last executing test programs: 2m33.541702702s ago: executing program 1 (id=1391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r5 = dup(r4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 2m30.272146957s ago: executing program 1 (id=1399): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 2m29.572403696s ago: executing program 1 (id=1401): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) 2m26.277417347s ago: executing program 1 (id=1405): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4c00, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe77c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 2m22.819149285s ago: executing program 1 (id=1412): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e4638f863f2887a03f9aa6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x2, 0x6e2, &(0x7f0000000c80)="$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") setxattr(0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x1) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)=""/150, 0x96) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fcntl$lock(r3, 0x6, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setxattr$security_capability(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 2m12.065460761s ago: executing program 1 (id=1432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xc, 0x8c, &(0x7f00000002c0)=""/140, 0x1e00, 0x61}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r3) open(0x0, 0x1298c2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 2m11.707110445s ago: executing program 32 (id=1432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xc, 0x8c, &(0x7f00000002c0)=""/140, 0x1e00, 0x61}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r3) open(0x0, 0x1298c2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 55.428072949s ago: executing program 4 (id=1578): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x10, 0x24048048, &(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0x4}, 0x1c) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) 51.292975044s ago: executing program 4 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 48.164753959s ago: executing program 4 (id=1592): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x20, 0x70bd27}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYRESOCT], 0xb0}, 0x1, 0x0, 0x0, 0x4000854}, 0x20040040) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x7fc, 0x2, r3}) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newroute={0x3c, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x3c}, 0x1, 0x2}, 0x10) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x2, 0x1, r3, 0x1}) close(r4) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x8, 0x40, 0x2, 0xb038}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) 47.507689079s ago: executing program 4 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1010, r0, 0x0) unshare(0x26000400) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0x0, 0x1}}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x600) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0xfffffffa) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) 47.217440076s ago: executing program 4 (id=1597): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x10000000, &(0x7f0000000100), &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0}, 0x58) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) 46.298773062s ago: executing program 4 (id=1599): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x10, 0x24048048, &(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0x4}, 0x1c) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) 30.426975761s ago: executing program 33 (id=1599): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x10, 0x24048048, &(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0x4}, 0x1c) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) 23.891302378s ago: executing program 5 (id=1648): socket(0x10, 0x803, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14a900, 0x0) sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4042880}, 0x10) close(r1) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_open_dev$loop(0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) 22.943180108s ago: executing program 5 (id=1652): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = msgget$private(0x0, 0x383) msgsnd(r5, &(0x7f0000000200)=ANY=[], 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000006311a400000000008510000002000000850000000800000095000007000000009500a50500000000e51b93696d29df316b533e8fdc1450c1bbc7dcd98bdd1cf2a5df699f714a97f09779198e4f193e8ef0bb48af52055501bf13e73232e64e4857bae25fd2fcdeadf58141621f66b2bfbb58e73358d95971326cddbb94b2c9332d1ae6205d3d81f3bb123dc1bb0db17ef8a4990633642f3a4c51522b5fa06b52183348ed92"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 19.101508739s ago: executing program 5 (id=1660): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) set_mempolicy(0x4005, 0x0, 0x8) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x24044088) open_by_handle_at(0xffffffffffffffff, 0x0, 0x460603) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x10009, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0x800000c3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.759326108s ago: executing program 5 (id=1664): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) fdatasync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x32600) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx:De', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001140)=""/131, 0x83}, {&(0x7f0000001200)=""/244, 0xf4}], 0x3, 0x0, 0x3, 0x0) 12.992999606s ago: executing program 3 (id=1669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f00000102c0)={[{@noblock_validity}, {@minixdf}, {@acl}, {@errors_remount}]}, 0x0, 0x518, &(0x7f0000000f80)="$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") r1 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r1}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) pwrite64(r4, &(0x7f0000000540), 0x0, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000001240)={0x50, 0x0, r6, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r7, 0x401070c9, &(0x7f0000000000)) pwritev(r0, 0x0, 0x0, 0x0, 0xfdf9) bind$packet(r4, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 12.211719577s ago: executing program 5 (id=1670): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") truncate(0x0, 0x3000000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x1c9, 0xa6040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 10.766404474s ago: executing program 0 (id=1672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 9.98742929s ago: executing program 3 (id=1674): openat$comedi(0xffffffffffffff9c, 0x0, 0x8102, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.987125455s ago: executing program 2 (id=1675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0)=0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1800, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x404c801}, 0x4008090) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101fa00000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000380001800c0001006269747769736500280002800800014000000014080002400000011208000640000000030400058008000340000000010900010073797a30"], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 9.177598802s ago: executing program 0 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0) 8.853666414s ago: executing program 2 (id=1677): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x312406d, &(0x7f0000000240), 0x1, 0x512, &(0x7f0000001380)="$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") r0 = creat(0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040840) 8.43550294s ago: executing program 3 (id=1678): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x312406d, &(0x7f0000000240), 0x1, 0x512, &(0x7f0000001380)="$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") r0 = creat(0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 7.100050709s ago: executing program 2 (id=1679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 7.013906579s ago: executing program 0 (id=1680): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f00000002c0), 0x1, 0x48480) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x2004c811}, 0x804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) r2 = socket(0x10, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600"], 0x0) sendmsg$nl_route(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40c81, 0x0) 6.36703942s ago: executing program 2 (id=1681): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 6.245196323s ago: executing program 3 (id=1682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x40004) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, 0x0) 4.319313313s ago: executing program 5 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(0xffffffffffffffff) pipe(0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x1, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x35, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xf9) 3.973236511s ago: executing program 2 (id=1684): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x6, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359", 0x5b, 0x10}, {0x3, 0xe, 0x0, 0x0, 0x0, 0x16}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x3, 0x0, &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9", 0x64, 0x20}, {0x2, 0x0, 0x0, &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aea", 0x4c, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddf", 0x57, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000001400)={0x174, r3, 0x800, 0xfffffffb, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @empty, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @private1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @local, 0x1}}}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66f8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.934612389s ago: executing program 3 (id=1685): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 3.309557273s ago: executing program 0 (id=1686): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000040)="9b3236bf3128702b84e739e340aefd52f6927e1880724ea4ee84af20417b2f4c4eae764732107158f0c4c403e5a2b875a4ba80d3d2651d7e78cb5026ab5d1c335b700e3b057364fc09e0ff7543be358d33a0bc6ed6e8a96323d9c7f53d36c9279809c28aacd1be7534fe9ac703e0d5393ac3ae20cfc32f48dbde4abc4321e50afdc5ab0acc41838c105e", 0x8a}, {0x0}, {&(0x7f00000001c0)="2af7a9be2789e60f5731568224dadc67fc49d196f1abbee4de5e2e22b0c7519659ec98dcd23cb1bccc8edbe876da89325c55848a1623", 0x36}, {&(0x7f0000000200)="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", 0xe00}], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000021c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x2, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x8}}}, 0xe) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) 2.815785826s ago: executing program 3 (id=1687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000200)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc) mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x2000001, 0x4010933, r0, 0xb4b40000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r2, 0x0, 0x20fffe85) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0x1c93) 2.586627216s ago: executing program 2 (id=1688): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x312406d, &(0x7f0000000240), 0x1, 0x512, &(0x7f0000001380)="$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") r0 = creat(0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040840) 1.569545765s ago: executing program 0 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc844}, 0x24000000) clock_gettime(0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) 0s ago: executing program 0 (id=1690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x0) setreuid(0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000080)={0x0, 0x7a, 0x20f}) kernel console output (not intermixed with test programs): n78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 302.704244][ T5840] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 302.735298][ T5840] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 302.770953][ T8207] loop1: detected capacity change from 0 to 64 [ 302.776683][ T5840] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 302.841226][ T5840] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 302.868319][ T5840] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 304.087166][ T5840] usb 2-1: USB disconnect, device number 7 [ 304.256985][ T8207] erspan0: entered promiscuous mode [ 304.324766][ T8207] vlan2: entered promiscuous mode [ 306.245516][ T8242] bridge0: entered promiscuous mode [ 307.095622][ T8245] loop2: detected capacity change from 0 to 32768 [ 307.182191][ T8245] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 307.962587][ T8245] XFS (loop2): Ending clean mount [ 307.979268][ T8245] XFS (loop2): Quotacheck needed: Please wait. [ 308.120599][ T8245] XFS (loop2): Quotacheck: Done. [ 308.805310][ T5836] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.633646][ T8313] loop3: detected capacity change from 0 to 8 [ 313.072878][ T8325] loop3: detected capacity change from 0 to 1024 [ 313.085426][ T8325] EXT4-fs (loop3): stripe (713) is not aligned with cluster size (16), stripe is disabled [ 313.163967][ T8325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.344970][ T5160] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 313.357686][ T5160] CPU: 1 UID: 0 PID: 5160 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.357719][ T5160] Tainted: [L]=SOFTLOCKUP [ 313.357725][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.357736][ T5160] Workqueue: hci3 hci_rx_work [ 313.357773][ T5160] Call Trace: [ 313.357782][ T5160] [ 313.357791][ T5160] dump_stack_lvl+0xe8/0x150 [ 313.357824][ T5160] sysfs_create_dir_ns+0x271/0x2a0 [ 313.357854][ T5160] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 313.357882][ T5160] ? do_raw_spin_unlock+0xf5/0x210 [ 313.357911][ T5160] kobject_add_internal+0x62b/0xd00 [ 313.357945][ T5160] kobject_add+0x163/0x240 [ 313.357984][ T5160] ? __pfx_kobject_add+0x10/0x10 [ 313.358013][ T5160] ? _raw_spin_unlock+0x28/0x50 [ 313.358040][ T5160] ? get_device_parent+0x366/0x3a0 [ 313.358066][ T5160] device_add+0x408/0xb70 [ 313.358092][ T5160] hci_conn_add_sysfs+0xd5/0x210 [ 313.358127][ T5160] le_conn_complete_evt+0x10e6/0x16b0 [ 313.358165][ T5160] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 313.358190][ T5160] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 313.358228][ T5160] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.358255][ T5160] ? skb_pull_data+0xfb/0x200 [ 313.358286][ T5160] hci_le_enh_conn_complete_evt+0x189/0x490 [ 313.358313][ T5160] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 313.358342][ T5160] hci_event_packet+0x659/0xef0 [ 313.358369][ T5160] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 313.358392][ T5160] ? __pfx_hci_event_packet+0x10/0x10 [ 313.358417][ T5160] ? kcov_remote_start+0x49a/0x7a0 [ 313.358445][ T5160] ? hci_send_to_monitor+0xe2/0x590 [ 313.358476][ T5160] hci_rx_work+0x3ee/0x1040 [ 313.358505][ T5160] ? process_scheduled_works+0xa70/0x1860 [ 313.358537][ T5160] process_scheduled_works+0xb5d/0x1860 [ 313.358599][ T5160] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.358637][ T5160] ? assign_work+0x3d5/0x5e0 [ 313.358672][ T5160] worker_thread+0xa53/0xfc0 [ 313.358730][ T5160] kthread+0x388/0x470 [ 313.358754][ T5160] ? __pfx_worker_thread+0x10/0x10 [ 313.358782][ T5160] ? __pfx_kthread+0x10/0x10 [ 313.358806][ T5160] ret_from_fork+0x514/0xb70 [ 313.358840][ T5160] ? __pfx_ret_from_fork+0x10/0x10 [ 313.358870][ T5160] ? __switch_to+0xc79/0x1410 [ 313.358899][ T5160] ? __pfx_kthread+0x10/0x10 [ 313.358923][ T5160] ret_from_fork_asm+0x1a/0x30 [ 313.358967][ T5160] [ 313.387614][ T5160] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 313.615493][ T5160] Bluetooth: hci3: failed to register connection device [ 313.829190][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.894520][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 314.997061][ T8347] 8021q: VLANs not supported on nlmon0 [ 315.714229][ T8358] random: crng reseeded on system resumption [ 315.781009][ T6023] vlan3: left promiscuous mode [ 315.917995][ T8360] FAT-fs (nbd1): unable to read boot sector [ 317.052301][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.058774][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.814742][ T8378] netlink: 'syz.3.638': attribute type 12 has an invalid length. [ 318.846769][ T8381] syzkaller0: entered promiscuous mode [ 318.857874][ T8381] syzkaller0: entered allmulticast mode [ 320.019652][ T8391] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 321.382416][ T5916] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 321.545328][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 321.624325][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.472426][ T8418] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 322.762213][ T5916] usb 2-1: string descriptor 0 read error: -71 [ 322.775311][ T5916] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 322.803689][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.850768][ T5916] usb 2-1: config 0 descriptor?? [ 322.966361][ T5916] usb 2-1: can't set config #0, error -71 [ 323.007921][ T5916] usb 2-1: USB disconnect, device number 8 [ 324.780268][ T8438] loop3: detected capacity change from 0 to 32768 [ 324.798425][ T8438] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.655 (8438) [ 324.960607][ T8438] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 324.973335][ T8438] BTRFS info (device loop3): using crc32c checksum algorithm [ 324.981609][ T8438] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 325.487223][ T8438] BTRFS info (device loop3): rebuilding free space tree [ 325.721669][ T8438] BTRFS info (device loop3): disabling free space tree [ 325.728818][ T8438] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 325.738716][ T8438] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 325.787779][ T8438] BTRFS info (device loop3): enabling ssd optimizations [ 325.794976][ T8438] BTRFS info (device loop3): turning on async discard [ 325.803095][ T8438] BTRFS info (device loop3): enabling disk space caching [ 325.810166][ T8438] BTRFS info (device loop3): force clearing of disk cache [ 325.817902][ T8438] BTRFS info (device loop3): use zstd compression, level 3 [ 327.654476][ T5838] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 337.220894][ T8530] EXT4-fs (nbd3): unable to read superblock [ 339.390979][ T8555] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.579385][ T5160] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 347.462275][ T30] audit: type=1800 audit(1775100186.450:337): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.700" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 348.769729][ T8627] bridge1: entered promiscuous mode [ 351.732577][ T8645] loop2: detected capacity change from 0 to 32768 [ 351.787161][ T8645] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 352.361135][ T8645] XFS (loop2): Ending clean mount [ 352.369049][ T8645] XFS (loop2): Quotacheck needed: Please wait. [ 352.665848][ T8645] XFS (loop2): Quotacheck: Done. [ 353.291534][ T5836] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 354.806010][ T8663] kvm_intel: kvm [8661]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 354.818266][ T8663] kvm_intel: kvm [8661]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 354.926057][ T8663] kvm_intel: kvm [8661]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 354.935306][ T8663] kvm_intel: kvm [8661]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 355.216021][ T8663] kvm_intel: kvm [8661]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 355.258233][ T8663] kvm_intel: kvm [8661]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 358.169781][ T8718] trusted_key: syz.2.720 sent an empty control message without MSG_MORE. [ 358.210945][ T8721] tipc: Failed to remove unknown binding: 66,0,0/0:2534835928/2534835930 [ 358.234655][ T8721] tipc: Failed to remove unknown binding: 66,0,0/0:2534835928/2534835929 [ 358.270659][ T8721] tipc: Failed to remove unknown binding: 66,0,0/0:2534835928/2534835930 [ 358.301665][ T8721] tipc: Failed to remove unknown binding: 66,0,0/0:2534835928/2534835929 [ 358.318223][ T8687] ufs: You didn't specify the type of your ufs filesystem [ 358.318223][ T8687] [ 358.318223][ T8687] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 358.318223][ T8687] [ 358.318223][ T8687] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 358.356882][ T8687] ufs: ufstype=old is supported read-only [ 358.394737][ T8716] ÿ1Ie5nè‹Ò: entered promiscuous mode [ 360.975242][ T5840] IPVS: starting estimator thread 0... [ 361.066438][ T8746] IPVS: using max 31 ests per chain, 74400 per kthread [ 362.581838][ T8771] loop2: detected capacity change from 0 to 32768 [ 362.597010][ T8771] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.736 (8771) [ 363.103042][ T8771] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 363.113758][ T8771] BTRFS info (device loop2): using crc32c checksum algorithm [ 363.123405][ T8771] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 363.195544][ T8771] BTRFS info (device loop2): rebuilding free space tree [ 363.313554][ T8771] BTRFS info (device loop2): disabling free space tree [ 363.321982][ T8771] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 363.331730][ T8771] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 363.357130][ T8771] BTRFS info (device loop2): enabling ssd optimizations [ 363.364129][ T8771] BTRFS info (device loop2): turning on async discard [ 363.371038][ T8771] BTRFS info (device loop2): enabling disk space caching [ 363.378135][ T8771] BTRFS info (device loop2): force clearing of disk cache [ 363.385734][ T8771] BTRFS info (device loop2): use zstd compression, level 3 [ 364.461915][ T8797] loop3: detected capacity change from 0 to 512 [ 364.730899][ T5836] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 365.539079][ T8797] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.740: missing EA_INODE flag [ 365.673612][ T8797] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 365.675649][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 365.693101][ C1] EXT4-fs (loop3): initial error at time 1775100204: ext4_xattr_inode_iget:441: inode 12 [ 365.702983][ C1] EXT4-fs (loop3): last error at time 1775100204: ext4_xattr_inode_iget:441: inode 12 [ 365.916931][ T8797] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.740: error while reading EA inode 12 err=-117 [ 365.966849][ T8797] loop3: lost filesystem error report for type 5 error -117 [ 365.968025][ T8797] EXT4-fs (loop3): 1 orphan inode deleted [ 366.179863][ T8816] loop0: detected capacity change from 0 to 2048 [ 366.235477][ T8816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=14071, location=14071 [ 366.250393][ T8816] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 366.265230][ T8816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=14327, location=14327 [ 366.275358][ T8816] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 366.283041][ T8816] UDF-fs: Scanning with blocksize 512 failed [ 366.300277][ T8816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=14071, location=14071 [ 366.313924][ T8816] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 366.329142][ T8816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=14327, location=14327 [ 366.339207][ T8816] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 366.346972][ T8816] UDF-fs: Scanning with blocksize 1024 failed [ 366.359133][ T8816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=14071, location=14071 [ 366.371936][ T8816] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 366.403157][ T8816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=14327, location=14327 [ 366.413196][ T8816] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 366.420930][ T8816] UDF-fs: Scanning with blocksize 2048 failed [ 366.422147][ T8797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.475748][ T8816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=14071, location=14071 [ 366.494597][ T8816] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 366.506349][ T8816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=14327, location=14327 [ 366.516355][ T8816] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 366.524005][ T8816] UDF-fs: Scanning with blocksize 4096 failed [ 366.530181][ T8816] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 369.558292][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.629916][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.733059][ T8853] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.695421][ T6038] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 371.717400][ T8853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.400821][ T6038] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.422918][ T6038] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 372.428504][ T8877] netlink: 'syz.3.761': attribute type 3 has an invalid length. [ 372.440602][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.761'. [ 372.442630][ T6038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.450183][ T8877] netlink: 2 bytes leftover after parsing attributes in process `syz.3.761'. [ 373.131376][ T6038] usb 1-1: config 0 descriptor?? [ 373.161645][ T6038] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 373.312949][ T8883] loop2: detected capacity change from 0 to 512 [ 373.400766][ T8883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.436200][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.479522][ T8883] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.524693][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.459630][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'. [ 374.860666][ T5916] usb 1-1: USB disconnect, device number 4 [ 375.065028][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.146043][ T8929] tipc: Started in network mode [ 377.151110][ T8929] tipc: Node identity 86ac259677db, cluster identity 4711 [ 377.158968][ T8929] tipc: Enabled bearer , priority 0 [ 377.179401][ T8929] syzkaller0: entered allmulticast mode [ 377.872357][ T8938] tipc: Resetting bearer [ 377.903450][ T8928] tipc: Resetting bearer [ 378.024000][ T8940] loop1: detected capacity change from 0 to 2048 [ 378.072372][ T8940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.072919][ T8928] tipc: Disabling bearer [ 378.098824][ T6038] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 378.479124][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.915642][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.976077][ T6038] usb 3-1: Using ep0 maxpacket: 8 [ 379.923074][ T5916] tipc: Node number set to 4051117462 [ 380.759600][ T6038] usb 3-1: device descriptor read/all, error -71 [ 383.496017][ T8961] overlayfs: failed to clone lowerpath [ 384.789625][ T8975] syzkaller0: entered promiscuous mode [ 384.813169][ T8975] syzkaller0: entered allmulticast mode [ 386.158979][ T8988] loop1: detected capacity change from 0 to 128 [ 386.323918][ T8988] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.884864][ T8988] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 386.929550][ T8997] loop3: detected capacity change from 0 to 128 [ 386.937309][ T8997] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 387.137921][ T8997] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.026287][ T9008] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 388.035413][ T9008] FAT-fs (loop3): Filesystem has been set read-only [ 388.048300][ T9008] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 388.538619][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.341617][ T9025] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 391.629386][ T9034] netlink: 277 bytes leftover after parsing attributes in process `syz.4.802'. [ 402.768451][ T9109] bridge_slave_0: left allmulticast mode [ 402.789022][ T9109] bridge_slave_0: left promiscuous mode [ 402.816784][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.890886][ T9109] bridge_slave_1: left allmulticast mode [ 402.937348][ T9109] bridge_slave_1: left promiscuous mode [ 402.999845][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.444486][ T5160] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 404.637597][ T9109] bond0: (slave bond_slave_0): Releasing backup interface [ 404.726396][ T9109] bond0: (slave bond_slave_1): Releasing backup interface [ 404.767247][ T9109] team0: Port device team_slave_0 removed [ 404.810857][ T9109] team0: Port device team_slave_1 removed [ 404.831000][ T9109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.866202][ T9109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.914110][ T9109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.949909][ T9109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.984184][ T9109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.082962][ T9111] team0: Mode changed to "loadbalance" [ 405.179149][ T49] bond1: (slave vlan3): link status definitely down, disabling slave [ 405.284800][ T49] bond1: now running without any active interface! [ 407.013371][ T9162] kAFS: unable to lookup cell '(,c¾ûL' [ 407.220112][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 410.309398][ T9202] tipc: Enabled bearer , priority 0 [ 415.117840][ T9239] random: crng reseeded on system resumption [ 415.525996][ T9235] overlayfs: failed to clone upperpath [ 416.323859][ T9244] pimreg: entered allmulticast mode [ 417.848928][ T30] audit: type=1326 audit(1775100256.840:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 418.841152][ T30] audit: type=1326 audit(1775100256.870:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 420.882176][ T30] audit: type=1326 audit(1775100256.870:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6eb55d04e code=0x7ffc0000 [ 421.136195][ T30] audit: type=1326 audit(1775100256.870:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 421.158892][ T30] audit: type=1326 audit(1775100257.830:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 421.181192][ T30] audit: type=1326 audit(1775100257.860:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 421.272066][ T30] audit: type=1326 audit(1775100257.860:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 421.505729][ T30] audit: type=1326 audit(1775100257.860:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 422.306453][ T30] audit: type=1326 audit(1775100257.860:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 422.351584][ T9274] loop2: detected capacity change from 0 to 256 [ 422.400813][ T9274] vfat: Bad value for 'tz' [ 423.692243][ T9296] loop2: detected capacity change from 0 to 40427 [ 423.723994][ T9296] F2FS-fs (loop2): invalid crc value [ 423.776765][ T9296] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 423.789662][ T9296] F2FS-fs (loop2): Start checkpoint disabled! [ 423.954995][ T9305] loop3: detected capacity change from 0 to 1024 [ 423.971388][ T9305] hfsplus: Unknown parameter 'Œ' [ 424.406240][ T9296] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 424.511094][ T9296] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 426.442202][ T6013] kworker/u8:10: attempt to access beyond end of device [ 426.442202][ T6013] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 426.682952][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.682975][ T6013] Tainted: [L]=SOFTLOCKUP [ 426.682980][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 426.682987][ T6013] Workqueue: writeback wb_workfn (flush-7:2) [ 426.683011][ T6013] Call Trace: [ 426.683018][ T6013] [ 426.683024][ T6013] dump_stack_lvl+0xe8/0x150 [ 426.683043][ T6013] f2fs_stop_checkpoint+0x3c7/0x590 [ 426.683061][ T6013] f2fs_write_end_io+0x12e5/0x17a0 [ 426.683084][ T6013] __submit_merged_bio+0x256/0x6a0 [ 426.683103][ T6013] __submit_merged_write_cond+0x3c9/0x4e0 [ 426.683121][ T6013] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 426.683207][ T6013] f2fs_write_data_pages+0x287e/0x34f0 [ 426.683237][ T6013] ? __lock_acquire+0x6b5/0x2cf0 [ 426.683271][ T6013] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 426.683280][ T6013] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.683317][ T6013] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.683338][ T6013] ? rcu_is_watching+0x15/0xb0 [ 426.683348][ T6013] ? trace_hrtimer_start+0x82/0x200 [ 426.683369][ T6013] ? finish_task_switch+0x41f/0xbe0 [ 426.683383][ T6013] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 426.683393][ T6013] do_writepages+0x32e/0x550 [ 426.683411][ T6013] ? reacquire_held_locks+0x104/0x190 [ 426.683420][ T6013] ? writeback_sb_inodes+0x463/0x19d0 [ 426.683437][ T6013] __writeback_single_inode+0x133/0x10e0 [ 426.683451][ T6013] ? do_raw_spin_unlock+0xf5/0x210 [ 426.683465][ T6013] writeback_sb_inodes+0x979/0x19d0 [ 426.683477][ T6013] ? __lock_acquire+0x6b5/0x2cf0 [ 426.683505][ T6013] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 426.683517][ T6013] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.683549][ T6013] ? rcu_is_watching+0x15/0xb0 [ 426.683575][ T6013] wb_writeback+0x445/0xb00 [ 426.683591][ T6013] ? queue_io+0x1d1/0x470 [ 426.683607][ T6013] ? __pfx_wb_writeback+0x10/0x10 [ 426.683618][ T6013] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.683639][ T6013] wb_workfn+0x3f8/0xf10 [ 426.683648][ T6013] ? __lock_acquire+0x6b5/0x2cf0 [ 426.683661][ T6013] ? look_up_lock_class+0x57/0x110 [ 426.683684][ T6013] ? __pfx_wb_workfn+0x10/0x10 [ 426.683698][ T6013] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.683710][ T6013] ? lock_acquire+0x106/0x350 [ 426.683724][ T6013] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 426.683738][ T6013] ? process_scheduled_works+0xa70/0x1860 [ 426.683753][ T6013] ? process_scheduled_works+0xa70/0x1860 [ 426.683778][ T6013] ? process_scheduled_works+0xa70/0x1860 [ 426.683792][ T6013] ? process_scheduled_works+0xa70/0x1860 [ 426.683807][ T6013] process_scheduled_works+0xb5d/0x1860 [ 426.683839][ T6013] ? __pfx_process_scheduled_works+0x10/0x10 [ 426.683858][ T6013] ? assign_work+0x3d5/0x5e0 [ 426.683875][ T6013] worker_thread+0xa53/0xfc0 [ 426.683904][ T6013] kthread+0x388/0x470 [ 426.683916][ T6013] ? __pfx_worker_thread+0x10/0x10 [ 426.683929][ T6013] ? __pfx_kthread+0x10/0x10 [ 426.683941][ T6013] ret_from_fork+0x514/0xb70 [ 426.683963][ T6013] ? __pfx_ret_from_fork+0x10/0x10 [ 426.683977][ T6013] ? __switch_to+0xc79/0x1410 [ 426.684000][ T6013] ? __pfx_kthread+0x10/0x10 [ 426.684020][ T6013] ret_from_fork_asm+0x1a/0x30 [ 426.684051][ T6013] [ 426.684059][ T6013] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 428.550510][ T30] audit: type=1326 audit(1775100267.540:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.0.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x0 [ 429.152869][ T9339] loop3: detected capacity change from 0 to 2048 [ 429.207065][ T9342] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 429.291352][ T9339] hpfs: hpfs_map_sector(): read error [ 431.483094][ T9362] loop2: detected capacity change from 0 to 2048 [ 431.496280][ T9362] udf: Unknown parameter 'ioc#Ûharset' [ 433.400482][ T9380] syzkaller0: entered promiscuous mode [ 434.779878][ T9380] syzkaller0: entered allmulticast mode [ 439.929189][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.935793][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.612223][ T9470] bridge_slave_0: left allmulticast mode [ 442.626962][ T9470] bridge_slave_0: left promiscuous mode [ 442.643137][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.094810][ T9480] xt_policy: output policy not valid in PREROUTING and INPUT [ 443.142125][ T9470] bridge_slave_1: left allmulticast mode [ 443.148150][ T9470] bridge_slave_1: left promiscuous mode [ 443.154056][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.100958][ T9470] bond0: (slave bond_slave_0): Releasing backup interface [ 444.112953][ T9470] bond0: (slave bond_slave_1): Releasing backup interface [ 444.414512][ T9470] team0: Port device team_slave_0 removed [ 444.726628][ T9470] team0: Port device team_slave_1 removed [ 444.782909][ T9470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.803490][ T9470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.235424][ T9470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.254594][ T9470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.274357][ T9470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 447.356958][ T9472] team0: Mode changed to "loadbalance" [ 447.426251][ T9506] loop2: detected capacity change from 0 to 128 [ 447.519788][ T9506] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.591919][ T9509] syzkaller0: entered promiscuous mode [ 447.621369][ T9506] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 447.637090][ T9509] syzkaller0: entered allmulticast mode [ 448.687572][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.399410][ T9549] hub 9-0:1.0: USB hub found [ 449.410346][ T9549] hub 9-0:1.0: 1 port detected [ 449.842902][ T5160] Bluetooth: hci0: hcon ffff88802c5bc000 sent 0 < count 137 [ 449.850985][ T5160] Bluetooth: hci0: hcon ffff88802c5bc000 sent 0 < count 6 [ 449.861949][ T5160] Bluetooth: hci0: hcon ffff88802c5bc000 sent 0 < count 255 [ 450.099384][ T9563] netlink: 'syz.4.947': attribute type 11 has an invalid length. [ 452.277541][ T9581] syzkaller0: entered promiscuous mode [ 452.315696][ T9581] syzkaller0: entered allmulticast mode [ 452.675019][ T9555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.816537][ T9601] loop2: detected capacity change from 0 to 64 [ 455.162276][ T9623] tipc: Enabling of bearer rejected, failed to enable media [ 458.309915][ T9645] kAFS: unable to lookup cell '(,c¾ûL' [ 459.421472][ T9657] affs: No valid root block on device nullb0 [ 461.260571][ T9671] loop1: detected capacity change from 0 to 512 [ 461.315147][ T9671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.335261][ T9671] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.701047][ T9647] bridge1: port 1(vlan2) entered disabled state [ 462.832571][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.133673][ T9686] 9p: Bad value for 'rfdno' [ 463.484101][ T1116] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.517903][ T1116] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.532087][ T1116] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.541498][ T1116] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.767165][ T9710] xt_hashlimit: size too large, truncated to 1048576 [ 472.146747][ T5160] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 473.739119][ T9776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1009'. [ 476.009808][ T808] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 476.265387][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 476.763411][ T808] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 476.772317][ T808] usb 4-1: config 0 has no interface number 0 [ 476.780986][ T808] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 476.790830][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.803559][ T808] usb 4-1: Product: syz [ 476.817427][ T808] usb 4-1: Manufacturer: syz [ 477.042575][ T808] usb 4-1: SerialNumber: syz [ 477.949274][ T808] usb 4-1: config 0 descriptor?? [ 478.968867][ T9827] loop2: detected capacity change from 0 to 164 [ 479.169127][ T9827] ISOFS: unable to read i-node block [ 479.177112][ T9827] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 479.204400][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'. [ 479.228821][ T808] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 479.312531][ T808] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 479.381087][ T808] usb 4-1: USB disconnect, device number 3 [ 480.519060][ T9846] syzkaller0: entered promiscuous mode [ 480.556782][ T9846] syzkaller0: entered allmulticast mode [ 483.584709][ T9874] overlayfs: failed to clone upperpath [ 484.873507][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 484.896682][ T5916] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 485.011381][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 485.677710][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.712361][ T5916] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 485.722157][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.742347][ T5916] usb 2-1: config 0 descriptor?? [ 485.773591][ T5916] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 486.464247][ T9898] o2cb: This node has not been configured. [ 486.470564][ T9898] o2cb: Cluster check failed. Fix errors before retrying. [ 486.478227][ T9898] (syz.0.1035,9898,0):user_dlm_register:674 ERROR: status = -22 [ 486.487898][ T9898] (syz.0.1035,9898,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 486.931347][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.011818][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.514646][ T9913] syz.3.1039 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 489.504402][ T9925] loop2: detected capacity change from 0 to 40427 [ 489.513649][ T9925] F2FS-fs (loop2): invalid crc value [ 489.626931][ T9933] befs: (nullb0): invalid magic header [ 489.690073][ T9925] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 489.707416][ T9925] F2FS-fs (loop2): Start checkpoint disabled! [ 489.839043][ T9925] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 489.848300][ T9925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 490.979739][ T6373] kworker/u8:15: attempt to access beyond end of device [ 490.979739][ T6373] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 491.000489][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.000522][ T6373] Tainted: [L]=SOFTLOCKUP [ 491.000538][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 491.000551][ T6373] Workqueue: writeback wb_workfn (flush-7:2) [ 491.000584][ T6373] Call Trace: [ 491.000592][ T6373] [ 491.000600][ T6373] dump_stack_lvl+0xe8/0x150 [ 491.000631][ T6373] f2fs_stop_checkpoint+0x3c7/0x590 [ 491.000665][ T6373] f2fs_write_end_io+0x12e5/0x17a0 [ 491.000713][ T6373] __submit_merged_bio+0x256/0x6a0 [ 491.000749][ T6373] __submit_merged_write_cond+0x3c9/0x4e0 [ 491.000785][ T6373] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 491.000840][ T6373] f2fs_write_data_pages+0x287e/0x34f0 [ 491.000903][ T6373] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 491.000940][ T6373] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 491.001001][ T6373] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 491.001051][ T6373] ? __lock_acquire+0x6b5/0x2cf0 [ 491.001095][ T6373] ? set_shrinker_bit+0x7c/0x350 [ 491.001123][ T6373] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 491.001144][ T6373] do_writepages+0x32e/0x550 [ 491.001177][ T6373] ? reacquire_held_locks+0x104/0x190 [ 491.001195][ T6373] ? writeback_sb_inodes+0x463/0x19d0 [ 491.001226][ T6373] __writeback_single_inode+0x133/0x10e0 [ 491.001253][ T6373] ? do_raw_spin_unlock+0xf5/0x210 [ 491.001281][ T6373] writeback_sb_inodes+0x979/0x19d0 [ 491.001303][ T6373] ? __lock_acquire+0x6b5/0x2cf0 [ 491.001357][ T6373] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 491.001377][ T6373] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.001424][ T6373] ? rcu_is_watching+0x15/0xb0 [ 491.001441][ T6373] wb_writeback+0x445/0xb00 [ 491.001457][ T6373] ? queue_io+0x1d1/0x470 [ 491.001474][ T6373] ? __pfx_wb_writeback+0x10/0x10 [ 491.001484][ T6373] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.001506][ T6373] wb_workfn+0x3f8/0xf10 [ 491.001515][ T6373] ? __lock_acquire+0x6b5/0x2cf0 [ 491.001528][ T6373] ? look_up_lock_class+0x57/0x110 [ 491.001559][ T6373] ? __pfx_wb_workfn+0x10/0x10 [ 491.001568][ T6373] ? finish_task_switch+0x15f/0xbe0 [ 491.001581][ T6373] ? lock_acquire+0x106/0x350 [ 491.001596][ T6373] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.001606][ T6373] ? lock_acquire+0x106/0x350 [ 491.001620][ T6373] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 491.001633][ T6373] ? process_scheduled_works+0xa70/0x1860 [ 491.001648][ T6373] ? process_scheduled_works+0xa70/0x1860 [ 491.001667][ T6373] ? process_scheduled_works+0xa70/0x1860 [ 491.001681][ T6373] ? process_scheduled_works+0xa70/0x1860 [ 491.001696][ T6373] process_scheduled_works+0xb5d/0x1860 [ 491.001728][ T6373] ? __pfx_process_scheduled_works+0x10/0x10 [ 491.001746][ T6373] ? assign_work+0x3d5/0x5e0 [ 491.001763][ T6373] worker_thread+0xa53/0xfc0 [ 491.001797][ T6373] kthread+0x388/0x470 [ 491.001809][ T6373] ? __pfx_worker_thread+0x10/0x10 [ 491.001822][ T6373] ? __pfx_kthread+0x10/0x10 [ 491.001834][ T6373] ret_from_fork+0x514/0xb70 [ 491.001851][ T6373] ? __pfx_ret_from_fork+0x10/0x10 [ 491.001865][ T6373] ? __switch_to+0xc79/0x1410 [ 491.001879][ T6373] ? __pfx_kthread+0x10/0x10 [ 491.001891][ T6373] ret_from_fork_asm+0x1a/0x30 [ 491.001911][ T6373] [ 491.001916][ T6373] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 491.443421][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1046'. [ 494.784289][ T6038] usb 2-1: USB disconnect, device number 9 [ 494.875275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 495.401344][ T5840] Process accounting resumed [ 498.315604][ T9990] loop3: detected capacity change from 0 to 40427 [ 499.032377][ T9990] F2FS-fs (loop3): invalid crc value [ 499.232810][ T9990] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 499.248312][ T9990] F2FS-fs (loop3): Start checkpoint disabled! [ 499.268250][ T9990] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 499.276486][ T9990] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 500.303596][ T6373] kworker/u8:15: attempt to access beyond end of device [ 500.303596][ T6373] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 500.775435][T10009] loop2: detected capacity change from 0 to 2048 [ 500.827140][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.827165][ T6373] Tainted: [L]=SOFTLOCKUP [ 500.827170][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 500.827179][ T6373] Workqueue: writeback wb_workfn (flush-7:3) [ 500.827203][ T6373] Call Trace: [ 500.827209][ T6373] [ 500.827215][ T6373] dump_stack_lvl+0xe8/0x150 [ 500.827238][ T6373] f2fs_stop_checkpoint+0x3c7/0x590 [ 500.827264][ T6373] f2fs_write_end_io+0x12e5/0x17a0 [ 500.827298][ T6373] __submit_merged_bio+0x256/0x6a0 [ 500.827324][ T6373] __submit_merged_write_cond+0x3c9/0x4e0 [ 500.827351][ T6373] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 500.827391][ T6373] f2fs_write_data_pages+0x287e/0x34f0 [ 500.827438][ T6373] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 500.827464][ T6373] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 500.827520][ T6373] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 500.827557][ T6373] ? __lock_acquire+0x6b5/0x2cf0 [ 500.827590][ T6373] ? set_shrinker_bit+0x7c/0x350 [ 500.827610][ T6373] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 500.827625][ T6373] do_writepages+0x32e/0x550 [ 500.827648][ T6373] ? reacquire_held_locks+0x104/0x190 [ 500.827661][ T6373] ? writeback_sb_inodes+0x463/0x19d0 [ 500.827685][ T6373] __writeback_single_inode+0x133/0x10e0 [ 500.827704][ T6373] ? do_raw_spin_unlock+0xf5/0x210 [ 500.827724][ T6373] writeback_sb_inodes+0x979/0x19d0 [ 500.827740][ T6373] ? __lock_acquire+0x6b5/0x2cf0 [ 500.827765][ T6373] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.827798][ T6373] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 500.827813][ T6373] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.827864][ T6373] ? rcu_is_watching+0x15/0xb0 [ 500.827886][ T6373] wb_writeback+0x445/0xb00 [ 500.827908][ T6373] ? queue_io+0x1d1/0x470 [ 500.827930][ T6373] ? __pfx_wb_writeback+0x10/0x10 [ 500.827945][ T6373] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.827975][ T6373] wb_workfn+0x3f8/0xf10 [ 500.827987][ T6373] ? __lock_acquire+0x6b5/0x2cf0 [ 500.828004][ T6373] ? look_up_lock_class+0x57/0x110 [ 500.828038][ T6373] ? __pfx_wb_workfn+0x10/0x10 [ 500.828056][ T6373] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.828070][ T6373] ? lock_acquire+0x106/0x350 [ 500.828090][ T6373] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 500.828108][ T6373] ? process_scheduled_works+0xa70/0x1860 [ 500.828130][ T6373] ? process_scheduled_works+0xa70/0x1860 [ 500.828156][ T6373] ? process_scheduled_works+0xa70/0x1860 [ 500.828174][ T6373] ? process_scheduled_works+0xa70/0x1860 [ 500.828196][ T6373] process_scheduled_works+0xb5d/0x1860 [ 500.828246][ T6373] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.828272][ T6373] ? assign_work+0x3d5/0x5e0 [ 500.828302][ T6373] worker_thread+0xa53/0xfc0 [ 500.828347][ T6373] kthread+0x388/0x470 [ 500.828363][ T6373] ? __pfx_worker_thread+0x10/0x10 [ 500.828380][ T6373] ? __pfx_kthread+0x10/0x10 [ 500.828397][ T6373] ret_from_fork+0x514/0xb70 [ 500.828421][ T6373] ? __pfx_ret_from_fork+0x10/0x10 [ 500.828441][ T6373] ? __switch_to+0xc79/0x1410 [ 500.828461][ T6373] ? __pfx_kthread+0x10/0x10 [ 500.828478][ T6373] ret_from_fork_asm+0x1a/0x30 [ 500.828520][ T6373] [ 500.829098][ T6373] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 500.835146][T10009] hpfs: hpfs_map_sector(): read error [ 501.540236][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.546979][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.573796][T10036] loop3: detected capacity change from 0 to 512 [ 503.658959][T10036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.674318][T10036] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.979367][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 504.976480][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.785659][T10086] comedi comedi3: das16m1: I/O port conflict (0x4e27,16) [ 509.806996][T10086] loop1: detected capacity change from 0 to 1024 [ 510.573416][T10086] EXT4-fs: Mount option(s) incompatible with ext3 [ 511.516171][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 511.527277][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 512.333550][T10101] kvm: pic: non byte read [ 512.339317][T10101] kvm: pic: non byte read [ 512.343803][T10101] kvm: pic: non byte read [ 512.361811][T10101] kvm: pic: non byte read [ 513.016872][T10101] kvm: pic: non byte read [ 513.215367][T10101] kvm: pic: non byte read [ 513.219903][T10101] kvm: pic: non byte read [ 513.224332][T10101] kvm: pic: non byte read [ 513.228832][T10101] kvm: pic: non byte read [ 513.233252][T10101] kvm: pic: non byte read [ 514.557457][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 521.469780][T10169] vlan4: entered promiscuous mode [ 522.136861][T10178] 9pnet_virtio: no channels available for device 127.0.0.1 [ 522.443579][T10169] vlan4: entered allmulticast mode [ 522.558863][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 522.570507][T10169] hsr_slave_1: entered allmulticast mode [ 523.419590][ T5160] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 523.428776][ T5160] Bluetooth: hci3: Injecting HCI hardware error event [ 523.449057][ T5160] Bluetooth: hci3: hardware error 0x00 [ 524.229363][T10197] loop2: detected capacity change from 0 to 4096 [ 524.237650][T10197] EXT4-fs: Ignoring removed i_version option [ 524.243683][T10197] EXT4-fs: inline encryption not supported [ 524.263535][T10197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.300385][ T5853] Bluetooth: unknown link type 128 [ 524.302794][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 524.318738][T10197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.416048][T10206] futex_wake_op: syz.2.1107 tries to shift op by -1; fix this program [ 525.835613][ T5160] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 526.032003][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.315205][ T5160] Bluetooth: hci2: command 0x0406 tx timeout [ 526.612105][T10224] loop3: detected capacity change from 0 to 764 [ 526.623347][T10224] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 529.619846][T10242] program syz.3.1115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.629485][T10242] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 533.325294][T10268] tipc: Failed to remove unknown binding: 66,0,0/0:4196641079/4196641081 [ 533.475902][T10265] tipc: Failed to remove unknown binding: 66,0,0/0:4192600249/4192600250 [ 533.870729][T10265] tipc: Failed to remove unknown binding: 66,0,0/0:4192600249/4192600250 [ 538.162962][T10316] xt_connbytes: Forcing CT accounting to be enabled [ 538.201618][T10316] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 538.959417][T10323] loop3: detected capacity change from 0 to 40427 [ 538.967345][T10323] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 538.975171][T10323] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 538.985700][T10323] F2FS-fs (loop3): invalid crc value [ 539.053942][T10323] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 539.077117][T10323] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 539.084227][T10323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 539.835848][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 540.025251][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 540.053104][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 540.063843][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.078916][ T9] usb 3-1: Product: syz [ 540.083166][ T9] usb 3-1: Manufacturer: syz [ 540.088495][ T9] usb 3-1: SerialNumber: syz [ 540.118075][ T9] usb 3-1: config 0 descriptor?? [ 540.141337][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 540.167418][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 540.167418][ T9] [ 540.193119][ T9] usb 3-1: selecting invalid altsetting 3 [ 540.204544][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 540.204544][ T9] [ 540.221169][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 540.251830][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.288445][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 540.306284][ T5840] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 540.306377][ T9] usb 3-1: media controller created [ 540.362826][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 540.497829][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 540.516580][T10325] dvb-usb: bulk message failed: -22 (7/0) [ 540.529115][ T9] dvb-usb: MAC address reading failed. [ 541.083643][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.102378][T10325] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 541.104375][ T5840] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 541.128020][ T5840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.139838][ T5840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 541.149995][ T5840] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.235187][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.250199][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.279100][ T5840] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 541.291811][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 541.315125][ T5840] usb 2-1: Product: syz [ 541.319442][ T5840] usb 2-1: Manufacturer: syz [ 541.369784][ T9] DVB: Unable to find symbol stb0899_attach() [ 541.385306][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 541.390766][ T5840] cdc_wdm 2-1:1.0: skipping garbage [ 541.404112][ T5840] cdc_wdm 2-1:1.0: skipping garbage [ 541.630836][ T9] rc_core: IR keymap rc-tt-1500 not found [ 541.646324][ T9] Registered IR keymap rc-empty [ 541.667701][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.671160][ T5840] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 541.689947][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 541.695645][ T5840] cdc_wdm 2-1:1.0: Unknown control protocol [ 541.708241][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.767475][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 541.829875][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 541.852777][T10341] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 541.854587][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 541.854587][ T9] [ 541.902125][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 541.926672][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'. [ 541.964440][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 542.096819][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 542.354824][ T9] usb 3-1: USB disconnect, device number 8 [ 542.511092][ T6038] dvb-usb: bulk message failed: -22 (4/0) [ 542.698708][ T6038] dvb-usb: error -22 while querying for an remote control event. [ 545.583899][ T10] usb 2-1: USB disconnect, device number 10 [ 546.579440][T10406] overlayfs: missing 'lowerdir' [ 546.654729][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 547.925459][T10420] loop3: detected capacity change from 0 to 512 [ 548.966947][T10433] loop2: detected capacity change from 0 to 8 [ 549.022069][T10433] SQUASHFS error: xz decompression failed, data probably corrupt [ 549.029902][T10433] SQUASHFS error: Failed to read block 0x108: -5 [ 549.036375][T10433] SQUASHFS error: Unable to read metadata cache entry [106] [ 549.045434][T10433] SQUASHFS error: Unable to read inode 0x11f [ 549.671100][T10437] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 549.961984][ T5840] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 549.982041][T10420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.035301][T10420] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.244815][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 550.285340][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 550.366921][ T5840] usb 2-1: device descriptor read/all, error -71 [ 550.624842][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.495203][ T30] audit: type=1326 audit(1775100389.690:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.2.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463f19c819 code=0x7ffc0000 [ 551.580416][T10452] loop1: detected capacity change from 0 to 256 [ 551.718402][ T30] audit: type=1326 audit(1775100389.690:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.2.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463f19c819 code=0x7ffc0000 [ 551.937185][ T30] audit: type=1326 audit(1775100389.690:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.2.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f463f19c819 code=0x7ffc0000 [ 553.193058][ T30] audit: type=1326 audit(1775100389.690:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.2.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463f19c819 code=0x7ffc0000 [ 553.606881][ T30] audit: type=1326 audit(1775100389.690:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.2.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463f19c819 code=0x7ffc0000 [ 553.928682][ T30] audit: type=1326 audit(1775100389.690:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.2.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f463f19c819 code=0x7ffc0000 [ 554.010538][T10476] loop2: detected capacity change from 0 to 256 [ 554.055453][ T30] audit: type=1326 audit(1775100389.690:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.2.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463f19c819 code=0x7ffc0000 [ 554.080305][ T30] audit: type=1326 audit(1775100389.690:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.2.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463f19c819 code=0x7ffc0000 [ 554.298672][T10482] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 554.309975][T10482] netlink: 1696 bytes leftover after parsing attributes in process `syz.3.1172'. [ 554.320023][T10482] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1172'. [ 554.468008][T10476] FAT-fs (loop2): Directory bread(block 64) failed [ 554.509943][T10476] FAT-fs (loop2): Directory bread(block 65) failed [ 554.554074][T10476] FAT-fs (loop2): Directory bread(block 66) failed [ 554.647019][T10476] FAT-fs (loop2): Directory bread(block 67) failed [ 554.701974][T10476] FAT-fs (loop2): Directory bread(block 68) failed [ 554.770662][T10476] FAT-fs (loop2): Directory bread(block 69) failed [ 554.835718][T10476] FAT-fs (loop2): Directory bread(block 70) failed [ 554.886658][T10476] FAT-fs (loop2): Directory bread(block 71) failed [ 554.914867][T10476] FAT-fs (loop2): Directory bread(block 72) failed [ 554.915371][T10489] loop1: detected capacity change from 0 to 512 [ 554.954844][T10476] FAT-fs (loop2): Directory bread(block 73) failed [ 555.039737][T10489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.225122][T10489] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.315680][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 556.327032][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 556.427003][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.368115][T10506] loop1: detected capacity change from 0 to 40427 [ 557.380674][T10506] F2FS-fs (loop1): invalid crc value [ 557.392798][T10504] loop3: detected capacity change from 0 to 8 [ 557.483849][T10506] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 557.496987][T10506] F2FS-fs (loop1): Start checkpoint disabled! [ 557.512640][T10506] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 557.544383][T10506] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 557.573316][ T30] audit: type=1800 audit(1775100396.560:356): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1178" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 558.091652][T10511] syz.1.1178: attempt to access beyond end of device [ 558.091652][T10511] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 558.108027][T10511] syz.1.1178: attempt to access beyond end of device [ 558.108027][T10511] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 558.122467][T10511] syz.1.1178: attempt to access beyond end of device [ 558.122467][T10511] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 558.136814][T10511] syz.1.1178: attempt to access beyond end of device [ 558.136814][T10511] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 558.151160][T10511] syz.1.1178: attempt to access beyond end of device [ 558.151160][T10511] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 