last executing test programs: 12.184450922s ago: executing program 2 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYRES32=r0], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="32032b8943bf95e241ad216c94f90bb912df0f378772179ff881b64b7dd3255ff3ce514a4030b3215a2abcd79930216d95d3"]}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.142089823s ago: executing program 0 (id=185): r0 = semget$private(0x0, 0x6, 0x431) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14004400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000", @ANYBLOB], 0x1c}}, 0x40480d0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000500000000000000000000ff020000000000220000000000000001e80031"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000300)=[{0xfffffffffffff3ac, 0x7, 0xdf}, {0xd7, 0x101, 0x30000000000}, {0xe, 0x9}], 0x3, 0x9, 0x20, 0x0, 0x0, 0x56}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21a00, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) 11.272338286s ago: executing program 3 (id=188): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") write$binfmt_elf64(r2, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 9.972452881s ago: executing program 0 (id=190): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001180)=ANY=[], 0x0) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) mlockall(0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 9.956015351s ago: executing program 3 (id=191): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) 9.26073199s ago: executing program 2 (id=192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x2) 6.880144314s ago: executing program 1 (id=194): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 6.859128545s ago: executing program 3 (id=195): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0x0, &(0x7f00000003c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x4001, 0xffffffffffffffff}) 6.253498731s ago: executing program 1 (id=196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r0, 0x80000003) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x9, 0x0, 0x1}}}}}}}, 0x0) 6.181837113s ago: executing program 0 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioperm(0x2, 0x8000, 0x7ff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@mblk_io_submit}, {@delalloc}, {@abort}]}, 0x1, 0x509, &(0x7f0000000d00)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPIHVD4kZR7DiKnaUJOaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjOetG5qN1GT2CH+fKTRvDdv6u/3NZn36pfGL4CRdT0i9iOiGBGfRsRMdj2XHfFR50jue3ywt3x4sLeci3b7k3/k0vbkWnT9mcS17DVLEfGD70T8OPd83ObO7vpSrVbdyupzrfrmXHNn99ZafWm1ulrdqFQWFxbnP7j9fuXc+vpWvZiVvvzo9/vf+GmS1nR2pbsf56nT9cKTOInxiPheRP4i4g3aWNaf4rAT4aUk34SvR8Tb6fM/E2PpVxMAuMra7Zloz3TXAYCrLp+ugeXy5WwtYDry+XK5s4b3Rkzla41m6+bdxvbGSmetbDYK+btrtep8tlY4G4VcUl9Iy0/rlWP12xHxWkT8fGIyrZeXG7WVYf7DBwBG2LVj8/+/JzrzPwBwxZWGnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9y2GkAAAPk/T8AjB7zPwCMlO9//HFytA+zz79e+Wxne73x2a2VanO9XN9eLi83tjbLq43GavqZPfWTXq/WaGwuvBfb92a/udlszTV3du/UG9sbrTvp53rfqRbSu/YH0DMAoJ/X3nr4p1wyI384mR7RtZdDYaiZARftSmxCA7yUsWEnAAyN3b5gdJ3hPb7lAbgiemzR+4xSr18Qarfb7YtLCbhgN75g/R9GVdf6v/8FDCPG+j+MLuv/MLra7dxp9/yP094IAFxu1vhhpL3oR/+vZ+ffZD8c+NHK8TseXFBWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/gaP/fcrYX+HTk8+VyxCsRMRuF3N21WnU+Il6NiD9OFCaS+sKQcwYAzir/11y2CdiNmXenn2l689qTYjEifvLLT35xb6nV2vpDRDH3z4mj660H2fXK4LMHAE52NE+n56438o8P9paPjkHm87dvR0SpE//woBiHB3vjnZbx6BRKUYiIqX/lsnpHrmvt4iz270fE53v1PxfT6RpIZ+fT4/GT2K8MNH7+mfj5tK1zTv4uPncOucCoeZiMPx/1ev7ycT09937+S+kIdXbZ+Je81PJhOgY+jX80/o31Gf+unzbGe7/7bqc0+Xzb/YgvjkccxT7sGn+O4uf6xH/3lPH//KU33+7X1v5VxI3oHb871lyrvjnX3Nm9tVZfWq2uVjcqlcWFxfkPbr9fmUvXqOf6zwZ///Dmq/3akv5P9YlfOqH/Xz1l/3/9309/+JUXxP/6O73i5+ONF8RP5sSvnTL+0tRvS/3akvgrffp/0tf/5injP/rL7nPbhgMAw9Pc2V1fqtWqW5emUMwyuyz5KFyiQvKNcQnS6Fn41qBiFaN308/e6Tw5x5ra7ZeK1W/EOI9VN+AyePLQR8R/hp0MAAAAAAAAAAAAAADQ0yB+Y2nYfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODq+l8AAAD//xMzy2Q=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24942, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0xffffff56, 0x8) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) prctl$PR_SET_SECUREBITS(0x1c, 0x40) 5.876405192s ago: executing program 2 (id=198): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000001100)=""/247, 0xf7}, {0x0}], 0x2) 5.873139702s ago: executing program 1 (id=199): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080010000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a}, 0x28) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@loopback, @local}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x5) 4.678766034s ago: executing program 0 (id=200): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x21, 0x5556, &(0x7f0000000100)="$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") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x3, 0x88a, 0xb) keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4.635459265s ago: executing program 1 (id=201): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") write$binfmt_elf64(r2, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 4.356757333s ago: executing program 2 (id=202): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x11) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x90, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 2.756447656s ago: executing program 1 (id=203): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) 2.731900977s ago: executing program 3 (id=204): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) r0 = add_key(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f00000010c0)=""/23, 0x17) 2.526521302s ago: executing program 3 (id=205): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001180)=ANY=[], 0x0) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) mlockall(0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 1.47493639s ago: executing program 2 (id=206): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000270063d4e5cc62c1cd9c727d1f1cecb31cc05c4dd2b836678dcfc10b503466299873413115b6b943918d68e481dbc3ee31e3ea657016be9af65c2239774260"]) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x20000000, 0xa, 0xb}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 786.233509ms ago: executing program 1 (id=207): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x2) 708.520851ms ago: executing program 0 (id=208): socket$packet(0x11, 0xa, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299f000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 555.324615ms ago: executing program 0 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioperm(0x2, 0x8000, 0x7ff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@mblk_io_submit}, {@delalloc}, {@abort}]}, 0x1, 0x509, &(0x7f0000000d00)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPIHVD4kZR7DiKnaUJOaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjOetG5qN1GT2CH+fKTRvDdv6u/3NZn36pfGL4CRdT0i9iOiGBGfRsRMdj2XHfFR50jue3ywt3x4sLeci3b7k3/k0vbkWnT9mcS17DVLEfGD70T8OPd83ObO7vpSrVbdyupzrfrmXHNn99ZafWm1ulrdqFQWFxbnP7j9fuXc+vpWvZiVvvzo9/vf+GmS1nR2pbsf56nT9cKTOInxiPheRP4i4g3aWNaf4rAT4aUk34SvR8Tb6fM/E2PpVxMAuMra7Zloz3TXAYCrLp+ugeXy5WwtYDry+XK5s4b3Rkzla41m6+bdxvbGSmetbDYK+btrtep8tlY4G4VcUl9Iy0/rlWP12xHxWkT8fGIyrZeXG7WVYf7DBwBG2LVj8/+/JzrzPwBwxZWGnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9y2GkAAAPk/T8AjB7zPwCMlO9//HFytA+zz79e+Wxne73x2a2VanO9XN9eLi83tjbLq43GavqZPfWTXq/WaGwuvBfb92a/udlszTV3du/UG9sbrTvp53rfqRbSu/YH0DMAoJ/X3nr4p1wyI384mR7RtZdDYaiZARftSmxCA7yUsWEnAAyN3b5gdJ3hPb7lAbgiemzR+4xSr18Qarfb7YtLCbhgN75g/R9GVdf6v/8FDCPG+j+MLuv/MLra7dxp9/yP094IAFxu1vhhpL3oR/+vZ+ffZD8c+NHK8TseXFBWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/gaP/fcrYX+HTk8+VyxCsRMRuF3N21WnU+Il6NiD9OFCaS+sKQcwYAzir/11y2CdiNmXenn2l689qTYjEifvLLT35xb6nV2vpDRDH3z4mj660H2fXK4LMHAE52NE+n56438o8P9paPjkHm87dvR0SpE//woBiHB3vjnZbx6BRKUYiIqX/lsnpHrmvt4iz270fE53v1PxfT6RpIZ+fT4/GT2K8MNH7+mfj5tK1zTv4uPncOucCoeZiMPx/1ev7ycT09937+S+kIdXbZ+Je81PJhOgY+jX80/o31Gf+unzbGe7/7bqc0+Xzb/YgvjkccxT7sGn+O4uf6xH/3lPH//KU33+7X1v5VxI3oHb871lyrvjnX3Nm9tVZfWq2uVjcqlcWFxfkPbr9fmUvXqOf6zwZ///Dmq/3akv5P9YlfOqH/Xz1l/3/9309/+JUXxP/6O73i5+ONF8RP5sSvnTL+0tRvS/3akvgrffp/0tf/5injP/rL7nPbhgMAw9Pc2V1fqtWqW5emUMwyuyz5KFyiQvKNcQnS6Fn41qBiFaN308/e6Tw5x5ra7ZeK1W/EOI9VN+AyePLQR8R/hp0MAAAAAAAAAAAAAADQ0yB+Y2nYfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODq+l8AAAD//xMzy2Q=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24942, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0xffffff56, 