last executing test programs: 10m31.40538365s ago: executing program 2 (id=1339): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000240)=""/173, 0xad, 0xb0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 10m29.560422545s ago: executing program 2 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x40, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 10m25.047204976s ago: executing program 2 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) 10m21.2191955s ago: executing program 2 (id=1356): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x1d, r3}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4640}, 0x2}, 0x0) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}) capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000280)={0x7fff, 0x401, 0x38a, 0x190adc90, 0x80000000, 0x7a1a}) io_uring_enter(r4, 0x6516, 0x6d93, 0x8, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000000c0)) 10m18.870136558s ago: executing program 2 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 10m16.019085928s ago: executing program 2 (id=1363): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 10m0.734624334s ago: executing program 32 (id=1363): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 6.309999645s ago: executing program 4 (id=2626): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 6.170614559s ago: executing program 4 (id=2628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 5.192653793s ago: executing program 4 (id=2630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, 0x0) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 4.89360432s ago: executing program 3 (id=2631): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r2, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 4.325598024s ago: executing program 3 (id=2633): r0 = syz_io_uring_setup(0x3fa3, &(0x7f0000000780)={0x0, 0x5d64, 0x10000, 0x0, 0x51}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0, 0x0) r3 = epoll_create1(0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f00000008c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x40, 0x0, r3, 0xffffffffffffffff, &(0x7f0000000940)={0x2000}, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4.179284878s ago: executing program 4 (id=2634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 3.914936514s ago: executing program 3 (id=2636): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="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", 0x116}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920b40ba4c90bcbe564bad4422f2c1df8aab220851f24feb537bc74c14c70c096f4f82676b8", 0x87}, {&(0x7f0000000a80)="85def750bf0f970d18673f7a66da039282c9e8bad703922b4bb30ba92ee6e4a38cc1e681f094c48eacc04a75eee5d9bafa37c0339df18615d43673a757", 0x3d}, {&(0x7f0000000ac0)="99ddc8b5582b558a3c0366c34c19fb5e63050b060f8c573ef4b40a4f91e798498320af4f9deefe54ab0e05ec5cea2f08e75b313b5aa4e36ce2b7361e133ec162079509e078fd813296ca83514d6f96c7b8e130291ed9bb423b7dde7dfcb055473d6088413d2ff2b0942db70a0f31444096ec76be0773ac66b01fd3d618c85ade1bb12bc8532408191d931ff30ced3061cc9d51", 0x93}, {&(0x7f0000000140)="26c8ecde257dacbca7d704d4b8db3c70d1d6e753f0bdbe967eef6d7eee43170578acd2e2ff269ff17144a90f0f00823a2d74803be1ed7d3780ed97c5e40ee2e5a6102a489d9732dfd00e6959b82128da99641dac68a39b74eaa00e299aaf2d7d5465242853483bd6a2ccea22247de61a65e43cddb0044d92ea490074c2fb83d3139f83478b890fac6435389ba3d0f449774a4b0b1ba1a3d1febe87eadd5459e61546fae26190776c8213b61461b13638e020ad586dd38d5ed69a23", 0xbb}, {&(0x7f0000000c80)="500b4acd2cb77d0300000000000000", 0xf}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 3.332314619s ago: executing program 3 (id=2637): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000580)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106184, 0x0) 3.28380253s ago: executing program 4 (id=2639): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$inet(0x2, 0xa, 0x0) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'ip_vti0\x00', 0x2}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x10000}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000003200)=[{&(0x7f0000001800)={0x0, 0x0, 0x1}, 0x0, 0x1}], 0x0) 2.725833424s ago: executing program 1 (id=2641): syz_mount_image$ext4(&(0x7f0000000940)='ext2\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000dc0)={[{@inlinecrypt}, {@auto_da_alloc}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_lt}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '):*^\\'}}]}, 0x0, 0x246, &(0x7f0000000ac0)="$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") r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8090) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) add_key(0x0, 0x0, &(0x7f0000000340)="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", 0x356, 0x0) unshare(0x20000400) socket(0x18, 0x1, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xd2f47b3efeeb54bb}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r6, 0x1, 0x74bd2c, 0x25dfcbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.560499732s ago: executing program 1 (id=2643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) 1.487013824s ago: executing program 1 (id=2645): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="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", 0x116}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920b40ba4c90bcbe564bad4422f2c1df8aab220851f24feb537bc74c14c70c096f4f82676b8", 0x87}, {&(0x7f0000000a80)="85def750bf0f970d18673f7a66da039282c9e8bad703922b4bb30ba92ee6e4a38cc1e681f094c48eacc04a75eee5d9bafa37c0339df18615d43673a757", 0x3d}, {&(0x7f0000000ac0)="99ddc8b5582b558a3c0366c34c19fb5e63050b060f8c573ef4b40a4f91e798498320af4f9deefe54ab0e05ec5cea2f08e75b313b5aa4e36ce2b7361e133ec162079509e078fd813296ca83514d6f96c7b8e130291ed9bb423b7dde7dfcb055473d6088413d2ff2b0942db70a0f31444096ec76be0773ac66b01fd3d618c85ade1bb12bc8532408191d931ff30ced3061cc9d51", 0x93}, {&(0x7f0000000140)="26c8ecde257dacbca7d704d4b8db3c70d1d6e753f0bdbe967eef6d7eee43170578acd2e2ff269ff17144a90f0f00823a2d74803be1ed7d3780ed97c5e40ee2e5a6102a489d9732dfd00e6959b82128da99641dac68a39b74eaa00e299aaf2d7d5465242853483bd6a2ccea22247de61a65e43cddb0044d92ea490074c2fb83d3139f83478b890fac6435389ba3d0f449774a4b0b1ba1a3d1febe87eadd5459e61546fae26190776c8213b61461b13638e020ad586dd38d5ed69a23", 0xbb}, {&(0x7f0000000c80)="500b4acd2cb77d0300000000000000", 0xf}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 1.443156285s ago: executing program 0 (id=2654): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) 1.422214026s ago: executing program 1 (id=2646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000680)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[{0x9e, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0x5}], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x9, 0x1c, 0x68, 0x0, 0x6, 0x2, 0x0, @broadcast, @multicast1}, {0x22, 0x1, 0x0, @multicast2}}}}, 0x3e) 1.421438386s ago: executing program 0 (id=2656): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) 1.363363097s ago: executing program 0 (id=2647): syz_mount_image$ext4(&(0x7f0000000940)='ext2\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000dc0)={[{@inlinecrypt}, {@auto_da_alloc}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_lt}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '):*^\\'}}]}, 0x0, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8090) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) add_key(0x0, 0x0, &(0x7f0000000340)="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", 0x356, 0x0) unshare(0x20000400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001000100100020900000000000000", @ANYRES32=0x0, @ANYBLOB="1010000000800700050021000b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) 1.175506962s ago: executing program 1 (id=2648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1.047042555s ago: executing program 1 (id=2650): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) 308.135173ms ago: executing program 0 (id=2651): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 307.472773ms ago: executing program 0 (id=2652): r0 = syz_io_uring_setup(0x3fa3, &(0x7f0000000780)={0x0, 0x5d64, 0x10000, 0x0, 0x51}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0) epoll_create1(0x0) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 237.505185ms ago: executing program 0 (id=2653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r5, 0x84, 0x7d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 151.149827ms ago: executing program 3 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 150.906207ms ago: executing program 4 (id=2657): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd4662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58eba083456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc6b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893735e26097a90a63af8f66cdae432cd7ae74af90b87224b5f4b3ada389dc5ee3aeaf20c176697544017263d67bca40a482747a537528a8a0f98e4ad2d0580fbdd3b3c4175b69c6e4b98d9c0c14e2db67b0280ebec2b783b20bca5", 0x116}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920b40ba4c90bcbe564bad4422f2c1df8aab220851f24feb537bc74c14c70c096f4f82676b8", 0x87}, {&(0x7f0000000a80)="85def750bf0f970d18673f7a66da039282c9e8bad703922b4bb30ba92ee6e4a38cc1e681f094c48eacc04a75eee5d9bafa37c0339df18615d43673a757", 0x3d}, {&(0x7f0000000ac0)="99ddc8b5582b558a3c0366c34c19fb5e63050b060f8c573ef4b40a4f91e798498320af4f9deefe54ab0e05ec5cea2f08e75b313b5aa4e36ce2b7361e133ec162079509e078fd813296ca83514d6f96c7b8e130291ed9bb423b7dde7dfcb055473d6088413d2ff2b0942db70a0f31444096ec76be0773ac66b01fd3d618c85ade1bb12bc8532408191d931ff30ced3061cc9d51", 0x93}, {&(0x7f0000000140)="26c8ecde257dacbca7d704d4b8db3c70d1d6e753f0bdbe967eef6d7eee43170578acd2e2ff269ff17144a90f0f00823a2d74803be1ed7d3780ed97c5e40ee2e5a6102a489d9732dfd00e6959b82128da99641dac68a39b74eaa00e299aaf2d7d5465242853483bd6a2ccea22247de61a65e43cddb0044d92ea490074c2fb83d3139f83478b890fac6435389ba3d0f449774a4b0b1ba1a3d1febe87eadd5459e61546fae26190776c8213b61461b13638e020ad586dd38d5ed69a23", 0xbb}, {&(0x7f0000000c80)="500b4acd2cb77d0300000000000000", 0xf}], 0x5}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000040)="065621ffc5c4e0f2068447411588cb9042b073e6a3f579102f01868c766e7991ac5a920309a0", 0x26}], 0x1}}], 0x3, 0x0) 0s ago: executing program 3 (id=2658): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='/proc/self/cwd/t', 0x10) kernel console output (not intermixed with test programs): s_huge 0 [ 982.470304][T12957] shmem 311787520 [ 982.473920][T12957] mapped_file 89808896 [ 982.477971][T12957] dirty 0 [ 982.481431][T12957] writeback 0 [ 982.484733][T12957] workingset_refault_anon 120 [ 982.489387][T12957] workingset_refault_file 2460 [ 982.494174][T12957] swap 127979520 [ 982.497701][T12957] pgpgin 1560286 [ 982.501257][T12957] pgpgout 1484105 [ 982.505153][T12957] pgfault 1110021 [ 982.508783][T12957] pgmajfault 63 [ 982.512248][T12957] inactive_anon 47067136 [ 982.516470][T12957] active_anon 264957952 [ 982.520626][T12957] inactive_file 0 [ 982.524257][T12957] active_file 12288 [ 982.528042][T12957] unevictable 0 [ 982.531519][T12957] hierarchical_memory_limit 314572800 [ 982.536871][T12957] hierarchical_memsw_limit 9223372036854771712 [ 982.543022][T12957] total_cache 311787520 [ 982.547158][T12957] total_rss 225280 [ 982.550875][T12957] total_rss_huge 0 [ 982.554577][T12957] total_shmem 311787520 [ 982.558720][T12957] total_mapped_file 89808896 [ 982.563316][T12957] total_dirty 0 [ 982.566756][T12957] total_writeback 0 [ 982.570579][T12957] total_workingset_refault_anon 120 [ 982.575755][T12957] total_workingset_refault_file 2460 [ 982.581050][T12957] total_swap 127979520 [ 982.585099][T12957] total_pgpgin 1560286 [ 982.589145][T12957] total_pgpgout 1484105 [ 982.593351][T12957] total_pgfault 1110021 [ 982.597499][T12957] total_pgmajfault 63 [ 982.601519][T12957] total_inactive_anon 47067136 [ 982.606266][T12957] total_active_anon 264957952 [ 982.611091][T12957] total_inactive_file 0 [ 982.615233][T12957] total_active_file 12288 [ 982.619543][T12957] total_unevictable 0 [ 982.623538][T12957] anon_cost 0 [ 982.626806][T12957] file_cost 0 [ 982.630092][T12957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1963,pid=12957,uid=0 [ 982.645447][T12957] Memory cgroup out of memory: Killed process 12957 (syz.0.1963) total-vm:102384kB, anon-rss:1404kB, file-rss:53504kB, shmem-rss:11392kB, UID:0 pgtables:228kB oom_score_adj:0 [ 983.231551][T12991] loop1: detected capacity change from 0 to 1024 [ 983.236256][T12993] loop4: detected capacity change from 0 to 1024 [ 983.239071][T12991] EXT4-fs: Ignoring removed bh option [ 983.261031][T12993] EXT4-fs: Ignoring removed bh option [ 983.287727][T12993] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 983.304739][T12991] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 983.342990][T12993] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 983.351403][T12991] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 983.415384][T12991] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 983.420785][T12993] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 983.475445][T12991] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.1974: unexpected bad inode w/o EXT4_IGET_BAD [ 983.632792][T12993] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.1975: unexpected bad inode w/o EXT4_IGET_BAD [ 983.663629][T12993] EXT4-fs (loop4): no journal found [ 983.671010][T12991] EXT4-fs (loop1): no journal found [ 983.680021][T12993] EXT4-fs (loop4): can't get journal size [ 983.696908][T12991] EXT4-fs (loop1): can't get journal size [ 983.725980][T12991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 983.738774][T12993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 983.776074][T13003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 984.642355][T12993] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #16: comm syz.4.1975: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 984.980262][T13007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 985.150511][T13008] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #16: comm syz.1.1974: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 985.590345][T13012] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 985.980372][T13013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 986.813674][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.358508][T13022] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 988.871915][T10335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.992067][T10343] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 989.279552][T13030] loop4: detected capacity change from 0 to 1024 [ 989.291056][T13030] EXT4-fs: Ignoring removed bh option [ 989.333629][T13030] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 989.389671][T13030] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 989.433210][T13030] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 989.483274][T13030] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.1981: unexpected bad inode w/o EXT4_IGET_BAD [ 989.669731][T13030] EXT4-fs (loop4): no journal found [ 989.677099][T13030] EXT4-fs (loop4): can't get journal size [ 989.805461][T13036] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 