558.167784][T10511] syz.1.1178: attempt to access beyond end of device [ 558.167784][T10511] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 558.182495][T10511] syz.1.1178: attempt to access beyond end of device [ 558.182495][T10511] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 558.196862][T10511] syz.1.1178: attempt to access beyond end of device [ 558.196862][T10511] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 558.211180][T10511] syz.1.1178: attempt to access beyond end of device [ 558.211180][T10511] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 558.326539][T10511] syz.1.1178: attempt to access beyond end of device [ 558.326539][T10511] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 559.067649][ T3493] CPU: 0 UID: 0 PID: 3493 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.067670][ T3493] Tainted: [L]=SOFTLOCKUP [ 559.067674][ T3493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 559.067681][ T3493] Workqueue: writeback wb_workfn (flush-7:1) [ 559.067700][ T3493] Call Trace: [ 559.067705][ T3493] [ 559.067710][ T3493] dump_stack_lvl+0xe8/0x150 [ 559.067728][ T3493] f2fs_stop_checkpoint+0x3c7/0x590 [ 559.067747][ T3493] f2fs_write_end_io+0x12e5/0x17a0 [ 559.067772][ T3493] __submit_merged_bio+0x256/0x6a0 [ 559.067791][ T3493] __submit_merged_write_cond+0x3c9/0x4e0 [ 559.067810][ T3493] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 559.067838][ T3493] f2fs_write_data_pages+0x287e/0x34f0 [ 559.067848][ T3493] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 559.067882][ T3493] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 559.067900][ T3493] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 559.067932][ T3493] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 559.067958][ T3493] ? __lock_acquire+0x6b5/0x2cf0 [ 559.067983][ T3493] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 559.067996][ T3493] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 559.068007][ T3493] do_writepages+0x32e/0x550 [ 559.068024][ T3493] ? reacquire_held_locks+0x104/0x190 [ 559.068034][ T3493] ? writeback_sb_inodes+0x463/0x19d0 [ 559.068051][ T3493] __writeback_single_inode+0x133/0x10e0 [ 559.068065][ T3493] ? do_raw_spin_unlock+0xf5/0x210 [ 559.068079][ T3493] writeback_sb_inodes+0x979/0x19d0 [ 559.068091][ T3493] ? __lock_acquire+0x6b5/0x2cf0 [ 559.068128][ T3493] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 559.068140][ T3493] ? do_raw_spin_lock+0x12b/0x2f0 [ 559.068175][ T3493] ? rcu_is_watching+0x15/0xb0 [ 559.068190][ T3493] wb_writeback+0x445/0xb00 [ 559.068205][ T3493] ? queue_io+0x1d1/0x470 [ 559.068222][ T3493] ? __pfx_wb_writeback+0x10/0x10 [ 559.068233][ T3493] ? do_raw_spin_lock+0x12b/0x2f0 [ 559.068254][ T3493] wb_workfn+0x3f8/0xf10 [ 559.068263][ T3493] ? __lock_acquire+0x6b5/0x2cf0 [ 559.068276][ T3493] ? look_up_lock_class+0x57/0x110 [ 559.068300][ T3493] ? __pfx_wb_workfn+0x10/0x10 [ 559.068313][ T3493] ? do_raw_spin_lock+0x12b/0x2f0 [ 559.068323][ T3493] ? lock_acquire+0x106/0x350 [ 559.068338][ T3493] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.068351][ T3493] ? process_scheduled_works+0xa70/0x1860 [ 559.068366][ T3493] ? process_scheduled_works+0xa70/0x1860 [ 559.068384][ T3493] ? process_scheduled_works+0xa70/0x1860 [ 559.068398][ T3493] ? process_scheduled_works+0xa70/0x1860 [ 559.068413][ T3493] process_scheduled_works+0xb5d/0x1860 [ 559.068445][ T3493] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.068464][ T3493] ? assign_work+0x3d5/0x5e0 [ 559.068481][ T3493] worker_thread+0xa53/0xfc0 [ 559.068512][ T3493] kthread+0x388/0x470 [ 559.068524][ T3493] ? __pfx_worker_thread+0x10/0x10 [ 559.068537][ T3493] ? __pfx_kthread+0x10/0x10 [ 559.068549][ T3493] ret_from_fork+0x514/0xb70 [ 559.068566][ T3493] ? __pfx_ret_from_fork+0x10/0x10 [ 559.068580][ T3493] ? __switch_to+0xc79/0x1410 [ 559.068594][ T3493] ? __pfx_kthread+0x10/0x10 [ 559.068606][ T3493] ret_from_fork_asm+0x1a/0x30 [ 559.068626][ T3493] [ 559.391219][ T3493] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 559.402030][ T3493] CPU: 0 UID: 0 PID: 3493 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.402049][ T3493] Tainted: [L]=SOFTLOCKUP [ 559.402053][ T3493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 559.402060][ T3493] Workqueue: writeback wb_workfn (flush-7:1) [ 559.402079][ T3493] Call Trace: [ 559.402083][ T3493] [ 559.402089][ T3493] dump_stack_lvl+0xe8/0x150 [ 559.402106][ T3493] f2fs_stop_checkpoint+0x3c7/0x590 [ 559.402124][ T3493] f2fs_write_end_io+0x12e5/0x17a0 [ 559.402147][ T3493] __submit_merged_bio+0x256/0x6a0 [ 559.402165][ T3493] __submit_merged_write_cond+0x3c9/0x4e0 [ 559.402183][ T3493] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 559.402209][ T3493] f2fs_write_data_pages+0x287e/0x34f0 [ 559.402219][ T3493] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 559.402250][ T3493] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 559.402266][ T3493] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 559.402296][ T3493] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 559.402320][ T3493] ? __lock_acquire+0x6b5/0x2cf0 [ 559.402344][ T3493] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 559.402357][ T3493] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 559.402367][ T3493] do_writepages+0x32e/0x550 [ 559.402384][ T3493] ? reacquire_held_locks+0x104/0x190 [ 559.402394][ T3493] ? writeback_sb_inodes+0x463/0x19d0 [ 559.402410][ T3493] __writeback_single_inode+0x133/0x10e0 [ 559.402423][ T3493] ? do_raw_spin_unlock+0xf5/0x210 [ 559.402437][ T3493] writeback_sb_inodes+0x979/0x19d0 [ 559.402448][ T3493] ? __lock_acquire+0x6b5/0x2cf0 [ 559.402476][ T3493] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 559.402487][ T3493] ? do_raw_spin_lock+0x12b/0x2f0 [ 559.402519][ T3493] ? rcu_is_watching+0x15/0xb0 [ 559.402533][ T3493] wb_writeback+0x445/0xb00 [ 559.402547][ T3493] ? queue_io+0x1d1/0x470 [ 559.402563][ T3493] ? __pfx_wb_writeback+0x10/0x10 [ 559.402574][ T3493] ? do_raw_spin_lock+0x12b/0x2f0 [ 559.402594][ T3493] wb_workfn+0x3f8/0xf10 [ 559.402602][ T3493] ? __lock_acquire+0x6b5/0x2cf0 [ 559.402615][ T3493] ? look_up_lock_class+0x57/0x110 [ 559.402637][ T3493] ? __pfx_wb_workfn+0x10/0x10 [ 559.402649][ T3493] ? do_raw_spin_lock+0x12b/0x2f0 [ 559.402659][ T3493] ? lock_acquire+0x106/0x350 [ 559.402673][ T3493] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.402686][ T3493] ? process_scheduled_works+0xa70/0x1860 [ 559.402701][ T3493] ? process_scheduled_works+0xa70/0x1860 [ 559.402718][ T3493] ? process_scheduled_works+0xa70/0x1860 [ 559.402732][ T3493] ? process_scheduled_works+0xa70/0x1860 [ 559.402746][ T3493] process_scheduled_works+0xb5d/0x1860 [ 559.402777][ T3493] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.402794][ T3493] ? assign_work+0x3d5/0x5e0 [ 559.402811][ T3493] worker_thread+0xa53/0xfc0 [ 559.402839][ T3493] kthread+0x388/0x470 [ 559.402850][ T3493] ? __pfx_worker_thread+0x10/0x10 [ 559.402863][ T3493] ? __pfx_kthread+0x10/0x10 [ 559.402880][ T3493] ret_from_fork+0x514/0xb70 [ 559.402897][ T3493] ? __pfx_ret_from_fork+0x10/0x10 [ 559.402911][ T3493] ? __switch_to+0xc79/0x1410 [ 559.402924][ T3493] ? __pfx_kthread+0x10/0x10 [ 559.402936][ T3493] ret_from_fork_asm+0x1a/0x30 [ 559.402954][ T3493] [ 559.402959][ T3493] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 559.456020][T10518] syzkaller0: entered promiscuous mode [ 559.456042][T10518] syzkaller0: entered allmulticast mode [ 559.830594][ T10] loop1: lost filesystem error report for type 5 error -108 [ 561.434639][T10534] loop3: detected capacity change from 0 to 32768 [ 561.455684][T10534] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 561.476303][T10534] XFS (loop3): Ending clean mount [ 563.044394][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.057128][ T5838] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 563.067308][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.190242][T10550] loop2: detected capacity change from 0 to 2048 [ 563.994810][T10550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.894589][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1187'. [ 568.244158][T10594] No such timeout policy "syz1" [ 573.088442][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 573.265810][ T5951] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 573.400944][T10638] loop3: detected capacity change from 0 to 1024 [ 573.425924][T10638] hfsplus: invalid btree extent records (0 size) [ 573.441595][ T5951] usb 3-1: not running at top speed; connect to a high speed hub [ 573.454520][T10638] hfsplus: failed to load catalog file [ 573.472438][ T5951] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 573.500501][ T5951] usb 3-1: config 11 has no interface number 0 [ 573.522514][ T5951] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 573.565394][ T5951] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.597002][ T5951] usb 3-1: config 11 interface 95 has no altsetting 0 [ 573.614961][ T5951] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 573.629777][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 573.655842][ T5951] usb 3-1: Manufacturer: syz [ 573.680855][T10614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 574.792805][ T5951] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -8 [ 574.818613][ T5951] usb 3-1: USB disconnect, device number 9 [ 574.892696][T10660] tipc: Enabling of bearer rejected, failed to enable media [ 575.100226][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 583.395693][T10736] comedi comedi0: pcl724: I/O port conflict (0x6,4) [ 583.476648][T10733] sock: sock_set_timeout: `syz.0.1235' (pid 10733) tries to set negative timeout [ 583.933027][T10733] capability: warning: `syz.0.1235' uses deprecated v2 capabilities in a way that may be insecure [ 586.499722][T10756] geneve2: entered promiscuous mode [ 586.504972][T10756] geneve2: entered allmulticast mode [ 586.563412][ T3493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.824843][ T3493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.849629][ T3493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.867852][ T3493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.938452][ T30] audit: type=1326 audit(1775100425.930:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463f19c819 code=0x0 [ 590.181685][T10810] bridge0: port 1(syz_tun) entered blocking state [ 590.188259][T10810] bridge0: port 1(syz_tun) entered disabled state [ 590.194792][T10810] syz_tun: entered allmulticast mode [ 590.201159][T10810] syz_tun: entered promiscuous mode [ 590.207770][T10810] bridge0: port 1(syz_tun) entered blocking state [ 590.214409][T10810] bridge0: port 1(syz_tun) entered forwarding state [ 591.282856][T10821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 592.111779][ T30] audit: type=1326 audit(1775100431.070:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 592.887653][ T30] audit: type=1326 audit(1775100431.070:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 592.910246][ T30] audit: type=1326 audit(1775100431.070:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 593.362713][T10830] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 593.366575][ T30] audit: type=1326 audit(1775100431.070:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 593.392342][ T30] audit: type=1326 audit(1775100431.070:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 593.468572][ T30] audit: type=1326 audit(1775100431.070:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 593.528754][ T30] audit: type=1326 audit(1775100431.070:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 593.563503][ T30] audit: type=1326 audit(1775100431.070:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 594.528157][ T30] audit: type=1326 audit(1775100431.070:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 595.720233][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1262'. [ 597.200655][T10864] ubi31: attaching mtd0 [ 597.209742][T10864] ubi31: scanning is finished [ 597.214456][T10864] ubi31: empty MTD device detected [ 597.314541][ T5853] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 597.817766][T10864] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 598.303025][T10879] netlink: 'syz.4.1246': attribute type 10 has an invalid length. [ 598.324900][T10879] team0: Port device vxcan1 added [ 598.356559][T10882] loop3: detected capacity change from 0 to 8 [ 600.281140][T10897] loop2: detected capacity change from 0 to 1024 [ 600.725564][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 601.055928][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 602.177873][T10917] sd 0:0:1:0: device reset [ 606.450123][T10948] loop3: detected capacity change from 0 to 512 [ 606.457406][T10948] EXT4-fs: Ignoring removed mblk_io_submit option [ 606.471945][T10948] ext3: Unknown parameter 'context' [ 607.726483][T10960] loop3: detected capacity change from 0 to 512 [ 607.945931][T10960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.503003][T10960] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.732559][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 609.096694][T10980] cgroup: Unknown subsys name 'subj_user' [ 610.774886][T10992] loop1: detected capacity change from 0 to 512 [ 613.735078][T11009] IPv6: Can't replace route, no match found [ 613.747543][T11009] IPv6: Can't replace route, no match found [ 614.271445][T11012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'. [ 617.340264][T11030] capability: warning: `syz.0.1294' uses 32-bit capabilities (legacy support in use) [ 620.422723][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.006152][T11070] loop1: detected capacity change from 0 to 64 [ 622.022258][T11070] hfs: request for non-existent node -252 in B*Tree [ 622.029283][T11070] hfs: request for non-existent node -252 in B*Tree [ 622.087040][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 622.096431][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 622.169203][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 622.295311][T10405] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 622.348861][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.367392][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 622.382273][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.084139][ T9] usb 4-1: config 0 descriptor?? [ 623.103732][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 623.155348][T10405] usb 2-1: Using ep0 maxpacket: 32 [ 623.163242][T10405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.197162][T10405] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.208861][T10405] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 623.218105][T10405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.226191][T10405] usb 2-1: Product: syz [ 623.230447][T10405] usb 2-1: Manufacturer: syz [ 623.235998][T10405] usb 2-1: SerialNumber: syz [ 623.246837][T10405] usb 2-1: config 0 descriptor?? [ 623.320253][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.340893][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.610775][T10456] usb 4-1: USB disconnect, device number 4 [ 624.237912][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.244463][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.548929][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 624.896917][ T5951] usb 2-1: USB disconnect, device number 13 [ 625.393896][T10405] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 626.190765][T10405] usb 3-1: Using ep0 maxpacket: 8 [ 626.200314][T10405] usb 