0x8) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) prctl$PR_SET_SECUREBITS(0x1c, 0x40) 15.57079ms ago: executing program 2 (id=210): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080010000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a}, 0x28) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@loopback, @local}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) alarm(0x5) 0s ago: executing program 3 (id=211): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") write$binfmt_elf64(r2, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 77.946180][ T5761] cgroup: Unknown subsys name 'net' [ 78.109324][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.842264][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.379618][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.388251][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.397026][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.417294][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.432781][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.443918][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.463198][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.469021][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.479713][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.482996][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.487715][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.501953][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.509990][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.510908][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.518997][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.533746][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.541035][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.548281][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.562351][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.564142][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.570311][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.577809][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.586227][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.591460][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.107213][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 82.185819][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.270958][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 82.298031][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 82.586629][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.594340][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.601803][ T5775] bridge_slave_0: entered allmulticast mode [ 82.609196][ T5775] bridge_slave_0: entered promiscuous mode [ 82.649400][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.657259][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.664795][ T5775] bridge_slave_1: entered allmulticast mode [ 82.671602][ T5775] bridge_slave_1: entered promiscuous mode [ 82.689934][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.697888][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.705528][ T5776] bridge_slave_0: entered allmulticast mode [ 82.712743][ T5776] bridge_slave_0: entered promiscuous mode [ 82.749989][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.757261][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.764755][ T5776] bridge_slave_1: entered allmulticast mode [ 82.771721][ T5776] bridge_slave_1: entered promiscuous mode [ 82.788466][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.795776][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.803501][ T5772] bridge_slave_0: entered allmulticast mode [ 82.810399][ T5772] bridge_slave_0: entered promiscuous mode [ 82.827935][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.835699][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.842997][ T5772] bridge_slave_1: entered allmulticast mode [ 82.850140][ T5772] bridge_slave_1: entered promiscuous mode [ 82.857200][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.864901][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.872204][ T5777] bridge_slave_0: entered allmulticast mode [ 82.879730][ T5777] bridge_slave_0: entered promiscuous mode [ 82.890371][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.897822][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.905656][ T5777] bridge_slave_1: entered allmulticast mode [ 82.912748][ T5777] bridge_slave_1: entered promiscuous mode [ 82.930972][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.970565][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.984901][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.005108][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.018706][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.030009][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.071650][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.108127][ T5776] team0: Port device team_slave_0 added [ 83.116232][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.156626][ T5775] team0: Port device team_slave_0 added [ 83.166143][ T5775] team0: Port device team_slave_1 added [ 83.173682][ T5776] team0: Port device team_slave_1 added [ 83.205295][ T5772] team0: Port device team_slave_0 added [ 83.223887][ T5777] team0: Port device team_slave_0 added [ 83.242208][ T5772] team0: Port device team_slave_1 added [ 83.268252][ T5777] team0: Port device team_slave_1 added [ 83.285847][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.293081][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.319590][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.348792][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.356008][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.382773][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.407043][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.414100][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.441106][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.461445][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.469576][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.496558][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.517199][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.524987][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.551554][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.564553][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.571715][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.573378][ T5785] Bluetooth: hci0: command tx timeout [ 83.604108][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.616883][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.624350][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.650965][ T5785] Bluetooth: hci2: command tx timeout [ 83.656512][ T5774] Bluetooth: hci3: command tx timeout [ 83.662197][ T5785] Bluetooth: hci1: command tx timeout [ 83.667734][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.691374][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.698573][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.724931][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.784347][ T5776] hsr_slave_0: entered promiscuous mode [ 83.791218][ T5776] hsr_slave_1: entered promiscuous mode [ 83.836799][ T5775] hsr_slave_0: entered promiscuous mode [ 83.845202][ T5775] hsr_slave_1: entered promiscuous mode [ 83.851480][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.859558][ T5775] Cannot create hsr debugfs directory [ 83.927438][ T5777] hsr_slave_0: entered promiscuous mode [ 83.934645][ T5777] hsr_slave_1: entered promiscuous mode [ 83.940796][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.948663][ T5777] Cannot create hsr debugfs directory [ 83.959707][ T5772] hsr_slave_0: entered promiscuous mode [ 83.969051][ T5772] hsr_slave_1: entered promiscuous mode [ 83.975600][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.983980][ T5772] Cannot create hsr debugfs directory [ 