last executing test programs: 4m8.09300275s ago: executing program 4 (id=613): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 4m7.698057237s ago: executing program 4 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x85, 0xfffffffffffffffc}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000038e00)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000340), 0x0}, 0x20) 4m7.547114464s ago: executing program 4 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "90ee"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2008}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 4m7.31064622s ago: executing program 4 (id=621): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mount$bind(0x0, 0x0, 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 4m6.922288407s ago: executing program 4 (id=625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto(r0, &(0x7f0000000000)="e135", 0x2, 0x90, 0x0, 0x0) sendto(r0, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) 4m5.27416328s ago: executing program 4 (id=630): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m4.659376454s ago: executing program 32 (id=630): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m16.122107379s ago: executing program 3 (id=1064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020319000000000000000000010043de0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000023c0)="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", 0x2000, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m15.530978265s ago: executing program 3 (id=1066): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) close(0x4) 2m15.283772029s ago: executing program 3 (id=1070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0xfffffffc, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m14.914452972s ago: executing program 3 (id=1073): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2008c0, &(0x7f00000000c0)={[{@shortname_win95}, {@uni_xlateno}, {@fat=@nfs}, {@fat=@nfs}, {@fat=@discard}, {@utf8no}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@shortname_win95}, {@fat=@quiet}, {@rodir}, {@fat=@flush}]}, 0x0, 0x2c7, &(0x7f0000000180)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000480)='mounts\x00') mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) 2m14.601597956s ago: executing program 3 (id=1075): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x3, {0x1fffffffffffffd, 0x2, 0x3, 0x7f, 0xa003, 0x800000ff, {0x80c, 0x3c, 0x6, 0x80004, 0x2, 0x0, 0xdb, 0x20006, 0xff, 0x8000, 0x0, 0x0, 0x0, 0xe70, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 2m14.012419496s ago: executing program 3 (id=1078): r0 = syz_io_uring_setup(0x2fff, &(0x7f0000000780)={0x0, 0x5222, 0x80, 0x1, 0x139}, &(0x7f0000000280)=0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) r3 = eventfd2(0xbd49, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1) syz_io_uring_complete(r1, r2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 2m13.461673328s ago: executing program 33 (id=1078): r0 = syz_io_uring_setup(0x2fff, &(0x7f0000000780)={0x0, 0x5222, 0x80, 0x1, 0x139}, &(0x7f0000000280)=0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) r3 = eventfd2(0xbd49, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1) syz_io_uring_complete(r1, r2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 1m46.778890341s ago: executing program 1 (id=1206): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = fsopen(&(0x7f0000001040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000001080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000010c0), 0x12) connect$inet6(r0, &(0x7f0000001b40)={0xa, 0x4002, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 1m45.169269207s ago: executing program 1 (id=1211): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4e, 0x1000007, 0xffffeffffffffffb, 0x5, 0xfffc, 0xfffffffffffff369, 0x4002004c3, 0xa, 0x5, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x7, 0x402, 0xb, 0x9, 0x10000008d], 0xddcd0000, 0x100000}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m44.651428921s ago: executing program 1 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000f50400000007"], 0x11) 1m42.330105739s ago: executing program 1 (id=1222): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x12048c1, &(0x7f00000000c0)={[{@uni_xlate}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@utf8}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@flush}, {@shortname_winnt}, {@uni_xlate}]}, 0x0, 0x2bf, &(0x7f0000000400)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000840)='.\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) 1m40.238617124s ago: executing program 1 (id=1228): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x402) syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'], 0x1, 0x5ca, &(0x7f0000000540)="$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") pread64(r1, 0x0, 0x0, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m39.477273466s ago: executing program 1 (id=1232): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000000140)="10", 0x1) r2 = landlock_create_ruleset(&(0x7f0000000500)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 1m38.37188672s ago: executing program 34 (id=1232): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000000140)="10", 0x1) r2 = landlock_create_ruleset(&(0x7f0000000500)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 10.418128144s ago: executing program 6 (id=1575): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) 9.645594552s ago: executing program 5 (id=1580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a3200000000140000"], 0x15c}}, 0x0) 9.61217411s ago: executing program 6 (id=1581): openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000012c0)='.\x00', 0x8000, &(0x7f0000001300)={0x11, 0x72, 0x80000}, 0x20) 8.095338504s ago: executing program 6 (id=1583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000780)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000007c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000800)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000840), 0x4) sendto$inet(r2, &(0x7f0000000880)='<', 0x1, 0xc891, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000008c0)={0x2, 0x4e23, @multicast2}, 0x10) 8.093845726s ago: executing program 5 (id=1584): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10080, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0xfffffffe, 0x110002, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="f5201a6b6542be6cbad26e239346ffe3dbc7125e4eb0daba2e9ba73337e45b1a2c2828afbe1d99c856f2d7c9b91364a83e3c477d5e9569cf8787de2fd830003be5c3bbb4a246c4e13764c6e255ef511c263c70adb80380cc2b3247fb61ebddd2b945820fc646375953f1322be813b875bf64256ac7a8debe881f8352dc9fd70b9473bf07932110a5d1a94144b2ab0b4cd92458041eef085b29b5c115df0d7db2bea67006c66b64015fc980343e5ff451373afc63f2ae21d63cddeb3b0c53bbb4e0e31663f5b1b53de22517869df6114ac9047ee98a692b4f0e3e7cfc4e42368f217cc705f2bc5d10454ab30eda651c6ee29f0cc5a6ca7b384949955785844742121b5734a8cf3f3fe1d3e5c2085da26a028ba6c84d5cbce6afbe13cbb179d4c251e1d2d68e8c7d9c34eee698ceeb6e40aed55c62c45d8c7fcb2cfe95ce261238ca5c4458647ed7a001788e991e3d2ecfc77bedec164efda9e4a5d5f03043628fd8b5f906371c52e7de2e760b820dce5c3629610a48a036cd54f23ec3ef274f8da724f45c482505864c87359d4411cad79d7434c9a9d79323410b671880a344b933a47d735abd0e63308cf7f6e15790a50ccbcce072526952c763775066125af0fcde57ba3c514301aef17391c76adfc2419829a88e0d91b947d278cd03d94ce98ec639a6163eaa9755b1813685080ce588251fbd4240a7f65cdc1074503b0fe49b24996e52c6899ac90014d9a58566e841bcac357ed59f7e7274b6e94f7a526a5b420c5d6ababab7e7f8ba6ef6f3455a5aed80f4aaadb58fb38f725d524b4fd63238dc7936d62e81ef46bb7346d7f55c4fdbe7606b1053f6faf6d80612311823efe1e6522fd5bbb77c52c868362f263e56ea1447b612d681828561adefdd28fb855fd81f27e2698cc02bbcf7d653cf8dc9eea252f2b1f48c0d2ab70ece454daf9b5829d7106eb8ca8807eebd07d1bf6af6a4523577db893995778759e1be294aea8edb9226a9acbd44f98f60641f87195521491e621b10cc2032434f319e76743601a0bcc99fb3636389172a790e25260de7cb58961f9ad44d16c7604402bbca8cf82be528a64107c0dd114fd3458c0f1e97888c1c739dc678b43b202c603946cb5720a1e7331282a48afb12b461c41b6fd92b97c6960ac9f664f509b02c8267d722f372b007befada669d4cc36fb931763ffd8744b10e78cb849d40f88d190778a70f902faa4f34cae0b9e163b59b1bae96a933afecbc6a768f1d7ae20bf2771f28c1a3d333ae0b6f691d2f985e1ed6d0e1c29d7db36234b9bec18a1ee98b9ae90e4706d1c952f6059cc4d64bfc14152a88443f260d179c705df71e006a60981fefaa8a51c9c368680b830967b01b60734b9924335d7700b083bd7e87b3ad2f3d497e914368a15c5456d08861fb7513e96acb49935dc3f46fcaa297cdbdc759cb8a5a2515a482ca60440da8b7d5a8c79659d99e3892f9086b372d78622d3689267652c4dd60754cb8eb45028b0c237adff5ffaeaf78ed5a541c57feeb014a53e2a98042d5712d5f7a779b7a12bc120b8cf6df35b258fe1ad7ebdbee88d25355560fad504dce4bd878df5e43c55e765ac324dd8d65ce29c2a93f9e085bb51ff75dbbf314ed6aa3a36330fd146d28654c659f1c6c5089c3619be1c7707be835500fb15bf873ab35517b743207621346db75d16fb21624c04ceddda2d607642004f611db7414e1c593ef38c62e4d27a8b7833436609c284a46edc9b973e790aba0bf4c6bc0069ce9372c6c7b93d15740771ddf9c704338f4af870c649ecdaeab106b1242dbb74c284bfb5d87aa688d27befe1dc0d1019fde1842e89eee67e11f925672ebff47e4503e02fa989297e9461d540000b5e0ed2d957efc3b77a10181597c7fb2c94e62db50e46c46d10c1127573bae01166170467b7641d7e07dcd879f04b8dc08dcf460bef8e83aae33151a72eddf9ccac4eb95c48cb4008ba3fea542b2e3c6c4c07850cd4ca551536a20d18ed18852baaaf7339908583aae41f08f3c6f5811cd730e849dc8382e8bdf3519ab900d38a0a9822400d619b52a957b1bbe8384619e5d65588a2ca6bf068ca27fce9aa0448a60d04b3b230db3a939409ec7df45d70a944b34baaf0bf951d205667c8281e9e87468d1a2f6edf79a7d5df12a8564e56d3a952efa4c4be2b09be2c3d699b05268e8cfe998a9f37b8714c92647ada8a8129bc4084624c6f1059f834193deef961f5dbfe500c1bf781f45441984d52800d81d814a82ec4f859c7217146ac447c8462612574a1a8603148ed46bf3e195d417bbe43aa6bf83ea8fb525941ef8dd56149bd6fdcbf626609ddb699e40e83fa4792b39384eb0d1b78c97c6798537b192753caed3a5eaa4a33d54b473b43851cb282cd857ae11a4d34c6b53fc1c334f8ec42672295b88a326b65d338a70bb3d5d866ff55a9ce0345c7a890cd6dee36012c76d862802c9cbaf1abbab99dc898eb432f50474ae6c202121d19f8d0467fcb1279457accf9b777c75390756762dde795d94aaba4c1729f559adc33966fbf517fc91fae21bd8ef22e914bbe6bae774246749ad63d8d16f21c9aebc80a97be408443ae60af610dd3ad9964b2401e049b09dbb46f6126d3d534a7786bb3663719943111231d18e51ed534b1e28807c062280924e5d53a8a1316ca2b5936911a267d5b799fd7d8e5e725271d5b8eb90e3dd9ef9eb1400c68eb8f88622f548af7df4846758cfb74aeb48588d1820f504e97ae1d818feb7113175b04e7c0bae6239672c987253cdf0e9845119f3f200d40f586ab986312144c3525acb78a5784f5707217105bae651e0c000792f4e88c1a924d33fbe5474a71b1e193a8d3a6a65dc485f2a299e7d07a6cf621260dcfc5d79c9243618f57507ca025baa53b3e684667f33dfb8ab9065cc548ad5c881bceb5d937462ea850fc197f5ae8c9489815b2cff853895e987e684195a094d8460ee52ef9d8f6fa0ba01092f0cdffcc7a682ca3125058ce9ed0064d7d0a868b0419b49ded3d93f0c7e1d700288350ff4c130cf6e0b507ce6064623294536c8fc4011b9b40299bfe02144806411d5b36997db26033a5ddeecd6bf3faefd3ca0a6cb70b0561106b2dabb06cf88bb6fa283e43dcd2fa1f33063183e15450385ba6fed4436502211d3181351db793a76ae11ebde2b23f340b7522748a4602ec469b88eb7f3d1325baa536ab8096c58c6f2b4863a541f618112643e194a5873cdae4172bb3005743782d8af22dbf23ab60e7d0f4ceb3ef0c46e23e1ecee1839558bc5c146dd97aba7651dfd2401fb8aec4eda71b1b15a2570130f0f5ff489ad4355a708a6eafa9752eb5c9f7a83f43c3e3b317e7e68133573f585fc27c5cfc0d90016f5be8594e1cfac36b24570cebb5be46d3f5917441ccadc355536b8b9b455b87667edd802b77178251afdefe9a4b5f0ff7e59fa5cf9b449e18bc4bf8154f15913128a2584f7d60a3c09f467233783690df422d3d9982200eb604ec2ef50830bba6f82e8b91823808fac0b07bc0e51a671c32dea0f2f9aa2cfbbc91cdf54b719b6009ce750bab1680cac77398b2a619d550161fa70e7e8b86fb535f8797fca75708efba7f0d95da4ac235d9de68a50c998a72c0c2da90f511ea456f776c881b8416b894cd835ad13c62b035ef4d220a66c86c1c00de534690e42d064bf4fff946af98aec3f9490d6f0586e891d272a4bfb776ab84bd693af6526c4b09beab2460634d929bcc61cf75b041f067e7b503ecd6a80934e169ebb0ac926a85b53cb1d7b63eee6abcd9e250834da6e4da23b3b3d90c2f726861760ca14b78d5e895eb7fa2e8b39f724a0371412b1c94c6a42f1beeae2328e353971531bddcda730b6a0d90f7c58e3ce5953cf5a6c9e3fd657c92fe4b5b8b0b659353944afa5c69c309527d6d4039e78c675c8d2f527fbcb2b765864fed987f785221862bd7deb66e6676ddebdd19cf4cb26869f562928dc98088bb69281615fc6a2dafc466e70ff9ea1a411e1a3ba3f94ed7d429796afc9f0c95da19a4db691c36407985e5f08473dd8afd9de88b2c26b6ebd2ea35177238e18dfc36d579a80074c06f5cca60cf6d64d27eeb121c6c8e5e09aa3165c101068cb748694695e803540d947f33740d30616001448173ef57bbcb82fcb213348a2a58e2d14480b1ce1ad346729631b91f7e343e37abd8e787274ff4598acc99cc58f3578979e6e6a1926333bd8818a256b58e67c6f77145ee26f24998cab89021423e03326c175adaa8ea905122553948ece311cbcb770222e7f4f373398497c8c301480d031fc53c2a7018d91777cec253e89e28a82d15e01c12c0ccae1b56ecff35b90b19769bff4b786d4624679abe852780e9e4b9985e0564ee604027dc2a60f65d2fcf1d354e163a8465f77eb67e2a6c9fa89ea0768f9cf117fd1ea8969e592da11d34f6f9b7adb24f3261dd14199fea6da6b5d31f825b3706492b3305cbf6ef553fadfcad51a0484f09a8d2491c8a937fdd36d9e0b94fb6bdca6e80a6079739cc1d455fd735e89fe89938a7132dc0c9f181953dd9cf2d106a3f1478b46ddf35aae9bc6932227d79ac4f534967be2cbc30fa254658b61752b534257fc10bd8db219ec394b41e7fe541f9086ce19d28e13d2b3c384745fc88ed0cb5ef414e23e8782f99307c49121a733875e9fb9c8559d8ad6bab256dde2bfdee4286c1419b80acf55dd09da71116c0fa902d8e89465c313c311f272a11cd17417372dc74e01f3ba1a9afd8bcb9fad57cde63ad59a6999caaa359e6e5b4216dd3b0bc8d310e28c8a1232cefcbd5070d0537097e370433bc1017b7b1c4efa694a25b4385bccbdf79affb0b6d203b3cefe637fd6f7b51f5ec297471c874a57145b254bd14b89fe62709c94ca3cae304739294c7b4a871768e11cb7a2db0aaeff4abbd00c70b4d4e5e8f8c6d34afe3d619404e20ccf628f7902c17ab1200644fe465751587800d59acb3abd1f8ad9cbd8bfa64c94c44fb3086fd21c046d7430a1faadbd9b1625ee70c1071bede890f1c07113aed9b1a35ab0fb823e2cb38d2ee6376800f63d28326ec3be129333e1024d17c46198e329779a79f4ee69b56374268fefdd29995e411052bcc92318c636aa9fa634f3e537712f720a52cd95d5472cdd6b4eb66bd1ed2c41cb37c615eb486855671d964ba46ee44eb61ffcb0b22b20632ce3222e4c3037f348d5dec196f9e2bcc2335284f5529e4de9e6b4b84fc559de63357bc8ca0a00c16bdea79372b13abb251fd4bc52f1f732811b65b4c51715da133b20caba229244060fdec0ad4c47fdf1963b6aa1acf998585c59867b5afcd08958dceb9937a97e87b2153f45970ca77e5524c5160c69963717630795e3a4768e2521617bc211926e5cb08edea70cae99c6d7eff4c1e041c7ab0d3473d6ceb3cbc24a9f45c5818896463360490911b1fb77a24aa3b394e3ee1155ea2fbc6686db2c715670dc9187b33f3051b4b894b616bdf7fb287113c315413d83e0540676fe9a48d523bef3280611165fb77c7bb33c0a087fc06e7702fc7d8ea4f7aa264c7ed332af03ae3e392bc0f96ec11e3bca6604ccb7941043fb043b4880de676efaf3f0fba185e90db8e8e6718058fd1d26c49d0a163264d4aaf7094d02d6898f75c6edf2e49edf7b0a645018220535e8694baa1e910df6e493c0812c2cbb16966cb22af208279947f9490f2f5d3a49596050604f920af8fa41c5a339609659f331f24fa0aec3787d052a02541137dd1ccdc30970a879e4a42e491137bb3cddf2c87ea6368bc4d9aad9089af50b71d56bd296d891ac2fbec84303486739a44850680353efa2203d7fcfa00d9cd81433adcad3e6aac009784b63a3b7aca58155b24274b2d41de998321bdf0229ce74a0c61a24d74ceb30d4ba766632c4a48d9db4e3b3334830b12f3136158fb16fa745c2ebad16b65b279d28332894755de3e7ae2aa88f9e2af8a46200c427540eb68907152ee7d53212b55c170ab67c47c884db89757b09dc035ea59fe2be1f384b3edef6925c399753832d32296100ca4e2699154d6ed86bc145e92d699e43c2269ed359a004aee75ac5e730dffec87f239328bc95cc281a9c0bba661f6d36ac11d1151851c70cf39fbbabff2190b619294db73008e3d32acb0b29aa3d28d1e50784dbe35eb911d838bd710336612170666ea5f42b72c32be4d83c4ff61987acd1b1f0cebe281806af8ad4b6e7041c31bcb8a93cf0f44826821b0bb9c053468b4d8d034c084ba1c8dfcad9fac6ec379da5425492dc6f770000000050bd9a930ead9e4faf5b557eebe4461320476a7ae12b0dcc9d171f6d2737b824db7259e62915779dc5e8a08bc69c0c68784202aa3462bdff06af76bdf9f106dd6228211534c4433717947dfaca4b7b61a21d706217e3718b5ccac40c3c4692bd59f222d0c2e98af1ff1919256d7b0540ed69b11f212a9598c7499ba634d1677ecf17517e207d40baed5aa0e25b7e70b6b16f6d6f0c36a146db0644ababd31bc50f5039b3bc4f12b603da2675e121b09fe92c69548dfb9df18d0e50c1387280b7bb1366bf5bbabfcef5557a05ce24df1a02f22f791e06c5e3e21e5fd6db7f2c90ffb83b154b0fd9866c46609dc10b274954caf80e83693f5581f23fd765a18aa4e294bbf7a8721015ea6a6e1ba64f79f6609924d43757fd0752024af79e296415b42de3428f14d9d89f84c2e076a0821cc8921fff677ec7b91178bcbd755ece28477a6bd01fd429d824ddfb62edcdab7c4495edc5a3d27826ea4bddaeacfa7cb17632cee0095ca55d3973812033d96ec5e5ed6880b3a998b4998fb7441e11dd060515bdbfd5aa32aac6ae1fceb8e92d7e8985949946a458ca2f69637de6b92410986f8fa5ba4b1598d8383fdbff2e004dee71500302e3e9270371b39237260bde0888702c7b2bcff69192bd381cfe59b197b9dbe5e2eee27b64c17e95a1dade453a6f29dc8bef1bdd34a92a5275972a2cb18f6f553f99c6098f50198b68cd35d2877d9cdd15074422b43b03170f23138dda44b62b5e161705405d2e9a007f8cc9ec7920d1a6e947ccc57b1a51a728fe1afcb84115fe48be15c894cce96391ab3cdc1bd9aa4cf58213c15d1a849c3f38c8ee34b208766129bbb493558c139f2bfc39df29fc73422127823fc9c993f20d9df9e0acaf0b1729437458e0a857ebfe4a373fd491952a475e9c391b7ee02b79554807c0f12293aa385a3c6b18bfbfc690a7aa9bc85d8adb705eac642ec8611ac62d09d2a6892cd671629d457c2191eb5940114113ed8cd4e8411d96200d3d66f947baa7915610c396402d38f109837d29c8e937fb6223a9d0d605a3d91312908fb5a7df36122c35f7e47855d526915c3a7cea432ca4524fcae3b5c6fbad196c1efef0d129d9b3f9d23104fc3c8a90dbcea0400311e51de50c5abb62fcbedf998ebc1cf23fd76bcc2aea2451f6d0d3b8fdd337ce8d24d7ce2a5b29318df58adb0006d4295c138b4b03060134802626e31a5da92b5a7a8677132523affbdc8d958b955eb4615370497429cd3767f2f708c2cadc233bc3e5efc8c837385749da08c6dd573e3b105ce459d659f790dcaf53c1d0b4d8e0c64b6bce15559e59e66b3b0b2695703e9bd5b1c5bb3c5b1028441391f8fbeadc032e890fe5e3be78569056d147a891f4bc85406e78f962b532eb436b0e047a7d3c88bb89455ffbf1da360207af5d827e9fbbedd8393a828a92382329ff444d9a8128c40e302453550426de4babcdee45108e79533b9747fd21b8f775a76e1d4d54a8a98a65ee3c183be34172877c26e600c89949ced85004d69c24d4fee6f87d2ff24900d41577c78dfbff698d438c0e26ebe15d7b75b49a5b2a5c627da3b13f6458aeff3f0a1944a339b4be5e13d58a71928bb77053beaf7b68568205b62f5a4a9b3c0fef441ede90f012047b0cf2228481fab85d94219ce9f417e4e2b6018b319270a6b6f0de93d0147842f582bd4e41f00720626be2b2f9116875ea4f92e380bcfc33058505ee0336e10c71a5abf6f32c72fe68c68c166454db8e101b3a271f04e4dda8947743e0ac408c73cff69c10e7c015c6b078bab0a1c7aab14a26df087b2b4c859e684aebadff5033d1ebd6c6589a27ac75a075e6ef801f5dece0dbd1e477bb70d2b8553a88b13e304e00735e183feab89edf469cb90c0a5bbf778809a9996f4e72b16417672cd97bdd1c0baa64ea2d782aea9d58ea357b54d06f316076b5c413417061b3c7485b534fcc8bf25d2adf043b47a3d47f0755fe6225bba7569fe672d3507c8e15f7139ef7f606c616c52733413befb248eee53c4a9a16f952ac56e18e221626c4f51eb90c1314167c9677a7eb7004b9b42fd6ec21dd38d5b9032c441166be3f8e9dfed39fb0e654ca3126003decf8e50bf8ace994e16fdbe3f53a36a11ed6f06d1bb8e54f574a83035eba379f2453f2346d11414cafbde87cb5d66b650a5e25ebaced402188c1b4b941e788e1af908fff3ef84c1dadef0550687f0b6aeef6063dc1c8c8efe09d611253efb4d288ea407ef3c043aacc3dfc19a18449b38fb97d9fc0bb67de3e1744f782d3a9d1fc449c3a902b1ec8789e336f731a51cc7fefc43736e04942167fbfdac9f15c5b3f921aaa3df0c9709c21339ce890cd4054828615f18fd12548258440a06dbec3d72719b3e9f5f9967525f90f16993cab09c9eab2b27b29c959c002dbb028cc96297d40822772c16b4b786cc57cd581c02f143d6e728eeac1ab4eca6170748002c0e2269611a2b402f9fa8190d9216b1e1b7de8f81074b8dbb665f0d69c52cf573d07ca0752fd6fe7da88dcf4a915ab1533f5686b766393fe9bf1aeef9d17414d1803