3-1: config 0 has no interfaces? [ 626.208426][T10405] usb 3-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 626.217979][T10405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.226344][T10405] usb 3-1: Product: syz [ 626.230551][T10405] usb 3-1: Manufacturer: syz [ 626.237204][T10405] usb 3-1: SerialNumber: syz [ 626.244704][T10405] usb 3-1: config 0 descriptor?? [ 626.701715][ T10] usb 3-1: USB disconnect, device number 10 [ 629.779891][T11140] netlink: 'syz.2.1324': attribute type 2 has an invalid length. [ 629.852654][T11140] netlink: 'syz.2.1324': attribute type 2 has an invalid length. [ 630.428119][ T30] audit: type=1326 audit(1775100469.400:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 630.626066][ T30] audit: type=1326 audit(1775100469.410:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 630.871644][ T30] audit: type=1326 audit(1775100469.420:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 631.083182][ T30] audit: type=1326 audit(1775100469.450:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 631.268788][ T30] audit: type=1326 audit(1775100469.460:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 631.430632][ T30] audit: type=1326 audit(1775100469.460:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 631.490607][ T30] audit: type=1326 audit(1775100469.470:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 631.629736][ T30] audit: type=1326 audit(1775100469.480:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 632.747738][ T30] audit: type=1326 audit(1775100469.500:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 632.815190][ T30] audit: type=1326 audit(1775100469.500:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a5f9c819 code=0x7ffc0000 [ 638.951686][T11220] loop1: detected capacity change from 0 to 164 [ 639.031007][T11220] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 645.587832][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'. [ 646.004210][T11266] loop2: detected capacity change from 0 to 4096 [ 651.571036][T11309] loop3: detected capacity change from 0 to 512 [ 651.939937][T11320] xt_hashlimit: size too large, truncated to 1048576 [ 652.807737][T11309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.877379][T11309] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.012632][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 653.606275][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.928298][T11329] loop2: detected capacity change from 0 to 32768 [ 654.004998][T11329] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1373 (11329) [ 654.440082][T11329] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 654.450488][T11329] BTRFS info (device loop2): using crc32c checksum algorithm [ 654.458030][T11329] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 654.622133][T11329] BTRFS info (device loop2): rebuilding free space tree [ 654.648218][T11329] BTRFS info (device loop2): disabling free space tree [ 654.655318][T11329] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 654.664990][T11329] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 654.679894][T11329] BTRFS info (device loop2): enabling ssd optimizations [ 654.686921][T11329] BTRFS info (device loop2): turning on async discard [ 654.693745][T11329] BTRFS info (device loop2): enabling disk space caching [ 654.700853][T11329] BTRFS info (device loop2): force clearing of disk cache [ 654.708049][T11329] BTRFS info (device loop2): use zstd compression, level 3 [ 654.898858][T11347] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 655.031930][T11350] loop3: detected capacity change from 0 to 512 [ 655.253771][T11350] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 655.460519][T11350] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 655.825720][T11350] EXT4-fs (loop3): 1 truncate cleaned up [ 656.011423][T11350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.325816][ T5836] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 656.373422][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.765420][T11363] loop1: detected capacity change from 0 to 40427 [ 656.825645][T11363] F2FS-fs (loop1): invalid crc value [ 657.214116][T11373] ubi31: attaching mtd0 [ 657.220572][T11373] ubi31: scanning is finished [ 657.739888][ T5853] Bluetooth: Frame is too long (len 12, expected len 4) [ 657.758958][T11363] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 657.778195][T11363] F2FS-fs (loop1): Start checkpoint disabled! [ 657.797512][T11363] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 657.825372][T11363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 658.171375][T11373] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 658.219767][T11378] loop3: detected capacity change from 0 to 40427 [ 658.231968][T11378] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 658.240191][T11378] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 658.250979][T11378] F2FS-fs (loop3): invalid crc value [ 658.320014][T10793] bio_check_eod: 178 callbacks suppressed [ 658.320031][T10793] kworker/u8:5: attempt to access beyond end of device [ 658.320031][T10793] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 658.431786][T11378] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 658.621777][T10793] CPU: 1 UID: 0 PID: 10793 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.621808][T10793] Tainted: [L]=SOFTLOCKUP [ 658.621814][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 658.621826][T10793] Workqueue: writeback wb_workfn (flush-7:1) [ 658.621856][T10793] Call Trace: [ 658.621863][T10793] [ 658.621871][T10793] dump_stack_lvl+0xe8/0x150 [ 658.621900][T10793] f2fs_stop_checkpoint+0x3c7/0x590 [ 658.621934][T10793] f2fs_write_end_io+0x12e5/0x17a0 [ 658.621979][T10793] __submit_merged_bio+0x256/0x6a0 [ 658.622017][T10793] __submit_merged_write_cond+0x3c9/0x4e0 [ 658.622053][T10793] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 658.622106][T10793] f2fs_write_data_pages+0x287e/0x34f0 [ 658.622167][T10793] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 658.622202][T10793] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 658.622251][T10793] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 658.622295][T10793] ? __lock_acquire+0x6b5/0x2cf0 [ 658.622337][T10793] ? __lock_acquire+0x6b5/0x2cf0 [ 658.622367][T10793] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 658.622388][T10793] do_writepages+0x32e/0x550 [ 658.622419][T10793] ? reacquire_held_locks+0x104/0x190 [ 658.622437][T10793] ? writeback_sb_inodes+0x463/0x19d0 [ 658.622475][T10793] __writeback_single_inode+0x133/0x10e0 [ 658.622500][T10793] ? do_raw_spin_unlock+0xf5/0x210 [ 658.622526][T10793] writeback_sb_inodes+0x979/0x19d0 [ 658.622547][T10793] ? __lock_acquire+0x6b5/0x2cf0 [ 658.622604][T10793] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 658.622625][T10793] ? do_raw_spin_lock+0x12b/0x2f0 [ 658.622693][T10793] ? rcu_is_watching+0x15/0xb0 [ 658.622722][T10793] wb_writeback+0x445/0xb00 [ 658.622749][T10793] ? queue_io+0x1d1/0x470 [ 658.622780][T10793] ? __pfx_wb_writeback+0x10/0x10 [ 658.622800][T10793] ? do_raw_spin_lock+0x12b/0x2f0 [ 658.622840][T10793] wb_workfn+0x3f8/0xf10 [ 658.622858][T10793] ? look_up_lock_class+0x57/0x110 [ 658.622902][T10793] ? __pfx_wb_workfn+0x10/0x10 [ 658.622930][T10793] ? do_raw_spin_unlock+0xf5/0x210 [ 658.622961][T10793] ? process_scheduled_works+0xa70/0x1860 [ 658.622989][T10793] ? process_scheduled_works+0xa70/0x1860 [ 658.623023][T10793] ? process_scheduled_works+0xa70/0x1860 [ 658.623046][T10793] ? process_scheduled_works+0xa70/0x1860 [ 658.623074][T10793] process_scheduled_works+0xb5d/0x1860 [ 658.623137][T10793] ? __pfx_process_scheduled_works+0x10/0x10 [ 658.623170][T10793] ? assign_work+0x3d5/0x5e0 [ 658.623202][T10793] worker_thread+0xa53/0xfc0 [ 658.623260][T10793] kthread+0x388/0x470 [ 658.623281][T10793] ? __pfx_worker_thread+0x10/0x10 [ 658.623304][T10793] ? __pfx_kthread+0x10/0x10 [ 658.623326][T10793] ret_from_fork+0x514/0xb70 [ 658.623355][T10793] ? __pfx_ret_from_fork+0x10/0x10 [ 658.623381][T10793] ? __switch_to+0xc79/0x1410 [ 658.623406][T10793] ? __pfx_kthread+0x10/0x10 [ 658.623428][T10793] ret_from_fork_asm+0x1a/0x30 [ 658.623473][T10793] [ 658.906364][T10793] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 658.913899][T11378] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 658.921044][T11378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 659.864642][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 662.032889][T11418] RGB/YUV Input: ================= START STATUS ================= [ 662.041040][T11418] RGB/YUV Input: Test Pattern: 75% Colorbar [ 662.049007][T11418] RGB/YUV Input: Show Information: All [ 662.054618][T11418] RGB/YUV Input: Vertical Flip: false [ 662.060219][T11418] RGB/YUV Input: Horizontal Flip: false [ 662.068006][T11418] RGB/YUV Input: Brightness: 128 [ 662.073109][T11418] RGB/YUV Input: Contrast: 128 [ 662.078148][T11418] RGB/YUV Input: Hue: 0 [ 662.083154][T11418] RGB/YUV Input: Saturation: 128 [ 662.088331][T11418] RGB/YUV Input: Pixel Rate: 160000000 [ 662.093986][T11418] RGB/YUV Input: Horizontal Blanking: 800 [ 662.100060][T11418] RGB/YUV Input: Vertical Blanking: 3223 [ 662.105964][T11418] RGB/YUV Input: ================== END STATUS ================== [ 663.052319][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1390'. [ 663.922592][T11439] loop3: detected capacity change from 0 to 40427 [ 664.694651][T11439] F2FS-fs (loop3): invalid crc value [ 664.769156][T11439] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 664.783596][T11439] F2FS-fs (loop3): Start checkpoint disabled! [ 664.799328][T11439] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 664.807185][T11439] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 665.165492][T10805] kworker/u8:20: attempt to access beyond end of device [ 665.165492][T10805] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 665.215712][ T5840] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 665.220885][T10805] CPU: 0 UID: 0 PID: 10805 Comm: kworker/u8:20 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.220915][T10805] Tainted: [L]=SOFTLOCKUP [ 665.220922][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 665.220933][T10805] Workqueue: writeback wb_workfn (flush-7:3) [ 665.220961][T10805] Call Trace: [ 665.220968][T10805] [ 665.220976][T10805] dump_stack_lvl+0xe8/0x150 [ 665.221004][T10805] f2fs_stop_checkpoint+0x3c7/0x590 [ 665.221036][T10805] f2fs_write_end_io+0x12e5/0x17a0 [ 665.221078][T10805] __submit_merged_bio+0x256/0x6a0 [ 665.221111][T10805] __submit_merged_write_cond+0x3c9/0x4e0 [ 665.221145][T10805] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 665.221196][T10805] f2fs_write_data_pages+0x287e/0x34f0 [ 665.221254][T10805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 665.221285][T10805] ? __lock_acquire+0x6b5/0x2cf0 [ 665.221339][T10805] ? do_raw_spin_lock+0x12b/0x2f0 [ 665.221364][T10805] ? do_raw_spin_lock+0x12b/0x2f0 [ 665.221399][T10805] ? trace_hrtimer_start+0x82/0x200 [ 665.221440][T10805] ? lockdep_hardirqs_on+0x7a/0x110 [ 665.221462][T10805] ? finish_task_switch+0x41f/0xbe0 [ 665.221487][T10805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 665.221507][T10805] do_writepages+0x32e/0x550 [ 665.221536][T10805] ? reacquire_held_locks+0x104/0x190 [ 665.221553][T10805] ? writeback_sb_inodes+0x463/0x19d0 [ 665.221582][T10805] __writeback_single_inode+0x133/0x10e0 [ 665.221606][T10805] ? do_raw_spin_unlock+0xf5/0x210 [ 665.221631][T10805] writeback_sb_inodes+0x979/0x19d0 [ 665.221651][T10805] ? __lock_acquire+0x6b5/0x2cf0 [ 665.221706][T10805] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 665.221725][T10805] ? do_raw_spin_lock+0x12b/0x2f0 [ 665.221796][T10805] ? rcu_is_watching+0x15/0xb0 [ 665.221824][T10805] wb_writeback+0x445/0xb00 [ 665.221850][T10805] ? queue_io+0x1d1/0x470 [ 665.221879][T10805] ? __pfx_wb_writeback+0x10/0x10 [ 665.221898][T10805] ? do_raw_spin_lock+0x12b/0x2f0 [ 665.221937][T10805] wb_workfn+0x3f8/0xf10 [ 665.221952][T10805] ? __lock_acquire+0x6b5/0x2cf0 [ 665.221974][T10805] ? look_up_lock_class+0x57/0x110 [ 665.222015][T10805] ? __pfx_wb_workfn+0x10/0x10 [ 665.222037][T10805] ? do_raw_spin_lock+0x12b/0x2f0 [ 665.222055][T10805] ? lock_acquire+0x106/0x350 [ 665.222081][T10805] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 665.222104][T10805] ? process_scheduled_works+0xa70/0x1860 [ 665.222131][T10805] ? process_scheduled_works+0xa70/0x1860 [ 665.222163][T10805] ? process_scheduled_works+0xa70/0x1860 [ 665.222186][T10805] ? process_scheduled_works+0xa70/0x1860 [ 665.222213][T10805] process_scheduled_works+0xb5d/0x1860 [ 665.222275][T10805] ? __pfx_process_scheduled_works+0x10/0x10 [ 665.222307][T10805] ? assign_work+0x3d5/0x5e0 [ 665.222338][T10805] worker_thread+0xa53/0xfc0 [ 665.222393][T10805] kthread+0x388/0x470 [ 665.222413][T10805] ? __pfx_worker_thread+0x10/0x10 [ 665.222435][T10805] ? __pfx_kthread+0x10/0x10 [ 665.222456][T10805] ret_from_fork+0x514/0xb70 [ 665.222484][T10805] ? __pfx_ret_from_fork+0x10/0x10 [ 665.222509][T10805] ? __switch_to+0xc79/0x1410 [ 665.222534][T10805] ? __pfx_kthread+0x10/0x10 [ 665.222554][T10805] ret_from_fork_asm+0x1a/0x30 [ 665.222590][T10805] [ 665.225621][T10805] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 665.457310][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.942843][ T5840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.969955][ T5840] usb 3-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 665.979250][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.000679][ T5840] usb 3-1: Product: syz [ 666.018204][ T5840] usb 3-1: Manufacturer: syz [ 666.045463][ T5840] usb 3-1: SerialNumber: syz [ 669.166645][ T5840] usb 3-1: USB disconnect, device number 11 [ 669.559094][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 669.568406][T11479] netlink: 'syz.0.1397': attribute type 30 has an invalid length. [ 669.577077][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 670.711770][T11489] loop1: detected capacity change from 0 to 1024 [ 670.988483][T11489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.709202][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 673.722506][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 674.531982][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 674.723526][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 674.857521][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 675.127392][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 675.639198][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 675.687068][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 675.955996][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 676.339565][T11538] overlayfs: failed to clone upperpath [ 676.699249][ T5841] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 678.296981][T11550] tipc: Started in network mode [ 678.301883][T11550] tipc: Node identity 4004, cluster identity 4711 [ 678.308394][T11550] tipc: Node number set to 16388 [ 679.898321][ T5841] bridge0: port 1(syz_tun) entered disabled state [ 681.210466][ T5841] syz_tun (unregistering): left allmulticast mode [ 681.857067][ T5841] syz_tun (unregistering): left promiscuous mode [ 682.022842][ T5841] bridge0: port 1(syz_tun) entered disabled state [ 682.862779][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.741113][T10805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.516918][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 684.516935][ T30] audit: type=1326 