990.403642][T13030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 990.471879][T13040] loop1: detected capacity change from 0 to 1024 [ 990.621326][T13040] hfsplus: unable to parse mount options [ 990.812017][T13043] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 991.376918][T13045] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 991.780419][T13041] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #16: comm syz.4.1981: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 991.914946][T10335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.144549][T13050] loop4: detected capacity change from 0 to 1024 [ 992.160958][T13050] EXT4-fs: Ignoring removed bh option [ 992.218756][T13050] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 992.250682][T13050] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 992.279560][T13052] loop1: detected capacity change from 0 to 1024 [ 992.290173][T13052] EXT4-fs: Ignoring removed bh option [ 992.300139][T13050] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 992.325696][T13052] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 992.340068][T13050] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.1987: unexpected bad inode w/o EXT4_IGET_BAD [ 992.370109][T13052] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 992.401567][T13050] EXT4-fs (loop4): no journal found [ 992.406825][T13050] EXT4-fs (loop4): can't get journal size [ 992.433074][T13052] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 992.445070][T13050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 992.458754][T13052] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.1988: unexpected bad inode w/o EXT4_IGET_BAD [ 992.488916][T13052] EXT4-fs (loop1): no journal found [ 992.499979][T13052] EXT4-fs (loop1): can't get journal size [ 992.522004][T13052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 992.803248][T13060] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #16: comm syz.1.1988: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 992.805704][T13056] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #16: comm syz.4.1987: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 993.210275][T13062] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 993.502161][T13063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 993.620326][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.860529][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.059953][T12683] Bluetooth: hci4: command 0x0406 tx timeout [ 994.222845][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.242382][T10335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.535966][T13067] loop1: detected capacity change from 0 to 1024 [ 994.546011][T13067] EXT4-fs: Ignoring removed bh option [ 994.568075][T13068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 995.212805][T13067] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 995.254084][T13067] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 995.278591][T13067] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 995.290784][T13067] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.1991: unexpected bad inode w/o EXT4_IGET_BAD [ 995.307014][T13067] EXT4-fs (loop1): no journal found [ 995.312726][T13067] EXT4-fs (loop1): can't get journal size [ 995.322416][T13067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 995.764798][T13078] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 996.879182][T13076] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #16: comm syz.1.1991: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 997.222988][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.451561][T13084] loop4: detected capacity change from 0 to 1024 [ 997.472292][T13084] EXT4-fs: Ignoring removed bh option [ 997.507210][T13084] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 997.680130][T13084] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 997.702948][T13086] loop1: detected capacity change from 0 to 1024 [ 997.752200][T13088] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 997.842025][T13084] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 998.450548][T13084] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.1994: unexpected bad inode w/o EXT4_IGET_BAD [ 998.471105][T13086] EXT4-fs: Ignoring removed bh option [ 998.610092][T13086] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 998.614348][T13084] EXT4-fs (loop4): no journal found [ 998.630107][T13084] EXT4-fs (loop4): can't get journal size [ 998.642411][T13086] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 998.658642][T13084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 998.660956][T13086] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 998.863058][T13086] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.1995: unexpected bad inode w/o EXT4_IGET_BAD [ 998.884693][T13086] EXT4-fs (loop1): no journal found [ 998.899529][T13090] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #16: comm syz.4.1994: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 998.930473][T13086] EXT4-fs (loop1): can't get journal size [ 999.130956][T13093] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 999.760302][T13095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1000.161763][T13086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1000.587582][T13101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1000.877180][T13103] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1001.059301][T13086] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #16: comm syz.1.1995: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 1001.163074][T10335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.252023][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.326617][T13108] loop4: detected capacity change from 0 to 1024 [ 1001.379378][T13108] EXT4-fs: Ignoring removed bh option [ 1001.447034][T13108] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1001.569973][T13108] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1001.713084][T13116] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1001.743299][T13108] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1002.473472][T13108] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.1999: unexpected bad inode w/o EXT4_IGET_BAD [ 1002.513061][T13108] EXT4-fs (loop4): no journal found [ 1002.521915][T13108] EXT4-fs (loop4): can't get journal size [ 1002.572770][T13108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1003.002316][T13124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1004.602884][T10335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.923167][T13130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1006.259154][T13137] loop1: detected capacity change from 0 to 1024 [ 1006.286407][T12683] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1006.493106][T13137] hfsplus: unable to parse mount options [ 1007.083945][T13140] loop1: detected capacity change from 0 to 1024 [ 1007.101086][T13140] EXT4-fs: Ignoring removed bh option [ 1007.132035][T13140] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1007.150101][T13140] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1007.170326][T13140] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1007.194484][T13140] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.2008: unexpected bad inode w/o EXT4_IGET_BAD [ 1007.229202][T13140] EXT4-fs (loop1): no journal found [ 1007.235005][T13140] EXT4-fs (loop1): can't get journal size [ 1007.262464][T13140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1007.587895][T13145] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #16: comm syz.1.2008: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 1007.663043][T13146] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1008.490291][T13148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1008.855289][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.876221][T13150] loop4: detected capacity change from 0 to 1024 [ 1008.892363][T13150] hfsplus: unable to parse mount options [ 1009.250600][T13158] fuse: Unknown parameter '0x0000000000000004' [ 1009.940331][T13164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1011.030135][ T173] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1011.245806][T13174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1011.261949][ T173] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1011.963264][ T173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.015804][T13176] overlayfs: failed to clone upperpath [ 1012.073109][ T173] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1012.082328][ T173] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1012.118613][ T173] usb 2-1: string descriptor 0 read error: -71 [ 1012.133252][ T173] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1012.159944][ T173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.209211][ T173] usb 2-1: can't set config #1, error -71 [ 1012.244378][ T173] usb 2-1: USB disconnect, device number 96 [ 1012.504604][T13185] loop4: detected capacity change from 0 to 1024 [ 1012.516813][T13185] hfsplus: unable to parse mount options [ 1012.616181][T13187] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1013.676735][T13194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2024'. [ 1013.688645][T13194] fuse: Unknown parameter '0x0000000000000004' [ 1014.344080][T13201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1016.493708][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2035'. [ 1017.057061][T13242] syz.4.2040: vmalloc error: size 24576, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1017.103310][T13242] CPU: 0 PID: 13242 Comm: syz.4.2040 Not tainted syzkaller #0 [ 1017.110846][T13242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1017.120932][T13242] Call Trace: [ 1017.124270][T13242] [ 1017.127223][T13242] dump_stack_lvl+0x18c/0x250 [ 1017.131938][T13242] ? show_regs_print_info+0x20/0x20 [ 1017.137159][T13242] ? load_image+0x420/0x420 [ 1017.141682][T13242] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1017.148135][T13242] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1017.154670][T13242] warn_alloc+0x246/0x340 [ 1017.159042][T13242] ? zone_watermark_ok_safe+0x230/0x230 [ 1017.164638][T13242] __vmalloc_node_range+0x1055/0x1320 [ 1017.170080][T13242] ? free_vm_area+0x50/0x50 [ 1017.174623][T13242] ? arch_dup_task_struct+0x57/0xd0 [ 1017.179857][T13242] ? __asan_memcpy+0x40/0x70 [ 1017.184481][T13242] dup_task_struct+0x3c8/0x800 [ 1017.189273][T13242] ? copy_process+0x5a6/0x3da0 [ 1017.194076][T13242] ? lockdep_hardirqs_on+0x98/0x150 [ 1017.199308][T13242] copy_process+0x5a6/0x3da0 [ 1017.203967][T13242] ? __pidfd_prepare+0x140/0x140 [ 1017.208937][T13242] ? __raw_spin_lock_init+0x45/0x100 [ 1017.214264][T13242] vhost_task_create+0x1fb/0x370 [ 1017.219234][T13242] ? vhost_run_work_list+0x1b0/0x1b0 [ 1017.224558][T13242] ? __vhost_worker_flush+0x290/0x290 [ 1017.229970][T13242] ? vhost_task_stop+0x190/0x190 [ 1017.234942][T13242] ? vhost_task_create+0x370/0x370 [ 1017.240085][T13242] ? vscnprintf+0x80/0x80 [ 1017.244468][T13242] vhost_worker_create+0x15e/0x350 [ 1017.249620][T13242] ? vhost_dev_set_owner+0x9b0/0x9b0 [ 1017.254950][T13242] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 1017.260271][T13242] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 1017.265588][T13242] ? __kmalloc+0xe5/0x240 [ 1017.269968][T13242] vhost_dev_set_owner+0x5c8/0x9b0 [ 1017.275124][T13242] vhost_dev_ioctl+0xa9/0xc00 [ 1017.279835][T13242] ? vhost_vsock_dev_ioctl+0x230/0xdd0 [ 1017.285330][T13242] ? mutex_lock_nested+0x20/0x20 [ 1017.290303][T13242] ? vhost_init_device_iotlb+0x200/0x200 [ 1017.296006][T13242] vhost_vsock_dev_ioctl+0x23e/0xdd0 [ 1017.301336][T13242] ? vhost_vsock_chr_poll+0x50/0x50 [ 1017.306578][T13242] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1017.311544][T13242] ? security_file_ioctl+0x80/0xa0 [ 1017.316695][T13242] ? vhost_vsock_chr_poll+0x50/0x50 [ 1017.321929][T13242] __se_sys_ioctl+0xfd/0x170 [ 1017.326559][T13242] do_syscall_64+0x55/0xb0 [ 1017.331006][T13242] ? clear_bhb_loop+0x40/0x90 [ 1017.335711][T13242] ? clear_bhb_loop+0x40/0x90 [ 1017.340422][T13242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.346360][T13242] RIP: 0033:0x7f97f899e2d9 [ 1017.350802][T13242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.370444][T13242] RSP: 002b:00007f97f97d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.378893][T13242] RAX: ffffffffffffffda RBX: 00007f97f8c25fa0 RCX: 00007f97f899e2d9 [ 1017.386896][T13242] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 1017.394891][T13242] RBP: 00007f97f8a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1017.402892][T13242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.410896][T13242] R13: 00007f97f8c26038 R14: 00007f97f8c25fa0 R15: 00007ffd11ebe9c8 [ 1017.418993][T13242] [ 1017.580001][T13242] Mem-Info: [ 1017.583235][T13242] active_anon:16639 inactive_anon:9 isolated_anon:0 [ 1017.583235][T13242] active_file:18060 inactive_file:40416 isolated_file:0 [ 1017.583235][T13242] unevictable:768 dirty:130 writeback:0 [ 1017.583235][T13242] slab_reclaimable:6666 slab_unreclaimable:94371 [ 1017.583235][T13242] mapped:27685 shmem:11955 pagetables:762 [ 1017.583235][T13242] sec_pagetables:0 bounce:0 [ 1017.583235][T13242] kernel_misc_reclaimable:0 [ 1017.583235][T13242] free:1331026 free_pcp:8761 free_cma:0 [ 1017.653384][T13242] Node 0 active_anon:67376kB inactive_anon:36kB active_file:72240kB inactive_file:161460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111520kB dirty:520kB writeback:0kB shmem:47084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10716kB pagetables:3060kB sec_pagetables:0kB all_unreclaimable? no [ 1017.691187][T13242] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1017.723120][T13242] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1017.835225][T13242] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1017.848286][T13242] Node 0 DMA32 free:1404004kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:70496kB inactive_anon:36kB active_file:72240kB inactive_file:160384kB unevictable:1536kB writepending:520kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:18084kB local_pcp:16380kB free_cma:0kB [ 1017.915987][T13242] lowmem_reserve[]: 0 0 1 1 1 [ 1017.986936][T13242] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.067738][T13242] lowmem_reserve[]: 0 0 0 0 0 [ 1018.073461][T13242] Node 1 Normal free:3900948kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17316kB local_pcp:4608kB free_cma:0kB [ 1018.152203][T13242] lowmem_reserve[]: 0 0 0 0 0 [ 1018.157601][T13242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1018.180904][T13242] Node 0 DMA32: 3*4kB (ME) 2640*8kB (UME) 2708*16kB (UME) 1782*32kB (UME) 774*64kB (ME) 458*128kB (UME) 251*256kB (UME) 133*512kB (UME) 49*1024kB (ME) 42*2048kB (UME) 219*4096kB (UM) = 1395212kB [ 1018.210096][T13242] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1018.227800][T13242] Node 1 Normal: 203*4kB (UME) 47*8kB (UME) 39*16kB (UME) 70*32kB (UME) 31*64kB (UME) 5*128kB (UE) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3900948kB [ 