708e61973dd205097eb1ed466c8dcfb2c7710caf9df713a11c774fd0469880534ae2ccd1e40216ffa145f0fc832b166896810a678f3a47dd24bc2e6835c16e405a444971068dbd47926f430871121be8f19c8ac4fd0a9e3ff7cd961f90f24265de455694cc291de76437953ac314b1791acbe96d3fcae4fa397287a02eac86f13c931f4d4f49ad52cf1db0efdf7027ee8e468d64d316a2208ae33d8fc3274861b41f2e064c99fbba37b7a0c46a3df8dc4589de7ac28df63ed697a48011c863049345c371f10f7d53a56947e348d07e4ff71eaaaf9aaa09bf1147b80d62a60dcec6d7dd4cbf52f2b0b89d2c7de1f16d63ccc0260b0982fcf105736b50001c19eda998426284713670aab21ce128a80b57920d8c3436edb859d4afd7ed835985b5bec01df5447e66ee8511b28671646e71c0669ab2203c4c9a020000279ba87f089d04924cb33ff82f59da9399ce3f20932c073289938e4e7101d357cce920a2aae72f94d6e1aaf9a3905f4da18a7ee849a39f0d1e83adc67ffab826490d4bfff1f80e8c2c180b08e013daf6d054be660390fc4f872b8d60f14951f05ac0dcb4c4281f71ac2d4cb4d68ffdfe8f5c43160d99ea0077486219bb9400a8fc1faacf12878379a7ea5eae2adbbe2871c1664bea1985d594963935019446d605a61ff79802e114a34610d002cf27e0f4b96c6ff880785307161813f48b68c6f9130a6faee6f332e77755fb68b68248ec113030575b1c262c2430c000d11b269ce4e98a32eea3af403630e83aeaaed1420c9fd66eadcf34d6d1fbe457c5216481ddaf6b397912630999fbc5298eab15ab3cce9de7741367264a4e30a61ff7f1d5e7e64290218d9f6f5c9898cd23ee1ac35ab8d3691bf3df31cef54c161bdf3093390ad2322b6f71f22199ac68c5eab4aa7523b4957202751b675fe82c9d42432c92c2fec148da6e5514e9d5f2618d5a616cdbc4a560b3e36eb6cb8baca3251d8e819ea8f552f07ecca0664e7ef22a3a6c11d023eade70f1b872cf58e89c625f561e4858877e39d324dd448b041e4435b676ce0e86de9045e8b9e8305ae60cb7a41c01ce2318af7f9fa011d24aac2b2d31360ce7b437c46df5756d94d1005a0359b57534c49d1e8e173ba183666a19ff6e6c63388250985249eb40f0f981a2bc34e8196e9c468b1bf329c4ac9cf5f19e46734b1238f99f1e6d8c95ecca9cfafc15c756bb4780b675ec9781bfdb583bd91a7df33ed49daec1d65d14f26d7cfadb9e1de06e922939e924b034e4d128cd66a2f7a87c9399c622922e6e33af68c5115053f42c519a054e295b5f8e420630dc116bb2562ac87a6402e4635bd6c6b95943820f86acd5f48ac519b06f1b0bf1c7a70d69e84c95600e017a67e64536197447b810c21cf86a9d09c37aaf6cc39333b414844ce883cec0ffb23e36d5560e9ff6922a9237a6503c72346ebebf57e59c13e7320f670e1826c802b9cc674b55284ddb061e6e38b16c58532497709028ccc4c000604d4a72b3255170a217ac411ea68e64fb3b63653b985abc42bf21629775a05812ef159992320c3cb93805bbebb250e2f9f92b2c8795c388fea24de5e70d45f8ad1764a6e39a1d588191f77fd7bd0408252c784deef806464edc1b4d3de83df34f1b615e10ba20948ca9f28c4f435163e1f5a6fdd0bc8ef397c25b7d704e1ff1dca065022b99778c05ad39f806c3f7ae4278b768eac09b7d317ec5e07db3fc5579a29fb42658ba66c68afb3b8401b2e09c13bc0652309b26cfab2febc3e96a6da6341e6e860468aca74caf06bfc576124594c3f123d5e987319862b0700bd257cff3ea8abff23ebf1a62e575741db2902761578de5c72f4d37bf9186c2391dfff0fcdf2969df27ac0c34d3f07feb0d1887de871e96916add75c15ce2f795749ceadacca94df5808a1629ccd906b3776e7c2a9e94393243de87656432ec21be389731be9821fc035859fffd503f9c8279bd4a36f3be1e3ba0beecaaf6ee44203d8b76c4ca97da38f63fd07ed7812601ab9095a77d52397ecc31819b91d3c28f639bda94c46a5d527abe34bc579338a4db395c57dbeec31a37685ee8121284b63583e026783e47d58deaad78a17e9a946ae7a3db89d8d78d9f37ee5861de7ca92e7335dade99819ecfd63770413b17de97bf403a6d97e163f7eead7d8c182b77cc3d0e0f28f30839445ef751bcf4f21b5803a4e8754fd9a3addb2553ad1d81879addbdc2668e5f2e15926ed805ce7b4ae01be9677c322d59d619cfc806a4946f59010aac481e49d0a0b2ccd0fbd88abf07d4912a081c81633f4a6e0e68eceee686d58a43c45d3bec1046d3bb8d7fc727dda7cfe22af174219bc8e928ca15ff9ce2c707bcea190f8fdeb86a2dc99d7ca81b78efdb0062f1967bb66132164d227e149aa52f39af5e763705373c864323a5885dc6061b5a2ee5501d0b1aa465d93052f29d033a750b1b9cc85fddc0cf168ddc62fb2d1570458d246906fbb689bc8ee3864901eb43f96c19482a7ba7a52fe08b241a32aa9a2774359132b5e1905a08ba37244265070f6d69a428a5834f10d9ba45f476f9e88e856ac223d8cf6ff04894faa2590ecd0a3f6938d661d8aecf6223ae99c414962a86fdc1c2599cee39e9f0153a57ed809bd90023c8d688cc1aa7b5eec5fcd01d07d00100", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x4, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0xfffffdca) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x5, 0x1, 0x4, 0x400000004, 0x401, 0xe767, 0x800, 0xe96, 0x8000, 0x2, r4, r2, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.047381971s ago: executing program 0 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000019280)={0x0, 0x0, &(0x7f00000192c0)={&(0x7f0000019300)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.092536323s ago: executing program 0 (id=1587): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3b, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0xfffffffc, 0x2000000}}}}, 0xfd10}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) 6.769677112s ago: executing program 6 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='100', 0x3) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008890}, 0x0) 6.769308447s ago: executing program 2 (id=1590): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000003c0)='`', 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000400)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000004dc0)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000004e00)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000004e40)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000004e80)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 6.721727721s ago: executing program 5 (id=1591): syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000002540)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd84f, 0x80000, 0x2004, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x435be, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7dc, 0x40, 0xffffffff, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000000, 0x8200, 0x2, 0x4c}}], 0x1, &(0x7f0000000340)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xdc1, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) 5.558255631s ago: executing program 2 (id=1593): socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004340), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004380)={0x8, 0x100008b}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000043c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000004400), 0x2, 0x4a102) writev(r0, &(0x7f0000004440)=[{&(0x7f0000004480)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000064c0)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000006500)={0x0, 0x0, &(0x7f0000006540), &(0x7f0000006580), 0xacb, r1}, 0x38) 4.181032329s ago: executing program 6 (id=1594): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 3.939602823s ago: executing program 2 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) 3.857903382s ago: executing program 5 (id=1596): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e03292f04"], 0xf) r2 = socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x6, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x10, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0xb, 0x200, 0x7, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0xfb, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xcab, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2844, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.412263298s ago: executing program 7 (id=1597): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0x3479, &(0x7f0000000400)={0x0, 0x8800595d, 0x0, 0x20002, 0x1002053, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = fanotify_init(0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) readv(r5, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/65, 0x41}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.225753123s ago: executing program 0 (id=1598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000808}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="33fb8900", @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf25100000000c0099000100000055000000"], 0x20}, 0x1, 0x0, 0x0, 0x101}, 0x20044010) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x400c041) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 3.064220097s ago: executing program 7 (id=1599): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000140)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000200)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000240)='12', 0x2, 0xc30) pwrite64(r0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2.886132308s ago: executing program 2 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) 2.572927934s ago: executing program 7 (id=1601): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000008, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYBLOB="e2ac77a5a0c575e20901b7f0d9febb4f7ecf2f307f0e9b9992a649d1ddd322e5238ea19e549677628a68c513f61cb3f01aeebabcdf08b02b6cd890514271664aec24bf2f5d820efd1683ba449632a583801986bee6a78dc60efe15e6f247f41c24ba6487b510a7695f2f5e97c275c7e55a2a1f3f9e2c9b5e515b47fa25f282a2564fdb325d52f841cce7c750dd320e00005ccabfda32a5fdffffffffffff070b50f53229bc2cd683"], 0x1, 0x392, &(0x7f00000006c0)="$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") socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.134834841s ago: executing program 0 (id=1602): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20002002}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000157000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2.096763177s ago: executing program 7 (id=1603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_io_uring_setup(0xefe, &(0x7f00000005c0)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, &(0x7f0000000440), &(0x7f0000000180)) 2.038289619s ago: executing program 2 (id=1604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000d3b000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000b02000/0x3000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000bcd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc90b, 0xc000, 0x6, 0xce}) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) io_uring_enter(r0, 0x2219, 0xcf74, 0x52, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x61) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0xffffffffffffff2d, 0x2c}, 0x24000845) 1.993647239s ago: executing program 6 (id=1605): prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x88}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000c80)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_mount_image$btrfs(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x10, &(0x7f0000000b40)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x78, 0x25]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f0000001800)="$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") ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000006e00)={{r1}, 0x0, 0x2, @inherit={0x50, &(0x7f0000007e00)={0x0, 0x1, 0x10000005, 0xffff, {0x10, 0xa, 0x0, 0xb}, [0xa]}}, @subvolid=0x1}) 1.448039244s ago: executing program 5 (id=1606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002400)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) socket(0x1d, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x8, 0x0, 0x1000}}}}}}, 0x0) 1.161404409s ago: executing program 7 (id=1607): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x2, 0x8, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)}, 0x8010) setns(0xc9, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000600)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 1.129304464s ago: executing program 2 (id=1608): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x4000921, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) 1.081060163s ago: executing program 0 (id=1609): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000a80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019a80)=0x7) getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000019b00)={0x0, 0x0, &(0x7f0000019b40)={&(0x7f0000019b80)=ANY=[@ANYBLOB="500000000101010100000000000000000a000000300001802c000180140003000000000000000000000000000000008d00d883a56cd1bd000000000000000000000000000c001980"], 0x50}}, 0x4040014) syz_clone3(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000019c00)=0x79, 0x4) bind$inet(r5, &(0x7f0000019c40)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000019c80)={0x1, &(0x7f0000019cc0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000019d00)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000019d40)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f000001b340)=[{{0x0, 0x0, &(0x7f0000019dc0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="d02bdbf17e82c8df0bd111e9b079efb79a9ff938", 0x14}, {0x0}, {&(0x7f0000000300)="7e1c9a4ca4b44335775d4431417445f88fc70e8d9b90c6921db13ca85eca949e62f735f01321a577bf954b350e9057c31d4795b7f59520e07e5783c7fc3e27953956f49bef9115665b63e3de44ee2c85324e8c00ce703656a15a79ecb8761d971521f143a907f15ee592998129de9cb4da180d32", 0x74}], 0x3, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x60}}, {{0x0, 0x0, &(0x7f000001b280)=[{&(0x7f0000019f40)="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", 0x7ee}, {&(0x7f000001af40)="6a5e2a618e2d2587fea514cce62e96733804f730fb222966789e9b87e4fe758e811efb697f8ddf56237e9257f9f3ce33437dacaf0e4b92134f12a669cfd40d51a9d102548142b9f0653f5a0487349c3051720e535b11ab80b95efe44715d3778afd21702dabbed008fc4ac3a378f75a288d92a22e901ce8c9fa5305f0e298a197d63b895b4d173beb3a06086a0de46bfc8f3c5566c83e688c4061c373a57e8511f2c30ca40fc1644bd4f26bb7035914b939b6d6e152a98ed5a61cf69f586814b06f5ab58529165a9e0375b23cc4fe5eb829a2422208089049801", 0xda}, {&(0x7f000001b040)="444d757453ae92fe6417d339", 0xc}, {0x0}, {&(0x7f000001b180)="da20fcd44933bcf4740cc27e50e9943fc86b3bce9974853d62c4a9301d16afea7bbd51adc464d3548ac7cf6ceef5ab6fc2c5326e0a3fa296a57a4eface3bd5307468de5fcbe557891d114d84a4e6789e5f4947df08549f279b2764274711d2e0b75d4326888894e9e10dc01170a3da495699a5545f0d7e00a096adaa39ffe82a042d98082c6dc12d606d3aac36fc0b9955b0720f855fe6fcd38718928b5b20ae9d0a8e2ee279f59c5c231fdac0a4f9c0e759ca1e8f4e36c4a9687168d5fada4400966185576107052d9dcf", 0xcb}], 0x5, &(0x7f000001b300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}], 0x3, 0x2090) sendto$inet(r5, 0x0, 0x0, 0x10008095, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_mount_image$hfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31342c636f6465706167653d63703836392c63726561746f723d44e026f52c71756961742c71756965742c00"], 0x5, 0x304, &(0x7f0000000740)="$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") 94.840162ms ago: executing program 0 (id=1610): add_key$keyring(&(0x7f0000000940), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000007c0)={'vlan0\x00', {0x2, 0x4e21, @empty=0xfdfdffff}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000140)={[0xe]}, 0x0, 0x0, 0x8) tkill(r1, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(0x0, 0x3, 0x300, 0x0, 0x0, 0x1000004) 64.586811ms ago: executing program 5 (id=1611): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='A', 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000740)="3d3ae39933472ecf3569f3c68e1b015e03c87b676c08", 0x16}], 0x1}}], 0x2, 0x4000801) 0s ago: executing program 7 (id=1612): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/mdstat\x00', 0x1800, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dd, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4, 0x0, 0xc3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x2b7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) kernel console output (not intermixed with test programs): adding VLAN 0 to HW filter on device batadv0 [ 348.973712][ T9493] loop0: detected capacity change from 0 to 2048 [ 349.025159][ T9493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.025230][ T9493] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.210495][ T9503] EXT4-fs (loop0): shut down requested (2) [ 349.465452][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.876052][ T9169] veth0_vlan: entered promiscuous mode [ 350.987187][ T9169] veth1_vlan: entered promiscuous mode [ 351.096532][ T9169] veth0_macvtap: entered promiscuous mode [ 351.118862][ T9169] veth1_macvtap: entered promiscuous mode [ 351.183555][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.213388][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.254030][ T5889] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.254058][ T5889] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.254077][ T5889] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.303095][ T5889] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.619483][ T9530] FAULT_INJECTION: forcing a failure. [ 351.619483][ T9530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.619506][ T9530] CPU: 0 UID: 0 PID: 9530 Comm: syz.5.1172 Not tainted syzkaller #0 PREEMPT(full) [ 351.619519][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 351.619527][ T9530] Call Trace: [ 351.619531][ T9530] [ 351.619537][ T9530] dump_stack_lvl+0xe8/0x150 [ 351.619559][ T9530] should_fail_ex+0x3eb/0x540 [ 351.619576][ T9530] _copy_from_user+0x2d/0xb0 [ 351.619591][ T9530] ___sys_recvmsg+0x173/0x5a0 [ 351.619607][ T9530] ? __pfx____sys_recvmsg+0x10/0x10 [ 351.619623][ T9530] ? lock_acquire+0x115/0x350 [ 351.619653][ T9530] do_recvmmsg+0x31a/0x800 [ 351.619670][ T9530] ? __pfx_do_recvmmsg+0x10/0x10 [ 351.619683][ T9530] ? do_futex+0x3e7/0x4e0 [ 351.619699][ T9530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 351.619722][ T9530] __x64_sys_recvmmsg+0x198/0x250 [ 351.619736][ T9530] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 351.619756][ T9530] do_syscall_64+0x166/0x520 [ 351.619769][ T9530] ? trace_irq_disable+0x3b/0x140 [ 351.619800][ T9530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.619812][ T9530] ? clear_bhb_loop+0x70/0xc0 [ 351.619826][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.619836][ T9530] RIP: 0033:0x7f908979f559 [ 351.619848][ T9530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.619857][ T9530] RSP: 002b:00007f908a730028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 351.619870][ T9530] RAX: ffffffffffffffda RBX: 00007f9089a25fa0 RCX: 00007f908979f559 [ 351.619879][ T9530] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 351.619886][ T9530] RBP: 00007f9089836b20 R08: 0000000000000000 R09: 0000000000000000 [ 351.619893][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.619899][ T9530] R13: 00007f9089a26038 R14: 00007f9089a25fa0 R15: 00007ffd82b3e2d8 [ 351.619916][ T9530] [ 351.884412][ T5889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.884429][ T5889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.040915][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.040930][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.334330][ T9540] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 352.334330][ T9540] [ 352.334545][ T9540] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 352.335013][ T9540] CIFS: Attempting to mount //172.20.20.170/share [ 353.616152][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1180'. [ 353.741403][ T9557] loop6: detected capacity change from 0 to 64 [ 353.742393][ T9557] hfs: Unknown parameter 'quiat' [ 353.840072][ T9540] CIFS: VFS: cifs_mount failed w/return code = -112 [ 354.535178][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 354.684294][ T10] usb 3-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 