84.422383][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.434810][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.446708][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.467751][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.512252][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.527266][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.546331][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.556651][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.654969][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.669179][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.692586][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.703285][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.787838][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.799024][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.813695][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.839063][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.916864][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.974326][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.000965][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.031306][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.038862][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.070055][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.084365][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.091586][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.121763][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.129047][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.146267][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.163978][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.171177][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.206395][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.225790][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.233333][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.271499][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.278795][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.305529][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.388598][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.435387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.442747][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.500495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.507973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.643175][ T5785] Bluetooth: hci0: command tx timeout [ 85.726702][ T5785] Bluetooth: hci1: command tx timeout [ 85.732261][ T5785] Bluetooth: hci3: command tx timeout [ 85.740746][ T5774] Bluetooth: hci2: command tx timeout [ 85.919475][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.031846][ T5775] veth0_vlan: entered promiscuous mode [ 86.056082][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.091118][ T5775] veth1_vlan: entered promiscuous mode [ 86.108946][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.171149][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.187125][ T5775] veth0_macvtap: entered promiscuous mode [ 86.214949][ T5775] veth1_macvtap: entered promiscuous mode [ 86.259587][ T5776] veth0_vlan: entered promiscuous mode [ 86.314790][ T5772] veth0_vlan: entered promiscuous mode [ 86.324870][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.337806][ T5776] veth1_vlan: entered promiscuous mode [ 86.353097][ T5777] veth0_vlan: entered promiscuous mode [ 86.367844][ T5772] veth1_vlan: entered promiscuous mode [ 86.378879][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.404618][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.417194][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.426252][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.435354][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.453338][ T5777] veth1_vlan: entered promiscuous mode [ 86.558246][ T5776] veth0_macvtap: entered promiscuous mode [ 86.604225][ T5776] veth1_macvtap: entered promiscuous mode [ 86.613990][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.622042][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.630028][ T5772] veth0_macvtap: entered promiscuous mode [ 86.661026][ T5772] veth1_macvtap: entered promiscuous mode [ 86.705338][ T5777] veth0_macvtap: entered promiscuous mode [ 86.731353][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.743779][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.756283][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.765654][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.768018][ T5777] veth1_macvtap: entered promiscuous mode [ 86.779963][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.788927][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.800830][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.811073][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.825654][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.837899][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.857901][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.869840][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.881726][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.907205][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.917944][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.928040][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.937692][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.967955][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.978702][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.994819][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.007785][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.019909][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.032546][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.041604][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.051995][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.061375][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.085787][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.099761][ T1191] cfg80211: failed to load regulatory.db [ 87.109459][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.120174][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.142705][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.170742][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.182299][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.195309][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.341533][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.361018][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.387222][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.397564][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.437736][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.448587][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.466145][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.478811][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.497261][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.534319][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.546581][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.557269][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.566626][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.598201][ T5838] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 87.604527][ T5838] syzkaller1: linktype set to 805 [ 87.738641][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.752839][ T5785] Bluetooth: hci0: command tx timeout [ 87.770771][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.803868][ T5785] Bluetooth: hci3: command tx timeout [ 87.809752][ T5785] Bluetooth: hci2: command tx timeout [ 87.815436][ T5785] Bluetooth: hci1: command tx timeout [ 87.965240][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.027905][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.083322][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.091896][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.291904][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.316433][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.347916][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.405677][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.663112][ T5850] binder: 5848:5850 ioctl c0306201 0 returned -14 [ 88.704758][ T5852] syz.3.4[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.712820][ T5840] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.815818][ T5855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.937015][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.962966][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.982837][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.006967][ T5840] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.032755][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.058270][ T5840] usb 1-1: config 0 descriptor?? [ 89.309762][ T5852] loop3: detected capacity change from 0 to 40427 [ 89.339975][ T5852] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 89.348519][ T5852] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 89.366539][ T5852] F2FS-fs (loop3): invalid crc value [ 89.503751][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.532098][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.550307][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.571012][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.587588][ T5852] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 89.595071][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.613249][ T5852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.640948][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.681223][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.713806][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.731533][ T27] audit: type=1800 audit(1777488807.920:2): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 89.770339][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.789009][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.803458][ T5774] Bluetooth: hci0: command tx timeout [ 89.809270][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.864083][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.865974][ T5777] syz-executor: attempt to access beyond end of device [ 89.865974][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.885856][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.885907][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.885932][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.887401][ T5840] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 89.921246][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 89.933217][ T5774] Bluetooth: hci1: command tx timeout [ 89.933469][ T5785] Bluetooth: hci2: command tx timeout [ 89.939267][ T5774] Bluetooth: hci3: command tx timeout [ 89.978505][ T5840] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 90.001725][ T5840] usb 1-1: USB disconnect, device number 2 [ 90.053664][ T5863] loop2: detected capacity change from 0 to 512 [ 90.095066][ T5863] EXT4-fs: Ignoring removed orlov option [ 90.143722][ T5863] EXT4-fs (loop2): Test dummy encryption mode enabled [ 90.150663][ T5863] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.198904][ T5863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.249806][ T5863] EXT4-fs (loop2): 1 truncate cleaned up [ 90.277119][ T5864] fido_id[5864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 90.324016][ T5863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.588908][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.276363][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.813851][ T5886] loop3: detected capacity change from 0 to 512 [ 92.014466][ T5886] EXT4-fs (loop3): 1 truncate cleaned up [ 92.028777][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.856285][ T51] Bluetooth: hci3: command tx timeout [ 93.392403][ C0] sched: RT throttling activated [ 93.413216][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.604853][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.631267][ T788] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 93.661594][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.685113][ T788] usb 3-1: config 0 descriptor?? [ 94.136211][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.169009][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.179256][ T788] hid (null): unknown global tag 0xe [ 94.195608][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.196575][ T5891] loop1: detected capacity change from 0 to 40427 [ 94.206241][ T788] kye 0003:0458:5010.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 94.231446][ T5891] F2FS-fs (loop1): invalid crc value [ 94.253784][ T788] kye 0003:0458:5010.0002: unknown main item tag 0x0 [ 94.260644][ T788] kye 0003:0458:5010.0002: unknown main item tag 0x0 [ 94.307078][ T788] kye 0003:0458:5010.0002: unknown main item tag 0x0 [ 94.336630][ T788] kye 0003:0458:5010.0002: unknown main item tag 0x0 [ 94.367707][ T788] kye 0003:0458:5010.0002: unknown main item tag 0x0 [ 94.376084][ T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.406384][ T788] kye 0003:0458:5010.0002: unknown main item tag 0x0 [ 94.423409][ T788] kye 0003:0458:5010.0002: unknown global tag 0xe [ 94.424648][ T5902] loop3: detected capacity change from 0 to 512 [ 94.429881][ T788] kye 0003:0458:5010.0002: item 0 2 1 14 parsing failed [ 94.430684][ T788] kye 0003:0458:5010.0002: parse failed [ 94.473152][ T788] kye: probe of 0003:0458:5010.0002 failed with error -22 [ 94.475794][ T5891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.489810][ T5902] ======================================================= [ 94.489810][ T5902] WARNING: The mand mount option has been deprecated and [ 94.489810][ T5902] and is ignored by this kernel. Remove the mand [ 94.489810][ T5902] option from the mount to silence this warning. [ 94.489810][ T5902] ======================================================= [ 94.512658][ T788] usb 3-1: USB disconnect, device number 2 [ 94.542087][ T5902] ext4: Unknown parameter 'func' [ 94.592738][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 94.601061][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.832241][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.845250][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.854996][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.885331][ T42] usb 1-1: config 0 descriptor?? [ 95.974606][ T42] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input5 [ 96.049390][ T5904] syz.1.14: attempt to access beyond end of device [ 96.049390][ T5904] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 96.076027][ T42] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 96.115993][ T5904] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 96.148436][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.152919][ T5904] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 96.173738][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.187115][ T5914] process 'syz.3.20' launched './file0' with NULL argv: empty string added [ 96.250718][ T5897] usb 1-1: USB disconnect, device number 3 [ 96.361665][ T5916] fido_id[5916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 97.094942][ T5919] loop2: detected capacity change from 0 to 40427 [ 97.110345][ T5919] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 97.127930][ T5919] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 97.157602][ T5919] F2FS-fs (loop2): invalid crc value [ 97.172939][ T5919] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.302057][ T5919] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 97.317325][ T5919] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.318853][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.323344][ T5785] Bluetooth: hci4: command 0x1003 tx timeout [ 99.517306][ T5954] loop0: detected capacity change from 0 to 256 [ 101.688987][ T5960] loop0: detected capacity change from 0 to 40427 [ 101.774245][ T5960] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 101.828395][ T5960] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 101.898844][ T5960] F2FS-fs (loop0): invalid crc value [ 101.934695][ T5967] loop3: detected capacity change from 0 to 16 [ 101.990845][ T5967] erofs: Unknown parameter '' [ 102.525971][ T5960] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 102.576753][ T5960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.533155][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 103.758917][ T5988] loop1: detected capacity change from 0 to 1024 [ 103.826231][ T5991] loop0: detected capacity change from 0 to 256 [ 