1018.290004][T13242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.346605][T13242] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1018.379605][T13242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.410369][T13242] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1018.419667][T13242] 75040 total pagecache pages [ 1018.454908][T13242] 2 pages in swap cache [ 1018.459086][T13242] Free swap = 104748kB [ 1018.463722][T13242] Total swap = 124996kB [ 1018.468029][T13242] 2097051 pages RAM [ 1018.478177][T13242] 0 pages HighMem/MovableOnly [ 1018.488318][T13242] 421118 pages reserved [ 1018.498461][T13242] 0 pages cma reserved [ 1018.600022][ T3374] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1018.800022][ T3374] usb 2-1: Using ep0 maxpacket: 8 [ 1018.809354][ T3374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1018.865334][ T3374] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1018.897580][ T3374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.931020][ T3374] usb 2-1: config 0 descriptor?? [ 1019.155971][ T3374] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1019.185307][ T3374] usb 2-1: USB disconnect, device number 97 [ 1020.604014][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.611258][T13307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.898725][T13307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.935973][T13307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.224347][T13307] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.233418][T13307] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.243421][T13307] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.252439][T13307] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.992522][T13293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.011532][T13284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.542773][T13327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.550223][T13327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.606172][T13327] team0: left promiscuous mode [ 1022.611673][T13327] team_slave_0: left promiscuous mode [ 1022.617343][T13327] team_slave_1: left promiscuous mode [ 1022.623949][T13327] team0: left allmulticast mode [ 1022.628858][T13327] team_slave_0: left allmulticast mode [ 1022.635437][T13327] team_slave_1: left allmulticast mode [ 1023.050912][T13327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.098537][T13327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.358809][T13327] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.381990][T13327] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.397518][T13327] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.406819][T13327] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.471767][T13326] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1024.492918][T13326] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1024.516758][T13326] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1025.802927][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2075'. [ 1025.867310][T13378] loop4: detected capacity change from 0 to 128 [ 1025.897723][T13378] EXT4-fs: inline encryption not supported [ 1025.938714][T13378] ext2: Unknown parameter 'func' [ 1028.579627][T13413] loop1: detected capacity change from 0 to 8192 [ 1028.592165][T13413] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1028.605284][T13413] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1028.614610][T13413] REISERFS (device loop1): using ordered data mode [ 1028.621306][T13413] reiserfs: using flush barriers [ 1028.630033][T13413] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1029.054608][T13425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'. [ 1029.302269][T13428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2085'. [ 1030.501620][T13434] loop1: detected capacity change from 0 to 128 [ 1030.509044][T13434] EXT4-fs: inline encryption not supported [ 1030.515066][T13434] ext2: Unknown parameter 'func' [ 1032.630891][T13458] syzkaller0: entered promiscuous mode [ 1032.636464][T13458] syzkaller0: entered allmulticast mode [ 1033.845169][T13472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 1034.128408][T13480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2096'. [ 1035.199061][T13486] loop4: detected capacity change from 0 to 128 [ 1035.231002][T13486] EXT4-fs: inline encryption not supported [ 1035.236970][T13486] ext2: Unknown parameter 'func' [ 1035.453683][T13488] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1035.565415][T13501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2101'. [ 1035.696455][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.703836][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.827021][T13475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.870280][T13507] FAULT_INJECTION: forcing a failure. [ 1036.870280][T13507] name failslab, interval 1, probability 0, space 0, times 1 [ 1036.888955][T13475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.910899][T13507] CPU: 1 PID: 13507 Comm: syz.1.2102 Not tainted syzkaller #0 [ 1036.918412][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1036.928493][T13507] Call Trace: [ 1036.931791][T13507] [ 1036.934742][T13507] dump_stack_lvl+0x18c/0x250 [ 1036.939449][T13507] ? show_regs_print_info+0x20/0x20 [ 1036.944669][T13507] ? load_image+0x420/0x420 [ 1036.949190][T13507] ? __lock_acquire+0x7eb0/0x7eb0 [ 1036.954238][T13507] should_fail_ex+0x394/0x4c0 [ 1036.958946][T13507] should_failslab+0x9/0x20 [ 1036.963477][T13507] slab_pre_alloc_hook+0x59/0x300 [ 1036.968534][T13507] kmem_cache_alloc+0x5a/0x2c0 [ 1036.973333][T13507] ? security_inode_alloc+0x34/0x110 [ 1036.978645][T13507] security_inode_alloc+0x34/0x110 [ 1036.983764][T13507] inode_init_always+0x914/0xc90 [ 1036.988706][T13507] new_inode_pseudo+0x95/0x1d0 [ 1036.993472][T13507] new_inode+0x22/0x1d0 [ 1036.997632][T13507] shmem_get_inode+0x34d/0xcd0 [ 1037.002405][T13507] ? mas_destroy+0x20a0/0x20a0 [ 1037.007181][T13507] __shmem_file_setup+0x167/0x2c0 [ 1037.012210][T13507] shmem_zero_setup+0x8d/0x130 [ 1037.016977][T13507] mmap_region+0x1225/0x2090 [ 1037.021588][T13507] ? file_mmap_ok+0x170/0x170 [ 1037.026274][T13507] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 1037.031845][T13507] ? cap_mmap_addr+0x213/0x2b0 [ 1037.036622][T13507] do_mmap+0x98f/0x10a0 [ 1037.040797][T13507] ? mlock_future_ok+0xf0/0xf0 [ 1037.045560][T13507] ? down_write+0x200/0x200 [ 1037.050086][T13507] vm_mmap_pgoff+0x1c4/0x3f0 [ 1037.054686][T13507] ? account_locked_vm+0x200/0x200 [ 1037.059812][T13507] ? ksys_mmap_pgoff+0xf3/0x720 [ 1037.064689][T13507] ? __x64_sys_mmap+0x7a/0x130 [ 1037.069543][T13507] do_syscall_64+0x55/0xb0 [ 1037.073963][T13507] ? clear_bhb_loop+0x40/0x90 [ 1037.078635][T13507] ? clear_bhb_loop+0x40/0x90 [ 1037.083324][T13507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.089222][T13507] RIP: 0033:0x7f3a80d9e2d9 [ 1037.093635][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.113242][T13507] RSP: 002b:00007f3a81d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1037.121657][T13507] RAX: ffffffffffffffda RBX: 00007f3a81026090 RCX: 00007f3a80d9e2d9 [ 1037.129641][T13507] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 1037.137617][T13507] RBP: 00007f3a80e35888 R08: ffffffffffffffff R09: 0000000000000000 [ 1037.145588][T13507] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 1037.153559][T13507] R13: 00007f3a81026128 R14: 00007f3a81026090 R15: 00007ffc8dc325c8 [ 1037.161548][T13507] [ 1037.664787][T13475] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.680621][T13475] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.695428][T13475] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.705741][T13475] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.918610][T13516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2105'. [ 1038.735360][T13532] loop1: detected capacity change from 0 to 128 [ 1038.756307][T13532] EXT4-fs: inline encryption not supported [ 1038.851768][T13532] ext2: Unknown parameter 'func' [ 1038.885452][T13520] digital: digital_start_poll: Unknown protocol [ 1041.929527][T13567] syz.1.2118 (13567): drop_caches: 2 [ 1041.983700][T13568] syz.1.2118 (13568): drop_caches: 2 [ 1042.061343][T13567] syz.1.2118 (13567): drop_caches: 2 [ 1042.482156][T13569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2117'. [ 1044.015287][T13589] loop1: detected capacity change from 0 to 128 [ 1044.022707][T13589] EXT4-fs: inline encryption not supported [ 1044.028574][T13589] ext2: Unknown parameter 'func' [ 1046.024330][T13606] loop5: detected capacity change from 0 to 7 [ 1046.047004][T13606] Dev loop5: unable to read RDB block 7 [ 1046.055996][T13606] loop5: AHDI p1 p2 p3 [ 1046.062522][T13606] loop5: partition table partially beyond EOD, truncated [ 1046.071430][T13606] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1046.078316][T13606] loop5: p3 start 335544320 is beyond EOD, truncated [ 1046.457807][T13619] syz.1.2132 (13619): drop_caches: 2 [ 1046.464984][T13619] syz.1.2132 (13619): drop_caches: 2 [ 1046.472889][T13619] syz.1.2132 (13619): drop_caches: 2 [ 1046.843027][T13632] loop4: detected capacity change from 0 to 128 [ 1046.865446][T13632] EXT4-fs: inline encryption not supported [ 1046.883330][T13632] ext2: Unknown parameter 'func' [ 1048.253041][T13643] FAULT_INJECTION: forcing a failure. [ 1048.253041][T13643] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.304113][T13643] CPU: 1 PID: 13643 Comm: syz.1.2136 Not tainted syzkaller #0 [ 1048.311638][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1048.321719][T13643] Call Trace: [ 1048.325021][T13643] [ 1048.327973][T13643] dump_stack_lvl+0x18c/0x250 [ 1048.332689][T13643] ? show_regs_print_info+0x20/0x20 [ 1048.337921][T13643] ? load_image+0x420/0x420 [ 1048.342471][T13643] ? __lock_acquire+0x7eb0/0x7eb0 [ 1048.347539][T13643] should_fail_ex+0x394/0x4c0 [ 1048.352263][T13643] should_failslab+0x9/0x20 [ 1048.356807][T13643] slab_pre_alloc_hook+0x59/0x300 [ 1048.361863][T13643] kmem_cache_alloc+0x5a/0x2c0 [ 1048.366663][T13643] ? security_inode_alloc+0x34/0x110 [ 1048.371989][T13643] security_inode_alloc+0x34/0x110 [ 1048.377141][T13643] inode_init_always+0x914/0xc90 [ 1048.382114][T13643] new_inode_pseudo+0x95/0x1d0 [ 1048.386918][T13643] new_inode+0x22/0x1d0 [ 1048.391110][T13643] shmem_get_inode+0x34d/0xcd0 [ 1048.395908][T13643] ? mas_destroy+0x20a0/0x20a0 [ 1048.400719][T13643] __shmem_file_setup+0x167/0x2c0 [ 1048.405795][T13643] shmem_zero_setup+0x8d/0x130 [ 1048.410598][T13643] mmap_region+0x1225/0x2090 [ 1048.415245][T13643] ? file_mmap_ok+0x170/0x170 [ 1048.419962][T13643] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 1048.425532][T13643] ? cap_mmap_addr+0x213/0x2b0 [ 1048.430346][T13643] do_mmap+0x98f/0x10a0 [ 1048.434546][T13643] ? mlock_future_ok+0xf0/0xf0 [ 1048.439342][T13643] ? down_write+0x200/0x200 [ 1048.443886][T13643] vm_mmap_pgoff+0x1c4/0x3f0 [ 1048.448525][T13643] ? account_locked_vm+0x200/0x200 [ 1048.453678][T13643] ? ksys_mmap_pgoff+0xf3/0x720 [ 1048.458562][T13643] ? __x64_sys_mmap+0x7a/0x130 [ 1048.463364][T13643] do_syscall_64+0x55/0xb0 [ 1048.467802][T13643] ? clear_bhb_loop+0x40/0x90 [ 1048.472495][T13643] ? clear_bhb_loop+0x40/0x90 [ 1048.477182][T13643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1048.483107][T13643] RIP: 0033:0x7f3a80d9e2d9 [ 1048.487548][T13643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.507278][T13643] RSP: 002b:00007f3a81d2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1048.515722][T13643] RAX: ffffffffffffffda RBX: 00007f3a81025fa0 RCX: 00007f3a80d9e2d9 [ 1048.523716][T13643] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 1048.531688][T13643] RBP: 00007f3a80e35888 R08: ffffffffffffffff R09: 0000000000000000 [ 1048.539646][T13643] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 1048.547608][T13643] R13: 00007f3a81026038 R14: 00007f3a81025fa0 R15: 00007ffc8dc325c8 [ 1048.555580][T13643] [ 1048.785481][T13670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2143'. [ 1049.741350][T13495] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1050.050799][T13495] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.062777][T13495] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1050.077068][T13495] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1050.086472][T13495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.111820][T13495] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1050.261145][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2147'. [ 1052.250139][T13351] usb 2-1: USB disconnect, device number 98 [ 1052.293134][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2152'. [ 1052.989803][T13714] loop1: detected capacity change from 0 to 8192 [ 1053.131820][T13714] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1053.144999][T13714] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1053.154819][T13714] REISERFS (device loop1): using ordered data mode [ 1053.161804][T13714] reiserfs: using flush barriers [ 1053.180589][T13714] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1053.799041][T13733] loop4: detected capacity change from 0 to 2048 [ 1053.815619][T13733] loop4: p1 < > [ 1053.938437][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2156'. [ 1054.545761][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.552196][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.021047][T13757] loop1: detected capacity change from 0 to 2048 [ 1056.147528][T13757] loop1: p1 < > [ 1056.789366][T13488] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1056.799380][ T5773] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 1056.817326][T13488] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.838843][T13488] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1056.994615][T13488] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.014157][T13488] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1057.549190][T13488] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.565078][T13770] loop1: detected capacity change from 0 to 128 [ 1057.574940][T13770] EXT4-fs: inline encryption not supported [ 1057.579442][T13488] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1057.599426][T13770] ext2: Unknown parameter 'func' [ 1057.767592][T13488] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1058.481886][T13776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1058.765517][T13779] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1058.829642][T13779] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1058.871610][T13789] loop5: detected capacity change from 0 to 7 [ 1058.886729][T13779] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1058.924209][T13789] Dev loop5: unable to read RDB block 7 [ 1058.935142][T13779] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1058.958451][T13789] loop5: AHDI p1 p2 p3 [ 1058.980226][T13789] loop5: partition table partially beyond EOD, truncated [ 1058.995278][T13779] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1059.005817][T13779] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.015045][T13779] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1059.023687][T13779] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.027718][T13789] loop5: p1 start 1818582900 is beyond EOD, [ 1059.032933][T13779] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1059.033564][T13779] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1059.070563][T13789] truncated [ 1059.079979][T13789] loop5: p3 start 335544320 is beyond EOD, truncated [ 1060.262564][T13809] loop1: detected capacity change from 0 to 2048 [ 1060.344091][T13809] loop1: p1 < > [ 1061.043340][T13779] udevd[13779]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1061.076285][T13779] udevd[13779]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1061.246558][T13821] loop1: detected capacity change from 0 to 2048 [ 1061.374582][T13821] loop1: p1 < > [ 1062.025868][T13779] udevd[13779]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1062.046344][T13793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1062.111398][T13828] FAULT_INJECTION: forcing a failure. [ 1062.111398][T13828] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.132126][T13828] CPU: 1 PID: 13828 Comm: syz.1.2181 Not tainted syzkaller #0 [ 1062.139639][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1062.149725][T13828] Call Trace: [ 1062.152583][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2182'. [ 1062.153002][T13828] [ 1062.164915][T13828] dump_stack_lvl+0x18c/0x250 [ 1062.169627][T13828] ? show_regs_print_info+0x20/0x20 [ 1062.174854][T13828] ? load_image+0x420/0x420 [ 1062.179395][T13828] ? __lock_acquire+0x7eb0/0x7eb0 [ 1062.184461][T13828] should_fail_ex+0x394/0x4c0 [ 1062.189192][T13828] should_failslab+0x9/0x20 [ 1062.193727][T13828] slab_pre_alloc_hook+0x59/0x300 [ 1062.198783][T13828] kmem_cache_alloc+0x5a/0x2c0 [ 1062.203590][T13828] ? security_inode_alloc+0x34/0x110 [ 1062.208915][T13828] security_inode_alloc+0x34/0x110 [ 1062.214062][T13828] inode_init_always+0x914/0xc90 [ 1062.219035][T13828] new_inode_pseudo+0x95/0x1d0 [ 1062.223836][T13828] new_inode+0x22/0x1d0 [ 1062.228027][T13828] shmem_get_inode+0x34d/0xcd0 [ 1062.232818][T13828] ? mas_destroy+0x20a0/0x20a0 [ 1062.237599][T13828] __shmem_file_setup+0x167/0x2c0 [ 1062.242632][T13828] shmem_zero_setup+0x8d/0x130 [ 1062.247410][T13828] mmap_region+0x1225/0x2090 [ 1062.252019][T13828] ? file_mmap_ok+0x170/0x170 [ 1062.256705][T13828] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 1062.262255][T13828] ? cap_mmap_addr+0x213/0x2b0 [ 1062.267033][T13828] do_mmap+0x98f/0x10a0 [ 1062.271204][T13828] ? mlock_future_ok+0xf0/0xf0 [ 1062.275973][T13828] ? down_write+0x200/0x200 [ 1062.280493][T13828] vm_mmap_pgoff+0x1c4/0x3f0 [ 1062.285096][T13828] ? account_locked_vm+0x200/0x200 [ 1062.290214][T13828] ? ksys_mmap_pgoff+0xf3/0x720 [ 1062.295064][T13828] ? __x64_sys_mmap+0x7a/0x130 [ 1062.299829][T13828] do_syscall_64+0x55/0xb0 [ 1062.304250][T13828] ? clear_bhb_loop+0x40/0x90 [ 1062.308922][T13828] ? clear_bhb_loop+0x40/0x90 [ 1062.313598][T13828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1062.319500][T13828] RIP: 0033:0x7f3a80d9e2d9 [ 1062.323913][T13828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.343517][T13828] RSP: 002b:00007f3a81d2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1062.351931][T13828] RAX: ffffffffffffffda RBX: 00007f3a81025fa0 RCX: 00007f3a80d9e2d9 [ 1062.359901][T13828] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 1062.367868][T13828] RBP: 00007f3a80e35888 R08: ffffffffffffffff R09: 0000000000000000 [ 1062.375839][T13828] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 1062.383806][T13828] R13: 00007f3a81026038 R14: 00007f3a81025fa0 R15: 00007ffc8dc325c8 [ 1062.391790][T13828] [ 1063.050203][T13841] loop4: detected capacity change from 0 to 8192 [ 1063.154416][T13841] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1063.167553][T13841] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1063.177398][T13841] REISERFS (device loop4): using ordered data mode [ 1063.184080][T13841] reiserfs: using flush barriers [ 1063.197140][T13841] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1064.940043][T13347] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1065.156519][T13849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1065.534411][T13347] usb 2-1: Using ep0 maxpacket: 16 [ 1065.551760][T13347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1065.571705][T13347] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1065.593011][T13347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.601598][T13347] usb 2-1: Product: syz [ 1065.606727][T13347] usb 2-1: Manufacturer: syz [ 1065.611884][T13347] usb 2-1: SerialNumber: syz [ 1065.630859][T13347] usb 2-1: config 0 descriptor?? [ 1066.423015][T13347] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1066.501762][T13347] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1066.505521][T13878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2194'. [ 1067.588986][T13892] loop4: detected capacity change from 0 to 2048 [ 1067.708186][T13892] loop4: p1 < > [ 1068.316743][T13347] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1068.365980][T13488] udevd[13488]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1068.374722][T13899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2202'. [ 1068.657517][T13905] loop4: detected capacity change from 0 to 2048 [ 1068.764318][T13905] loop4: p1 < > [ 1068.973428][ T5141] loop4: p1 < > [ 1069.403080][T13347] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1069.441849][T13347] em28xx 2-1:0.0: board has no eeprom [ 1069.491443][T13488] udevd[13488]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1069.550018][T13347] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1069.726036][T13922] loop4: detected capacity change from 0 to 2048 [ 1069.808479][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2206'. [ 1069.839220][T13922] loop4: p1 < > [ 1070.324531][T13347] em28xx 2-1:0.0: dvb set to bulk mode. [ 1070.331579][T13352] em28xx 2-1:0.0: Binding DVB extension [ 1070.375588][T13347] usb 2-1: USB disconnect, device number 99 [ 1070.438776][T13347] em28xx 2-1:0.0: Disconnecting em28xx [ 1070.504653][T13352] em28xx 2-1:0.0: Registering input extension [ 1070.540859][T13347] em28xx 2-1:0.0: Closing input extension [ 1070.722863][T13347] em28xx 2-1:0.0: Freeing device [ 1071.202072][T13933] loop4: detected capacity change from 0 to 8192 [ 1071.411435][T13934] loop1: detected capacity change from 0 to 2048 [ 1071.510727][T13933] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1071.523768][T13933] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1071.533034][T13933] REISERFS (device loop4): using ordered data mode [ 1071.539553][T13933] reiserfs: using flush barriers [ 1071.546915][T13933] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1072.844513][T13941] udevd[13941]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1072.872487][T13941] udevd[13941]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1072.917550][T13946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1073.752388][T13953] loop1: detected capacity change from 0 to 2048 [ 1074.267313][T13953] loop1: p1 < > [ 1075.188200][T13967] loop5: detected capacity change from 0 to 7 [ 1075.204440][T13967] Dev loop5: unable to read RDB block 7 [ 1075.217687][T13969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2217'. [ 1075.240773][T13967] loop5: AHDI p1 p2 p3 [ 1075.245047][T13967] loop5: partition table partially beyond EOD, truncated [ 1075.273588][T13941] udevd[13941]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1075.296161][T13967] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1075.324866][T13967] loop5: p3 start 335544320 is beyond EOD, truncated [ 1075.715646][T13980] loop1: detected capacity change from 0 to 1024 [ 1076.524323][T13980] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1076.562444][T13980] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1076.599366][T13980] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1076.615289][T13980] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #3: comm syz.1.2223: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 1076.660028][T13980] EXT4-fs (loop1): no journal found [ 1076.665286][T13980] EXT4-fs (loop1): can't get journal size [ 1076.691290][T13980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1076.746029][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.871899][T13988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2224'. [ 1077.104004][T14000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 1077.545521][T14011] loop4: detected capacity change from 0 to 2048 [ 1077.645533][T14011] loop4: p1 < > [ 1079.248874][T14026] loop5: detected capacity change from 0 to 7 [ 1079.277226][T14026] Dev loop5: unable to read RDB block 7 [ 1079.290195][T14026] loop5: unable to read partition table [ 1079.308363][T14026] loop5: partition table beyond EOD, truncated [ 1079.317895][T14026] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1079.507460][T14033] loop1: detected capacity change from 0 to 2048 [ 1079.590017][T14033] loop1: p1 < > [ 1080.286419][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2241'. [ 1080.402018][T14043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2239'. [ 1081.043311][T13970] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1081.339055][T14052] loop5: detected capacity change from 0 to 7 [ 1081.361416][T14052] Dev loop5: unable to read RDB block 7 [ 1081.387345][T14052] loop5: AHDI p1 p2 p3 [ 1081.391808][T14053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2242'. [ 1081.419077][T14052] loop5: partition table partially beyond EOD, truncated [ 1081.431445][T14052] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1081.438448][T14052] loop5: p3 start 335544320 is beyond EOD, truncated [ 1082.561230][T14070] loop5: detected capacity change from 0 to 7 [ 1082.583202][T14070] Dev loop5: unable to read RDB block 7 [ 1082.588828][T14070] loop5: unable to read partition table [ 1082.626075][T14070] loop5: partition table beyond EOD, truncated [ 1082.640012][T14070] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1082.771079][T14078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2247'. [ 1082.927176][T14080] loop1: detected capacity change from 0 to 1024 [ 1082.942627][T14080] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1083.008671][T14080] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1083.056139][T14080] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1083.093153][T14080] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #3: comm syz.1.2252: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 1083.152848][T14080] EXT4-fs (loop1): no journal found [ 1083.168964][T14080] EXT4-fs (loop1): can't get journal size [ 1083.288385][T14080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.340041][T14007] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1083.476416][T14080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.726811][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2253'. [ 1084.054208][T14093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2255'. [ 1084.180905][T14095] syz.1.2256 (14095): drop_caches: 2 [ 1084.199477][T14095] syz.1.2256 (14095): drop_caches: 2 [ 1084.209145][T14092] syz.1.2256 (14092): drop_caches: 2 [ 1085.062647][T14103] loop4: detected capacity change from 0 to 8192 [ 1085.095514][T14103] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1085.108871][T14103] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1085.118752][T14103] REISERFS (device loop4): using ordered data mode [ 1085.125400][T14103] reiserfs: using flush barriers [ 1085.144245][T14103] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1087.582282][T14122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2264'. [ 1087.693427][T14128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2266'. [ 1090.640767][T12683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1090.672107][T14161] loop1: detected capacity change from 0 to 2048 [ 1090.722279][T12683] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1090.730376][T12683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1090.739445][T12683] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1090.750651][T12683] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1090.760938][T12683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1090.874282][T14161] loop1: p1 < > [ 1091.744508][T14165] blk_print_req_error: 2 callbacks suppressed [ 1091.744523][T14165] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1091.924026][T14171] udevd[14171]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1092.046419][T14176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2277'. [ 1092.086490][T14177] syzkaller0: entered promiscuous mode [ 1092.096093][T14177] syzkaller0: entered allmulticast mode [ 1092.287569][T14155] chnl_net:caif_netlink_parms(): no params data found [ 1092.964564][T10343] Bluetooth: hci1: command tx timeout [ 1093.218735][T14196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2279'. [ 1093.948067][T14155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.974644][T14155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.000746][T14155] bridge_slave_0: entered allmulticast mode [ 1094.014525][T14155] bridge_slave_0: entered promiscuous mode [ 1094.037306][T14155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.044769][T14155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.052032][T14155] bridge_slave_1: entered allmulticast mode [ 1094.059399][T14155] bridge_slave_1: entered promiscuous mode [ 1094.100845][T14155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.110644][T14201] syzkaller0: entered promiscuous mode [ 1094.116165][T14201] syzkaller0: entered allmulticast mode [ 1094.160379][T14206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2280'. [ 1094.169380][T14206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2280'. [ 1094.224471][T14155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.374437][T14155] team0: Port device team_slave_0 added [ 1094.388330][T14155] team0: Port device team_slave_1 added [ 1094.457582][T14155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.464645][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.493225][T14155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.520304][T14155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.527288][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.553808][T14155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.607496][T14220] syzkaller0: entered promiscuous mode [ 1094.620031][T14220] syzkaller0: entered allmulticast mode [ 1094.638569][T14155] hsr_slave_0: entered promiscuous mode [ 1094.644970][T14155] hsr_slave_1: entered promiscuous mode [ 1094.651723][T14155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.659289][T14155] Cannot create hsr debugfs directory [ 1094.678471][T14220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1094.687836][T14220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1094.981177][T14227] loop1: detected capacity change from 0 to 2048 [ 1095.052193][T10343] Bluetooth: hci1: command tx timeout [ 1095.125110][T14227] loop1: p1 < > [ 