354.685280][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.685309][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.685332][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.951285][ T9586] syzkaller1: entered promiscuous mode [ 354.951300][ T9586] syzkaller1: entered allmulticast mode [ 355.175599][ T32] kauditd_printk_skb: 24 callbacks suppressed [ 355.175626][ T32] audit: type=1326 audit(1793394947.332:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.5.1187" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908979f559 code=0x7fc00000 [ 356.083750][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 356.144974][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 356.256111][ T9622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.369564][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 356.371375][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 356.371947][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 356.397161][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 356.409390][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 356.421997][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 356.447927][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 356.448652][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 356.449027][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 356.449503][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 356.452245][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 356.467306][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 356.490117][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 356.502220][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 356.502697][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 356.503136][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 356.525551][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 356.548750][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 356.573831][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 356.597705][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 356.598030][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 356.621453][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 356.634052][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 356.658003][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 356.678527][ T9627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.678824][ T9627] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 356.712671][ T9627] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 356.830513][ T9630] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 356.859137][ T9630] bond1: (slave wlan1): Enslaving as an active interface with an up link [ 356.878244][ T9638] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1205'. [ 356.936252][ T9641] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1205'. [ 356.975870][ T10] ax88179_178a 3-1:1.0 eth9: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 5c:00:00:00:00:00 [ 357.000319][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.000638][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.026326][ T10] usb 3-1: USB disconnect, device number 26 [ 357.027766][ T10] ax88179_178a 3-1:1.0 eth9: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 357.181270][ T9646] xt_hashlimit: size too large, truncated to 1048576 [ 358.076203][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1208'. [ 358.208230][ T9652] loop5: detected capacity change from 0 to 64 [ 358.208826][ T9652] hfs: Unknown parameter 'quiat' [ 358.273054][ T5647] Bluetooth: hci5: command 0x1003 tx timeout [ 358.273156][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 358.625695][ T9655] loop0: detected capacity change from 0 to 128 [ 360.346387][ T9677] netlink: 'syz.1.1215': attribute type 2 has an invalid length. [ 360.603872][ T9678] loop6: detected capacity change from 0 to 1024 [ 360.793229][ T9678] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 360.793266][ T9678] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 360.793278][ T9678] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.1217: Failed to acquire dquot type 0 [ 360.793290][ T9678] loop6: lost filesystem error report for type 5 error -117 [ 360.812782][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 360.812797][ C0] EXT4-fs (loop6): initial error at time 1793394952: ext4_acquire_dquot:7120 [ 360.812810][ C0] EXT4-fs (loop6): last error at time 1793394952: ext4_acquire_dquot:7120 [ 360.869053][ T9678] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 360.869117][ T9678] EXT4-fs error (device loop6): ext4_do_update_inode:6707: inode #13: comm syz.6.1217: corrupted inode contents [ 360.869131][ T9678] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 360.915553][ T9678] EXT4-fs error (device loop6): ext4_dirty_inode:7679: inode #13: comm syz.6.1217: mark_inode_dirty error [ 360.915576][ T9678] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 360.938475][ T9678] EXT4-fs error (device loop6): ext4_do_update_inode:6707: inode #13: comm syz.6.1217: corrupted inode contents [ 360.938496][ T9678] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 360.993495][ T9678] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.1217: mark_inode_dirty error [ 360.993518][ T9678] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 361.008246][ T9678] EXT4-fs error (device loop6): ext4_do_update_inode:6707: inode #13: comm syz.6.1217: corrupted inode contents [ 361.008267][ T9678] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 361.057517][ T9678] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 361.057535][ T9678] loop6: lost filesystem error report for type 5 error -117 [ 361.081339][ T9678] EXT4-fs error (device loop6): ext4_do_update_inode:6707: inode #13: comm syz.6.1217: corrupted inode contents [ 361.081359][ T9678] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 361.101806][ T9678] EXT4-fs error (device loop6): ext4_truncate:5538: inode #13: comm syz.6.1217: mark_inode_dirty error [ 361.101847][ T9678] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 361.124338][ T9678] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 361.124354][ T9678] loop6: lost filesystem error report for type 5 error -117 [ 361.147951][ T9678] EXT4-fs (loop6): 1 truncate cleaned up [ 361.148851][ T9678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.296768][ T9169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.251089][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1221'. [ 362.374022][ T9702] loop6: detected capacity change from 0 to 64 [ 362.374619][ T9702] hfs: Unknown parameter 'quiat' [ 362.500835][ T9705] loop1: detected capacity change from 0 to 128 [ 363.372089][ T9714] loop5: detected capacity change from 0 to 16 [ 363.380144][ T9714] erofs (device loop5): invalid ishare xattr prefix id 0 [ 363.579260][ T5630] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 363.579430][ T5630] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 364.505482][ T9734] loop2: detected capacity change from 0 to 1024 [ 364.569387][ T9734] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 364.569422][ T9734] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 364.569433][ T9734] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.1231: Failed to acquire dquot type 0 [ 364.569451][ T9734] loop2: lost filesystem error report for type 5 error -117 [ 364.580713][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 364.580726][ C0] EXT4-fs (loop2): initial error at time 1793394956: ext4_acquire_dquot:7120 [ 364.580739][ C0] EXT4-fs (loop2): last error at time 1793394956: ext4_acquire_dquot:7120 [ 364.595637][ T9734] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 364.595700][ T9734] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.1231: corrupted inode contents [ 364.595714][ T9734] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.662792][ T9734] EXT4-fs error (device loop2): ext4_dirty_inode:7679: inode #13: comm syz.2.1231: mark_inode_dirty error [ 364.662814][ T9734] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.676945][ T9734] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.1231: corrupted inode contents [ 364.676964][ T9734] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.711675][ T9734] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.1231: mark_inode_dirty error [ 364.738502][ T9734] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.1231: corrupted inode contents [ 364.762650][ T9734] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 364.762665][ T9734] loop2: lost filesystem error report for type 5 error -117 [ 364.772649][ T9734] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.1231: corrupted inode contents [ 364.804973][ T9734] EXT4-fs error (device loop2): ext4_truncate:5538: inode #13: comm syz.2.1231: mark_inode_dirty error [ 364.845004][ T9734] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 364.845021][ T9734] loop2: lost filesystem error report for type 5 error -117 [ 364.863537][ T9734] EXT4-fs (loop2): 1 truncate cleaned up [ 364.864452][ T9734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.044527][ T5889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.267975][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.169392][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 366.293029][ T9745] loop0: detected capacity change from 0 to 64 [ 366.293623][ T9745] hfs: Unknown parameter 'quiat' [ 367.132404][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 367.333029][ T9749] FAULT_INJECTION: forcing a failure. [ 367.333029][ T9749] name failslab, interval 1, probability 0, space 0, times 0 [ 367.333055][ T9749] CPU: 0 UID: 0 PID: 9749 Comm: syz.2.1235 Not tainted syzkaller #0 PREEMPT(full) [ 367.333069][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 367.333079][ T9749] Call Trace: [ 367.333084][ T9749] [ 367.333089][ T9749] dump_stack_lvl+0xe8/0x150 [ 367.333114][ T9749] should_fail_ex+0x3eb/0x540 [ 367.333131][ T9749] should_failslab+0xa8/0x100 [ 367.333150][ T9749] __kmalloc_cache_noprof+0x9e/0x600 [ 367.333165][ T9749] ? fuse_dev_alloc_install+0x54/0x1d0 [ 367.333176][ T9749] ? fuse_dev_alloc_install+0x54/0x1d0 [ 367.333190][ T9749] fuse_dev_alloc_install+0x54/0x1d0 [ 367.333212][ T9749] cuse_channel_open+0x11e/0x7a0 [ 367.333231][ T9749] ? __pfx_cuse_channel_open+0x10/0x10 [ 367.333245][ T9749] misc_open+0x2d5/0x350 [ 367.333261][ T9749] chrdev_open+0x4d9/0x600 [ 367.333274][ T9749] ? __pfx_chrdev_open+0x10/0x10 [ 367.333285][ T9749] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 367.333302][ T9749] ? devcgroup_check_permission+0x31/0x8f0 [ 367.333319][ T9749] ? __pfx_chrdev_open+0x10/0x10 [ 367.333329][ T9749] do_dentry_open+0x80e/0x1360 [ 367.333347][ T9749] vfs_open_consume+0x4a/0x350 [ 367.333358][ T9749] ? path_openat+0x16e1/0x20f0 [ 367.333375][ T9749] path_openat+0x16fc/0x20f0 [ 367.333400][ T9749] do_file_open+0x23e/0x4a0 [ 367.333419][ T9749] ? __pfx_do_file_open+0x10/0x10 [ 367.333446][ T9749] ? _raw_spin_unlock+0x28/0x50 [ 367.333464][ T9749] ? alloc_fd+0x6af/0x760 [ 367.333484][ T9749] do_sys_openat2+0x115/0x200 [ 367.333496][ T9749] ? __se_sys_futex+0x3a8/0x450 [ 367.333509][ T9749] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.333525][ T9749] ? rcu_is_watching+0x16/0xb0 [ 367.333544][ T9749] __x64_sys_openat+0x138/0x170 [ 367.333560][ T9749] do_syscall_64+0x166/0x520 [ 367.333574][ T9749] ? trace_irq_disable+0x3b/0x140 [ 367.333589][ T9749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.333600][ T9749] ? clear_bhb_loop+0x70/0xc0 [ 367.333613][ T9749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.333627][ T9749] RIP: 0033:0x7ff19a19f559 [ 367.333640][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.333649][ T9749] RSP: 002b:00007ff19b004028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.333666][ T9749] RAX: ffffffffffffffda RBX: 00007ff19a425fa0 RCX: 00007ff19a19f559 [ 367.333674][ T9749] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 367.333682][ T9749] RBP: 00007ff19a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 367.333688][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.333695][ T9749] R13: 00007ff19a426038 R14: 00007ff19a425fa0 R15: 00007ffd37eddf88 [ 367.333713][ T9749] [ 367.843812][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.862739][ T5889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.881009][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.882638][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.900103][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.900491][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.256278][ T5889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.310226][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1239'. [ 368.490381][ T9767] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 368.569889][ T5889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.003070][ T5755] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 369.154476][ T5755] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 369.165398][ T5755] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 369.165413][ T5755] usb 3-1: config 1 has no interface number 0 [ 369.195853][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.195870][ T5755] usb 3-1: Product: syz [ 369.195877][ T5755] usb 3-1: Manufacturer: syz [ 369.195885][ T5755] usb 3-1: SerialNumber: syz [ 369.248677][ T5755] usb 3-1: 3:0 : does not exist [ 369.248692][ T5755] usb 3-1: 3:0 : does not exist [ 369.376677][ T5889] bridge_slave_1: left allmulticast mode [ 369.376696][ T5889] bridge_slave_1: left promiscuous mode [ 369.376819][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.426304][ T5889] bridge_slave_0: left allmulticast mode [ 369.426322][ T5889] bridge_slave_0: left promiscuous mode [ 369.426444][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.696591][ T5755] usb 3-1: USB disconnect, device number 27 [ 369.859066][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.035654][ T5647] Bluetooth: hci2: command tx timeout [ 370.361692][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.391628][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.405852][ T5889] bond0 (unregistering): Released all slaves [ 370.849167][ T9752] rxe_eth0 speed is unknown, defaulting to 1000 [ 371.232009][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1251'. [ 371.429923][ T9845] FAULT_INJECTION: forcing a failure. [ 371.429923][ T9845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.429945][ T9845] CPU: 0 UID: 0 PID: 9845 Comm: syz.0.1252 Not tainted syzkaller #0 PREEMPT(full) [ 371.429958][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 371.429966][ T9845] Call Trace: [ 371.429970][ T9845] [ 371.429976][ T9845] dump_stack_lvl+0xe8/0x150 [ 371.429998][ T9845] should_fail_ex+0x3eb/0x540 [ 371.430015][ T9845] _copy_to_user+0x31/0xb0 [ 371.430031][ T9845] btf_get_info_by_fd+0x1db/0x650 [ 371.430046][ T9845] ? __pfx_btf_get_info_by_fd+0x10/0x10 [ 371.430056][ T9845] ? __fget_files+0x2a/0x420 [ 371.430074][ T9845] ? fdget+0x1ac/0x250 [ 371.430089][ T9845] bpf_obj_get_info_by_fd+0xab0/0x35a0 [ 371.430103][ T9845] ? lock_acquire+0x115/0x350 [ 371.430122][ T9845] ? futex_unqueue+0x22/0x240 [ 371.430139][ T9845] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 371.430150][ T9845] ? futex_unqueue+0x22/0x240 [ 371.430168][ T9845] ? __lock_acquire+0x747/0x2de0 [ 371.430188][ T9845] ? __pfx___futex_wait+0x10/0x10 [ 371.430203][ T9845] ? __pfx_futex_wake_mark+0x10/0x10 [ 371.430218][ T9845] ? lock_acquire+0x115/0x350 [ 371.430238][ T9845] ? __might_fault+0xaf/0x130 [ 371.430249][ T9845] ? bpf_lsm_bpf+0x9/0x20 [ 371.430258][ T9845] ? security_bpf+0x7e/0x2d0 [ 371.430274][ T9845] __sys_bpf+0xbf7/0xe00 [ 371.430289][ T9845] ? __pfx___sys_bpf+0x10/0x10 [ 371.430301][ T9845] ? do_futex+0x3e7/0x4e0 [ 371.430327][ T9845] ? rcu_is_watching+0x16/0xb0 [ 371.430349][ T9845] __x64_sys_bpf+0xba/0xd0 [ 371.430367][ T9845] do_syscall_64+0x166/0x520 [ 371.430381][ T9845] ? trace_irq_disable+0x3b/0x140 [ 371.430396][ T9845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.430407][ T9845] ? clear_bhb_loop+0x70/0xc0 [ 371.430421][ T9845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.430432][ T9845] RIP: 0033:0x7f4e2439f559 [ 371.430443][ T9845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.430453][ T9845] RSP: 002b:00007f4e25301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.430465][ T9845] RAX: ffffffffffffffda RBX: 00007f4e24625fa0 RCX: 00007f4e2439f559 [ 371.430473][ T9845] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000f [ 371.430480][ T9845] RBP: 00007f4e24436b20 R08: 0000000000000000 R09: 0000000000000000 [ 371.430487][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.430493][ T9845] R13: 00007f4e24626038 R14: 00007f4e24625fa0 R15: 00007fffe9226c68 [ 371.430509][ T9845] [ 372.027744][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1256'. [ 372.113277][ T5647] Bluetooth: hci2: command tx timeout [ 373.187383][ T9883] loop0: detected capacity change from 0 to 40427 [ 373.207460][ T9883] F2FS-fs (loop0): invalid crc value [ 373.335229][ T9883] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 373.400889][ T9883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 374.193613][ T5647] Bluetooth: hci2: command tx timeout [ 375.357690][ T5631] syz-executor: attempt to access beyond end of device [ 375.357690][ T5631] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 375.387610][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 375.387627][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 375.387634][ T5631] Call Trace: [ 375.387639][ T5631] [ 375.387644][ T5631] dump_stack_lvl+0xe8/0x150 [ 375.387666][ T5631] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 375.387687][ T5631] f2fs_write_end_bio+0x118e/0x15d0 [ 375.387710][ T5631] __submit_merged_bio+0x258/0x6a0 [ 375.387726][ T5631] ? rcu_is_watching+0x16/0xb0 [ 375.387746][ T5631] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 375.387764][ T5631] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 375.387794][ T5631] f2fs_write_data_pages+0x2a13/0x36e0 [ 375.387826][ T5631] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 375.387837][ T5631] ? is_bpf_text_address+0x26/0x2b0 [ 375.387855][ T5631] ? arch_stack_walk+0xfb/0x150 [ 375.387885][ T5631] ? add_lock_to_list+0xc7/0x100 [ 375.387902][ T5631] ? lockdep_unlock+0x5c/0xd0 [ 375.387912][ T5631] ? __lock_acquire+0x1511/0x2de0 [ 375.387942][ T5631] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.387961][ T5631] ? do_raw_spin_unlock+0xf5/0x200 [ 375.387972][ T5631] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 375.387984][ T5631] do_writepages+0x338/0x560 [ 375.388002][ T5631] ? do_raw_spin_unlock+0xf5/0x200 [ 375.388015][ T5631] filemap_fdatawrite+0x1e9/0x2f0 [ 375.388029][ T5631] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 375.388066][ T5631] ? do_raw_spin_unlock+0xf5/0x200 [ 375.388079][ T5631] f2fs_sync_dirty_inodes+0x471/0x970 [ 375.388101][ T5631] f2fs_write_checkpoint+0x867/0x24d0 [ 375.388134][ T5631] kill_f2fs_super+0x2df/0x700 [ 375.388149][ T5631] ? rcu_do_enqueue+0x616/0x870 [ 375.388162][ T5631] ? lockdep_hardirqs_on+0x7b/0x110 [ 375.388176][ T5631] ? __pfx_kill_f2fs_super+0x10/0x10 [ 375.388197][ T5631] ? __pfx_call_rcu+0x10/0x10 [ 375.388210][ T5631] ? shrinker_free+0x2a7/0x3b0 [ 375.388224][ T5631] deactivate_locked_super+0xbe/0x110 [ 375.388239][ T5631] cleanup_mnt+0x204/0x2a0 [ 375.388257][ T5631] task_work_run+0x1d9/0x260 [ 375.388272][ T5631] ? __pfx_task_work_run+0x10/0x10 [ 375.388291][ T5631] exit_to_user_mode_loop+0x204/0x770 [ 375.388306][ T5631] ? rcu_is_watching+0x16/0xb0 [ 375.388323][ T5631] do_syscall_64+0x328/0x520 [ 375.388336][ T5631] ? trace_irq_disable+0x3b/0x140 [ 375.388351][ T5631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.388362][ T5631] ? clear_bhb_loop+0x70/0xc0 [ 375.388375][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.388385][ T5631] RIP: 0033:0x7f4e243a0797 [ 375.388396][ T5631] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 375.388406][ T5631] RSP: 002b:00007fffe9225ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 375.388418][ T5631] RAX: 0000000000000000 RBX: 00007f4e24435f63 RCX: 00007f4e243a0797 [ 375.388425][ T5631] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe9225f90 [ 375.388432][ T5631] RBP: 00007fffe9225f90 R08: 00007fffe9226f90 R09: 00000000ffffffff [ 375.388439][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe9227020 [ 375.388445][ T5631] R13: 00007f4e24435f63 R14: 000000000005b2c9 R15: 00007fffe9227060 [ 375.388463][ T5631] [ 375.515722][ T5631] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 375.852652][ T5889] hsr_slave_0: left promiscuous mode [ 375.862501][ T5889] hsr_slave_1: left promiscuous mode [ 375.872055][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.872070][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.891320][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.891334][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.928464][ T5889] veth1_vlan: left promiscuous mode [ 375.928523][ T5889] veth0_vlan: left promiscuous mode [ 376.273212][ T5647] Bluetooth: hci2: command tx timeout [ 377.109721][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 377.232737][ T9909] loop0: detected capacity change from 0 to 64 [ 377.296718][ T9909] hfs: Unknown parameter 'quiat' [ 377.405250][ T5889] team0 (unregistering): Port device team_slave_1 removed [ 377.449600][ T5889] team0 (unregistering): Port device team_slave_0 removed [ 377.784154][ T5297] 8021q: adding VLAN 0 to HW filter on device eth9 [ 377.812837][ T9914] loop6: detected capacity change from 0 to 512 [ 377.838160][ T9914] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 378.971332][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 379.125923][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.363872][ T9928] kvm_intel: kvm [9919]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 380.850772][ T9938] FAULT_INJECTION: forcing a failure. [ 380.850772][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 380.850794][ T9938] CPU: 0 UID: 0 PID: 9938 Comm: syz.6.1275 Not tainted syzkaller #0 PREEMPT(full) [ 380.850807][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 380.850814][ T9938] Call Trace: [ 380.850818][ T9938] [ 380.850824][ T9938] dump_stack_lvl+0xe8/0x150 [ 380.850847][ T9938] should_fail_ex+0x3eb/0x540 [ 380.850872][ T9938] should_failslab+0xa8/0x100 [ 380.850891][ T9938] __kmalloc_cache_noprof+0x9e/0x600 [ 380.850906][ T9938] ? lockdep_hardirqs_on+0x7b/0x110 [ 380.850920][ T9938] ? cec_queue_event_fh+0xd3/0xa80 [ 380.850931][ T9938] ? cec_queue_event_fh+0xd3/0xa80 [ 380.850946][ T9938] cec_queue_event_fh+0xd3/0xa80 [ 380.850957][ T9938] ? __raw_spin_lock_init+0x45/0x100 [ 380.850973][ T9938] cec_open+0x564/0x7a0 [ 380.850986][ T9938] ? __pfx_cec_open+0x10/0x10 [ 380.851006][ T9938] ? do_raw_spin_unlock+0xf5/0x200 [ 380.851019][ T9938] chrdev_open+0x4d9/0x600 [ 380.851031][ T9938] ? __pfx_chrdev_open+0x10/0x10 [ 380.851042][ T9938] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 380.851059][ T9938] ? devcgroup_check_permission+0x31/0x8f0 [ 380.851076][ T9938] ? __pfx_chrdev_open+0x10/0x10 [ 380.851086][ T9938] do_dentry_open+0x80e/0x1360 [ 380.851103][ T9938] vfs_open_consume+0x4a/0x350 [ 380.851114][ T9938] ? path_openat+0x16e1/0x20f0 [ 380.851130][ T9938] path_openat+0x16fc/0x20f0 [ 380.851156][ T9938] do_file_open+0x23e/0x4a0 [ 380.851174][ T9938] ? __pfx_do_file_open+0x10/0x10 [ 380.851201][ T9938] ? _raw_spin_unlock+0x28/0x50 [ 380.851212][ T9938] ? alloc_fd+0x6af/0x760 [ 380.851231][ T9938] do_sys_openat2+0x115/0x200 [ 380.851243][ T9938] ? __se_sys_futex+0x3a8/0x450 [ 380.851255][ T9938] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.851270][ T9938] ? rcu_is_watching+0x16/0xb0 [ 380.851290][ T9938] __x64_sys_openat+0x138/0x170 [ 380.851305][ T9938] do_syscall_64+0x166/0x520 [ 380.851318][ T9938] ? trace_irq_disable+0x3b/0x140 [ 380.851333][ T9938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.851344][ T9938] ? clear_bhb_loop+0x70/0xc0 [ 380.851357][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.851368][ T9938] RIP: 0033:0x7fb88755fd8e [ 380.851379][ T9938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.851388][ T9938] RSP: 002b:00007fb888530b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.851401][ T9938] RAX: ffffffffffffffda RBX: 00007fb8885316c0 RCX: 00007fb88755fd8e [ 380.851409][ T9938] RDX: 0000000000000001 RSI: 00007fb888530c00 RDI: ffffffffffffff9c [ 380.851416][ T9938] RBP: 00007fb888530c00 R08: 0000000000000000 R09: 0000000000000000 [ 380.851423][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 380.851430][ T9938] R13: 00007fb887826038 R14: 00007fb887825fa0 R15: 00007ffeaa36fe38 [ 380.851448][ T9938] [ 381.282071][ T9942] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 381.399371][ T9752] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.407439][ T9752] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.407550][ T9752] bridge_slave_0: entered allmulticast mode [ 381.408464][ T9752] bridge_slave_0: entered promiscuous mode [ 381.445752][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.445811][ T9752] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.445899][ T9752] bridge_slave_1: entered allmulticast mode [ 381.473242][ T9752] bridge_slave_1: entered promiscuous mode [ 381.583632][ T9752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.602859][ T9752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.751385][ T9752] team0: Port device team_slave_0 added [ 381.768269][ T9752] team0: Port device team_slave_1 added [ 381.863830][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1279'. [ 381.901831][ T9752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.901844][ T9752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.901858][ T9752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.958671][ T9752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.958684][ T9752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.958699][ T9752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.144753][ T9966] ubi0: attaching mtd0 [ 382.145777][ T9966] ubi0: scanning is finished [ 382.145788][ T9966] ubi0: empty MTD device detected [ 382.207203][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1281'. [ 382.207666][ T9752] hsr_slave_0: entered promiscuous mode [ 382.234014][ T9966] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 382.234030][ T9966] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 382.234039][ T9966] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 382.234047][ T9966] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 382.234057][ T9966] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 382.234065][ T9966] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 382.234074][ T9966] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 473791368 [ 382.234085][ T9966] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 382.235593][ T9967] ubi0: background thread "ubi_bgt0d" started, PID 9967 [ 382.300240][ T9752] hsr_slave_1: entered promiscuous mode [ 382.520332][ T9971] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1283'. [ 382.538649][ T9973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.194652][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1289'. [ 383.467397][T10001] loop0: detected capacity change from 0 to 2048 [ 383.510465][T10001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.010059][ T9752] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 384.032382][ T9752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.048336][ T9752] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 384.078203][ T9752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.078727][ T9752] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 384.111295][ T9752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.122773][ T9752] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 384.147865][ T9752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.535051][ T9752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.596525][ T9752] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.612855][T10034] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 384.612870][T10034] block device autoloading is deprecated and will be removed. [ 384.650798][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.650857][ T5889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.700043][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.700103][ T5889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.050076][ T5297] 8021q: adding VLAN 0 to HW filter on device eth10 [ 386.319244][T10077] loop2: detected capacity change from 0 to 32768 [ 386.320129][T10077] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 386.351846][T10077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1307 (10077) [ 386.366999][T10077] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 386.367019][T10077] BTRFS info (device loop2): using sha256 checksum algorithm [ 386.567690][T10077] BTRFS info (device loop2): rebuilding free space tree [ 386.626977][T10077] BTRFS info (device loop2): disabling free space tree [ 386.627035][T10077] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 386.627048][T10077] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 386.650073][T10077] BTRFS info (device loop2): enabling ssd optimizations [ 386.650090][T10077] BTRFS info (device loop2): force clearing of disk cache [ 386.650100][T10077] BTRFS info (device loop2): enabling auto defrag [ 386.650109][T10077] BTRFS info (device loop2): max_inline set to 0 [ 386.993385][ T5647] Bluetooth: hci3: command 0x0406 tx timeout [ 387.616895][T10111] xt_hashlimit: size too large, truncated to 1048576 [ 387.669642][ T9752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.682426][ T5297] 8021q: adding VLAN 0 to HW filter on device eth11 [ 388.011004][ T5644] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 388.884056][T10138] xt_hashlimit: size too large, truncated to 1048576 [ 389.010312][ T9752] veth0_vlan: entered promiscuous mode [ 389.057462][ T9752] veth1_vlan: entered promiscuous mode [ 389.248949][ T9752] veth0_macvtap: entered promiscuous mode [ 389.286406][ T9752] veth1_macvtap: entered promiscuous mode [ 389.381864][ T9752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.430283][ T9752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.475521][ T146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.475618][ T146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.475639][ T146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.475658][ T146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.825615][ T9786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.825630][ T9786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.004730][ T9778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.004745][ T9778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.116438][T10134] loop2: detected capacity change from 0 to 32768 [ 390.138241][T10134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1314 (10134) [ 390.191332][T10134] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.191355][T10134] BTRFS info (device loop2): using crc32c checksum algorithm [ 390.352894][T10158] af_packet: packet size is too long (4294901760 > 1504) [ 390.381229][T10134] BTRFS info (device loop2): enabling ssd optimizations [ 390.381246][T10134] BTRFS info (device loop2): turning on flush-on-commit [ 390.381255][T10134] BTRFS info (device loop2): enabling free space tree [ 390.381264][T10134] BTRFS info (device loop2): enabling auto defrag [ 390.381343][T10134] BTRFS info (device loop2): use lzo compression, level 1 [ 390.381356][T10134] BTRFS info (device loop2): max_inline set to 4096 [ 390.521888][ T5297] 8021q: adding VLAN 0 to HW filter on device eth12 [ 390.554572][T10171] loop6: detected capacity change from 0 to 512 [ 390.578380][T10171] EXT4-fs warning (device loop6): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 390.609040][ T32] audit: type=1800 audit(1793394982.762:57): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1314" name="file1" dev="loop2" ino=260 res=0 errno=-22 [ 390.692300][T10171] xt_hashlimit: size too large, truncated to 1048576 [ 391.138532][T10146] loop5: detected capacity change from 0 to 40427 [ 391.285582][T10146] F2FS-fs (loop5): build fault injection rate: 25 [ 391.285597][T10146] F2FS-fs (loop5): build fault injection type: 0x7698c [ 391.315715][T10146] F2FS-fs (loop5): invalid crc value [ 391.367957][T10146] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_cache_read+0x158/0x340 [ 391.756362][T10146] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 391.756594][T10146] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_recover_fsync_data+0x515/0x9610 [ 391.762667][T10146] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 391.940452][ T5644] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 392.011058][T10146] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_cache+0x16a/0x9c0 [ 392.154644][T10146] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8e0 [ 392.202447][T10146] syz.5.1317: attempt to access beyond end of device [ 392.202447][T10146] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 392.471114][ T7687] syz-executor: attempt to access beyond end of device [ 392.471114][ T7687] loop5: rw=2049, sector=45104, nr_sectors = 32 limit=40427 [ 392.526577][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 392.526596][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 392.526603][ T7687] Call Trace: [ 392.526609][ T7687] [ 392.526614][ T7687] dump_stack_lvl+0xe8/0x150 [ 392.526636][ T7687] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 392.526659][ T7687] f2fs_write_end_bio+0x118e/0x15d0 [ 392.526682][ T7687] __submit_merged_bio+0x258/0x6a0 [ 392.526698][ T7687] ? rcu_is_watching+0x16/0xb0 [ 392.526717][ T7687] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 392.526741][ T7687] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 392.526771][ T7687] f2fs_write_data_pages+0x2a13/0x36e0 [ 392.526802][ T7687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.526821][ T7687] ? is_bpf_text_address+0x292/0x2b0 [ 392.526832][ T7687] ? is_bpf_text_address+0x26/0x2b0 [ 392.526858][ T7687] ? stack_trace_save+0xa9/0x100 [ 392.526871][ T7687] ? __pfx_stack_trace_save+0x10/0x10 [ 392.526894][ T7687] ? lockdep_unlock+0x5c/0xd0 [ 392.526905][ T7687] ? __lock_acquire+0x1511/0x2de0 [ 392.526933][ T7687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.526945][ T7687] do_writepages+0x338/0x560 [ 392.526963][ T7687] ? do_raw_spin_unlock+0xf5/0x200 [ 392.526977][ T7687] filemap_fdatawrite+0x1e9/0x2f0 [ 392.526992][ T7687] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 392.527029][ T7687] ? do_raw_spin_unlock+0xf5/0x200 [ 392.527042][ T7687] f2fs_sync_dirty_inodes+0x471/0x970 [ 392.527064][ T7687] f2fs_write_checkpoint+0x867/0x24d0 [ 392.527097][ T7687] kill_f2fs_super+0x2df/0x700 [ 392.527112][ T7687] ? rcu_do_enqueue+0x616/0x870 [ 392.527125][ T7687] ? lockdep_hardirqs_on+0x7b/0x110 [ 392.527139][ T7687] ? __pfx_kill_f2fs_super+0x10/0x10 [ 392.527161][ T7687] ? __pfx_call_rcu+0x10/0x10 [ 392.527173][ T7687] ? shrinker_free+0x2a7/0x3b0 [ 392.527187][ T7687] deactivate_locked_super+0xbe/0x110 [ 392.527203][ T7687] cleanup_mnt+0x204/0x2a0 [ 392.527221][ T7687] task_work_run+0x1d9/0x260 [ 392.527237][ T7687] ? __pfx_task_work_run+0x10/0x10 [ 392.527256][ T7687] exit_to_user_mode_loop+0x204/0x770 [ 392.527270][ T7687] ? rcu_is_watching+0x16/0xb0 [ 392.527288][ T7687] do_syscall_64+0x328/0x520 [ 392.527301][ T7687] ? trace_irq_disable+0x3b/0x140 [ 392.527316][ T7687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.527326][ T7687] ? clear_bhb_loop+0x70/0xc0 [ 392.527339][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.527350][ T7687] RIP: 0033:0x7f90897a0797 [ 392.527361][ T7687] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 392.527371][ T7687] RSP: 002b:00007ffd82b3d548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 392.527383][ T7687] RAX: 0000000000000000 RBX: 00007f9089835f63 RCX: 00007f90897a0797 [ 392.527390][ T7687] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd82b3d600 [ 392.527397][ T7687] RBP: 00007ffd82b3d600 R08: 00007ffd82b3e600 R09: 00000000ffffffff [ 392.527404][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd82b3e690 [ 392.527410][ T7687] R13: 00007f9089835f63 R14: 000000000005fc38 R15: 00007ffd82b3e6d0 [ 392.527428][ T7687] [ 392.531662][ T7687] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 392.531767][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 392.531781][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 392.531787][ T7687] Call Trace: [ 392.531792][ T7687] [ 392.531799][ T7687] dump_stack_lvl+0xe8/0x150 [ 392.531820][ T7687] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 392.531841][ T7687] f2fs_write_end_bio+0x118e/0x15d0 [ 392.531866][ T7687] __submit_merged_bio+0x258/0x6a0 [ 392.531882][ T7687] ? rcu_is_watching+0x16/0xb0 [ 392.531902][ T7687] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 392.531920][ T7687] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 392.531950][ T7687] f2fs_write_data_pages+0x2a13/0x36e0 [ 392.531985][ T7687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.532005][ T7687] ? is_bpf_text_address+0x292/0x2b0 [ 392.532016][ T7687] ? is_bpf_text_address+0x26/0x2b0 [ 392.532044][ T7687] ? stack_trace_save+0xa9/0x100 [ 392.532057][ T7687] ? __pfx_stack_trace_save+0x10/0x10 [ 392.532081][ T7687] ? lockdep_unlock+0x5c/0xd0 [ 392.532093][ T7687] ? __lock_acquire+0x1511/0x2de0 [ 392.532122][ T7687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.532135][ T7687] do_writepages+0x338/0x560 [ 392.532154][ T7687] ? do_raw_spin_unlock+0xf5/0x200 [ 392.532167][ T7687] filemap_fdatawrite+0x1e9/0x2f0 [ 392.532182][ T7687] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 392.532222][ T7687] ? do_raw_spin_unlock+0xf5/0x200 [ 392.532235][ T7687] f2fs_sync_dirty_inodes+0x471/0x970 [ 392.532264][ T7687] f2fs_write_checkpoint+0x867/0x24d0 [ 392.532299][ T7687] kill_f2fs_super+0x2df/0x700 [ 392.532315][ T7687] ? rcu_do_enqueue+0x616/0x870 [ 392.532327][ T7687] ? lockdep_hardirqs_on+0x7b/0x110 [ 392.532342][ T7687] ? __pfx_kill_f2fs_super+0x10/0x10 [ 392.532364][ T7687] ? __pfx_call_rcu+0x10/0x10 [ 392.532378][ T7687] ? shrinker_free+0x2a7/0x3b0 [ 392.532392][ T7687] deactivate_locked_super+0xbe/0x110 [ 392.532408][ T7687] cleanup_mnt+0x204/0x2a0 [ 392.532427][ T7687] task_work_run+0x1d9/0x260 [ 392.532442][ T7687] ? __pfx_task_work_run+0x10/0x10 [ 392.532462][ T7687] exit_to_user_mode_loop+0x204/0x770 [ 392.532476][ T7687] ? rcu_is_watching+0x16/0xb0 [ 392.532494][ T7687] do_syscall_64+0x328/0x520 [ 392.532507][ T7687] ? trace_irq_disable+0x3b/0x140 [ 392.532521][ T7687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.532532][ T7687] ? clear_bhb_loop+0x70/0xc0 [ 392.532545][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.532556][ T7687] RIP: 0033:0x7f90897a0797 [ 392.532567][ T7687] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 392.532576][ T7687] RSP: 002b:00007ffd82b3d548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 392.532588][ T7687] RAX: 0000000000000000 RBX: 00007f9089835f63 RCX: 00007f90897a0797 [ 392.532595][ T7687] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd82b3d600 [ 392.532602][ T7687] RBP: 00007ffd82b3d600 R08: 00007ffd82b3e600 R09: 00000000ffffffff [ 392.532609][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd82b3e690 [ 392.532615][ T7687] R13: 00007f9089835f63 R14: 000000000005fc38 R15: 00007ffd82b3e6d0 [ 392.532634][ T7687] [ 392.694551][ T7687] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 392.694623][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 392.694637][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 392.694643][ T7687] Call Trace: [ 392.694648][ T7687] [ 392.694652][ T7687] dump_stack_lvl+0xe8/0x150 [ 392.694674][ T7687] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 392.694706][ T7687] f2fs_write_end_bio+0x118e/0x15d0 [ 392.694729][ T7687] __submit_merged_bio+0x258/0x6a0 [ 392.694745][ T7687] ? rcu_is_watching+0x16/0xb0 [ 392.694764][ T7687] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 392.694782][ T7687] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 392.694810][ T7687] f2fs_write_data_pages+0x2a13/0x36e0 [ 392.694842][ T7687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.694861][ T7687] ? is_bpf_text_address+0x292/0x2b0 [ 392.694872][ T7687] ? is_bpf_text_address+0x26/0x2b0 [ 392.694897][ T7687] ? stack_trace_save+0xa9/0x100 [ 392.694910][ T7687] ? __pfx_stack_trace_save+0x10/0x10 [ 392.694933][ T7687] ? lockdep_unlock+0x5c/0xd0 [ 392.694944][ T7687] ? __lock_acquire+0x1511/0x2de0 [ 392.694971][ T7687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.694984][ T7687] do_writepages+0x338/0x560 [ 392.695002][ T7687] ? do_raw_spin_unlock+0xf5/0x200 [ 392.695015][ T7687] filemap_fdatawrite+0x1e9/0x2f0 [ 392.695029][ T7687] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 392.695066][ T7687] ? do_raw_spin_unlock+0xf5/0x200 [ 392.695079][ T7687] f2fs_sync_dirty_inodes+0x471/0x970 [ 392.695100][ T7687] f2fs_write_checkpoint+0x867/0x24d0 [ 392.695132][ T7687] kill_f2fs_super+0x2df/0x700 [ 392.695147][ T7687] ? rcu_do_enqueue+0x616/0x870 [ 392.695159][ T7687] ? lockdep_hardirqs_on+0x7b/0x110 [ 392.695173][ T7687] ? __pfx_kill_f2fs_super+0x10/0x10 [ 392.695194][ T7687] ? __pfx_call_rcu+0x10/0x10 [ 392.695211][ T7687] ? shrinker_free+0x2a7/0x3b0 [ 392.695225][ T7687] deactivate_locked_super+0xbe/0x110 [ 392.695241][ T7687] cleanup_mnt+0x204/0x2a0 [ 392.695259][ T7687] task_work_run+0x1d9/0x260 [ 392.695274][ T7687] ? __pfx_task_work_run+0x10/0x10 [ 392.695292][ T7687] exit_to_user_mode_loop+0x204/0x770 [ 392.695306][ T7687] ? rcu_is_watching+0x16/0xb0 [ 392.695324][ T7687] do_syscall_64+0x328/0x520 [ 392.695336][ T7687] ? trace_irq_disable+0x3b/0x140 [ 392.695350][ T7687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.695361][ T7687] ? clear_bhb_loop+0x70/0xc0 [ 392.695379][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.695389][ T7687] RIP: 0033:0x7f90897a0797 [ 392.695400][ T7687] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 392.695408][ T7687] RSP: 002b:00007ffd82b3d548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 392.695420][ T7687] RAX: 0000000000000000 RBX: 00007f9089835f63 RCX: 00007f90897a0797 [ 392.695428][ T7687] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd82b3d600 [ 392.695434][ T7687] RBP: 00007ffd82b3d600 R08: 00007ffd82b3e600 R09: 00000000ffffffff [ 392.695441][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd82b3e690 [ 392.695448][ T7687] R13: 00007f9089835f63 R14: 000000000005fc38 R15: 00007ffd82b3e6d0 [ 392.695465][ T7687] [ 392.695469][ T7687] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 392.814083][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 392.814101][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 392.814108][ T7687] Call Trace: [ 392.814113][ T7687] [ 392.814117][ T7687] dump_stack_lvl+0xe8/0x150 [ 392.814139][ T7687] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 392.814160][ T7687] f2fs_write_end_bio+0x118e/0x15d0 [ 392.814183][ T7687] __submit_merged_bio+0x258/0x6a0 [ 392.814202][ T7687] ? rcu_is_watching+0x16/0xb0 [ 392.814222][ T7687] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 392.814239][ T7687] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 392.814268][ T7687] f2fs_write_data_pages+0x2a13/0x36e0 [ 392.814300][ T7687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.814318][ T7687] ? is_bpf_text_address+0x292/0x2b0 [ 392.814330][ T7687] ? is_bpf_text_address+0x26/0x2b0 [ 392.814356][ T7687] ? stack_trace_save+0xa9/0x100 [ 392.814369][ T7687] ? __pfx_stack_trace_save+0x10/0x10 [ 392.814392][ T7687] ? lockdep_unlock+0x5c/0xd0 [ 392.814403][ T7687] ? __lock_acquire+0x1511/0x2de0 [ 392.814430][ T7687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.814443][ T7687] do_writepages+0x338/0x560 [ 392.814460][ T7687] ? do_raw_spin_unlock+0xf5/0x200 [ 392.814474][ T7687] filemap_fdatawrite+0x1e9/0x2f0 [ 392.814488][ T7687] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 392.814525][ T7687] ? do_raw_spin_unlock+0xf5/0x200 [ 392.814538][ T7687] f2fs_sync_dirty_inodes+0x471/0x970 [ 392.814559][ T7687] f2fs_write_checkpoint+0x867/0x24d0 [ 392.814592][ T7687] kill_f2fs_super+0x2df/0x700 [ 392.814606][ T7687] ? rcu_do_enqueue+0x616/0x870 [ 392.814619][ T7687] ? lockdep_hardirqs_on+0x7b/0x110 [ 392.814634][ T7687] ? __pfx_kill_f2fs_super+0x10/0x10 [ 392.814655][ T7687] ? __pfx_call_rcu+0x10/0x10 [ 392.814668][ T7687] ? shrinker_free+0x2a7/0x3b0 [ 392.814681][ T7687] deactivate_locked_super+0xbe/0x110 [ 392.814704][ T7687] cleanup_mnt+0x204/0x2a0 [ 392.814722][ T7687] task_work_run+0x1d9/0x260 [ 392.814737][ T7687] ? __pfx_task_work_run+0x10/0x10 [ 392.814756][ T7687] exit_to_user_mode_loop+0x204/0x770 [ 392.814771][ T7687] ? rcu_is_watching+0x16/0xb0 [ 392.814789][ T7687] do_syscall_64+0x328/0x520 [ 392.814802][ T7687] ? trace_irq_disable+0x3b/0x140 [ 392.814816][ T7687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.814827][ T7687] ? clear_bhb_loop+0x70/0xc0 [ 392.814840][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.814851][ T7687] RIP: 0033:0x7f90897a0797 [ 392.814862][ T7687] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 392.814871][ T7687] RSP: 002b:00007ffd82b3d548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 392.814883][ T7687] RAX: 0000000000000000 RBX: 00007f9089835f63 RCX: 00007f90897a0797 [ 392.814891][ T7687] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd82b3d600 [ 392.814897][ T7687] RBP: 00007ffd82b3d600 R08: 00007ffd82b3e600 R09: 00000000ffffffff [ 392.814904][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd82b3e690 [ 392.814911][ T7687] R13: 00007f9089835f63 R14: 000000000005fc38 R15: 00007ffd82b3e6d0 [ 392.814927][ T7687] [ 392.814932][ T7687] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 394.065393][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 394.065430][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 394.606453][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1329'. [ 395.491876][T10252] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.448334][ T146] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.448370][ T146] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.448389][ T146] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.448407][ T146] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.519772][T10272] loop7: detected capacity change from 0 to 128 [ 396.660462][T10272] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.702470][T10272] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.915478][T10282] kvm: debugfs: duplicate directory 10282-5 [ 397.091614][ T9752] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.145275][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 397.145291][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 397.261646][T10289] loop2: detected capacity change from 0 to 1024 [ 397.316003][T10289] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 397.316036][T10289] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 397.316047][T10289] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.1344: Failed to acquire dquot type 0 [ 397.316060][T10289] loop2: lost filesystem error report for type 5 error -117 [ 397.330645][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 397.330662][ C0] EXT4-fs (loop2): initial error at time 1793394989: ext4_acquire_dquot:7120 [ 397.330675][ C0] EXT4-fs (loop2): last error at time 1793394989: ext4_acquire_dquot:7120 [ 397.394953][T10289] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 397.395019][T10289] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.1344: corrupted inode contents [ 397.395033][T10289] fserror_report: 4 callbacks suppressed [ 397.395040][T10289] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.429878][T10289] EXT4-fs error (device loop2): ext4_dirty_inode:7679: inode #13: comm syz.2.1344: mark_inode_dirty error [ 397.429900][T10289] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.446016][T10289] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.1344: corrupted inode contents [ 397.446037][T10289] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.481988][T10289] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.1344: mark_inode_dirty error [ 397.482009][T10289] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.485565][T10289] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.1344: corrupted inode contents [ 397.485588][T10289] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.496074][T10289] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 397.496090][T10289] loop2: lost filesystem error report for type 5 error -117 [ 397.555175][T10289] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.1344: corrupted inode contents [ 397.555197][T10289] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.565417][T10289] EXT4-fs error (device loop2): ext4_truncate:5538: inode #13: comm syz.2.1344: mark_inode_dirty error [ 397.565438][T10289] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.610782][T10289] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 397.610800][T10289] loop2: lost filesystem error report for type 5 error -117 [ 397.637999][T10289] EXT4-fs (loop2): 1 truncate cleaned up [ 397.638886][T10289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.796171][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.008869][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.009069][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.224918][T10316] netlink: 'syz.6.1354': attribute type 1 has an invalid length. [ 398.288376][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.353882][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.401017][T10321] netlink: 'syz.6.1354': attribute type 10 has an invalid length. [ 398.401032][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1354'. [ 398.865091][ T9786] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.865262][ T9786] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.865550][ T9786] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.009287][T10316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.022820][ T9778] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.141433][T10319] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 399.170849][T10320] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 399.175923][ T9778] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 399.207953][T10321] dummy0: entered promiscuous mode [ 399.208898][T10321] bond1: (slave dummy0): Removing an active aggregator [ 399.236306][ T9778] bond1: (slave dummy0): link status up again after 0 ms [ 399.268679][T10321] bond1: (slave dummy0): Releasing backup interface [ 399.307520][T10338] batman_adv: batadv0: Adding interface: syzkaller0 [ 399.307533][T10338] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.307551][T10338] batman_adv: batadv0: Interface activated: syzkaller0 [ 399.399176][T10334] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 399.492005][T10334] batman_adv: batadv0: Removing interface: syzkaller0 [ 399.894730][T10331] loop5: detected capacity change from 0 to 32768 [ 399.932839][T10331] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 400.166973][T10331] XFS (loop5): Starting recovery (logdev: internal) [ 400.228361][T10331] XFS (loop5): Ending recovery (logdev: internal) [ 400.345496][ T7687] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 400.722384][T10373] loop0: detected capacity change from 0 to 1024 [ 400.749471][T10373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.193237][ T5755] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 401.344189][ T5755] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 401.345228][ T5755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.345274][ T5755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.346876][ T5755] usb 6-1: config 0 descriptor?? [ 401.585342][ T5755] usbhid 6-1:0.0: can't add hid device: -71 [ 401.585408][ T5755] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 401.625220][ T5755] usb 6-1: USB disconnect, device number 7 [ 401.705270][T10388] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 401.705797][T10388] batman_adv: batadv0: Adding interface: gretap1 [ 401.705806][T10388] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.705825][T10388] batman_adv: batadv0: Interface activated: gretap1 [ 401.886430][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.113918][ T5755] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 402.264777][ T5755] usb 6-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 402.265601][ T5755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.265628][ T5755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.301430][ T5755] usb 6-1: config 0 descriptor?? [ 402.724082][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.724368][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.791614][ T32] audit: type=1326 audit(1793394994.942:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.792032][ T32] audit: type=1326 audit(1793394994.942:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.792356][ T32] audit: type=1326 audit(1793394994.942:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.821062][ T32] audit: type=1326 audit(1793394994.982:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.876010][ T32] audit: type=1326 audit(1793394995.032:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.935585][ T32] audit: type=1326 audit(1793394995.032:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.935934][ T32] audit: type=1326 audit(1793394995.092:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.935960][ T32] audit: type=1326 audit(1793394995.092:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.935983][ T32] audit: type=1326 audit(1793394995.092:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 402.939260][ T32] audit: type=1326 audit(1793394995.092:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.7.1385" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f160c79f559 code=0x7ffc0000 [ 403.111775][T10419] loop6: detected capacity change from 0 to 512 [ 403.139903][ T5755] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 403.157779][ T5755] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28 [ 403.468742][T10426] loop0: detected capacity change from 0 to 512 [ 403.505251][T10426] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1389: inode has both inline data and extents flags [ 403.505274][T10426] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.508988][T10426] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1389: couldn't read orphan inode 15 (err -117) [ 403.509010][T10426] loop0: lost filesystem error report for type 5 error -117 [ 403.512965][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 403.512979][ C0] EXT4-fs (loop0): initial error at time 1793394995: ext4_orphan_get:1404: inode 15 [ 403.512996][ C0] EXT4-fs (loop0): last error at time 1793394995: ext4_orphan_get:1409 [ 403.593953][T10426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.782326][ T5755] usb 6-1: USB disconnect, device number 8 [ 403.782455][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 404.910840][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.154538][T10437] TC_ACT_REPEAT abuse ? [ 405.395415][T10452] loop2: detected capacity change from 0 to 256 [ 405.492473][T10446] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 406.114367][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 406.228242][T10479] loop7: detected capacity change from 0 to 512 [ 406.276076][ T10] usb 3-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 406.279928][ T10] usb 3-1: config 0 has no interfaces? [ 406.307629][T10479] EXT4-fs (loop7): Test dummy encryption mode enabled [ 406.310425][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.310440][ T10] usb 3-1: Product: syz [ 406.310448][ T10] usb 3-1: Manufacturer: syz [ 406.310464][ T10] usb 3-1: SerialNumber: syz [ 406.331340][ T10] usb 3-1: config 0 descriptor?? [ 406.378437][T10479] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.1401: inode has both inline data and extents flags [ 406.378468][T10479] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.378651][T10479] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.1401: couldn't read orphan inode 15 (err -117) [ 406.378667][T10479] loop7: lost filesystem error report for type 5 error -117 [ 406.380259][T10479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.613747][ T9752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.642597][T10486] syz_tun: entered allmulticast mode [ 406.672629][T10484] syz_tun: left allmulticast