103.865239][ T5991] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 103.882961][ T5988] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 103.914905][ T5988] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 103.959922][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.033932][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.098299][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 105.126881][ T6002] loop0: detected capacity change from 0 to 256 [ 105.217647][ T6002] FAT-fs (loop0): Directory bread(block 64) failed [ 105.239355][ T6002] FAT-fs (loop0): Directory bread(block 65) failed [ 105.332911][ T6002] FAT-fs (loop0): Directory bread(block 66) failed [ 105.356916][ T6002] FAT-fs (loop0): Directory bread(block 67) failed [ 105.376964][ T6002] FAT-fs (loop0): Directory bread(block 68) failed [ 105.395793][ T6002] FAT-fs (loop0): Directory bread(block 69) failed [ 105.426411][ T6002] FAT-fs (loop0): Directory bread(block 70) failed [ 105.446248][ T6002] FAT-fs (loop0): Directory bread(block 71) failed [ 105.460784][ T6002] FAT-fs (loop0): Directory bread(block 72) failed [ 105.468236][ T6002] FAT-fs (loop0): Directory bread(block 73) failed [ 106.636294][ T6014] loop0: detected capacity change from 0 to 512 [ 106.922761][ T6014] EXT4-fs: Ignoring removed oldalloc option [ 107.082706][ T6014] ext4: Unknown parameter 'appraise_type' [ 107.772967][ T6018] loop3: detected capacity change from 0 to 16 [ 107.780426][ T6018] erofs: Unknown parameter './cgroup.net/syz1' [ 110.031238][ T6018] loop3: detected capacity change from 0 to 40427 [ 110.075016][ T6018] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3) [ 110.102821][ T6018] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.117595][ T6018] F2FS-fs (loop3): Image doesn't support compression [ 110.125163][ T6018] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value [ 110.445167][ T6025] loop0: detected capacity change from 0 to 256 [ 111.078502][ T6031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.633874][ T6056] tipc: Started in network mode [ 113.649051][ T6056] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 113.669051][ T6056] tipc: Enabled bearer , priority 10 [ 113.897518][ T27] audit: type=1326 audit(1777488832.090:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.2.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f787ad9cdd9 code=0x0 [ 114.689834][ T6082] Cannot find add_set index 0 as target [ 114.784159][ T5840] tipc: Node number set to 9349802 [ 115.452960][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 115.710871][ T6102] tipc: Started in network mode [ 115.717530][ T6102] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 115.726431][ T6102] tipc: Enabled bearer , priority 10 [ 115.891790][ T6109] Zero length message leads to an empty skb [ 115.916091][ T27] audit: type=1326 audit(1777488834.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb51f9cdd9 code=0x0 [ 116.753174][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.80'. [ 116.803627][ T6119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.811240][ T6119] IPv6: NLM_F_CREATE should be set when creating new route [ 116.871569][ T969] tipc: Node number set to 9349802 [ 116.885527][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.80'. [ 116.906923][ T6120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.943755][ T6115] loop1: detected capacity change from 0 to 40427 [ 116.985146][ T6115] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 117.009640][ T6115] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 117.070385][ T6115] F2FS-fs (loop1): invalid crc value [ 118.192479][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.207553][ T6115] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 118.217306][ T6115] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.386933][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.397662][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.410322][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.423277][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.435127][ T8] usb 3-1: SerialNumber: syz [ 118.491606][ T6105] syz.1.78: attempt to access beyond end of device [ 118.491606][ T6105] loop1: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 118.657204][ T5772] syz-executor: attempt to access beyond end of device [ 118.657204][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.674487][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 118.738752][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.762948][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.830741][ T8] usb 3-1: 0:2 : does not exist [ 118.903931][ T8] usb 3-1: USB disconnect, device number 3 [ 118.996768][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.333045][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.368811][ T6151] loop3: detected capacity change from 0 to 512 [ 119.532497][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 119.543834][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.557223][ T6151] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.743268][ T42] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.760468][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.773187][ T42] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.782484][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.807741][ T42] usb 1-1: config 0 descriptor?? [ 119.851092][ T42] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 120.061008][ T6161] loop1: detected capacity change from 0 to 512 [ 120.106648][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.116818][ T6161] EXT4-fs (loop1): 1 truncate cleaned up [ 120.124357][ T6161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.294160][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.863099][ T6156] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 121.131259][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.603481][ T5840] usb 1-1: USB disconnect, device number 4 [ 122.687823][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.047424][ T6197] loop0: detected capacity change from 0 to 512 [ 124.471168][ T6197] EXT4-fs (loop0): 1 truncate cleaned up [ 124.479063][ T6197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.539819][ T6202] loop3: detected capacity change from 0 to 512 [ 124.636354][ T6202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.683749][ T6202] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.983186][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.123660][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.325302][ T42] usb 2-1: config 2 has an invalid interface number: 79 but max is 0 [ 125.333680][ T42] usb 2-1: config 2 has no interface number 0 [ 125.340100][ T42] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 125.351286][ T42] usb 2-1: config 2 interface 79 has no altsetting 0 [ 125.362288][ T42] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 125.375672][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.384263][ T42] usb 2-1: Product: syz [ 125.388564][ T42] usb 2-1: Manufacturer: syz [ 125.393844][ T42] usb 2-1: SerialNumber: syz [ 125.402109][ T6210] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.442576][ T5840] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 125.522708][ T969] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.624956][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.646313][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 125.664284][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 125.679851][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 125.700148][ T5840] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 125.719181][ T5840] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.728291][ T969] usb 1-1: Using ep0 maxpacket: 32 [ 125.742314][ T5840] usb 3-1: Manufacturer: syz [ 125.759430][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.774055][ T5840] usb 3-1: config 0 descriptor?? [ 125.801134][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.818426][ T969] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.837670][ T969] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 125.847367][ T969] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 125.856492][ T969] usb 1-1: Product: syz [ 125.860974][ T969] usb 1-1: Manufacturer: syz [ 125.865727][ T969] usb 1-1: SerialNumber: syz [ 125.894269][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.902093][ T969] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 126.145937][ T969] usb 1-1: USB disconnect, device number 5 [ 126.161242][ T5840] rc_core: IR keymap rc-hauppauge not found [ 126.181588][ T5840] Registered IR keymap rc-empty [ 126.208209][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.223736][ T969] appletouch 1-1:1.0: input: appletouch disconnected [ 126.264173][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.305046][ T5840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 126.319778][ T5840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 126.475987][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.525706][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.575885][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.622985][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.653489][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.693791][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.734335][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.807106][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.843225][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.883034][ T5840] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 126.919123][ T5840] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 126.937275][ T5840] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 126.959279][ T5840] usb 3-1: USB disconnect, device number 4 [ 128.032964][ T42] esd_usb 2-1:2.79: sending version message failed [ 128.039646][ T42] esd_usb: probe of 2-1:2.79 failed with error -22 [ 128.056707][ T42] usb 2-1: USB disconnect, device number 2 [ 128.356860][ T6248] loop3: detected capacity change from 0 to 512 [ 128.404964][ T6248] EXT4-fs (loop3): 1 truncate cleaned up [ 128.412213][ T6248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.456648][ T6258] loop1: detected capacity change from 0 to 512 [ 128.511501][ T6258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.568807][ T6258] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.471102][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.054157][ T6278] loop9: detected capacity change from 0 to 524287936 [ 130.939093][ T5819] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.282754][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 131.328597][ T5819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 131.378893][ T5819] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.423846][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.462579][ T5819] usb 1-1: Product: syz [ 131.474122][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.484427][ T5819] usb 1-1: Manufacturer: syz [ 131.489509][ T5819] usb 1-1: SerialNumber: syz [ 131.612030][ T5819] usb 1-1: config 0 descriptor?? [ 131.652092][ T6280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.671121][ T5819] hub 1-1:0.0: bad descriptor, ignoring hub [ 131.692251][ T5819] hub: probe of 1-1:0.0 failed with error -5 [ 133.164460][ T6280] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 133.178815][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.188248][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.358090][ T6293] loop3: detected capacity change from 0 to 131072 [ 133.505370][ T6280] usb 1-1: device firmware changed [ 133.522822][ T5897] usb 1-1: USB disconnect, device number 6 [ 133.544309][ T6293] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.612938][ T6293] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.190249][ T27] audit: type=1804 audit(1777488852.370:5): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.130" name="/newroot/39/file1/bus" dev="loop3" ino=10 res=1 errno=0 [ 134.329084][ T6309] F2FS-fs (loop3): access invalid blkaddr:0 [ 134.335587][ T6309] CPU: 1 PID: 6309 Comm: syz.3.130 Not tainted syzkaller #0 [ 134.343089][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.353266][ T6309] Call Trace: [ 134.356785][ T6309] [ 134.359745][ T6309] dump_stack_lvl+0x18c/0x250 [ 134.364496][ T6309] ? show_regs_print_info+0x20/0x20 [ 134.369755][ T6309] ? __up_read+0x2b6/0x6b0 [ 134.374218][ T6309] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 134.379765][ T6309] sanity_check_extent_cache+0xfc/0x1f0 [ 134.385451][ T6309] f2fs_iget+0x33c5/0x47e0 [ 134.389947][ T6309] f2fs_lookup+0x37f/0x780 [ 134.394414][ T6309] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 134.400530][ T6309] ? make_vfsuid+0x51/0xb0 [ 134.405112][ T6309] ? inode_permission+0xf3/0x480 [ 134.410221][ T6309] ? bpf_lsm_inode_create+0x9/0x10 [ 134.415465][ T6309] ? security_inode_create+0xb7/0x100 [ 134.420886][ T6309] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 134.427040][ T6309] path_openat+0x10e4/0x3230 [ 134.431721][ T6309] ? do_filp_open+0x430/0x430 [ 134.436457][ T6309] ? __virt_addr_valid+0x18c/0x540 [ 134.441728][ T6309] do_filp_open+0x1f5/0x430 [ 134.446280][ T6309] ? vfs_tmpfile+0x490/0x490 [ 134.450938][ T6309] ? _raw_spin_unlock+0x28/0x40 [ 134.455919][ T6309] ? alloc_fd+0x58f/0x630 [ 134.460588][ T6309] do_sys_openat2+0x134/0x1d0 [ 134.465421][ T6309] ? do_sys_open+0xe0/0xe0 [ 134.469880][ T6309] ? lock_chain_count+0x20/0x20 [ 134.474780][ T6309] __x64_sys_open+0x11f/0x140 [ 134.479595][ T6309] do_syscall_64+0x55/0xa0 [ 134.484058][ T6309] ? clear_bhb_loop+0x40/0x90 [ 134.488774][ T6309] ? clear_bhb_loop+0x40/0x90 [ 134.493500][ T6309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.499492][ T6309] RIP: 0033:0x7feb51f9cdd9 [ 134.503947][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.523852][ T6309] RSP: 002b:00007feb501d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 134.532331][ T6309] RAX: ffffffffffffffda RBX: 00007feb52216180 RCX: 00007feb51f9cdd9 [ 134.540718][ T6309] RDX: 0000000000000002 RSI: 0000000000060840 RDI: 00002000009e1000 [ 134.548743][ T6309] RBP: 00007feb52032d69 R08: 0000000000000000 R09: 0000000000000000 [ 134.556774][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.564803][ T6309] R13: 00007feb52216218 R14: 00007feb52216180 R15: 00007ffe2602c198 [ 134.573011][ T6309] [ 134.577564][ T6309] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 134.633496][ T6312] F2FS-fs (loop3): access invalid blkaddr:0 [ 134.639817][ T6312] CPU: 0 PID: 6312 Comm: syz.3.130 Not tainted syzkaller #0 [ 134.647483][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.657586][ T6312] Call Trace: [ 134.660926][ T6312] [ 134.663995][ T6312] dump_stack_lvl+0x18c/0x250 [ 134.668791][ T6312] ? show_regs_print_info+0x20/0x20 [ 134.674163][ T6312] ? __up_read+0x2b6/0x6b0 [ 134.678909][ T6312] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 134.684358][ T6312] sanity_check_extent_cache+0xfc/0x1f0 [ 134.689980][ T6312] f2fs_iget+0x33c5/0x47e0 [ 134.694575][ T6312] f2fs_lookup+0x37f/0x780 [ 134.699057][ T6312] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 134.705268][ T6312] ? d_hash_and_lookup+0x1b0/0x1b0 [ 134.710417][ T6312] ? __init_waitqueue_head+0xa9/0x150 [ 134.715848][ T6312] __lookup_slow+0x2a1/0x400 [ 134.720474][ T6312] ? lookup_one_len+0x2e0/0x2e0 [ 134.725356][ T6312] ? try_to_unlazy+0x34c/0x5a0 [ 134.730150][ T6312] ? down_read+0x1ac/0x2e0 [ 134.734580][ T6312] lookup_slow+0x53/0x70 [ 134.738846][ T6312] walk_component+0x2be/0x3f0 [ 134.743681][ T6312] ? path_lookupat+0x15c/0x440 [ 134.748702][ T6312] path_lookupat+0x169/0x440 [ 134.753583][ T6312] filename_lookup+0x228/0x560 [ 134.758377][ T6312] ? hashlen_string+0x110/0x110 [ 134.763444][ T6312] ? strncpy_from_user+0x197/0x2d0 [ 134.768670][ T6312] ? getname_flags+0x20a/0x500 [ 134.773456][ T6312] user_path_at_empty+0x42/0x60 [ 134.778319][ T6312] do_fchmodat+0xde/0x1e0 [ 134.782666][ T6312] ? do_faccessat+0xd00/0xd00 [ 134.787375][ T6312] ? syscall_enter_from_user_mode+0x25/0x80 [ 134.793571][ T6312] __x64_sys_chmod+0x62/0x70 [ 134.798194][ T6312] do_syscall_64+0x55/0xa0 [ 134.802715][ T6312] ? clear_bhb_loop+0x40/0x90 [ 134.807506][ T6312] ? clear_bhb_loop+0x40/0x90 [ 134.812222][ T6312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.818142][ T6312] RIP: 0033:0x7feb51f9cdd9 [ 134.822572][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.842461][ T6312] RSP: 