1095.806717][T14171] udevd[14171]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1096.976586][T14249] loop1: detected capacity change from 0 to 512 [ 1097.019261][T14249] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2292: iget: bad i_size value: 38620345925642 [ 1097.046540][T14249] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2292: couldn't read orphan inode 15 (err -117) [ 1097.099843][ T5060] hsr_slave_0: left promiscuous mode [ 1097.102252][T14249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.106592][T10343] Bluetooth: hci1: command tx timeout [ 1097.135624][ T5060] hsr_slave_1: left promiscuous mode [ 1097.146414][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.160927][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.174250][ T5060] veth0_to_bond: left allmulticast mode [ 1097.179852][ T5060] veth0_to_bond: left promiscuous mode [ 1097.189535][ T5060] bridge0: port 3(veth0_to_bond) entered disabled state [ 1097.221742][ T5060] bridge_slave_1: left allmulticast mode [ 1097.237785][ T5060] bridge_slave_1: left promiscuous mode [ 1097.252044][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.295187][T14211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1097.316269][ T5060] bridge_slave_0: left allmulticast mode [ 1097.340047][ T5060] bridge_slave_0: left promiscuous mode [ 1097.370145][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.426970][T14185] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1098.268356][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 1098.315124][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 1098.331721][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1098.331721][ T12] [ 1098.342147][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 1098.348173][ T12] EXT4-fs (loop1): Free/Dirty block details [ 1098.360170][ T12] EXT4-fs (loop1): free_blocks=0 [ 1098.365241][ T12] EXT4-fs (loop1): dirty_blocks=19 [ 1098.370563][ T12] EXT4-fs (loop1): Block reservation details [ 1098.376565][ T12] EXT4-fs (loop1): i_reserved_data_blocks=19 [ 1098.396875][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.531969][ T5060] team0 (unregistering): Port device team_slave_1 removed [ 1098.574466][ T5060] team0 (unregistering): Port device team_slave_0 removed [ 1098.618247][ T5060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.672002][ T5060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.982949][ T5060] bond0 (unregistering): Released all slaves [ 1099.037311][T14155] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1099.078015][T14155] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1099.099822][T14155] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1099.140260][T14155] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1099.180517][T10343] Bluetooth: hci1: command tx timeout [ 1100.113237][T14289] loop5: detected capacity change from 0 to 7 [ 1100.147189][T14289] Dev loop5: unable to read RDB block 7 [ 1100.150891][T14155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.165578][T14289] loop5: unable to read partition table [ 1100.190817][T14289] loop5: partition table beyond EOD, truncated [ 1100.211126][T14289] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1100.251897][T14155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.310554][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.317769][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.346406][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.354410][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.690658][T14155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1100.701595][T14155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1100.857070][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2303'. [ 1101.812207][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2302'. [ 1102.049707][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 1102.152262][T14155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.728727][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.736344][T14327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.893366][T14338] loop1: detected capacity change from 0 to 128 [ 1102.922763][T14338] EXT4-fs: inline encryption not supported [ 1102.929101][T14338] ext2: Unknown parameter 'func' [ 1103.986568][T14327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.032140][T14327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.376366][T14327] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.385697][T14327] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.395959][T14327] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.405217][T14327] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.670564][T14155] veth0_vlan: entered promiscuous mode [ 1104.706489][T14155] veth1_vlan: entered promiscuous mode [ 1104.725531][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'. [ 1104.902563][T14155] veth0_macvtap: entered promiscuous mode [ 1104.931823][T14155] veth1_macvtap: entered promiscuous mode [ 1105.004317][T14155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1105.044130][T14155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1105.113751][T14155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.146626][T14155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.157567][T14365] loop4: detected capacity change from 0 to 1024 [ 1105.168873][T14155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.200362][T14155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.209259][T14365] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1105.239217][T14365] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1105.298918][T14365] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1105.355278][T14365] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #3: comm syz.4.2314: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 1105.382445][T14365] EXT4-fs (loop4): no journal found [ 1105.387704][T14365] EXT4-fs (loop4): can't get journal size [ 1105.414281][T14365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1105.612245][T14365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.836030][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2318'. [ 1108.030195][T14359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1108.113984][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.137101][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.193622][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.206352][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.328231][T14403] loop3: detected capacity change from 0 to 512 [ 1108.400260][T14403] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2268: iget: bad i_size value: 38620345925642 [ 1108.425620][T14403] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2268: couldn't read orphan inode 15 (err -117) [ 1108.443480][T14403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.805549][T10343] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1109.268261][T14410] loop5: detected capacity change from 0 to 7 [ 1109.277608][T14410] Dev loop5: unable to read RDB block 7 [ 1109.277850][ T5060] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:10: bg 0: block 5: invalid block bitmap [ 1109.283396][T14410] loop5: unable to read partition table [ 1109.301529][ T5060] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 1109.308575][T14410] loop5: partition table beyond EOD, truncated [ 1109.330711][ T5060] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1109.330711][ T5060] [ 1109.331590][T14410] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1109.341710][ T5060] EXT4-fs (loop3): Total free blocks count 0 [ 1109.356616][ T5060] EXT4-fs (loop3): Free/Dirty block details [ 1109.363003][ T5060] EXT4-fs (loop3): free_blocks=0 [ 1109.368163][ T5060] EXT4-fs (loop3): dirty_blocks=19 [ 1109.373614][ T5060] EXT4-fs (loop3): Block reservation details [ 1109.380237][ T5060] EXT4-fs (loop3): i_reserved_data_blocks=19 [ 1109.396041][T14155] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.534756][T14414] syzkaller0: entered promiscuous mode [ 1109.540455][T14414] syzkaller0: entered allmulticast mode [ 1111.649251][T12683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1111.676328][T12683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1111.694078][T12683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1111.703324][T12683] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1111.715872][T12683] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1111.723459][T12683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1112.812134][T14446] loop3: detected capacity change from 0 to 1024 [ 1112.823877][T14446] EXT4-fs: Ignoring removed bh option [ 1112.837886][T14446] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1112.867539][T14446] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1112.880871][T14446] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1112.915883][T14446] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #5: comm syz.3.2330: unexpected bad inode w/o EXT4_IGET_BAD [ 1112.965793][T14446] EXT4-fs (loop3): no journal found [ 1112.975572][T14446] EXT4-fs (loop3): can't get journal size [ 1112.988577][T14446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1113.242316][T14452] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #16: comm syz.3.2330: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 1113.318111][T14454] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1113.968009][T10343] Bluetooth: hci2: command tx timeout [ 1114.098294][T14443] chnl_net:caif_netlink_parms(): no params data found [ 1114.118926][T14155] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.520761][T10343] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1115.136134][T14443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.184514][T14443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.196555][T14443] bridge_slave_0: entered allmulticast mode [ 1115.206317][T14443] bridge_slave_0: entered promiscuous mode [ 1115.258808][T14443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.280868][T14443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.289133][T14443] bridge_slave_1: entered allmulticast mode [ 1115.312905][T14443] bridge_slave_1: entered promiscuous mode [ 1115.615303][T14443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.674047][T14443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.784034][T14443] team0: Port device team_slave_0 added [ 1115.802919][T14443] team0: Port device team_slave_1 added [ 1115.939466][T14481] FAULT_INJECTION: forcing a failure. [ 1115.939466][T14481] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.984135][T10343] Bluetooth: hci2: command tx timeout [ 1115.990569][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.997295][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.026960][T14481] CPU: 0 PID: 14481 Comm: syz.4.2337 Not tainted syzkaller #0 [ 1116.034480][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1116.044574][T14481] Call Trace: [ 1116.047884][T14481] [ 1116.050841][T14481] dump_stack_lvl+0x18c/0x250 [ 1116.055568][T14481] ? show_regs_print_info+0x20/0x20 [ 1116.060885][T14481] ? load_image+0x420/0x420 [ 1116.065430][T14481] ? __lock_acquire+0x7eb0/0x7eb0 [ 1116.070497][T14481] should_fail_ex+0x394/0x4c0 [ 1116.075230][T14481] should_failslab+0x9/0x20 [ 1116.079773][T14481] slab_pre_alloc_hook+0x59/0x300 [ 1116.084836][T14481] kmem_cache_alloc+0x5a/0x2c0 [ 1116.089638][T14481] ? security_inode_alloc+0x34/0x110 [ 1116.094964][T14481] security_inode_alloc+0x34/0x110 [ 1116.100119][T14481] inode_init_always+0x914/0xc90 [ 1116.105091][T14481] new_inode_pseudo+0x95/0x1d0 [ 1116.109886][T14481] new_inode+0x22/0x1d0 [ 1116.114073][T14481] shmem_get_inode+0x34d/0xcd0 [ 1116.118875][T14481] ? mas_destroy+0x20a0/0x20a0 [ 1116.123681][T14481] __shmem_file_setup+0x167/0x2c0 [ 1116.128743][T14481] shmem_zero_setup+0x8d/0x130 [ 1116.133549][T14481] mmap_region+0x1225/0x2090 [ 1116.138195][T14481] ? file_mmap_ok+0x170/0x170 [ 1116.142913][T14481] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 1116.148488][T14481] ? cap_mmap_addr+0x213/0x2b0 [ 1116.153308][T14481] do_mmap+0x98f/0x10a0 [ 1116.157514][T14481] ? mlock_future_ok+0xf0/0xf0 [ 1116.162325][T14481] ? down_write+0x200/0x200 [ 1116.166871][T14481] vm_mmap_pgoff+0x1c4/0x3f0 [ 1116.171506][T14481] ? account_locked_vm+0x200/0x200 [ 1116.176668][T14481] ? ksys_mmap_pgoff+0xf3/0x720 [ 1116.181559][T14481] ? __x64_sys_mmap+0x7a/0x130 [ 1116.186359][T14481] do_syscall_64+0x55/0xb0 [ 1116.190802][T14481] ? clear_bhb_loop+0x40/0x90 [ 1116.195506][T14481] ? clear_bhb_loop+0x40/0x90 [ 1116.200219][T14481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.206147][T14481] RIP: 0033:0x7f97f899e2d9 [ 1116.210589][T14481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.230224][T14481] RSP: 002b:00007f97f97b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1116.238672][T14481] RAX: ffffffffffffffda RBX: 00007f97f8c26090 RCX: 00007f97f899e2d9 [ 1116.246673][T14481] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 1116.254678][T14481] RBP: 00007f97f8a35888 R08: ffffffffffffffff R09: 0000000000000000 [ 1116.262681][T14481] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 1116.270690][T14481] R13: 00007f97f8c26128 R14: 00007f97f8c26090 R15: 00007ffd11ebe9c8 [ 1116.278707][T14481] [ 1116.344580][T14443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.377836][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.476332][T14443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.508731][T14443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.525757][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.590023][T14443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.702551][T14504] loop4: detected capacity change from 0 to 128 [ 1116.714593][T14504] EXT4-fs: inline encryption not supported [ 1116.751880][T14504] ext2: Unknown parameter 'func' [ 1117.021374][T14443] hsr_slave_0: entered promiscuous mode [ 1117.041558][T14443] hsr_slave_1: entered promiscuous mode [ 1117.053335][T14443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1117.601955][T14443] Cannot create hsr debugfs directory [ 1118.060111][T10343] Bluetooth: hci2: command tx timeout [ 1118.280162][T14524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 1119.267849][T14526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2344'. [ 1120.229985][T10343] Bluetooth: hci2: command tx timeout [ 1120.437766][T14545] loop4: detected capacity change from 0 to 1024 [ 1120.450404][T14545] EXT4-fs: Ignoring removed bh option [ 1120.479451][T14545] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1120.491077][T14545] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1120.548441][T14545] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1120.568302][T14545] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.2346: unexpected bad inode w/o EXT4_IGET_BAD [ 1120.592990][T14545] EXT4-fs (loop4): no journal found [ 1120.622336][T14545] EXT4-fs (loop4): can't get journal size [ 1120.692104][T14545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1120.934345][T14556] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #16: comm syz.4.2346: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 1121.008226][T14558] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1121.778493][T10335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.854119][ T5060] hsr_slave_0: left promiscuous mode [ 1121.895358][ T5060] hsr_slave_1: left promiscuous mode [ 1121.920355][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.936469][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.947841][ T5060] bridge_slave_1: left allmulticast mode [ 1121.954589][ T5060] bridge_slave_1: left promiscuous mode [ 1121.961923][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.987330][ T5060] bridge_slave_0: left allmulticast mode [ 1122.020838][ T5060] bridge_slave_0: left promiscuous mode [ 1122.041009][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.930037][ T5060] team0 (unregistering): Port device team_slave_1 removed [ 1123.021290][ T5060] team0 (unregistering): Port device team_slave_0 removed [ 1123.094322][ T5060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.216901][ T5060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.403354][T14541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1123.695602][T14581] loop3: detected capacity change from 0 to 128 [ 1123.728212][T14581] EXT4-fs: inline encryption not supported [ 1123.748035][T14581] ext2: Unknown parameter 'func' [ 1124.679531][ T5060] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1124.698997][ T5060] bond0 (unregistering): Released all slaves [ 1125.142941][T13490] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1125.841781][T13490] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1126.114040][T14594] fido_id[14594]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1126.183299][T14600] loop1: detected capacity change from 0 to 1024 [ 1126.208057][T14600] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1126.255715][T14601] syzkaller0: entered promiscuous mode [ 1126.256814][T14600] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1126.293091][T14601] syzkaller0: entered allmulticast mode [ 1126.314219][T14600] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1126.336135][T14600] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #3: comm syz.1.2355: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 1126.390802][T14599] FAULT_INJECTION: forcing a failure. [ 1126.390802][T14599] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.423810][T14600] EXT4-fs (loop1): no journal found [ 1126.429075][T14600] EXT4-fs (loop1): can't get journal size [ 1126.435662][T14599] CPU: 0 PID: 14599 Comm: syz.4.2356 Not tainted syzkaller #0 [ 1126.443244][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1126.453318][T14599] Call Trace: [ 1126.456613][T14599] [ 1126.459558][T14599] dump_stack_lvl+0x18c/0x250 [ 1126.464265][T14599] ? show_regs_print_info+0x20/0x20 [ 1126.469480][T14599] ? load_image+0x420/0x420 [ 1126.474050][T14599] ? __lock_acquire+0x7eb0/0x7eb0 [ 1126.479108][T14599] should_fail_ex+0x394/0x4c0 [ 1126.483823][T14599] should_failslab+0x9/0x20 [ 1126.488355][T14599] slab_pre_alloc_hook+0x59/0x300 [ 1126.493411][T14599] kmem_cache_alloc+0x5a/0x2c0 [ 1126.498201][T14599] ? security_inode_alloc+0x34/0x110 [ 1126.503525][T14599] security_inode_alloc+0x34/0x110 [ 1126.508664][T14599] inode_init_always+0x914/0xc90 [ 1126.513638][T14599] new_inode_pseudo+0x95/0x1d0 [ 1126.518432][T14599] new_inode+0x22/0x1d0 [ 1126.522621][T14599] shmem_get_inode+0x34d/0xcd0 [ 1126.527409][T14599] ? mas_destroy+0x20a0/0x20a0 [ 1126.532209][T14599] __shmem_file_setup+0x167/0x2c0 [ 1126.537261][T14599] shmem_zero_setup+0x8d/0x130 [ 1126.542056][T14599] mmap_region+0x1225/0x2090 [ 1126.546690][T14599] ? file_mmap_ok+0x170/0x170 [ 1126.551395][T14599] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 1126.556956][T14599] ? cap_mmap_addr+0x213/0x2b0 [ 1126.561754][T14599] do_mmap+0x98f/0x10a0 [ 1126.565943][T14599] ? mlock_future_ok+0xf0/0xf0 [ 1126.570728][T14599] ? down_write+0x200/0x200 [ 1126.575266][T14599] vm_mmap_pgoff+0x1c4/0x3f0 [ 1126.579890][T14599] ? account_locked_vm+0x200/0x200 [ 1126.585028][T14599] ? ksys_mmap_pgoff+0xf3/0x720 [ 1126.589908][T14599] ? __x64_sys_mmap+0x7a/0x130 [ 1126.594779][T14599] do_syscall_64+0x55/0xb0 [ 1126.599210][T14599] ? clear_bhb_loop+0x40/0x90 [ 1126.603899][T14599] ? clear_bhb_loop+0x40/0x90 [ 1126.608592][T14599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.614515][T14599] RIP: 0033:0x7f97f899e2d9 [ 1126.618946][T14599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.638586][T14599] RSP: 002b:00007f97f97d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1126.647043][T14599] RAX: ffffffffffffffda RBX: 00007f97f8c25fa0 RCX: 00007f97f899e2d9 [ 1126.655039][T14599] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 1126.663031][T14599] RBP: 00007f97f8a35888 R08: ffffffffffffffff R09: 0000000000000000 [ 1126.671024][T14599] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 1126.679011][T14599] R13: 00007f97f8c26038 R14: 00007f97f8c25fa0 R15: 00007ffd11ebe9c8 [ 1126.687022][T14599] [ 1126.692973][T14600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1126.798862][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.012559][T14443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1127.054122][T14443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1127.084964][T14443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1127.108908][T14443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1127.135132][T14619] syz.1.2358 (14619): drop_caches: 2 [ 1127.179446][T14609] syz.1.2358 (14609): drop_caches: 2 [ 1127.206318][T14609] syz.1.2358 (14609): drop_caches: 2 [ 1127.446358][T14443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.474612][T14443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.506714][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.513942][T14168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.628675][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.635882][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.493760][T14443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1128.551767][T14443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.664309][T14653] loop4: detected capacity change from 0 to 2048 [ 1129.757117][T14653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.841874][T14653] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.952719][T14653] fs-verity: sha512 using implementation "sha512-avx2" [ 1129.989281][T14443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.096193][T10335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.131055][T14443] veth0_vlan: entered promiscuous mode [ 1130.166115][T14443] veth1_vlan: entered promiscuous mode [ 1130.238874][T14443] veth0_macvtap: entered promiscuous mode [ 1130.268329][T14443] veth1_macvtap: entered promiscuous mode [ 1130.298054][T14443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.309281][T14443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.337588][T14443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.363568][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2369'. [ 1130.448492][T14443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.465892][T14443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.472191][T14684] loop5: detected capacity change from 0 to 7 [ 1130.487115][T14443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.513737][T14443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.522754][T14684] Dev loop5: unable to read RDB block 7 [ 1130.522797][T14684] loop5: unable to read partition table [ 1130.523018][T14684] loop5: partition table beyond EOD, [ 1130.535524][T14443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.558950][T14443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.568149][T14443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.574774][T14684] truncated [ 1130.599636][T14687] loop3: detected capacity change from 0 to 1024 [ 1130.600357][T14684] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1130.621498][T14687] hfsplus: unable to parse mount options [ 1130.855458][T14168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.889238][T14168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.944295][T14696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2374'. [ 1130.979293][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.020390][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.267852][T14699] loop4: detected capacity change from 0 to 8192 [ 1131.277567][T14699] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1131.290649][T14699] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1131.300397][T14699] REISERFS (device loop4): using ordered data mode [ 1131.307143][T14699] reiserfs: using flush barriers [ 1131.313875][T14699] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1131.445355][T14712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2380'. [ 1131.626750][T14719] loop0: detected capacity change from 0 to 512 [ 1131.672264][T14719] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1131.743775][T14719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1131.837344][T14719] EXT4-fs (loop0): 1 truncate cleaned up [ 1131.870070][T14719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.631295][T14726] loop5: detected capacity change from 0 to 7 [ 1132.663722][T14726] Dev loop5: unable to read RDB block 7 [ 1132.712556][T14726] loop5: unable to read partition table [ 1132.718468][T14726] loop5: partition table beyond EOD, truncated [ 1132.727143][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.760146][T14726] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1132.831262][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 1133.709217][T14744] loop4: detected capacity change from 0 to 8192 [ 1133.743060][T14744] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1133.756606][T14744] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1133.766080][T14744] REISERFS (device loop4): using ordered data mode [ 1133.772826][T14744] reiserfs: using flush barriers [ 1133.785323][T14744] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1134.221634][T14757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2391'. [ 1134.543466][T14769] loop5: detected capacity change from 0 to 7 [ 1134.580266][T14769] Dev loop5: unable to read RDB block 7 [ 1134.596266][T14769] loop5: unable to read partition table [ 1134.620273][T14769] loop5: partition table beyond EOD, truncated [ 1134.650105][T14769] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1135.542977][T14775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2396'. [ 1136.447659][T14791] loop3: detected capacity change from 0 to 8192 [ 1136.643691][T14791] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1136.656747][T14791] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1136.666075][T14791] REISERFS (device loop3): using ordered data mode [ 1136.672632][T14791] reiserfs: using flush barriers [ 1136.681171][T14791] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1137.024700][T14804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1137.036979][T14802] loop5: detected capacity change from 0 to 7 [ 1137.048265][T14802] Dev loop5: unable to read RDB block 7 [ 1137.061203][T14802] loop5: unable to read partition table [ 1137.077928][T14802] loop5: partition table beyond EOD, truncated [ 1137.090260][T14802] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1137.222015][T14811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2407'. [ 1138.869700][T14831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1139.001237][T14833] loop1: detected capacity change from 0 to 8192 [ 1139.135576][T14833] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1139.149124][T14833] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1139.159733][T14833] REISERFS (device loop1): using ordered data mode [ 1139.166441][T14833] reiserfs: using flush barriers [ 1139.185460][T14833] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1139.263844][T14837] loop5: detected capacity change from 0 to 7 [ 1139.274335][T14837] Dev loop5: unable to read RDB block 7 [ 1139.290204][T14837] loop5: unable to read partition table [ 1139.315853][T14837] loop5: partition table beyond EOD, truncated [ 1139.335910][T14837] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1139.428933][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2419'. [ 1140.257875][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2425'. [ 1140.601749][T12683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1140.615878][T12683] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1140.624185][T12683] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1140.670218][T12683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1140.679290][T14869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2430'. [ 1140.688682][T12683] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1140.697290][T12683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1140.811888][T14870] loop3: detected capacity change from 0 to 8192 [ 1140.846270][T14870] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1140.859447][T14870] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1140.868973][T14870] REISERFS (device loop3): using ordered data mode [ 1140.875565][T14870] reiserfs: using flush barriers [ 1140.882837][T14870] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1141.528782][T14893] loop5: detected capacity change from 0 to 7 [ 1141.558082][T14893] Dev loop5: unable to read RDB block 7 [ 1141.583536][T14893] loop5: unable to read partition table [ 1141.594055][T14893] loop5: partition table beyond EOD, truncated [ 1141.624359][T14893] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1141.633843][T14866] chnl_net:caif_netlink_parms(): no params data found [ 1141.786115][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2437'. [ 1142.059139][T14904] digital: digital_start_poll: Unknown protocol [ 1142.384596][T14866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.422490][T14866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.429744][T14866] bridge_slave_0: entered allmulticast mode [ 1142.501791][T14866] bridge_slave_0: entered promiscuous mode [ 1142.533124][T14929] loop5: detected capacity change from 0 to 7 [ 1142.553670][T14929] Dev loop5: unable to read RDB block 7 [ 1142.559528][T14929] loop5: unable to read partition table [ 1142.611493][T14929] loop5: partition table beyond EOD, truncated [ 1142.617762][T14929] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1142.638212][T14927] loop4: detected capacity change from 0 to 8192 [ 1142.653250][T14927] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1142.666923][T14927] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1142.676295][T14927] REISERFS (device loop4): using ordered data mode [ 1142.682935][T14927] reiserfs: using flush barriers [ 1142.690151][T14866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.697297][T14866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.708391][T14927] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1142.768602][T14866] bridge_slave_1: entered allmulticast