mode [ 408.497231][T10518] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 408.711104][T10519] kvm: pic: non byte write [ 408.855783][ T5755] usb 3-1: USB disconnect, device number 28 [ 409.071960][T10534] loop2: detected capacity change from 0 to 512 [ 409.072704][T10534] EXT4-fs: Ignoring removed oldalloc option [ 409.126692][T10534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002] [ 409.126751][T10534] System zones: 1-3, 19-19, 35-38 [ 409.184445][T10534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.184523][T10534] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.657124][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.990875][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 412.160686][T10570] loop6: detected capacity change from 0 to 128 [ 412.215812][T10570] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.220527][T10570] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.592026][T10589] loop5: detected capacity change from 0 to 512 [ 412.592658][T10589] EXT4-fs: Ignoring removed oldalloc option [ 412.638936][T10589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002] [ 412.638997][T10589] System zones: 1-3, 19-19, 35-38 [ 412.658464][T10589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.681417][T10589] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.700211][T10592] bridge_slave_0: left allmulticast mode [ 412.700229][T10592] bridge_slave_0: left promiscuous mode [ 412.700376][T10592] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.859099][T10592] bond0: (slave bond_slave_0): Releasing backup interface [ 414.034991][T10592] bond0: (slave bond_slave_1): Releasing backup interface [ 414.070961][T10592] team0: Port device team_slave_0 removed [ 414.106900][T10592] team0: Port device team_slave_1 removed [ 414.107117][T10592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.108588][T10597] team0: Mode changed to "activebackup" [ 414.330429][ T7687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.716915][ T9169] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.751867][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 414.927060][ T10] usb 3-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 414.929898][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 414.929913][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.929923][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 414.929950][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.006505][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 415.229519][ T10] gspca_spca501: reg write: error -71 [ 415.229539][ T10] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 415.229588][ T10] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 415.229960][ T10] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 415.229995][ T10] uvcvideo 3-1:1.0: Found UVC 71.01 device (0000:0000) [ 415.230031][ T10] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 415.305447][ T10] usb 3-1: USB disconnect, device number 29 [ 415.552736][T10618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.592392][T10618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.215464][T10625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.216645][T10625] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.254110][T10625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.320153][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.320244][T10625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.348518][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.348585][T10625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.404291][T10625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.410756][T10625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.460529][T10625] veth1_vlan: left promiscuous mode [ 416.461255][T10625] veth0_vlan: left promiscuous mode [ 416.480406][T10625] veth0_vlan: entered promiscuous mode [ 416.499036][T10625] veth1_vlan: entered promiscuous mode [ 416.526468][T10625] veth1_macvtap: left promiscuous mode [ 416.530413][T10625] veth0_macvtap: left promiscuous mode [ 416.551219][T10625] veth0_macvtap: entered promiscuous mode [ 416.569567][T10625] veth1_macvtap: entered promiscuous mode [ 416.600582][T10625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.618640][T10625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.622684][T10625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.647644][T10625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.668746][T10625] bridge0: port 3(vlan2) entered blocking state [ 416.668814][T10625] bridge0: port 3(vlan2) entered forwarding state [ 416.994425][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.263429][T10686] loop6: detected capacity change from 0 to 512 [ 417.264008][T10686] EXT4-fs: Ignoring removed oldalloc option [ 417.314101][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.316386][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.352369][T10686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002] [ 417.352441][T10686] System zones: 1-3, 19-19, 35-38 [ 417.388802][T10686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.388874][T10686] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.422373][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.696058][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 418.642838][T10708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.657836][T10678] loop5: detected capacity change from 0 to 40427 [ 418.679340][T10678] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 418.679358][T10678] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 418.684709][T10708] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.728350][T10678] F2FS-fs (loop5): invalid crc value [ 418.871969][T10708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.057500][T10678] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 419.123038][T10678] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 419.123058][T10678] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 419.714691][T10708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.744709][T10708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.880960][T10708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.880975][T10708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.966690][ T9169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.027357][T10708] veth1_vlan: left promiscuous mode [ 420.055553][T10708] veth0_vlan: left promiscuous mode [ 420.056815][T10708] veth0_vlan: entered promiscuous mode [ 420.103849][T10708] veth1_vlan: entered promiscuous mode [ 420.184542][T10708] veth1_macvtap: left promiscuous mode [ 420.219349][T10708] veth0_macvtap: left promiscuous mode [ 420.220260][T10708] veth0_macvtap: entered promiscuous mode [ 420.250600][T10708] veth1_macvtap: entered promiscuous mode [ 420.307760][T10708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.344624][T10708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.359507][T10708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.378656][T10708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.543516][ T9776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.543550][ T9776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.543571][ T9776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.543590][ T9776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.591957][T10623] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.592017][T10623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.621498][T10623] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.621562][T10623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.074170][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 421.140522][ T32] kauditd_printk_skb: 8 callbacks suppressed [ 421.140536][ T32] audit: type=1326 audit(1793395013.292:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.7.1455" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f160c79f559 code=0x0 [ 421.593996][T10780] netlink: 'syz.2.1458': attribute type 1 has an invalid length. [ 421.723828][T10780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.830345][T10788] bond1: (slave geneve2): making interface the new active one [ 421.851952][T10788] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 422.171326][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1459'. [ 422.396942][T10801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.479628][T10801] team0: Mode changed to "loadbalance" [ 422.726274][T10811] loop0: detected capacity change from 0 to 512 [ 422.726897][T10811] EXT4-fs: Ignoring removed oldalloc option [ 422.768535][T10811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002] [ 422.768596][T10811] System zones: 1-3, 19-19, 35-38 [ 422.844835][T10811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.844916][T10811] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.001686][T10812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 424.248285][T10824] netlink: 'syz.6.1465': attribute type 4 has an invalid length. [ 424.248300][T10824] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1465'. [ 424.288201][T10824] FAULT_INJECTION: forcing a failure. [ 424.288201][T10824] name failslab, interval 1, probability 0, space 0, times 0 [ 424.288223][T10824] CPU: 0 UID: 0 PID: 10824 Comm: syz.6.1465 Not tainted syzkaller #0 PREEMPT(full) [ 424.288237][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 424.288245][T10824] Call Trace: [ 424.288250][T10824] [ 424.288255][T10824] dump_stack_lvl+0xe8/0x150 [ 424.288278][T10824] should_fail_ex+0x3eb/0x540 [ 424.288295][T10824] should_failslab+0xa8/0x100 [ 424.288315][T10824] __kmalloc_noprof+0xf9/0x710 [ 424.288329][T10824] ? trace_kmem_cache_alloc+0x29/0xe0 [ 424.288341][T10824] ? fib_insert_alias+0x300/0x10f0 [ 424.288357][T10824] ? tnode_new+0xc7/0x3b0 [ 424.288366][T10824] ? tnode_new+0xc7/0x3b0 [ 424.288380][T10824] tnode_new+0xc7/0x3b0 [ 424.288392][T10824] fib_insert_alias+0x9e0/0x10f0 [ 424.288414][T10824] fib_trie_unmerge+0x34a/0xd20 [ 424.288437][T10824] fib_unmerge+0xc5/0x350 [ 424.288452][T10824] fib4_rule_configure+0x2c9/0x9d0 [ 424.288472][T10824] fib_newrule+0x61e/0xf20 [ 424.288491][T10824] ? __lock_acquire+0x747/0x2de0 [ 424.288508][T10824] ? __pfx_fib_newrule+0x10/0x10 [ 424.288543][T10824] ? __pfx_fib_nl_newrule+0x10/0x10 [ 424.288559][T10824] rtnetlink_rcv_msg+0x802/0xc00 [ 424.288574][T10824] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 424.288586][T10824] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.288599][T10824] ? __copy_skb_header+0xa3/0x4a0 [ 424.288619][T10824] netlink_rcv_skb+0x226/0x4a0 [ 424.288645][T10824] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.288659][T10824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.288684][T10824] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.288700][T10824] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.288720][T10824] netlink_unicast+0x8ef/0xa80 [ 424.288745][T10824] netlink_sendmsg+0x7f0/0xb20 [ 424.288760][T10824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.288779][T10824] ? aa_sock_msg_perm+0x144/0x210 [ 424.288800][T10824] ? apparmor_socket_sendmsg+0x98/0x360 [ 424.288816][T10824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.288832][T10824] sock_sendmsg_nosec+0x14e/0x190 [ 424.288850][T10824] ____sys_sendmsg+0x54e/0x850 [ 424.288866][T10824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.288884][T10824] ? import_iovec+0x73/0xa0 [ 424.288900][T10824] ___sys_sendmsg+0x2a6/0x360 [ 424.288912][T10824] ? __lock_acquire+0x747/0x2de0 [ 424.288929][T10824] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.288944][T10824] ? futex_wait+0x2a2/0x390 [ 424.288975][T10824] ? __fget_files+0x3a2/0x420 [ 424.288989][T10824] ? __fget_files+0x2a/0x420 [ 424.289008][T10824] __x64_sys_sendmsg+0x1b1/0x290 [ 424.289023][T10824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.289048][T10824] do_syscall_64+0x166/0x520 [ 424.289062][T10824] ? trace_irq_disable+0x3b/0x140 [ 424.289077][T10824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.289089][T10824] ? clear_bhb_loop+0x70/0xc0 [ 424.289102][T10824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.289114][T10824] RIP: 0033:0x7fb88759f559 [ 424.289126][T10824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.289136][T10824] RSP: 002b:00007fb888531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.289149][T10824] RAX: ffffffffffffffda RBX: 00007fb887825fa0 RCX: 00007fb88759f559 [ 424.289157][T10824] RDX: 0000000000004000 RSI: 0000200000000700 RDI: 0000000000000006 [ 424.289165][T10824] RBP: 00007fb887636b20 R08: 0000000000000000 R09: 0000000000000000 [ 424.289172][T10824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.289179][T10824] R13: 00007fb887826038 R14: 00007fb887825fa0 R15: 00007ffeaa36fe38 [ 424.289198][T10824] [ 425.017600][T10831] loop7: detected capacity change from 0 to 16 [ 425.375328][ T32] audit: type=1804 audit(1793395017.522:77): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1469" name="/newroot/35/file1" dev="fuse" ino=1 res=1 errno=0 [ 425.514596][T10804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.616879][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.830697][T10843] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1472'. [ 425.847699][T10843] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1472'. [ 425.867561][T10843] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1472'. [ 426.484026][T10851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 426.484042][T10851] block device autoloading is deprecated and will be removed. [ 426.640958][T10853] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 426.833481][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 427.248587][T10872] loop5: detected capacity change from 0 to 512 [ 427.249187][T10872] EXT4-fs: Ignoring removed oldalloc option [ 427.296197][T10872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002] [ 427.296256][T10872] System zones: 1-3, 19-19, 35-38 [ 427.298616][T10872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.330441][T10872] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.770814][ T7687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.885333][T10884] netlink: 'syz.0.1485': attribute type 3 has an invalid length. [ 429.234675][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 430.523562][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 430.677249][ T10] usb 6-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 430.678191][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.680612][ T10] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 430.680627][ T10] usb 6-1: Product: syz [ 430.680636][ T10] usb 6-1: Manufacturer: syz [ 430.756443][ T10] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 430.840895][T10927] netlink: 'syz.6.1501': attribute type 1 has an invalid length. [ 430.867526][T10927] bond2: entered promiscuous mode [ 430.867833][T10927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.898838][T10927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.899091][T10927] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 430.899104][T10927] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 430.936019][T10927] bond2: (slave ip6gre1): making interface the new active one [ 430.936043][T10927] ip6gre1: entered promiscuous mode [ 430.938161][T10927] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 430.975562][ T10] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 430.975888][ T10] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 430.975918][ T10] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 430.976336][ T10] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 431.037143][ T10] usb 6-1: USB disconnect, device number 9 [ 432.359341][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1504'. [ 433.319598][T10951] fuse: Bad value for 'fd' [ 433.601379][T10960] FAULT_INJECTION: forcing a failure. [ 433.601379][T10960] name failslab, interval 1, probability 0, space 0, times 0 [ 433.601400][T10960] CPU: 0 UID: 0 PID: 10960 Comm: syz.7.1513 Not tainted syzkaller #0 PREEMPT(full) [ 433.601415][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 433.601423][T10960] Call Trace: [ 433.601428][T10960] [ 433.601434][T10960] dump_stack_lvl+0xe8/0x150 [ 433.601463][T10960] should_fail_ex+0x3eb/0x540 [ 433.601478][T10960] ? __pfx_dev_uevent_name+0x10/0x10 [ 433.601496][T10960] should_failslab+0xa8/0x100 [ 433.601514][T10960] __kmalloc_cache_noprof+0x9e/0x600 [ 433.601530][T10960] ? kobject_uevent_env+0x289/0x9e0 [ 433.601542][T10960] ? kobject_uevent_env+0x289/0x9e0 [ 433.601556][T10960] ? __pfx_dev_uevent_name+0x10/0x10 [ 433.601571][T10960] kobject_uevent_env+0x289/0x9e0 [ 433.601588][T10960] gadget_bind_driver+0x599/0x9e0 [ 433.601611][T10960] ? __pfx_gadget_bind_driver+0x10/0x10 [ 433.601625][T10960] really_probe+0x254/0xae0 [ 433.601641][T10960] __driver_probe_device+0x1e8/0x360 [ 433.601656][T10960] driver_probe_device+0x4f/0x240 [ 433.601671][T10960] __driver_attach+0x34e/0x630 [ 433.601687][T10960] bus_for_each_dev+0x23b/0x2c0 [ 433.601703][T10960] ? __pfx___driver_attach+0x10/0x10 [ 433.601716][T10960] ? __pfx_bus_for_each_dev+0x10/0x10 [ 433.601734][T10960] ? do_raw_spin_unlock+0xf5/0x200 [ 433.601748][T10960] bus_add_driver+0x38f/0x6e0 [ 433.601769][T10960] driver_register+0x23a/0x320 [ 433.601785][T10960] usb_gadget_register_driver_owner+0xf9/0x270 [ 433.601810][T10960] raw_ioctl+0x1541/0x41c0 [ 433.601827][T10960] ? tomoyo_path_number_perm+0x219/0x5f0 [ 433.601848][T10960] ? do_vfs_ioctl+0x116f/0x1530 [ 433.601867][T10960] ? __pfx_raw_ioctl+0x10/0x10 [ 433.601897][T10960] ? __fget_files+0x2a/0x420 [ 433.601913][T10960] ? __fget_files+0x2a/0x420 [ 433.601928][T10960] ? __fget_files+0x2a/0x420 [ 433.601944][T10960] ? bpf_lsm_file_ioctl+0x9/0x20 [ 433.601960][T10960] ? __pfx_raw_ioctl+0x10/0x10 [ 433.601972][T10960] __se_sys_ioctl+0xfc/0x170 [ 433.601990][T10960] do_syscall_64+0x166/0x520 [ 433.602004][T10960] ? trace_irq_disable+0x3b/0x140 [ 433.602019][T10960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.602030][T10960] ? clear_bhb_loop+0x70/0xc0 [ 433.602044][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.602055][T10960] RIP: 0033:0x7f160c79f1eb [ 433.602067][T10960] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 433.602077][T10960] RSP: 002b:00007f160d6d1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.602090][T10960] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f160c79f1eb [ 433.602098][T10960] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 433.602105][T10960] RBP: 00007f160d6d2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 433.602112][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.602119][T10960] R13: 0000200000000440 R14: 0000000000000000 R15: 0000000000000000 [ 433.602137][T10960] [ 434.429840][T10953] loop2: detected capacity change from 0 to 32768 [ 434.443500][T10953] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 