audit(1775100523.500:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11599 comm="syz.4.1436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x0 [ 685.412734][T10805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.687658][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.740832][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.786326][ T5160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 686.342445][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 686.358313][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 686.413642][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 686.474570][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 686.506680][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 686.517765][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.049979][T10805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.268533][T11636] Bluetooth: MGMT ver 1.23 [ 688.287010][T11636] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 688.641063][ T5853] Bluetooth: hci4: command tx timeout [ 688.726510][T10805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.471509][T11622] chnl_net:caif_netlink_parms(): no params data found [ 690.480619][T11684] netlink: 'syz.3.1453': attribute type 4 has an invalid length. [ 691.146364][ T5853] Bluetooth: hci4: command tx timeout [ 692.607788][T11698] overlayfs: failed to clone lowerpath [ 692.846677][T11710] loop2: detected capacity change from 0 to 128 [ 693.050542][T11711] loop3: detected capacity change from 0 to 32768 [ 693.064440][T11711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1458 (11711) [ 693.085676][T11711] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.095925][T11711] BTRFS info (device loop3): using sha256 checksum algorithm [ 693.196108][ T5853] Bluetooth: hci4: command tx timeout [ 693.270872][T11711] BTRFS info (device loop3): enabling ssd optimizations [ 693.278178][T11711] BTRFS info (device loop3): turning on async discard [ 693.285464][T11711] BTRFS info (device loop3): enabling free space tree [ 694.424163][ T30] audit: type=1800 audit(1775100533.410:395): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1459" name="file2" dev="loop2" ino=1048647 res=0 errno=0 [ 694.684580][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 695.512541][ T5853] Bluetooth: hci4: command tx timeout [ 698.400050][T10805] bond0 (unregistering): Released all slaves [ 699.831494][T11622] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.101865][T11778] loop2: detected capacity change from 0 to 128 [ 700.120881][T11778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 700.534048][T11622] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.562974][T11622] bridge_slave_0: entered allmulticast mode [ 700.767464][T11622] bridge_slave_0: entered promiscuous mode [ 700.779899][T11622] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.787373][T11622] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.795974][T11622] bridge_slave_1: entered allmulticast mode [ 700.804211][T11622] bridge_slave_1: entered promiscuous mode [ 701.456835][T11792] /dev/nullb0: Can't lookup blockdev [ 703.593272][T11622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.779189][T11826] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 703.813719][T11826] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 703.824790][T11826] overlayfs: failed to look up (tracing) for ino (-66) [ 705.416319][T11622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.483796][T11622] team0: Port device team_slave_0 added [ 705.507266][T11622] team0: Port device team_slave_1 added [ 705.582846][T11622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.590090][T11622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.629716][T11622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.840935][T11839] Cannot find add_set index 65532 as target [ 706.794382][T11622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.825523][T11622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.830320][T11622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.952997][T11861] loop2: detected capacity change from 0 to 512 [ 707.984111][T11861] ext4: Unknown parameter 'nouser_xattr' [ 709.006521][T11865] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 710.145954][T11871] loop3: detected capacity change from 0 to 131072 [ 710.199801][T10805] hsr_slave_0: left promiscuous mode [ 710.217439][T11871] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 710.224776][T11871] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 710.273248][T11871] F2FS-fs (loop3): invalid crc value [ 710.369063][T11871] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 710.448660][T11871] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 710.456699][T11871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 710.478912][T10805] veth1_macvtap: left promiscuous mode [ 710.487940][T10805] veth0_macvtap: left promiscuous mode [ 710.497958][T10805] veth1_vlan: left promiscuous mode [ 710.503484][T10805] veth0_vlan: left promiscuous mode [ 712.222435][T11893] loop2: detected capacity change from 0 to 64 [ 712.244017][T11893] hfs: unable to locate alternate MDB [ 712.249880][T11893] hfs: continuing without an alternate MDB [ 715.063458][T11622] hsr_slave_0: entered promiscuous mode [ 715.089518][T11622] hsr_slave_1: entered promiscuous mode [ 715.096236][T11622] debugfs: 'hsr0' already exists in 'hsr' [ 715.102055][T11622] Cannot create hsr debugfs directory [ 717.301509][T11947] loop3: detected capacity change from 0 to 32768 [ 718.189055][T11947] JBD2: Ignoring recovery information on journal [ 718.279707][T11947] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 718.445436][T11951] lo speed is unknown, defaulting to 1000 [ 718.453490][T11951] lo speed is unknown, defaulting to 1000 [ 718.465964][T11951] lo speed is unknown, defaulting to 1000 [ 718.476025][T11951] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 718.490572][T11951] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 718.507548][T11951] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 718.522430][T11951] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 718.539565][T11951] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 718.625520][T11951] lo speed is unknown, defaulting to 1000 [ 718.633412][T11951] lo speed is unknown, defaulting to 1000 [ 718.641173][T11951] lo speed is unknown, defaulting to 1000 [ 718.648849][T11951] lo speed is unknown, defaulting to 1000 [ 718.656559][T11951] lo speed is unknown, defaulting to 1000 [ 718.810159][ T30] audit: type=1800 audit(1775100557.790:396): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1498" name="bus" dev="loop3" ino=17059 res=0 errno=0 [ 721.714001][T11622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 721.793029][T11622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 721.921302][T11622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 722.009989][T11622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 722.368446][T11622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.417716][T11622] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.434311][T12020] warning: `syz.4.1507' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 722.480193][ T728] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.487351][ T728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.502142][T12020] 9pnet_virtio: no channels available for device syz [ 722.549388][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.556556][T10798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.570829][T12020] 9pnet_virtio: no channels available for device syz [ 723.170509][ T5838] ocfs2: Unmounting device (7,3) on (node local) [ 725.292934][T11622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.977485][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 729.272484][ T30] audit: type=1326 audit(1775100568.260:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 729.341706][T11622] veth0_vlan: entered promiscuous mode [ 729.409566][ T30] audit: type=1326 audit(1775100568.300:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 729.433291][T11622] veth1_vlan: entered promiscuous mode [ 729.669992][ T30] audit: type=1326 audit(1775100568.300:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 730.644145][ T30] audit: type=1326 audit(1775100568.300:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 730.667501][ T30] audit: type=1326 audit(1775100568.300:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 730.691651][ T30] audit: type=1326 audit(1775100568.300:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 730.927842][T11622] veth0_macvtap: entered promiscuous mode [ 730.970939][ T30] audit: type=1326 audit(1775100568.310:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 731.004395][T11622] veth1_macvtap: entered promiscuous mode [ 731.022867][ T30] audit: type=1326 audit(1775100568.310:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 731.091564][T11622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.125297][ T30] audit: type=1326 audit(1775100568.310:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 731.150461][T11622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.268406][ T3493] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.275416][ T30] audit: type=1326 audit(1775100568.310:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb59c819 code=0x7ffc0000 [ 731.283424][ T3493] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.373970][T12105] sd 0:0:1:0: device reset [ 731.837172][ T3493] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.876505][ T3493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.958750][T10798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.100902][T10798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.289510][T10805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.450141][T10805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.880042][T12136] wlan1 speed is unknown, defaulting to 1000 [ 734.886550][T12136] wlan1 speed is unknown, defaulting to 1000 [ 734.904508][T12136] wlan1 speed is unknown, defaulting to 1000 [ 734.922524][T12136] smbdirect: ib_dev[óyz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 734.936939][T12136] smbdirect: ib_dev[óyz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 734.954052][T12136] smbdirect: ib_dev[óyz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 735.005757][T12136] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 735.585409][T12136] wlan1 speed is unknown, defaulting to 1000 [ 735.593228][T12136] wlan1 speed is unknown, defaulting to 1000 [ 735.602482][T12136] wlan1 speed is unknown, defaulting to 1000 [ 735.612495][T12136] wlan1 speed is unknown, defaulting to 1000 [ 735.621317][T12136] wlan1 speed is unknown, defaulting to 1000 [ 737.295439][T12146] loop5: detected capacity change from 0 to 1024 [ 738.973240][ T728] hfsplus: b-tree write err: -5, ino 25 [ 738.990880][ T728] hfsplus: b-tree write err: -5, ino 4 [ 739.154680][T12167] lo speed is unknown, defaulting to 1000 [ 739.176362][T12167] wlan1 speed is unknown, defaulting to 1000 [ 739.667442][ T728] hfsplus: b-tree write err: -5, ino 2 [ 740.767865][T12175] loop5: detected capacity change from 0 to 32768 [ 740.816548][T12175] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 740.922170][T12175] XFS (loop5): Ending clean mount [ 740.931285][T12175] XFS (loop5): Quotacheck needed: Please wait. [ 741.134986][T12175] XFS (loop5): Quotacheck: Done. [ 741.969369][T12191] overlayfs: failed to clone upperpath [ 742.946865][T11622] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 747.108422][T12242] xt_TPROXY: Can be used only with -p tcp or -p udp [ 747.424450][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.432451][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.755868][T12273] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 750.158575][T12261] [U]  [ 750.762048][T12286] loop3: detected capacity change from 0 to 256 [ 750.776950][T12286] exfat: Bad value for 'gid' [ 750.781630][T12286] exfat: Bad value for 'gid' [ 752.975571][T12303] loop5: detected capacity change from 0 to 512 [ 753.003145][T12303] EXT4-fs: test_dummy_encryption requires encrypt feature [ 753.354392][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 756.232723][T12336] No such timeout policy "syz0" [ 757.153166][T12349] program syz.5.1570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 759.085609][T12366] loop5: detected capacity change from 0 to 512 [ 759.463302][T12366] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 759.751926][T12366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 759.764819][T12366] System zones: 1-12 [ 759.772382][T12366] EXT4-fs (loop5): 1 truncate cleaned up [ 759.779067][T12366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.016465][T11622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.155481][ T5923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 764.357168][T12437] loop3: detected capacity change from 0 to 128 [ 764.365242][T12437] adfs: Bad value for 'gid' [ 764.369784][T12437] adfs: Bad value for 'gid' [ 764.434904][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 764.434955][ T30] audit: type=1326 audit(1775100603.180:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 764.891184][ T808] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 765.082318][ T30] audit: type=1326 audit(1775100603.180:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 765.226474][T12440] loop3: detected capacity change from 0 to 128 [ 765.294162][T12440] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 765.326648][T12440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 765.381482][ T808] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 765.458489][ T30] audit: type=1326 audit(1775100603.180:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 765.570843][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.612454][ T808] usb 3-1: Product: syz [ 765.630685][ T808] usb 3-1: Manufacturer: syz [ 765.656902][ T808] usb 3-1: SerialNumber: syz [ 765.672518][ T30] audit: type=1326 audit(1775100603.180:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 765.745378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 765.898792][ T30] audit: type=1326 audit(1775100603.190:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 765.912695][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 765.942283][ T30] audit: type=1326 audit(1775100603.190:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7feb1919c819 code=0x7ffc0000 [ 766.043816][ T5923] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 766.076061][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.103737][ T5923] usb 6-1: Product: syz [ 766.120029][ T5923] usb 6-1: Manufacturer: syz [ 766.136830][ T5923] usb 6-1: SerialNumber: syz [ 766.173327][ T5923] usb 6-1: config 0 descriptor?? [ 766.391185][T12454] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1591'. [ 766.766445][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 767.290847][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 767.500562][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 767.533734][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 767.545777][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 767.560021][ T808] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 767.576130][ T808] usb 3-1: USB disconnect, device number 12 [ 769.182319][ T808] usb 6-1: USB disconnect, device number 2 [ 769.342310][T12478] loop5: detected capacity