mode [ 1142.791122][T10343] Bluetooth: hci0: command tx timeout [ 1142.815588][T14866] bridge_slave_1: entered promiscuous mode [ 1143.042568][T14866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.117218][T14866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.364055][T14866] team0: Port device team_slave_0 added [ 1143.389651][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2450'. [ 1143.430468][T14866] team0: Port device team_slave_1 added [ 1143.502359][T14866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.516371][T14866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.549405][T14866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.580750][T14866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.587762][T14866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.615236][T14866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.819502][T14866] hsr_slave_0: entered promiscuous mode [ 1143.836259][T14866] hsr_slave_1: entered promiscuous mode [ 1143.857816][T14866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.876311][T14866] Cannot create hsr debugfs directory [ 1143.903756][T14965] syz.4.2455 (14965): drop_caches: 2 [ 1143.916875][T14965] syz.4.2455 (14965): drop_caches: 2 [ 1143.939243][T14971] syz.4.2455 (14971): drop_caches: 2 [ 1144.160000][ T2177] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1144.423131][ T59] hsr_slave_0: left promiscuous mode [ 1144.448893][ T59] hsr_slave_1: left promiscuous mode [ 1144.880777][T14984] loop0: detected capacity change from 0 to 8192 [ 1144.952283][T10343] Bluetooth: hci0: command tx timeout [ 1144.979978][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.001962][T14984] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1145.015264][T14984] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1145.025068][T14984] REISERFS (device loop0): using ordered data mode [ 1145.031678][T14984] reiserfs: using flush barriers [ 1145.044392][T14984] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1145.091709][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.102811][ T2177] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.114480][ T2177] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1145.121694][ T59] bridge_slave_1: left allmulticast mode [ 1145.131582][ T59] bridge_slave_1: left promiscuous mode [ 1145.138078][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.154334][ T2177] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1145.172303][ T59] bridge_slave_0: left allmulticast mode [ 1145.177989][ T59] bridge_slave_0: left promiscuous mode [ 1145.215717][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.291551][ T2177] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1145.301693][ T2177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.449073][T14989] fuse: Unknown parameter 'group_i00000000000000000000' [ 1145.570795][ T2177] cxacru_cm: 5 callbacks suppressed [ 1145.570891][ T2177] cxacru 4-1:1.0: invalid response length to cm 0x90: 63 [ 1145.607663][T14992] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1145.638903][T14992] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1145.887417][ T2177] usb 4-1: USB disconnect, device number 60 [ 1146.407490][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1146.967080][T15004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1147.020033][T10343] Bluetooth: hci0: command tx timeout [ 1147.084903][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1147.309193][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.672860][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.019042][T15012] loop3: detected capacity change from 0 to 8192 [ 1148.050608][T15012] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1148.066058][T15012] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1148.077746][T15012] REISERFS (device loop3): using ordered data mode [ 1148.085916][T15012] reiserfs: using flush barriers [ 1148.092607][T15012] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1148.482723][ T59] bond0 (unregistering): Released all slaves [ 1148.622871][T15016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2464'. [ 1148.743411][T15023] syz.3.2466 (15023): drop_caches: 2 [ 1148.760363][T15023] syz.3.2466 (15023): drop_caches: 2 [ 1148.780619][T15023] syz.3.2466 (15023): drop_caches: 2 [ 1149.101617][T10343] Bluetooth: hci0: command tx timeout [ 1149.822819][T15032] loop4: detected capacity change from 0 to 8192 [ 1149.845673][T15032] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1149.858774][T15032] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1149.868131][T15032] REISERFS (device loop4): using ordered data mode [ 1149.874710][T15032] reiserfs: using flush barriers [ 1149.883970][T15032] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1150.610748][T15061] fuse: Unknown parameter 'group_i00000000000000000000' [ 1150.863864][T14866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1150.905665][T14866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1150.932696][T14866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1150.945966][T14866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1151.479089][T15071] loop3: detected capacity change from 0 to 8192 [ 1151.488073][T15071] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1151.501213][T15071] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1151.510540][T15071] REISERFS (device loop3): using ordered data mode [ 1151.517065][T15071] reiserfs: using flush barriers [ 1151.525206][T15071] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1151.726230][T14866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.761870][T14866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.785827][T15076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2475'. [ 1151.938010][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.945234][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.979157][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.986404][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.765330][T15095] loop3: detected capacity change from 0 to 8192 [ 1152.907059][T15095] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1152.920341][T15095] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1152.934190][T15095] REISERFS (device loop3): using ordered data mode [ 1152.941606][T15095] reiserfs: using flush barriers [ 1152.961768][T15095] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1153.245988][T14866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.406789][T14866] veth0_vlan: entered promiscuous mode [ 1153.466937][T14866] veth1_vlan: entered promiscuous mode [ 1153.693975][T14866] veth0_macvtap: entered promiscuous mode [ 1153.776428][T14866] veth1_macvtap: entered promiscuous mode [ 1154.378000][T14866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.392792][T15126] loop4: detected capacity change from 0 to 128 [ 1154.488885][T15126] EXT4-fs: inline encryption not supported [ 1154.504003][T14866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.520108][T15126] ext2: Unknown parameter 'func' [ 1154.534542][T14866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.545566][T14866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.557181][T14866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.609196][T14866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.636037][T14171] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1154.670416][T14866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.751986][T15129] loop0: detected capacity change from 0 to 8192 [ 1154.787187][T14866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.832882][T15129] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1154.846349][T15129] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1154.855743][T15129] REISERFS (device loop0): using ordered data mode [ 1154.862588][T15129] reiserfs: using flush barriers [ 1154.872153][T15129] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1154.872861][T14866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.896866][T14866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.964565][T14866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.082201][T14866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.460699][T14866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.524350][T14866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.542663][T15131] digital: digital_start_poll: Unknown protocol [ 1155.864122][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.912516][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.970704][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.979115][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.405021][T15157] loop3: detected capacity change from 0 to 8192 [ 1156.488659][T15157] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1156.501888][T15157] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1156.511626][T15157] REISERFS (device loop3): using ordered data mode [ 1156.518215][T15157] reiserfs: using flush barriers [ 1156.558419][T15157] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1156.629758][T15159] fuse: Unknown parameter 'group_i00000000000000000000' [ 1159.485869][T15199] loop1: detected capacity change from 0 to 8192 [ 1159.505478][T15199] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1159.518551][T15199] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1159.527881][T15199] REISERFS (device loop1): using ordered data mode [ 1159.534466][T15199] reiserfs: using flush barriers [ 1159.541277][T15199] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1160.607695][T15224] loop0: detected capacity change from 0 to 8192 [ 1160.701366][T15224] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1160.714566][T15224] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1160.724330][T15224] REISERFS (device loop0): using ordered data mode [ 1160.730951][T15224] reiserfs: using flush barriers [ 1160.744448][T15224] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1162.254870][T15232] fuse: Unknown parameter 'group_id00000000000000000000' [ 1162.658060][T15241] loop4: detected capacity change from 0 to 128 [ 1162.698844][T15241] EXT4-fs: inline encryption not supported [ 1162.749125][T15241] ext2: Unknown parameter 'func' [ 1164.186359][T15261] loop3: detected capacity change from 0 to 8192 [ 1164.456100][T15261] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1164.469567][T15261] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1164.478951][T15261] REISERFS (device loop3): using ordered data mode [ 1164.485548][T15261] reiserfs: using flush barriers [ 1164.593356][T15261] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1165.314488][T15276] loop3: detected capacity change from 0 to 8192 [ 1165.419254][T15276] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1165.432544][T15276] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1165.441985][T15276] REISERFS (device loop3): using ordered data mode [ 1165.448504][T15276] reiserfs: using flush barriers [ 1165.464348][T15276] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1167.824423][T15285] syzkaller0: entered promiscuous mode [ 1167.872053][T15285] syzkaller0: entered allmulticast mode [ 1168.697015][T15302] loop0: detected capacity change from 0 to 8192 [ 1168.716388][T15302] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1168.730204][T15302] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1168.739748][T15302] REISERFS (device loop0): using ordered data mode [ 1168.746318][T15302] reiserfs: using flush barriers [ 1168.758740][T15302] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1169.122723][T15309] fuse: Unknown parameter 'group_id00000000000000000000' [ 1169.574786][T15319] loop3: detected capacity change from 0 to 8192 [ 1169.635360][T15319] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1169.648469][T15319] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1169.657817][T15319] REISERFS (device loop3): using ordered data mode [ 1169.664385][T15319] reiserfs: using flush barriers [ 1169.672326][T15319] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1170.265695][T15326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2524'. [ 1170.340198][T15325] loop4: detected capacity change from 0 to 1024 [ 1170.759212][T15325] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1170.833386][T15325] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1170.867851][T15325] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1170.906294][T15325] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #3: comm syz.4.2516: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 1170.927018][T15325] EXT4-fs (loop4): no journal found [ 1170.934410][T15325] EXT4-fs (loop4): can't get journal size [ 1170.945907][T15325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1171.011509][T10335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.028288][T15341] syzkaller0: entered promiscuous mode [ 1172.048610][T15341] syzkaller0: entered allmulticast mode [ 1172.202006][T15346] loop1: detected capacity change from 0 to 8192 [ 1172.673603][T15346] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1172.686661][T15346] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1172.695976][T15346] REISERFS (device loop1): using ordered data mode [ 1172.702576][T15346] reiserfs: using flush barriers [ 1172.708521][T15346] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1173.476013][T15361] loop4: detected capacity change from 0 to 8192 [ 1173.574211][T15361] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1173.588306][T15361] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1173.597580][T15361] REISERFS (device loop4): using ordered data mode [ 1173.604172][T15361] reiserfs: using flush barriers [ 1173.611577][T15361] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1173.952553][T14171] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1174.685312][T15372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2535'. [ 1175.193526][T13352] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1175.365870][T13352] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1175.382287][T15380] fuse: Unknown parameter 'group_id00000000000000000000' [ 1176.559051][T15388] loop0: detected capacity change from 0 to 8192 [ 1176.789399][T15388] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1176.802674][T15388] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1176.812068][T15388] REISERFS (device loop0): using ordered data mode [ 1176.818603][T15388] reiserfs: using flush barriers [ 1176.836506][T15388] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1176.979372][T15382] fido_id[15382]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1177.022053][T12683] Bluetooth: hci1: command 0x0406 tx timeout [ 1177.427135][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.433644][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.521009][T15401] syzkaller0: entered promiscuous mode [ 1177.669664][T15401] syzkaller0: entered allmulticast mode [ 1178.642893][T15418] loop5: detected capacity change from 0 to 7 [ 1178.652057][T15418] Dev loop5: unable to