434.445563][T10953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1510 (10953) [ 434.479715][T10953] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 434.479737][T10953] BTRFS info (device loop2): using sha256 checksum algorithm [ 434.641105][T10953] BTRFS info (device loop2): rebuilding free space tree [ 434.772257][T10953] BTRFS info (device loop2): disabling free space tree [ 434.772300][T10953] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 434.772313][T10953] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 434.891920][T10953] BTRFS info (device loop2): enabling ssd optimizations [ 434.891938][T10953] BTRFS info (device loop2): force clearing of disk cache [ 434.891947][T10953] BTRFS info (device loop2): enabling auto defrag [ 434.891957][T10953] BTRFS info (device loop2): max_inline set to 0 [ 435.059457][ T5644] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 436.909336][T11029] FAULT_INJECTION: forcing a failure. [ 436.909336][T11029] name failslab, interval 1, probability 0, space 0, times 0 [ 436.909358][T11029] CPU: 0 UID: 0 PID: 11029 Comm: syz.5.1526 Not tainted syzkaller #0 PREEMPT(full) [ 436.909372][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 436.909380][T11029] Call Trace: [ 436.909385][T11029] [ 436.909390][T11029] dump_stack_lvl+0xe8/0x150 [ 436.909423][T11029] should_fail_ex+0x3eb/0x540 [ 436.909440][T11029] should_failslab+0xa8/0x100 [ 436.909460][T11029] __kmalloc_cache_noprof+0x9e/0x600 [ 436.909475][T11029] ? fsnotify_add_mark_locked+0x3b4/0x12d0 [ 436.909488][T11029] ? fsnotify_add_mark_locked+0x3b4/0x12d0 [ 436.909504][T11029] fsnotify_add_mark_locked+0x3b4/0x12d0 [ 436.909520][T11029] ? fsnotify_get_group+0x52/0x80 [ 436.909534][T11029] fanotify_add_mark+0x873/0x1290 [ 436.909559][T11029] do_fanotify_mark+0xe8f/0x1020 [ 436.909582][T11029] ? __pfx_do_fanotify_mark+0x10/0x10 [ 436.909600][T11029] ? rcu_is_watching+0x16/0xb0 [ 436.909621][T11029] __x64_sys_fanotify_mark+0xb5/0xd0 [ 436.909638][T11029] do_syscall_64+0x166/0x520 [ 436.909652][T11029] ? trace_irq_disable+0x3b/0x140 [ 436.909667][T11029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.909678][T11029] ? clear_bhb_loop+0x70/0xc0 [ 436.909692][T11029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.909703][T11029] RIP: 0033:0x7f908979f559 [ 436.909714][T11029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.909724][T11029] RSP: 002b:00007f908a730028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 436.909737][T11029] RAX: ffffffffffffffda RBX: 00007f9089a25fa0 RCX: 00007f908979f559 [ 436.909745][T11029] RDX: 000000000000001a RSI: 0000000000000039 RDI: 0000000000000005 [ 436.909752][T11029] RBP: 00007f9089836b20 R08: 0000000000000000 R09: 0000000000000000 [ 436.909759][T11029] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 436.909765][T11029] R13: 00007f9089a26038 R14: 00007f9089a25fa0 R15: 00007ffd82b3e2d8 [ 436.909783][T11029] [ 437.258432][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1527'. [ 437.258456][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1527'. [ 437.831800][T11018] loop6: detected capacity change from 0 to 40427 [ 437.852003][T11018] F2FS-fs (loop6): build fault injection rate: 25 [ 437.852019][T11018] F2FS-fs (loop6): build fault injection type: 0x7698c [ 437.873169][T11018] F2FS-fs (loop6): invalid crc value [ 437.955678][T11018] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_cache_read+0x158/0x340 [ 439.099544][T11018] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 439.145381][T11018] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_recover_fsync_data+0x515/0x9610 [ 439.146434][T11018] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 439.307626][T11018] F2FS-fs (loop6): inject no more block in inc_valid_node_count of f2fs_new_node_cache+0x16a/0x9c0 [ 439.362418][T11018] F2FS-fs (loop6): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8e0 [ 439.362702][T11018] syz.6.1523: attempt to access beyond end of device [ 439.362702][T11018] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 439.506394][ T9169] syz-executor: attempt to access beyond end of device [ 439.506394][ T9169] loop6: rw=2049, sector=45104, nr_sectors = 32 limit=40427 [ 439.551087][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 439.551104][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.551112][ T9169] Call Trace: [ 439.551117][ T9169] [ 439.551123][ T9169] dump_stack_lvl+0xe8/0x150 [ 439.551145][ T9169] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 439.551167][ T9169] f2fs_write_end_bio+0x118e/0x15d0 [ 439.551197][ T9169] __submit_merged_bio+0x258/0x6a0 [ 439.551214][ T9169] ? rcu_is_watching+0x16/0xb0 [ 439.551234][ T9169] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 439.551252][ T9169] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 439.551281][ T9169] f2fs_write_data_pages+0x2a13/0x36e0 [ 439.551314][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.551333][ T9169] ? is_bpf_text_address+0x292/0x2b0 [ 439.551344][ T9169] ? is_bpf_text_address+0x26/0x2b0 [ 439.551370][ T9169] ? stack_trace_save+0xa9/0x100 [ 439.551384][ T9169] ? __pfx_stack_trace_save+0x10/0x10 [ 439.551407][ T9169] ? lockdep_unlock+0x5c/0xd0 [ 439.551419][ T9169] ? __lock_acquire+0x1511/0x2de0 [ 439.551447][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.551460][ T9169] do_writepages+0x338/0x560 [ 439.551478][ T9169] ? do_raw_spin_unlock+0xf5/0x200 [ 439.551492][ T9169] filemap_fdatawrite+0x1e9/0x2f0 [ 439.551507][ T9169] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 439.551544][ T9169] ? do_raw_spin_unlock+0xf5/0x200 [ 439.551557][ T9169] f2fs_sync_dirty_inodes+0x471/0x970 [ 439.551580][ T9169] f2fs_write_checkpoint+0x867/0x24d0 [ 439.551613][ T9169] kill_f2fs_super+0x2df/0x700 [ 439.551629][ T9169] ? rcu_do_enqueue+0x616/0x870 [ 439.551642][ T9169] ? lockdep_hardirqs_on+0x7b/0x110 [ 439.551657][ T9169] ? __pfx_kill_f2fs_super+0x10/0x10 [ 439.551678][ T9169] ? __pfx_call_rcu+0x10/0x10 [ 439.551692][ T9169] ? shrinker_free+0x2a7/0x3b0 [ 439.551706][ T9169] deactivate_locked_super+0xbe/0x110 [ 439.551722][ T9169] cleanup_mnt+0x204/0x2a0 [ 439.551741][ T9169] task_work_run+0x1d9/0x260 [ 439.551757][ T9169] ? __pfx_task_work_run+0x10/0x10 [ 439.551776][ T9169] exit_to_user_mode_loop+0x204/0x770 [ 439.551791][ T9169] ? rcu_is_watching+0x16/0xb0 [ 439.551809][ T9169] do_syscall_64+0x328/0x520 [ 439.551822][ T9169] ? trace_irq_disable+0x3b/0x140 [ 439.551839][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.551850][ T9169] ? clear_bhb_loop+0x70/0xc0 [ 439.551864][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.551874][ T9169] RIP: 0033:0x7fb8875a0797 [ 439.551886][ T9169] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 439.551895][ T9169] RSP: 002b:00007ffeaa36f0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 439.551908][ T9169] RAX: 0000000000000000 RBX: 00007fb887635f63 RCX: 00007fb8875a0797 [ 439.551916][ T9169] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeaa36f160 [ 439.551923][ T9169] RBP: 00007ffeaa36f160 R08: 00007ffeaa370160 R09: 00000000ffffffff [ 439.551930][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeaa3701f0 [ 439.551937][ T9169] R13: 00007fb887635f63 R14: 000000000006b43c R15: 00007ffeaa370230 [ 439.551954][ T9169] [ 439.753225][ T9169] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 439.753330][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 439.753344][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.753351][ T9169] Call Trace: [ 439.753356][ T9169] [ 439.753361][ T9169] dump_stack_lvl+0xe8/0x150 [ 439.753384][ T9169] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 439.753405][ T9169] f2fs_write_end_bio+0x118e/0x15d0 [ 439.753429][ T9169] __submit_merged_bio+0x258/0x6a0 [ 439.753445][ T9169] ? rcu_is_watching+0x16/0xb0 [ 439.753466][ T9169] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 439.753484][ T9169] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 439.753515][ T9169] f2fs_write_data_pages+0x2a13/0x36e0 [ 439.753550][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.753570][ T9169] ? is_bpf_text_address+0x292/0x2b0 [ 439.753582][ T9169] ? is_bpf_text_address+0x26/0x2b0 [ 439.753610][ T9169] ? stack_trace_save+0xa9/0x100 [ 439.753623][ T9169] ? __pfx_stack_trace_save+0x10/0x10 [ 439.753648][ T9169] ? lockdep_unlock+0x5c/0xd0 [ 439.753659][ T9169] ? __lock_acquire+0x1511/0x2de0 [ 439.753689][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.753703][ T9169] do_writepages+0x338/0x560 [ 439.753721][ T9169] ? do_raw_spin_unlock+0xf5/0x200 [ 439.753736][ T9169] filemap_fdatawrite+0x1e9/0x2f0 [ 439.753750][ T9169] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 439.753790][ T9169] ? do_raw_spin_unlock+0xf5/0x200 [ 439.753804][ T9169] f2fs_sync_dirty_inodes+0x471/0x970 [ 439.753827][ T9169] f2fs_write_checkpoint+0x867/0x24d0 [ 439.753872][ T9169] kill_f2fs_super+0x2df/0x700 [ 439.753888][ T9169] ? rcu_do_enqueue+0x616/0x870 [ 439.753901][ T9169] ? lockdep_hardirqs_on+0x7b/0x110 [ 439.753917][ T9169] ? __pfx_kill_f2fs_super+0x10/0x10 [ 439.753940][ T9169] ? __pfx_call_rcu+0x10/0x10 [ 439.753954][ T9169] ? shrinker_free+0x2a7/0x3b0 [ 439.753968][ T9169] deactivate_locked_super+0xbe/0x110 [ 439.753984][ T9169] cleanup_mnt+0x204/0x2a0 [ 439.754003][ T9169] task_work_run+0x1d9/0x260 [ 439.754019][ T9169] ? __pfx_task_work_run+0x10/0x10 [ 439.754039][ T9169] exit_to_user_mode_loop+0x204/0x770 [ 439.754054][ T9169] ? rcu_is_watching+0x16/0xb0 [ 439.754072][ T9169] do_syscall_64+0x328/0x520 [ 439.754085][ T9169] ? trace_irq_disable+0x3b/0x140 [ 439.754100][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.754111][ T9169] ? clear_bhb_loop+0x70/0xc0 [ 439.754125][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.754136][ T9169] RIP: 0033:0x7fb8875a0797 [ 439.754148][ T9169] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 439.754190][ T9169] RSP: 002b:00007ffeaa36f0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 439.754202][ T9169] RAX: 0000000000000000 RBX: 00007fb887635f63 RCX: 00007fb8875a0797 [ 439.754210][ T9169] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeaa36f160 [ 439.754216][ T9169] RBP: 00007ffeaa36f160 R08: 00007ffeaa370160 R09: 00000000ffffffff [ 439.754224][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeaa3701f0 [ 439.754231][ T9169] R13: 00007fb887635f63 R14: 000000000006b43c R15: 00007ffeaa370230 [ 439.754253][ T9169] [ 439.754608][ T9169] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 439.754642][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 439.754654][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.754661][ T9169] Call Trace: [ 439.754665][ T9169] [ 439.754670][ T9169] dump_stack_lvl+0xe8/0x150 [ 439.754689][ T9169] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 439.754708][ T9169] f2fs_write_end_bio+0x118e/0x15d0 [ 439.754731][ T9169] __submit_merged_bio+0x258/0x6a0 [ 439.754747][ T9169] ? rcu_is_watching+0x16/0xb0 [ 439.754765][ T9169] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 439.754783][ T9169] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 439.754812][ T9169] f2fs_write_data_pages+0x2a13/0x36e0 [ 439.754844][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.754876][ T9169] ? is_bpf_text_address+0x292/0x2b0 [ 439.754888][ T9169] ? is_bpf_text_address+0x26/0x2b0 [ 439.754914][ T9169] ? stack_trace_save+0xa9/0x100 [ 439.754927][ T9169] ? __pfx_stack_trace_save+0x10/0x10 [ 439.754950][ T9169] ? lockdep_unlock+0x5c/0xd0 [ 439.754961][ T9169] ? __lock_acquire+0x1511/0x2de0 [ 439.754989][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.755002][ T9169] do_writepages+0x338/0x560 [ 439.755019][ T9169] ? do_raw_spin_unlock+0xf5/0x200 [ 439.755033][ T9169] filemap_fdatawrite+0x1e9/0x2f0 [ 439.755048][ T9169] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 439.755084][ T9169] ? do_raw_spin_unlock+0xf5/0x200 [ 439.755097][ T9169] f2fs_sync_dirty_inodes+0x471/0x970 [ 439.755119][ T9169] f2fs_write_checkpoint+0x867/0x24d0 [ 439.755158][ T9169] kill_f2fs_super+0x2df/0x700 [ 439.755173][ T9169] ? rcu_do_enqueue+0x616/0x870 [ 439.755186][ T9169] ? lockdep_hardirqs_on+0x7b/0x110 [ 439.755199][ T9169] ? __pfx_kill_f2fs_super+0x10/0x10 [ 439.755221][ T9169] ? __pfx_call_rcu+0x10/0x10 [ 439.755234][ T9169] ? shrinker_free+0x2a7/0x3b0 [ 439.755247][ T9169] deactivate_locked_super+0xbe/0x110 [ 439.755262][ T9169] cleanup_mnt+0x204/0x2a0 [ 439.755280][ T9169] task_work_run+0x1d9/0x260 [ 439.755295][ T9169] ? __pfx_task_work_run+0x10/0x10 [ 439.755314][ T9169] exit_to_user_mode_loop+0x204/0x770 [ 439.755329][ T9169] ? rcu_is_watching+0x16/0xb0 [ 439.755347][ T9169] do_syscall_64+0x328/0x520 [ 439.755360][ T9169] ? trace_irq_disable+0x3b/0x140 [ 439.755374][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.755385][ T9169] ? clear_bhb_loop+0x70/0xc0 [ 439.755398][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.755409][ T9169] RIP: 0033:0x7fb8875a0797 [ 439.755419][ T9169] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 439.755428][ T9169] RSP: 002b:00007ffeaa36f0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 439.755439][ T9169] RAX: 0000000000000000 RBX: 00007fb887635f63 RCX: 00007fb8875a0797 [ 439.755446][ T9169] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeaa36f160 [ 439.755453][ T9169] RBP: 00007ffeaa36f160 R08: 00007ffeaa370160 R09: 00000000ffffffff [ 439.755460][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeaa3701f0 [ 439.755467][ T9169] R13: 00007fb887635f63 R14: 000000000006b43c R15: 00007ffeaa370230 [ 439.755484][ T9169] [ 439.755488][ T9169] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 439.755504][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 439.755516][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.755521][ T9169] Call Trace: [ 439.755525][ T9169] [ 439.755529][ T9169] dump_stack_lvl+0xe8/0x150 [ 439.755546][ T9169] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 439.755565][ T9169] f2fs_write_end_bio+0x118e/0x15d0 [ 439.755587][ T9169] __submit_merged_bio+0x258/0x6a0 [ 439.755603][ T9169] ? rcu_is_watching+0x16/0xb0 [ 439.755621][ T9169] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 439.755639][ T9169] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 439.755668][ T9169] f2fs_write_data_pages+0x2a13/0x36e0 [ 439.755699][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.755720][ T9169] ? is_bpf_text_address+0x292/0x2b0 [ 439.755731][ T9169] ? is_bpf_text_address+0x26/0x2b0 [ 439.755757][ T9169] ? stack_trace_save+0xa9/0x100 [ 439.755770][ T9169] ? __pfx_stack_trace_save+0x10/0x10 [ 439.755793][ T9169] ? lockdep_unlock+0x5c/0xd0 [ 439.755803][ T9169] ? __lock_acquire+0x1511/0x2de0 [ 439.755831][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.755844][ T9169] do_writepages+0x338/0x560 [ 439.755860][ T9169] ? do_raw_spin_unlock+0xf5/0x200 [ 439.755874][ T9169] filemap_fdatawrite+0x1e9/0x2f0 [ 439.755888][ T9169] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 439.755925][ T9169] ? do_raw_spin_unlock+0xf5/0x200 [ 439.755938][ T9169] f2fs_sync_dirty_inodes+0x471/0x970 [ 439.755959][ T9169] f2fs_write_checkpoint+0x867/0x24d0 [ 439.755992][ T9169] kill_f2fs_super+0x2df/0x700 [ 439.756007][ T9169] ? rcu_do_enqueue+0x616/0x870 [ 439.756019][ T9169] ? lockdep_hardirqs_on+0x7b/0x110 [ 439.756033][ T9169] ? __pfx_kill_f2fs_super+0x10/0x10 [ 439.756054][ T9169] ? __pfx_call_rcu+0x10/0x10 [ 439.756067][ T9169] ? shrinker_free+0x2a7/0x3b0 [ 439.756080][ T9169] deactivate_locked_super+0xbe/0x110 [ 439.756095][ T9169] cleanup_mnt+0x204/0x2a0 [ 439.756112][ T9169] task_work_run+0x1d9/0x260 [ 439.756127][ T9169] ? __pfx_task_work_run+0x10/0x10 [ 439.756145][ T9169] exit_to_user_mode_loop+0x204/0x770 [ 439.756165][ T9169] ? rcu_is_watching+0x16/0xb0 [ 439.756183][ T9169] do_syscall_64+0x328/0x520 [ 439.756196][ T9169] ? trace_irq_disable+0x3b/0x140 [ 439.756210][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.756221][ T9169] ? clear_bhb_loop+0x70/0xc0 [ 439.756234][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.756244][ T9169] RIP: 0033:0x7fb8875a0797 [ 439.756253][ T9169] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 439.756262][ T9169] RSP: 002b:00007ffeaa36f0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 439.756272][ T9169] RAX: 0000000000000000 RBX: 00007fb887635f63 RCX: 00007fb8875a0797 [ 439.756279][ T9169] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeaa36f160 [ 439.756285][ T9169] RBP: 00007ffeaa36f160 R08: 00007ffeaa370160 R09: 00000000ffffffff [ 439.756292][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeaa3701f0 [ 439.756299][ T9169] R13: 00007fb887635f63 R14: 000000000006b43c R15: 00007ffeaa370230 [ 439.756316][ T9169] [ 439.942969][ T9169] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 440.117804][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.577312][T11108] kvm: pic: level sensitive irq not supported [ 444.577468][T11108] kvm: pic: single mode not supported [ 444.577477][T11108] kvm: pic: level sensitive irq not supported [ 444.607850][T11108] kvm: pic: single mode not supported [ 444.607861][T11108] kvm: pic: level sensitive irq not supported [ 445.233835][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 446.425784][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1552'. [ 446.453176][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 446.621875][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 446.621908][ T10] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 446.622696][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.622710][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.622734][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.681346][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.681362][ T10] usb 3-1: Product: syz [ 446.681370][ T10] usb 3-1: Manufacturer: syz [ 446.681378][ T10] usb 3-1: SerialNumber: syz [ 446.967517][ T10] cdc_ncm 3-1:1.0: skipping garbage [ 446.967531][ T10] cdc_ncm 3-1:1.0: skipping garbage [ 446.967539][ T10] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 446.967582][ T10] cdc_ncm 3-1:1.0: bind() failure [ 447.010698][ T10] usb 3-1: USB disconnect, device number 30 [ 447.397064][T11150] loop7: detected capacity change from 0 to 1024 [ 447.447970][T11150] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 447.448003][T11150] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 447.448015][T11150] EXT4-fs error (device loop7): ext4_acquire_dquot:7120: comm syz.7.1556: Failed to acquire dquot type 0 [ 447.448028][T11150] loop7: lost filesystem error report for type 5 error -117 [ 447.457955][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 447.457968][ C0] EXT4-fs (loop7): initial error at time 1793395039: ext4_acquire_dquot:7120 [ 447.457981][ C0] EXT4-fs (loop7): last error at time 1793395039: ext4_acquire_dquot:7120 [ 447.513640][T11150] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 447.513705][T11150] EXT4-fs error (device loop7): ext4_do_update_inode:6707: inode #13: comm syz.7.1556: corrupted inode contents [ 