11: ffffffff87b49370 R12: 0000000000000060 [ 418.263957][ T6679] R13: 1ffff1100e6d4fc0 R14: ffff88802557c248 R15: ffff88802557cc00 [ 418.271916][ T6679] FS: 00007ff4a845c780(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 418.280858][ T6679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.287445][ T6679] CR2: 000055adb5a80138 CR3: 000000007c158000 CR4: 0000000000350ef0 [ 418.295421][ T6679] Kernel panic - not syncing: Fatal exception in interrupt [ 418.302639][ T6679] Kernel Offset: disabled [ 418.306944][ T6679] Rebooting in 86400 seconds..