read RDB block 7 [ 1178.659229][T15418] loop5: unable to read partition table [ 1178.665685][T15418] loop5: partition table beyond EOD, truncated [ 1178.677869][T15418] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1179.084021][T15419] loop4: detected capacity change from 0 to 8192 [ 1179.420914][T15419] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1179.434076][T15419] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1179.443316][T15419] REISERFS (device loop4): using ordered data mode [ 1179.449833][T15419] reiserfs: using flush barriers [ 1179.466176][T15419] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1180.672290][T15430] FAULT_INJECTION: forcing a failure. [ 1180.672290][T15430] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.726129][T15430] CPU: 0 PID: 15430 Comm: syz.1.2552 Not tainted syzkaller #0 [ 1180.733664][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1180.743745][T15430] Call Trace: [ 1180.747050][T15430] [ 1180.750002][T15430] dump_stack_lvl+0x18c/0x250 [ 1180.754712][T15430] ? show_regs_print_info+0x20/0x20 [ 1180.759938][T15430] ? load_image+0x420/0x420 [ 1180.764486][T15430] ? __lock_acquire+0x7eb0/0x7eb0 [ 1180.769553][T15430] should_fail_ex+0x394/0x4c0 [ 1180.774272][T15430] should_failslab+0x9/0x20 [ 1180.778788][T15430] slab_pre_alloc_hook+0x59/0x300 [ 1180.783834][T15430] kmem_cache_alloc+0x5a/0x2c0 [ 1180.788627][T15430] ? security_inode_alloc+0x34/0x110 [ 1180.793929][T15430] security_inode_alloc+0x34/0x110 [ 1180.799051][T15430] inode_init_always+0x914/0xc90 [ 1180.803994][T15430] new_inode_pseudo+0x95/0x1d0 [ 1180.808757][T15430] new_inode+0x22/0x1d0 [ 1180.812915][T15430] shmem_get_inode+0x34d/0xcd0 [ 1180.817682][T15430] ? mas_destroy+0x20a0/0x20a0 [ 1180.822456][T15430] __shmem_file_setup+0x167/0x2c0 [ 1180.827482][T15430] shmem_zero_setup+0x8d/0x130 [ 1180.832249][T15430] mmap_region+0x1225/0x2090 [ 1180.836861][T15430] ? file_mmap_ok+0x170/0x170 [ 1180.841545][T15430] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 1180.847091][T15430] ? cap_mmap_addr+0x213/0x2b0 [ 1180.851869][T15430] do_mmap+0x98f/0x10a0 [ 1180.856038][T15430] ? mlock_future_ok+0xf0/0xf0 [ 1180.860827][T15430] ? down_write+0x200/0x200 [ 1180.865340][T15430] vm_mmap_pgoff+0x1c4/0x3f0 [ 1180.869944][T15430] ? account_locked_vm+0x200/0x200 [ 1180.875062][T15430] ? ksys_mmap_pgoff+0xf3/0x720 [ 1180.879919][T15430] ? __x64_sys_mmap+0x7a/0x130 [ 1180.884746][T15430] do_syscall_64+0x55/0xb0 [ 1180.889175][T15430] ? clear_bhb_loop+0x40/0x90 [ 1180.893862][T15430] ? clear_bhb_loop+0x40/0x90 [ 1180.898549][T15430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.904464][T15430] RIP: 0033:0x7ffb5279e2d9 [ 1180.908880][T15430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.928494][T15430] RSP: 002b:00007ffb5358b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1180.936917][T15430] RAX: ffffffffffffffda RBX: 00007ffb52a26090 RCX: 00007ffb5279e2d9 [ 1180.944889][T15430] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 1180.952858][T15430] RBP: 00007ffb52835888 R08: ffffffffffffffff R09: 0000000000000000 [ 1180.960830][T15430] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 1180.968813][T15430] R13: 00007ffb52a26128 R14: 00007ffb52a26090 R15: 00007ffe677d2408 [ 1180.976801][T15430] [ 1181.181332][T15414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.189067][T15414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.402817][T15444] fuse: Bad value for 'user_id' [ 1181.835105][T15414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.890964][T15414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.427124][T15414] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.441067][T15414] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.454373][T15414] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.465887][T15414] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.580613][T15425] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1182.600405][T15425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1182.625661][T15425] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1182.781863][T15451] syzkaller0: entered promiscuous mode [ 1182.795315][T15451] syzkaller0: entered allmulticast mode [ 1183.500588][T15456] loop0: detected capacity change from 0 to 8192 [ 1183.511887][T15456] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1183.525422][T15456] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1183.534774][T15456] REISERFS (device loop0): using ordered data mode [ 1183.541349][T15456] reiserfs: using flush barriers [ 1183.547994][T15456] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1185.006986][T15477] syzkaller0: entered promiscuous mode [ 1185.030184][T15477] syzkaller0: entered allmulticast mode [ 1186.103422][T15490] loop3: detected capacity change from 0 to 128 [ 1186.131989][T15490] EXT4-fs: inline encryption not supported [ 1186.150023][T15490] ext2: Unknown parameter 'func' [ 1186.416865][T15497] fuse: Bad value for 'user_id' [ 1186.725731][T15496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1186.998451][T15504] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1189.550587][T15535] loop5: detected capacity change from 0 to 7 [ 1189.573103][T15535] Dev loop5: unable to read RDB block 7 [ 1189.596972][T15535] loop5: unable to read partition table [ 1189.603387][T15535] loop5: partition table beyond EOD, truncated [ 1189.610479][T15535] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1190.685801][T15548] syzkaller0: entered promiscuous mode [ 1190.693872][T15548] syzkaller0: entered allmulticast mode [ 1190.862862][T15550] fuse: Bad value for 'user_id' [ 1192.273921][T15570] loop4: detected capacity change from 0 to 128 [ 1192.284568][T15570] EXT4-fs: inline encryption not supported [ 1192.306470][T15570] ext2: Unknown parameter 'func' [ 1192.572608][T15578] syzkaller0: entered promiscuous mode [ 1192.578128][T15578] syzkaller0: entered allmulticast mode [ 1193.510198][T15588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1194.007334][T13490] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1194.331513][T13490] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.347163][T13490] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1194.364917][T13490] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1194.374497][T13490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.389098][T13490] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1194.465718][T15604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2612'. [ 1194.605560][T13490] usb 2-1: USB disconnect, device number 100 [ 1194.664924][T15609] loop5: detected capacity change from 0 to 7 [ 1194.672080][T15609] Dev loop5: unable to read RDB block 7 [ 1194.678219][T15609] loop5: unable to read partition table [ 1194.684442][T15609] loop5: partition table beyond EOD, truncated [ 1194.759014][T15609] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1195.785255][T15619] fuse: Bad value for 'fd' [ 1196.215633][T15620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2617'. [ 1196.244001][T15618] loop1: detected capacity change from 0 to 8192 [ 1196.257311][T15618] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1196.270444][T15618] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1196.279678][T15618] REISERFS (device loop1): using ordered data mode [ 1196.286265][T15618] reiserfs: using flush barriers [ 1196.293220][T15618] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1197.393078][T15638] loop5: detected capacity change from 0 to 7 [ 1197.404800][T15638] Dev loop5: unable to read RDB block 7 [ 1197.410771][T15638] loop5: unable to read partition table [ 1197.416758][T15638] loop5: partition table beyond EOD, truncated [ 1197.423712][T15638] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1197.789990][T13490] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1197.993553][T13490] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.006331][T13490] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1198.019320][T13490] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1198.029494][T13490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.046221][T13490] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1198.173688][T15644] loop5: detected capacity change from 0 to 7 [ 1198.187587][T15644] Dev loop5: unable to read RDB block 7 [ 1198.193690][T15644] loop5: unable to read partition table [ 1198.199575][T15644] loop5: partition table beyond EOD, truncated [ 1198.219653][T15644] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1198.256940][T13490] usb 2-1: USB disconnect, device number 101 [ 1200.055725][T15664] loop1: detected capacity change from 0 to 8192 [ 1200.067699][T15664] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1200.080820][T15664] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1200.089738][T15670] loop0: detected capacity change from 0 to 128 [ 1200.090260][T15664] REISERFS (device loop1): using ordered data mode [ 1200.090273][T15664] reiserfs: using flush barriers [ 1200.110892][T15664] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 1200.136626][T15670] EXT4-fs: inline encryption not supported [ 1200.168616][T15670] ext2: Unknown parameter 'func' [ 1200.268320][T14165] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1200.723822][T15676] loop5: detected capacity change from 0 to 7 [ 1200.873789][T15676] Dev loop5: unable to read RDB block 7 [ 1200.948148][T15676] loop5: unable to read partition table [ 1200.983349][T15676] loop5: partition table beyond EOD, truncated [ 1201.020272][T15676] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1201.242456][T15688] fuse: Bad value for 'fd' [ 1201.775613][T15697] loop1: detected capacity change from 0 to 128 [ 1201.786265][T15697] EXT4-fs: inline encryption not supported [ 1201.793382][T15697] ext2: Unknown parameter 'func' [ 1203.128306][T15719] loop0: detected capacity change from 0 to 128 [ 1203.146312][T15719] EXT4-fs: inline encryption not supported [ 1203.157102][T15719] ext2: Unknown parameter 'func' [ 1203.329828][T15722] loop5: detected capacity change from 0 to 7 [ 1203.347981][T15722] Dev loop5: unable to read RDB block 7 [ 1203.355604][T15722] loop5: unable to read partition table [ 1203.362253][T15722] loop5: partition table beyond EOD, truncated [ 1203.368561][T15722] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1204.484444][T15742] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1204.496207][T15742] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1204.504604][T15742] CPU: 0 PID: 15742 Comm: syz.3.2658 Not tainted syzkaller #0 [ 1204.512049][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1204.522103][T15742] RIP: 0010:vsscanf+0x19a/0x2520 [ 1204.527047][T15742] Code: 48 c7 c6 10 4f 54 8f e8 24 91 03 f7 41 83 fe 25 74 4d 45 85 f6 0f 84 1e 22 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 bd 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 1204.546646][T15742] RSP: 0018:ffffc90003707640 EFLAGS: 00010246 [ 1204.552704][T15742] RAX: 0000000000000000 RBX: ffffffff8ad69621 RCX: 0000000000000001 [ 1204.560664][T15742] RDX: ffffffff8a84044c RSI: ffffffff8f544f10 RDI: 0000000000000030 [ 1204.568655][T15742] RBP: ffffc90003707770 R08: ffff888029620000 R09: 0000000000000002 [ 1204.576649][T15742] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8ad69620 [ 1204.584638][T15742] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 1204.592798][T15742] FS: 00007fbeec2d26c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1204.601743][T15742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.608340][T15742] CR2: 00007fbeeb627dac CR3: 0000000032ce8000 CR4: 00000000003506f0 [ 1204.616323][T15742] Call Trace: [ 1204.619601][T15742] [ 1204.622536][T15742] ? bprintf+0x140/0x140 [ 1204.626800][T15742] sscanf+0xe3/0x140 [ 1204.630701][T15742] ? __might_fault+0xaa/0x120 [ 1204.635381][T15742] ? skip_atoi+0xe0/0xe0 [ 1204.639627][T15742] ? __might_fault+0xaa/0x120 [ 1204.644310][T15742] ? __might_fault+0xc6/0x120 [ 1204.648983][T15742] ? __might_fault+0xaa/0x120 [ 1204.653656][T15742] ? split_huge_pages_write+0x372/0x1b60 [ 1204.659296][T15742] split_huge_pages_write+0x391/0x1b60 [ 1204.664770][T15742] ? mark_lock+0x94/0x320 [ 1204.669099][T15742] ? deferred_split_scan+0x940/0x940 [ 1204.674392][T15742] ? aa_file_perm+0x11b/0xee0 [ 1204.679086][T15742] ? debugfs_file_get+0x36c/0x460 [ 1204.684115][T15742] ? rcu_read_lock_any_held+0xb4/0x140 [ 1204.689573][T15742] ? rcu_read_lock_bh_held+0x100/0x100 [ 1204.695029][T15742] full_proxy_write+0x110/0x1c0 [ 1204.699885][T15742] ? full_proxy_read+0x1c0/0x1c0 [ 1204.704824][T15742] vfs_write+0x299/0x9a0 [ 1204.709067][T15742] ? file_end_write+0x250/0x250 [ 1204.713920][T15742] ? __fget_files+0x28/0x460 [ 1204.718513][T15742] ? __fget_files+0x3fc/0x460 [ 1204.723194][T15742] ? __fdget_pos+0x2a3/0x330 [ 1204.727784][T15742] ? ksys_write+0x74/0x260 [ 1204.732201][T15742] ksys_write+0x151/0x260 [ 1204.736530][T15742] ? __ia32_sys_read+0x90/0x90 [ 1204.741295][T15742] ? lockdep_hardirqs_on+0x98/0x150 [ 1204.746495][T15742] do_syscall_64+0x55/0xb0 [ 1204.750914][T15742] ? clear_bhb_loop+0x40/0x90 [ 1204.755582][T15742] ? clear_bhb_loop+0x40/0x90 [ 1204.760256][T15742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1204.766149][T15742] RIP: 0033:0x7fbeeb39e2d9 [ 1204.770559][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.790163][T15742] RSP: 002b:00007fbeec2d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1204.798575][T15742] RAX: ffffffffffffffda RBX: 00007fbeeb625fa0 RCX: 00007fbeeb39e2d9 [ 1204.806542][T15742] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 1204.814513][T15742] RBP: 00007fbeeb435888 R08: 0000000000000000 R09: 0000000000000000 [ 1204.822572][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.830539][T15742] R13: 00007fbeeb626038 R14: 00007fbeeb625fa0 R15: 00007ffe3da6e468 [ 1204.838550][T15742] [ 1204.841571][T15742] Modules linked in: [ 1205.050064][T15742] ---[ end trace 0000000000000000 ]--- [ 1205.060816][T15742] RIP: 0010:vsscanf+0x19a/0x2520 [ 1205.085165][T15742] Code: 48 c7 c6 10 4f 54 8f e8 24 91 03 f7 41 83 fe 25 74 4d 45 85 f6 0f 84 1e 22 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 bd 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 1205.141694][T15742] RSP: 0018:ffffc90003707640 EFLAGS: 00010246 [ 1205.159073][T15742] RAX: 0000000000000000 RBX: ffffffff8ad69621 RCX: 0000000000000001 [ 1205.176015][T15742] RDX: ffffffff8a84044c RSI: ffffffff8f544f10 RDI: 0000000000000030 [ 1205.194676][T15742] RBP: ffffc90003707770 R08: ffff888029620000 R09: 0000000000000002 [ 1205.213211][T15742] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8ad69620 [ 1205.223054][T15742] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 1205.232496][T15742] FS: 00007fbeec2d26c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1205.246458][T15742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1205.260734][T15742] CR2: 0000001b32a22ff8 CR3: 0000000032ce8000 CR4: 00000000003506f0 [ 1205.268758][T15742] Kernel panic - not syncing: Fatal exception [ 1205.275086][T15742] Kernel Offset: disabled [ 1205.279397][T15742] Rebooting in 86400 seconds..