447.513719][T11150] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 447.693191][T11150] EXT4-fs error (device loop7): ext4_dirty_inode:7679: inode #13: comm syz.7.1556: mark_inode_dirty error [ 447.693215][T11150] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 447.706226][T11150] EXT4-fs error (device loop7): ext4_do_update_inode:6707: inode #13: comm syz.7.1556: corrupted inode contents [ 447.706247][T11150] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 448.687963][T11150] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.1556: mark_inode_dirty error [ 448.687987][T11150] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 448.699113][T11150] EXT4-fs error (device loop7): ext4_do_update_inode:6707: inode #13: comm syz.7.1556: corrupted inode contents [ 448.699136][T11150] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 448.711621][T11150] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem [ 448.711636][T11150] loop7: lost filesystem error report for type 5 error -117 [ 448.721683][T11150] EXT4-fs error (device loop7): ext4_do_update_inode:6707: inode #13: comm syz.7.1556: corrupted inode contents [ 448.721702][T11150] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 448.721997][T11150] EXT4-fs error (device loop7): ext4_truncate:5538: inode #13: comm syz.7.1556: mark_inode_dirty error [ 448.722012][T11150] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 448.734761][T11150] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem [ 448.734775][T11150] loop7: lost filesystem error report for type 5 error -117 [ 448.832057][T11150] EXT4-fs (loop7): 1 truncate cleaned up [ 448.840733][T11150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.005989][ T9752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.111223][T11163] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 449.111246][T11163] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 449.111274][T11163] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 449.206721][T11165] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1559'. [ 449.282666][T11165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.330092][T11165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.345332][T11165] bond0 (unregistering): Released all slaves [ 449.489204][ T10] infiniband syz1: ib_query_port failed (-19) [ 449.504519][ T5647] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 449.946836][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 449.982241][ T9790] smbdirect: ib_dev[syz1] removed [ 450.031690][T11163] siw: device registration error -19 [ 450.042870][T11179] lo speed is unknown, defaulting to 1000 [ 450.043151][T11179] lo speed is unknown, defaulting to 1000 [ 450.057507][T11179] lo speed is unknown, defaulting to 1000 [ 450.058157][T11179] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 450.058176][T11179] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 450.058198][T11179] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 450.123776][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 450.139147][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 450.139180][ T10] usb 1-1: New USB device found: idVendor=2b73, idProduct=0029, bcdDevice=0.40 [ 450.172494][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.172510][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.198366][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.198429][ T10] usb 1-1: Product: syz [ 450.198439][ T10] usb 1-1: Manufacturer: syz [ 450.198446][ T10] usb 1-1: SerialNumber: syz [ 450.256609][T11179] lo speed is unknown, defaulting to 1000 [ 450.281395][T11179] lo speed is unknown, defaulting to 1000 [ 450.379654][T11179] lo speed is unknown, defaulting to 1000 [ 450.380749][T11179] lo speed is unknown, defaulting to 1000 [ 450.412628][T11179] lo speed is unknown, defaulting to 1000 [ 450.438692][T11184] loop2: detected capacity change from 0 to 512 [ 450.478500][T11180] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 450.478523][T11180] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 450.478545][T11180] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 450.546325][ T10] usb 1-1: 0:1 : does not exist [ 450.546370][ T10] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 450.641576][T11184] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1565: inode has both inline data and extents flags [ 450.641599][T11184] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.642941][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 450.642954][ C0] EXT4-fs (loop2): initial error at time 1793395042: ext4_orphan_get:1404: inode 15 [ 450.642970][ C0] EXT4-fs (loop2): last error at time 1793395042: ext4_orphan_get:1404: inode 15 [ 450.657654][T11184] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1565: couldn't read orphan inode 15 (err -117) [ 450.657674][T11184] loop2: lost filesystem error report for type 5 error -117 [ 450.716756][T11184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.888880][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 450.912802][ T10] usb 1-1: USB disconnect, device number 17 [ 450.945306][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.038134][T11146] udevd[11146]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.672426][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1573'. [ 454.609589][T11243] netlink: 'syz.0.1582': attribute type 10 has an invalid length. [ 454.646961][T11243] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 456.674445][T11256] ip_tables: iptables: counters copy to user failed while replacing table [ 458.167266][T11273] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.167600][T11273] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.168815][T11273] bridge0: entered allmulticast mode [ 458.223965][T11273] bridge_slave_1: left allmulticast mode [ 458.224019][T11273] bridge_slave_1: left promiscuous mode [ 458.225133][T11273] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.587801][T11273] bridge_slave_0: left allmulticast mode [ 459.587821][T11273] bridge_slave_0: left promiscuous mode [ 459.589372][T11273] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.428405][ T6930] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 460.483170][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 460.549030][T11294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.598219][ T6930] usb 7-1: Using ep0 maxpacket: 16 [ 460.600420][ T6930] usb 7-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 460.601618][ T6930] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.601645][ T6930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.601661][ T6930] usb 7-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 460.601676][ T6930] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.602524][ T6930] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 460.602538][ T6930] usb 7-1: Manufacturer: syz [ 460.661667][ T10] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 460.766420][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.766819][ T6930] usb 7-1: config 0 descriptor?? [ 460.773126][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 460.773143][ T10] usb 6-1: Product: syz [ 460.773151][ T10] usb 6-1: Manufacturer: syz [ 460.773160][ T10] usb 6-1: SerialNumber: syz [ 460.824670][T11294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.901062][T11294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.937387][T11298] loop0: detected capacity change from 0 to 4096 [ 460.951739][T11299] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 461.013815][T11298] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 461.013834][T11298] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 461.013842][T11298] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 461.013896][T11298] loop0: [ 461.020432][ T6930] usb 7-1: USB disconnect, device number 2 [ 461.122517][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 461.202809][T11301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.220881][T11301] bond0: (slave bond2): making interface the new active one [ 461.221339][T11301] bond0: (slave bond2): Enslaving as an active interface with an up link [ 461.296276][ T5647] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 461.296310][ T5647] Bluetooth: hci0: unexpected event for opcode 0x042f [ 461.329547][T11305] loop7: detected capacity change from 0 to 512 [ 461.416259][ T5771] usb 6-1: USB disconnect, device number 10 [ 461.443640][ T5771] usblp0: removed [ 461.472492][T11299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.497977][T11299] bond0: (slave bond3): Enslaving as a backup interface with an up link [ 462.535019][T11321] ip_tables: iptables: counters copy to user failed while replacing table [ 462.670177][T11321] can: request_module (can-proto-0) failed. [ 463.426480][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 463.544736][T11329] loop0: detected capacity change from 0 to 64 [ 463.545329][T11329] hfs: Unknown parameter 'quiat' [ 463.700204][T11327] [ 463.702549][T11327] ====================================================== [ 463.709552][T11327] WARNING: possible circular locking dependency detected [ 463.716554][T11327] syzkaller #0 Not tainted [ 463.720940][T11327] ------------------------------------------------------ [ 463.727948][T11327] syz.2.1608/11327 is trying to acquire lock: [ 463.733986][T11327] ffff88802bed5938 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x75d/0xf10 [ 463.743699][T11327] [ 463.743699][T11327] but task is already holding lock: [ 463.751035][T11327] ffff888033c60080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 463.760308][T11327] [ 463.760308][T11327] which lock already depends on the new lock. [ 463.760308][T11327] [ 463.770683][T11327] [ 463.770683][T11327] the existing dependency chain (in reverse order) is: [ 463.779669][T11327] [ 463.779669][T11327] -> #3 (&of->mutex){+.+.}-{4:4}: [ 463.786854][T11327] __mutex_lock+0x197/0x15a0 [ 463.791945][T11327] kernfs_seq_start+0x5d/0x420 [ 463.797206][T11327] seq_read_iter+0x37e/0xca0 [ 463.802290][T11327] copy_splice_read+0x5ff/0xaa0 [ 463.807636][T11327] splice_file_to_pipe+0x4ab/0x720 [ 463.813243][T11327] do_sendfile+0x4d4/0x7c0 [ 463.818155][T11327] __se_sys_sendfile64+0x144/0x1a0 [ 463.823779][T11327] do_syscall_64+0x166/0x520 [ 463.828875][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.835262][T11327] [ 463.835262][T11327] -> #2 (&p->lock){+.+.}-{4:4}: [ 463.842267][T11327] __mutex_lock+0x197/0x15a0 [ 463.847372][T11327] seq_read_iter+0xa4/0xca0 [ 463.852371][T11327] copy_splice_read+0x5ff/0xaa0 [ 463.857720][T11327] splice_file_to_pipe+0x4ab/0x720 [ 463.863332][T11327] do_sendfile+0x4d4/0x7c0 [ 463.868244][T11327] __se_sys_sendfile64+0x144/0x1a0 [ 463.873848][T11327] do_syscall_64+0x166/0x520 [ 463.878939][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.885335][T11327] [ 463.885335][T11327] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 463.892706][T11327] __mutex_lock+0x197/0x15a0 [ 463.897794][T11327] anon_pipe_write+0x28f/0x1a90 [ 463.903137][T11327] __kernel_write_iter+0x44a/0x8f0 [ 463.908743][T11327] __kernel_write+0x106/0x170 [ 463.913918][T11327] autofs_notify_daemon+0x770/0xf10 [ 463.919614][T11327] autofs_wait+0x11ad/0x18a0 [ 463.924699][T11327] autofs_mount_wait+0x16b/0x390 [ 463.930131][T11327] autofs_d_automount+0x64e/0x810 [ 463.935673][T11327] __traverse_mounts+0x2fe/0x5d0 [ 463.941106][T11327] step_into_slowpath+0x4ba/0x820 [ 463.946627][T11327] path_lookupat+0x433/0x8c0 [ 463.951712][T11327] filename_lookup+0x265/0x5d0 [ 463.956971][T11327] user_statfs+0xb2/0x1c0 [ 463.961798][T11327] __x64_sys_statfs+0x120/0x270 [ 463.967145][T11327] do_syscall_64+0x166/0x520 [ 463.972235][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.978620][T11327] [ 463.978620][T11327] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 463.986321][T11327] __lock_acquire+0x164c/0x2de0 [ 463.991672][T11327] lock_acquire+0x115/0x350 [ 463.996671][T11327] __mutex_lock+0x197/0x15a0 [ 464.001760][T11327] autofs_notify_daemon+0x75d/0xf10 [ 464.007456][T11327] autofs_wait+0x11ad/0x18a0 [ 464.012541][T11327] autofs_mount_wait+0x16b/0x390 [ 464.017973][T11327] autofs_d_automount+0x64e/0x810 [ 464.023506][T11327] __traverse_mounts+0x2fe/0x5d0 [ 464.028940][T11327] step_into_slowpath+0x4ba/0x820 [ 464.034462][T11327] path_lookupat+0x433/0x8c0 [ 464.039566][T11327] filename_lookup+0x265/0x5d0 [ 464.044827][T11327] kern_path+0x3d/0x150 [ 464.049495][T11327] lookup_bdev+0xc8/0x2b0 [ 464.054327][T11327] resume_store+0x181/0x500 [ 464.059326][T11327] kernfs_fop_write_iter+0x3a4/0x540 [ 464.065111][T11327] vfs_write+0x612/0xba0 [ 464.069851][T11327] ksys_write+0x150/0x270 [ 464.074676][T11327] do_syscall_64+0x166/0x520 [ 464.079766][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.086153][T11327] [ 464.086153][T11327] other info that might help us debug this: [ 464.086153][T11327] [ 464.096354][T11327] Chain exists of: [ 464.096354][T11327] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 464.096354][T11327] [ 464.108400][T11327] Possible unsafe locking scenario: [ 464.108400][T11327] [ 464.115830][T11327] CPU0 CPU1 [ 464.121170][T11327] ---- ---- [ 464.126506][T11327] lock(&of->mutex); [ 464.130465][T11327] lock(&p->lock); [ 464.136765][T11327] lock(&of->mutex); [ 464.143237][T11327] lock(&sbi->pipe_mutex); [ 464.147712][T11327] [ 464.147712][T11327] *** DEADLOCK *** [ 464.147712][T11327] [ 464.155826][T11327] locks held by syz.2.1608/11327: 4, last CPU#0: [ 464.162128][T11327] #0: ffff88807efba630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 464.171148][T11327] #1: ffff888038154478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 464.179993][T11327] #2: ffff888033c60080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 464.189701][T11327] #3: ffff88801f6b6698 (kn->active#89){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 464.199694][T11327] [ 464.199694][T11327] stack backtrace: [ 464.205558][T11327] CPU: 0 UID: 0 PID: 11327 Comm: syz.2.1608 Not tainted syzkaller #0 PREEMPT(full) [ 464.214896][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 464.224926][T11327] Call Trace: [ 464.228183][T11327] [ 464.231096][T11327] dump_stack_lvl+0xe8/0x150 [ 464.235668][T11327] print_circular_bug+0x2e2/0x300 [ 464.240672][T11327] check_noncircular+0x12f/0x150 [ 464.245589][T11327] __lock_acquire+0x164c/0x2de0 [ 464.250421][T11327] lock_acquire+0x115/0x350 [ 464.254898][T11327] ? autofs_notify_daemon+0x75d/0xf10 [ 464.260247][T11327] __mutex_lock+0x197/0x15a0 [ 464.264817][T11327] ? autofs_notify_daemon+0x75d/0xf10 [ 464.270161][T11327] ? autofs_notify_daemon+0x70e/0xf10 [ 464.275507][T11327] ? autofs_notify_daemon+0x75d/0xf10 [ 464.280854][T11327] ? __pfx___mutex_lock+0x10/0x10 [ 464.285854][T11327] ? from_kgid_munged+0x20a/0x6b0 [ 464.290855][T11327] ? __pfx_from_kgid_munged+0x10/0x10 [ 464.296202][T11327] ? __kasan_kmalloc+0x93/0xb0 [ 464.300943][T11327] ? autofs_wait+0xd3f/0x18a0 [ 464.305595][T11327] ? autofs_mount_wait+0x16b/0x390 [ 464.310678][T11327] ? autofs_d_automount+0x64e/0x810 [ 464.315848][T11327] ? autofs_notify_daemon+0x52f/0xf10 [ 464.321196][T11327] autofs_notify_daemon+0x75d/0xf10 [ 464.326371][T11327] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 464.332073][T11327] ? __raw_spin_lock_init+0x45/0x100 [ 464.337332][T11327] ? autofs_wait+0xe17/0x18a0 [ 464.341991][T11327] autofs_wait+0x11ad/0x18a0 [ 464.346560][T11327] ? __pfx_autofs_wait+0x10/0x10 [ 464.351474][T11327] ? do_raw_spin_unlock+0xf5/0x200 [ 464.356559][T11327] autofs_mount_wait+0x16b/0x390 [ 464.361470][T11327] autofs_d_automount+0x64e/0x810 [ 464.366473][T11327] __traverse_mounts+0x2fe/0x5d0 [ 464.371390][T11327] step_into_slowpath+0x4ba/0x820 [ 464.376394][T11327] ? __pfx_step_into_slowpath+0x10/0x10 [ 464.381914][T11327] ? lookup_slow+0x64/0x80 [ 464.386309][T11327] path_lookupat+0x433/0x8c0 [ 464.390875][T11327] filename_lookup+0x265/0x5d0 [ 464.395618][T11327] ? __pfx_filename_lookup+0x10/0x10 [ 464.400883][T11327] ? do_getname_kernel+0x54/0x230 [ 464.405884][T11327] ? do_getname_kernel+0x97/0x230 [ 464.410883][T11327] ? __asan_memcpy+0x40/0x70 [ 464.415452][T11327] ? do_getname_kernel+0x183/0x230 [ 464.420538][T11327] kern_path+0x3d/0x150 [ 464.424671][T11327] lookup_bdev+0xc8/0x2b0 [ 464.428985][T11327] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 464.435550][T11327] ? resume_store+0x160/0x500 [ 464.440203][T11327] ? __pfx_lookup_bdev+0x10/0x10 [ 464.445125][T11327] ? __asan_memcpy+0x40/0x70 [ 464.449694][T11327] ? kstrndup+0xbd/0x160 [ 464.453919][T11327] resume_store+0x181/0x500 [ 464.458396][T11327] ? sysfs_file_kobj+0x1a/0x230 [ 464.463226][T11327] ? __pfx_resume_store+0x10/0x10 [ 464.468225][T11327] ? sysfs_file_kobj+0x1a/0x230 [ 464.473066][T11327] ? sysfs_file_kobj+0x1a/0x230 [ 464.477892][T11327] ? sysfs_file_kobj+0x1a/0x230 [ 464.482724][T11327] ? sysfs_file_kobj+0x1e4/0x230 [ 464.487640][T11327] ? sysfs_kf_write+0x166/0x260 [ 464.492468][T11327] ? __pfx_sysfs_kf_write+0x10/0x10 [ 464.497644][T11327] kernfs_fop_write_iter+0x3a4/0x540 [ 464.502916][T11327] vfs_write+0x612/0xba0 [ 464.507142][T11327] ? __pfx_vfs_write+0x10/0x10 [ 464.511887][T11327] ? __fget_files+0x3a2/0x420 [ 464.516557][T11327] ? __fget_files+0x2a/0x420 [ 464.521126][T11327] ? fdget+0x1ac/0x250 [ 464.525172][T11327] ksys_write+0x150/0x270 [ 464.529478][T11327] ? __pfx_ksys_write+0x10/0x10 [ 464.534311][T11327] do_syscall_64+0x166/0x520 [ 464.538881][T11327] ? trace_irq_disable+0x3b/0x140 [ 464.543900][T11327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.549944][T11327] ? clear_bhb_loop+0x70/0xc0 [ 464.554595][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.560478][T11327] RIP: 0033:0x7ff19a19f559 [ 464.564873][T11327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.584453][T11327] RSP: 002b:00007ff19b004028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 464.592857][T11327] RAX: ffffffffffffffda RBX: 00007ff19a425fa0 RCX: 00007ff19a19f559 [ 464.600809][T11327] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000008 [ 464.608756][T11327] RBP: 00007ff19a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 464.616719][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.624666][T11327] R13: 00007ff19a426038 R14: 00007ff19a425fa0 R15: 00007ffd37eddf88 [ 464.632624][T11327] [ 464.942861][T11320] loop6: detected capacity change from 0 to 32768 [ 464.968857][T11320] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 464.976740][T11320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1605 (11320) [ 464.981088][T11320] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 464.981106][T11320] BTRFS info (device loop6): using sha256 checksum algorithm [ 465.407520][T11320] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 465.407660][T11320] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 465.475099][T11320] BTRFS error (device loop6): open_ctree failed: -ENOMEM [ 465.624062][T11327] PM: Image not found (code -6) [ 467.803255][ T5647] Bluetooth: hci3: command 0x0406 tx timeout