002b:00007feb4f56c028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 134.850890][ T6312] RAX: ffffffffffffffda RBX: 00007feb52216450 RCX: 00007feb51f9cdd9 [ 134.858888][ T6312] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000200000000000 [ 134.866874][ T6312] RBP: 00007feb52032d69 R08: 0000000000000000 R09: 0000000000000000 [ 134.874864][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.882862][ T6312] R13: 00007feb522164e8 R14: 00007feb52216450 R15: 00007ffe2602c198 [ 134.891067][ T6312] [ 134.895379][ T6312] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 135.096050][ T5897] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.291940][ T6310] F2FS-fs (loop3): access invalid blkaddr:0 [ 135.298662][ T6310] CPU: 1 PID: 6310 Comm: syz.3.130 Not tainted syzkaller #0 [ 135.306025][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.316296][ T6310] Call Trace: [ 135.319693][ T6310] [ 135.322663][ T6310] dump_stack_lvl+0x18c/0x250 [ 135.327564][ T6310] ? show_regs_print_info+0x20/0x20 [ 135.332922][ T6310] ? __up_read+0x2b6/0x6b0 [ 135.337384][ T6310] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 135.342976][ T6310] sanity_check_extent_cache+0xfc/0x1f0 [ 135.348752][ T6310] f2fs_iget+0x33c5/0x47e0 [ 135.353334][ T6310] f2fs_lookup+0x37f/0x780 [ 135.358051][ T6310] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 135.364192][ T6310] ? d_hash_and_lookup+0x1b0/0x1b0 [ 135.369459][ T6310] ? __init_waitqueue_head+0xa9/0x150 [ 135.374972][ T6310] __lookup_slow+0x2a1/0x400 [ 135.379631][ T6310] ? lookup_one_len+0x2e0/0x2e0 [ 135.384557][ T6310] ? try_to_unlazy+0x34c/0x5a0 [ 135.389461][ T6310] ? down_read+0x1ac/0x2e0 [ 135.394108][ T6310] lookup_slow+0x53/0x70 [ 135.398403][ T6310] walk_component+0x2be/0x3f0 [ 135.403211][ T6310] ? path_lookupat+0x15c/0x440 [ 135.408221][ T6310] path_lookupat+0x169/0x440 [ 135.413019][ T6310] filename_lookup+0x228/0x560 [ 135.418045][ T6310] ? hashlen_string+0x110/0x110 [ 135.423080][ T6310] ? strncpy_from_user+0x197/0x2d0 [ 135.428521][ T6310] ? getname_flags+0x20a/0x500 [ 135.433351][ T6310] user_path_at_empty+0x42/0x60 [ 135.438331][ T6310] __se_sys_mount+0x2a8/0x3d0 [ 135.443061][ T6310] ? __x64_sys_mount+0xc0/0xc0 [ 135.447865][ T6310] ? lockdep_hardirqs_on+0x98/0x150 [ 135.453141][ T6310] ? __x64_sys_mount+0x20/0xc0 [ 135.457942][ T6310] do_syscall_64+0x55/0xa0 [ 135.462390][ T6310] ? clear_bhb_loop+0x40/0x90 [ 135.467319][ T6310] ? clear_bhb_loop+0x40/0x90 [ 135.472126][ T6310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.478233][ T6310] RIP: 0033:0x7feb51f9cdd9 [ 135.482695][ T6310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.502519][ T6310] RSP: 002b:00007feb4fdb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.511082][ T6310] RAX: ffffffffffffffda RBX: 00007feb52216270 RCX: 00007feb51f9cdd9 [ 135.519093][ T6310] RDX: 0000200000000040 RSI: 00002000000001c0 RDI: 0000000000000000 [ 135.527098][ T6310] RBP: 00007feb52032d69 R08: 0000200000000080 R09: 0000000000000000 [ 135.535297][ T6310] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 135.543487][ T6310] R13: 00007feb52216308 R14: 00007feb52216270 R15: 00007ffe2602c198 [ 135.551949][ T6310] [ 135.556149][ T6310] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 135.570508][ T6311] F2FS-fs (loop3): access invalid blkaddr:0 [ 135.576618][ T6311] CPU: 1 PID: 6311 Comm: syz.3.130 Not tainted syzkaller #0 [ 135.584107][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.594479][ T6311] Call Trace: [ 135.597806][ T6311] [ 135.600776][ T6311] dump_stack_lvl+0x18c/0x250 [ 135.605513][ T6311] ? show_regs_print_info+0x20/0x20 [ 135.610961][ T6311] ? __up_read+0x2b6/0x6b0 [ 135.615420][ T6311] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 135.620935][ T6311] sanity_check_extent_cache+0xfc/0x1f0 [ 135.626527][ T6311] f2fs_iget+0x33c5/0x47e0 [ 135.631104][ T6311] f2fs_lookup+0x37f/0x780 [ 135.635661][ T6311] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 135.641781][ T6311] ? d_hash_and_lookup+0x1b0/0x1b0 [ 135.647039][ T6311] ? __init_waitqueue_head+0xa9/0x150 [ 135.652545][ T6311] __lookup_slow+0x2a1/0x400 [ 135.657187][ T6311] ? lookup_one_len+0x2e0/0x2e0 [ 135.662184][ T6311] ? try_to_unlazy+0x34c/0x5a0 [ 135.667019][ T6311] ? down_read+0x1ac/0x2e0 [ 135.671475][ T6311] lookup_slow+0x53/0x70 [ 135.675756][ T6311] walk_component+0x2be/0x3f0 [ 135.680549][ T6311] ? path_lookupat+0x15c/0x440 [ 135.685448][ T6311] path_lookupat+0x169/0x440 [ 135.690088][ T6311] filename_lookup+0x228/0x560 [ 135.694909][ T6311] ? hashlen_string+0x110/0x110 [ 135.699832][ T6311] ? strncpy_from_user+0x197/0x2d0 [ 135.705027][ T6311] ? getname_flags+0x20a/0x500 [ 135.709876][ T6311] user_path_at_empty+0x42/0x60 [ 135.714888][ T6311] do_fchmodat+0xde/0x1e0 [ 135.719277][ T6311] ? do_faccessat+0xd00/0xd00 [ 135.724013][ T6311] ? syscall_enter_from_user_mode+0x25/0x80 [ 135.729959][ T6311] __x64_sys_chmod+0x62/0x70 [ 135.734602][ T6311] do_syscall_64+0x55/0xa0 [ 135.739148][ T6311] ? clear_bhb_loop+0x40/0x90 [ 135.743869][ T6311] ? clear_bhb_loop+0x40/0x90 [ 135.748704][ T6311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.754723][ T6311] RIP: 0033:0x7feb51f9cdd9 [ 135.759177][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.778997][ T6311] RSP: 002b:00007feb4f98f028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 135.787542][ T6311] RAX: ffffffffffffffda RBX: 00007feb52216360 RCX: 00007feb51f9cdd9 [ 135.795902][ T6311] RDX: 0000000000000000 RSI: 00000000000003dc RDI: 0000200000000100 [ 135.804087][ T6311] RBP: 00007feb52032d69 R08: 0000000000000000 R09: 0000000000000000 [ 135.812092][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.820090][ T6311] R13: 00007feb522163f8 R14: 00007feb52216360 R15: 00007ffe2602c198 [ 135.828089][ T6311] [ 135.831986][ T6311] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 136.165350][ T6314] loop1: detected capacity change from 0 to 512 [ 136.213057][ T6314] ext4: Unknown parameter 'func' [ 137.327079][ T6325] loop0: detected capacity change from 0 to 512 [ 137.528068][ T6325] EXT4-fs (loop0): 1 truncate cleaned up [ 137.536114][ T6325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.240168][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.279328][ T6336] loop3: detected capacity change from 0 to 512 [ 139.610988][ T6336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.688343][ T6336] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.094784][ T6350] tipc: Started in network mode [ 140.099907][ T6350] tipc: Node identity 527e5d77af73, cluster identity 4711 [ 140.107717][ T6350] tipc: Enabled bearer , priority 0 [ 140.118166][ T6350] syzkaller0: entered promiscuous mode [ 140.126954][ T6350] syzkaller0: entered allmulticast mode [ 140.351355][ T2197] tipc: Resetting bearer [ 140.518018][ T6357] loop0: detected capacity change from 0 to 512 [ 140.535552][ T2197] tipc: Disabling bearer [ 140.553771][ T6357] ext4: Unknown parameter 'func' [ 140.604562][ T5767] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.483388][ T6372] loop2: detected capacity change from 0 to 512 [ 141.629857][ T6372] EXT4-fs (loop2): 1 truncate cleaned up [ 141.637162][ T6372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.230103][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.368737][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.383633][ T6364] syz.1.149 uses obsolete (PF_INET,SOCK_PACKET) [ 146.525998][ T6405] loop2: detected capacity change from 0 to 512 [ 146.607140][ T6411] loop1: detected capacity change from 0 to 512 [ 146.932720][ T6411] EXT4-fs (loop1): 1 truncate cleaned up [ 146.940293][ T6411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.976839][ T6405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.028157][ T6405] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.452572][ T6416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 148.503611][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.276630][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.889668][ T6461] loop2: detected capacity change from 0 to 512 [ 150.939728][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.173830][ T6464] loop1: detected capacity change from 0 to 512 [ 151.814356][ T6464] EXT4-fs (loop1): 1 truncate cleaned up [ 151.821618][ T6464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.839217][ T6461] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.798919][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.893668][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.104436][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 155.392784][ T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.612635][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 155.671419][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.748121][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.794740][ T42] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 155.872532][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.899020][ T42] usb 3-1: config 0 descriptor?? [ 156.157528][ T6506] loop3: detected capacity change from 0 to 512 [ 156.210069][ T6506] EXT4-fs (loop3): 1 truncate cleaned up [ 156.217460][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.654947][ T42] usb 3-1: USB disconnect, device number 5 [ 157.165887][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.140514][ T6524] loop2: detected capacity change from 0 to 512 [ 158.233933][ T6524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.291026][ T6524] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.203421][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.415783][ T6546] loop0: detected capacity change from 0 to 512 [ 161.423605][ T6546] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.492318][ T6546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.505416][ T6546] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.565484][ T27] audit: type=1800 audit(1777488879.730:6): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.197" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 162.451473][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.918306][ T6563] loop1: detected capacity change from 0 to 512 [ 162.960173][ T6563] EXT4-fs (loop1): 1 truncate cleaned up [ 162.967814][ T6563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.323979][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.249804][ T6571] loop0: detected capacity change from 0 to 40427 [ 165.601563][ T6571] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 165.679860][ T6571] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 165.883778][ T6571] F2FS-fs (loop0): invalid crc value [ 166.015626][ T6571] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 166.344757][ T6585] program syz.2.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.471597][ T6588] loop1: detected capacity change from 0 to 512 [ 166.483509][ T6585] 0: reclassify loop, rule prio 0, protocol 700 [ 166.566613][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.631172][ T6588] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.959244][ T6596] loop0: detected capacity change from 0 to 512 [ 166.966668][ T6596] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.029297][ T6596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.042714][ T6596] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.063230][ T27] audit: type=1800 audit(1777488885.260:7): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.209" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 167.188720][ T6599] BUG: unable to handle page fault for address: ffffffffffffffec [ 167.196704][ T6599] #PF: supervisor read access in kernel mode [ 167.202801][ T6599] #PF: error_code(0x0000) - not-present page [ 167.208791][ T6599] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 167.214789][ T6599] Oops: 0000 [#1] PREEMPT SMP KASAN [ 167.220084][ T6599] CPU: 0 PID: 6599 Comm: syz.0.209 Not tainted syzkaller #0 [ 167.227372][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.237546][ T6599] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 167.243510][ T6599] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 167.263259][ T6599] RSP: 0018:ffffc90003237638 EFLAGS: 00010246 [ 167.269561][ T6599] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 167.277574][ T6599] RDX: ffffc9000fbeb000 RSI: 000000000000317a RDI: ffffffffffffffec [ 167.285676][ T6599] RBP: ffffc90003237758 R08: ffff888076e0661f R09: 1ffff1100edc0cc3 [ 167.293868][ T6599] R10: dffffc0000000000 R11: ffffed100edc0cc4 R12: ffff888076e066b0 [ 167.302047][ T6599] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 167.310028][ T6599] FS: 00007fd44cdc66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 167.319093][ T6599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.325712][ T6599] CR2: ffffffffffffffec CR3: 000000002230f000 CR4: 00000000003506f0 [ 167.333751][ T6599] Call Trace: [ 167.337062][ T6599] [ 167.340029][ T6599] finish_range+0x234/0x340 [ 167.344590][ T6599] ? update_tind_extent_range+0x3f0/0x3f0 [ 167.350352][ T6599] ? __ext4_sb_bread_gfp+0x14c/0x210 [ 167.355696][ T6599] update_ind_extent_range+0x2e3/0x520 [ 167.361403][ T6599] ext4_ext_migrate+0xb07/0x1080 [ 167.366404][ T6599] ? mb_regenerate_buddy+0x510/0x510 [ 167.371759][ T6599] ? down_read_killable+0x340/0x340 [ 167.377000][ T6599] ? sb_start_write+0x110/0x1c0 [ 167.382067][ T6599] ? mnt_want_write_file+0x16a/0x200 [ 167.387407][ T6599] ext4_ioctl+0x1ee3/0x3b80 [ 167.392035][ T6599] ? ext4_fileattr_set+0x16d0/0x16d0 [ 167.397618][ T6599] ? mark_lock+0x94/0x320 [ 167.401989][ T6599] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 167.408004][ T6599] ? do_vfs_ioctl+0x1573/0x1cc0 [ 167.412924][ T6599] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 167.418603][ T6599] ? tomoyo_path_number_perm+0x217/0x620 [ 167.424289][ T6599] ? __lock_acquire+0x7d40/0x7d40 [ 167.429375][ T6599] ? slab_free_freelist_hook+0x130/0x1a0 [ 167.435066][ T6599] ? tomoyo_path_number_perm+0x500/0x620 [ 167.440841][ T6599] ? __kmem_cache_free+0xba/0x1e0 [ 167.445915][ T6599] ? tomoyo_path_number_perm+0x5b4/0x620 [ 167.451703][ T6599] ? tomoyo_path_number_perm+0x217/0x620 [ 167.457391][ T6599] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 167.463007][ T6599] ? __fget_files+0x28/0x4b0 [ 167.467643][ T6599] ? __fget_files+0x28/0x4b0 [ 167.472280][ T6599] ? bpf_lsm_file_ioctl+0x9/0x10 [ 167.477339][ T6599] ? security_file_ioctl+0x80/0xa0 [ 167.482632][ T6599] ? ext4_fileattr_set+0x16d0/0x16d0 [ 167.487945][ T6599] __se_sys_ioctl+0xfd/0x170 [ 167.492659][ T6599] do_syscall_64+0x55/0xa0 [ 167.497102][ T6599] ? clear_bhb_loop+0x40/0x90 [ 167.501981][ T6599] ? clear_bhb_loop+0x40/0x90 [ 167.506777][ T6599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.513240][ T6599] RIP: 0033:0x7fd44bf9cdd9 [ 167.517679][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.537587][ T6599] RSP: 002b:00007fd44cdc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.546044][ T6599] RAX: ffffffffffffffda RBX: 00007fd44c216180 RCX: 00007fd44bf9cdd9 [ 167.554135][ T6599] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000006 [ 167.562152][ T6599] RBP: 00007fd44c032d69 R08: 0000000000000000 R09: 0000000000000000 [ 167.570428][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.579276][ T6599] R13: 00007fd44c216218 R14: 00007fd44c216180 R15: 00007ffd60cbe698 [ 167.587395][ T6599] [ 167.590441][ T6599] Modules linked in: [ 167.594366][ T6599] CR2: ffffffffffffffec [ 167.598542][ T6599] ---[ end trace 0000000000000000 ]--- [ 167.604197][ T6599] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 167.610222][ T6599] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 167.630221][ T6599] RSP: 0018:ffffc90003237638 EFLAGS: 00010246 [ 167.636318][ T6599] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 167.644317][ T6599] RDX: ffffc9000fbeb000 RSI: 000000000000317a RDI: ffffffffffffffec [ 167.652583][ T6599] RBP: ffffc90003237758 R08: ffff888076e0661f R09: 1ffff1100edc0cc3 [ 167.660671][ T6599] R10: dffffc0000000000 R11: ffffed100edc0cc4 R12: ffff888076e066b0 [ 167.668764][ T6599] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 167.676848][ T6599] FS: 00007fd44cdc66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 167.685898][ T6599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.692599][ T6599] CR2: ffffffffffffffec CR3: 000000002230f000 CR4: 00000000003506f0 [ 167.700659][ T6599] Kernel panic - not syncing: Fatal exception [ 167.706950][ T6599] Kernel Offset: disabled [ 167.711376][ T6599] Rebooting in 86400 seconds..