change from 0 to 164 [ 769.427758][T12478] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 771.325828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 772.546409][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 774.365685][ T9] usb 3-1: device descriptor read/64, error -71 [ 774.707579][T12525] overlayfs: failed to clone lowerpath [ 777.720704][T12551] loop5: detected capacity change from 0 to 32768 [ 777.748011][T12551] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1618 (12551) [ 777.768963][T12551] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 777.779187][T12551] BTRFS info (device loop5): using crc32c checksum algorithm [ 777.786808][T12551] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 778.148367][T12561] overlayfs: failed to clone lowerpath [ 778.240019][T12562] overlayfs: failed to clone lowerpath [ 778.834772][T12571] loop3: detected capacity change from 0 to 256 [ 778.846786][T12571] vfat: Bad value for 'shortname' [ 778.894917][T12571] loop3: detected capacity change from 0 to 512 [ 778.904550][T12571] EXT4-fs: Ignoring removed bh option [ 778.910170][T12571] EXT4-fs: inline encryption not supported [ 778.938376][T12571] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 779.106022][T12571] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 779.130996][T12571] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1620: bg 0: block 248: padding at end of block bitmap is not set [ 779.147243][T12571] loop3: lost filesystem error report for type 5 error -117 [ 779.165056][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 779.178878][ C1] EXT4-fs (loop3): last error at time 1775100618: ext4_validate_block_bitmap:441 [ 779.222823][T12571] Quota error (device loop3): write_blk: dquota write failed [ 779.230902][T12571] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 779.241937][T12571] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1620: Failed to acquire dquot type 1 [ 779.253266][T12571] loop3: lost filesystem error report for type 5 error -28 [ 779.324408][T12571] EXT4-fs (loop3): 1 truncate cleaned up [ 779.347302][T12571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 779.740706][T12551] BTRFS info (device loop5): rebuilding free space tree [ 779.998794][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 780.309183][T12551] BTRFS info (device loop5): disabling free space tree [ 780.316317][T12551] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 780.326283][T12551] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 780.344867][T12551] BTRFS info (device loop5): enabling ssd optimizations [ 780.354828][T12551] BTRFS info (device loop5): turning on async discard [ 780.361763][T12551] BTRFS info (device loop5): enabling disk space caching [ 780.369650][T12551] BTRFS info (device loop5): force clearing of disk cache [ 780.376909][T12551] BTRFS info (device loop5): use zstd compression, level 3 [ 780.695548][T11622] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 781.404518][T12600] loop3: detected capacity change from 0 to 16 [ 781.464615][T12600] erofs (device loop3): mounted with root inode @ nid 36. [ 783.827681][T12619] loop5: detected capacity change from 0 to 512 [ 783.840078][T12619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 783.847294][T12619] EXT4-fs: Conflicting test_dummy_encryption options [ 784.494556][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1631'. [ 787.409141][T12644] af_packet: tpacket_rcv: packet too big, clamped from 125 to 4294967286. macoff=82 [ 787.944146][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 787.973594][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 787.987495][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 787.998716][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 788.006431][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 789.062912][T12665] loop2: detected capacity change from 0 to 512 [ 790.305409][ T5160] Bluetooth: hci5: command tx timeout [ 790.329656][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.001019][T12647] lo speed is unknown, defaulting to 1000 [ 791.055792][T12647] wlan1 speed is unknown, defaulting to 1000 [ 791.824662][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.096557][T12692] loop3: detected capacity change from 0 to 32768 [ 792.111535][T12692] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1649 (12692) [ 792.132913][T12692] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 792.143503][T12692] BTRFS info (device loop3): using sha256 checksum algorithm [ 792.203599][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.281181][T12692] BTRFS info (device loop3): enabling ssd optimizations [ 792.288255][T12692] BTRFS info (device loop3): turning on async discard [ 792.295013][T12692] BTRFS info (device loop3): enabling free space tree [ 792.315525][ T5160] Bluetooth: hci5: command tx timeout [ 793.349573][T12722] loop2: detected capacity change from 0 to 128 [ 793.923675][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.427497][ T5160] Bluetooth: hci5: command tx timeout [ 794.529237][T12730] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 794.675589][T12732] loop2: detected capacity change from 0 to 512 [ 797.022210][ T5160] Bluetooth: hci5: command tx timeout [ 797.300333][T12741] overlayfs: failed to clone upperpath [ 797.404821][ T5838] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 797.546164][T12751] /dev/nullb0: Can't open blockdev [ 798.566514][T12647] chnl_net:caif_netlink_parms(): no params data found [ 800.127779][T12767] xt_hashlimit: size too large, truncated to 1048576 [ 800.432752][T12764] loop5: detected capacity change from 0 to 2048 [ 800.455321][T12764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 800.689415][ T12] vlan2: left promiscuous mode [ 800.785389][ T12] vlan0: left promiscuous mode [ 800.848148][ T12] bridge1: port 1(vlan2) entered disabled state [ 800.852546][T12781] loop2: detected capacity change from 0 to 512 [ 801.061965][T12779] loop3: detected capacity change from 0 to 512 [ 802.485928][ T12] pimreg: left allmulticast mode [ 802.663079][T12777] UDF-fs: warning (device loop5): udf_truncate_tail_extent: Too long extent after EOF in inode 1438: i_size: 72896 lbcount: 73728 extent 129+73216 [ 802.738496][T12792] loop3: detected capacity change from 0 to 512 [ 803.325832][T12792] EXT4-fs (loop3): invalid inodes per group: 32 [ 803.325832][T12792] [ 803.492415][T12795] fuse: Unknown parameter 'user_i00000000000000000000' [ 803.540435][T12797] fuse: Unknown parameter 'use00000000000000000000' [ 804.697773][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 804.713286][ T12] bond0 (unregistering): Released all slaves [ 804.737004][T12798] loop5: detected capacity change from 0 to 40427 [ 804.747825][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 804.776375][ T12] bond1 (unregistering): (slave vlan3): Releasing active interface [ 804.813938][T12798] F2FS-fs (loop5): invalid crc value [ 805.009599][ T12] bond1 (unregistering): Released all slaves [ 805.401283][T12647] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.438826][T12647] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.481337][T12647] bridge_slave_0: entered allmulticast mode [ 806.118696][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1675'. [ 806.281159][T12647] bridge_slave_0: entered promiscuous mode [ 806.466955][ T12] ÿ1Ie5nè‹Ò: left promiscuous mode [ 806.486589][T12798] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 806.867242][T12798] F2FS-fs (loop5): Start checkpoint disabled! [ 806.966993][T12830] loop2: detected capacity change from 0 to 512 [ 808.114347][T12836] loop3: detected capacity change from 0 to 512 [ 808.285543][T12647] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.300763][T12798] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 808.357199][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.426426][T12647] bridge_slave_1: entered allmulticast mode [ 808.685947][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.692432][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.401347][T12647] bridge_slave_1: entered promiscuous mode [ 811.126532][ T5160] Bluetooth: hci4: command 0x0406 tx timeout [ 811.200506][ T12] tipc: Left network mode [ 811.213373][T12647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.506012][T12647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.661856][T12873] loop2: detected capacity change from 0 to 1024 [ 811.744929][T12647] team0: Port device team_slave_0 added [ 811.780894][T12647] team0: Port device team_slave_1 added [ 811.821175][T12873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.027735][T12647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.059474][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.129502][T12647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.175739][T12647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.183114][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.214972][T12892] loop3: detected capacity change from 0 to 32768 [ 813.610097][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.634533][T12647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.603731][T12899] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 814.603731][T12899] [ 814.626343][T12899] ERROR: (device loop3): remounting filesystem as read-only [ 814.689613][T12904] loop2: detected capacity change from 0 to 512 [ 815.271280][T12647] hsr_slave_0: entered promiscuous mode [ 815.278354][T12647] hsr_slave_1: entered promiscuous mode [ 815.285645][T12647] debugfs: 'hsr0' already exists in 'hsr' [ 815.291545][T12647] Cannot create hsr debugfs directory [ 815.438682][T12899] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 815.438682][T12899] [ 815.452161][T12899] ERROR: (device loop3): remounting filesystem as read-only [ 815.461161][T12899] xtLookup: xtSearch returned -5 [ 815.466421][T12899] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 815.466421][T12899] [ 815.478119][T12899] ERROR: (device loop3): xtTruncate: xt_getpage: xtree page corrupt [ 815.478119][T12899] [ 815.488429][T12899] BUG at fs/jfs/jfs_txnmgr.c:530 assert(tblk->next == 0) [ 815.496560][T12899] ------------[ cut here ]------------ [ 815.504348][T12899] kernel BUG at fs/jfs/jfs_txnmgr.c:530! [ 815.510116][T12899] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 815.516384][T12899] CPU: 0 UID: 0 PID: 12899 Comm: syz.3.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.527330][T12899] Tainted: [L]=SOFTLOCKUP [ 815.531651][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 815.541710][T12899] RIP: 0010:txEnd+0x51f/0x530 [ 815.546373][T12899] Code: e9 cc fe ff ff e8 51 39 66 fe 48 c7 c7 20 00 0c 8c 48 c7 c6 19 fc 0b 8c ba 12 02 00 00 48 c7 c1 60 00 0c 8c e8 42 dc c7 fd 90 <0f> 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 815.565961][T12899] RSP: 0018:ffffc9000596f3a0 EFLAGS: 00010246 [ 815.572032][T12899] RAX: 0000000000000036 RBX: ffff888028746800 RCX: 56b9b0e2e6c9f800 [ 815.579984][T12899] RDX: ffffc9000fba5000 RSI: 000000000007ffff RDI: 0000000000080000 [ 815.587940][T12899] RBP: ffffc9000273a432 R08: 0000000000000003 R09: 0000000000000004 [ 815.595894][T12899] R10: dffffc0000000000 R11: fffffbfff1cfd308 R12: 1ffff920004e748b [ 815.603856][T12899] R13: dffffc0000000000 R14: ffffc9000273a458 R15: 0000000000000025 [ 815.611807][T12899] FS: 00007feb173f66c0(0000) GS:ffff88812525c000(0000) knlGS:0000000000000000 [ 815.620718][T12899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.627279][T12899] CR2: 00007f8a40e5cff8 CR3: 0000000021b62000 CR4: 00000000003526f0 [ 815.635234][T12899] Call Trace: [ 815.638502][T12899] [ 815.641412][T12899] jfs_truncate_nolock+0x2b6/0x340 [ 815.646508][T12899] ? __pfx_jfs_truncate_nolock+0x10/0x10 [ 815.652121][T12899] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 815.658260][T12899] ? __pfx_jfs_get_block+0x10/0x10 [ 815.663353][T12899] jfs_truncate+0xce/0x140 [ 815.667754][T12899] jfs_direct_IO+0x1f4/0x220 [ 815.672325][T12899] generic_file_direct_write+0x1db/0x3e0 [ 815.677945][T12899] __generic_file_write_iter+0x11d/0x230 [ 815.683556][T12899] ? generic_file_write_iter+0x136/0x680 [ 815.689193][T12899] generic_file_write_iter+0x14a/0x680 [ 815.694646][T12899] ? __pfx_generic_file_write_iter+0x10/0x10 [ 815.700629][T12899] ? splice_from_pipe_next+0x61c/0x670 [ 815.706097][T12899] ? __asan_memset+0x22/0x50 [ 815.710775][T12899] iter_file_splice_write+0x9a1/0x10f0 [ 815.716235][T12899] ? __pfx_iter_file_splice_write+0x10/0x10 [ 815.722129][T12899] ? __pfx_iter_file_splice_write+0x10/0x10 [ 815.728013][T12899] direct_splice_actor+0x101/0x160 [ 815.733119][T12899] splice_direct_to_actor+0x53a/0xc70 [ 815.738487][T12899] ? __pfx_direct_splice_actor+0x10/0x10 [ 815.744113][T12899] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 815.749991][T12899] do_splice_direct+0x195/0x290 [ 815.754827][T12899] ? __pfx_do_splice_direct+0x10/0x10 [ 815.760205][T12899] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 815.766086][T12899] ? rw_verify_area+0x255/0x4d0 [ 815.770954][T12899] do_sendfile+0x535/0x7d0 [ 815.775357][T12899] ? __pfx_do_sendfile+0x10/0x10 [ 815.780300][T12899] ? lockdep_hardirqs_on+0x7a/0x110 [ 815.785513][T12899] ? __se_sys_futex+0x3a8/0x450 [ 815.790824][T12899] __se_sys_sendfile64+0x144/0x1a0 [ 815.795942][T12899] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 815.801582][T12899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.807670][T12899] do_syscall_64+0x15f/0xf80 [ 815.812258][T12899] ? clear_bhb_loop+0x40/0x90 [ 815.816953][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.822853][T12899] RIP: 0033:0x7feb1919c819 [ 815.827291][T12899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.846919][T12899] RSP: 002b:00007feb173f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 815.855322][T12899] RAX: ffffffffffffffda RBX: 00007feb19416180 RCX: 00007feb1919c819 [ 815.863284][T12899] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 815.871239][T12899] RBP: 00007feb19232c91 R08: 0000000000000000 R09: 0000000000000000 [ 815.879211][T12899] R10: 0000000020fffe85 R11: 0000000000000246 R12: 0000000000000000 [ 815.887186][T12899] R13: 00007feb19416218 R14: 00007feb19416180 R15: 00007ffff9ae49e8 [ 815.895149][T12899] [ 815.898178][T12899] Modules linked in: [ 815.902485][T12899] ---[ end trace 0000000000000000 ]--- [ 815.908338][T12899] RIP: 0010:txEnd+0x51f/0x530 [ 815.913248][T12899] Code: e9 cc fe ff ff e8 51 39 66 fe 48 c7 c7 20 00 0c 8c 48 c7 c6 19 fc 0b 8c ba 12 02 00 00 48 c7 c1 60 00 0c 8c e8 42 dc c7 fd 90 <0f> 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 815.932915][T12899] RSP: 0018:ffffc9000596f3a0 EFLAGS: 00010246 [ 815.938996][T12899] RAX: 0000000000000036 RBX: ffff888028746800 RCX: 56b9b0e2e6c9f800 [ 815.947010][T12899] RDX: ffffc9000fba5000 RSI: 000000000007ffff RDI: 0000000000080000 [ 815.954980][T12899] RBP: ffffc9000273a432 R08: 0000000000000003 R09: 0000000000000004 [ 815.963005][T12899] R10: dffffc0000000000 R11: fffffbfff1cfd308 R12: 1ffff920004e748b [ 815.971004][T12899] R13: dffffc0000000000 R14: ffffc9000273a458 R15: 0000000000000025 [ 815.978994][T12899] FS: 00007feb173f66c0(0000) GS:ffff88812525c000(0000) knlGS:0000000000000000 [ 815.987935][T12899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.994501][T12899] CR2: 00007f8a40e5cff8 CR3: 0000000021b62000 CR4: 00000000003526f0 [ 816.002588][T12899] Kernel panic - not syncing: Fatal exception [ 816.009109][T12899] Kernel Offset: disabled [ 816.013441][T12899] Rebooting in 86400 seconds..