last executing test programs: 16.14933976s ago: executing program 6 (id=158): writev(0xffffffffffffffff, &(0x7f00000037c0)=[{&(0x7f0000000480)='B', 0x1}], 0x1) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) r0 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 16.04342362s ago: executing program 6 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 15.99711714s ago: executing program 6 (id=161): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 15.741371778s ago: executing program 6 (id=168): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfffffffd, 0x20000, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x8, 0x10001}}, 0x50) 15.436641693s ago: executing program 6 (id=170): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000004) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) 15.012955563s ago: executing program 6 (id=173): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) rename(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='./bus\x00') 15.012450941s ago: executing program 32 (id=173): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) rename(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='./bus\x00') 3.021667576s ago: executing program 3 (id=394): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0x10e9, [[0x1, 0x3, 0xfffffffb, 0xffffffff, 0x20000006, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffc, 0x68d, 0xa107, 0x0, 0x3], [0xffffffff, 0xffffffff, 0xe00000, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0x1]], '\x00', [{0xd, 0x11, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x1, 0xac44, 0x0, 0x0, 0x1}, {0xfff, 0x186a0, 0x0, 0x0, 0x1}, {0xd, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2f10, 0xf4240, 0x0, 0x0, 0x1}, {0x3ff, 0x9000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf423c, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x10}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000080)=0x2) 2.940181477s ago: executing program 5 (id=396): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.821580526s ago: executing program 0 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266afe2e239000f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d90f20d835080000000f22d8", 0x49}], 0xaaaaaaaaaaaaa5c, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.45933958s ago: executing program 0 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2.432704509s ago: executing program 3 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) lseek(r0, 0x1, 0x3) 2.282038194s ago: executing program 3 (id=406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x16}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x8881) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 2.072632135s ago: executing program 0 (id=409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) 2.068831744s ago: executing program 5 (id=410): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.015104519s ago: executing program 5 (id=413): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSTI(r2, 0x5412, 0x0) 1.944275583s ago: executing program 3 (id=416): shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) r0 = shmget(0x1, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000fcffff000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.847097022s ago: executing program 2 (id=420): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x3271020, 0x0) 1.784662201s ago: executing program 0 (id=422): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009a40)={[{@filestreams}]}, 0x7, 0x9864, &(0x7f0000000140)="$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") mount(&(0x7f0000000040)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x8, 0x103) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.716633145s ago: executing program 1 (id=425): r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/121, 0x79}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.593085946s ago: executing program 2 (id=427): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) 1.54035747s ago: executing program 1 (id=429): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0xfcff, 0x0, 0x0}) 1.532986064s ago: executing program 5 (id=430): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) syz_open_dev$video(0x0, 0x3, 0x800) read$dsp(r0, &(0x7f0000000180)=""/67, 0x43) 1.438591126s ago: executing program 1 (id=432): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, 0x0, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) 1.438387418s ago: executing program 2 (id=433): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) 1.348227619s ago: executing program 2 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x88f5}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x20, 0x800, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c3, 0x9, 0x0, @gue={{0x1, 0x1, 0x2, 0x5, 0x100, @void}}}}}}}}, 0x3a) 1.275135066s ago: executing program 1 (id=435): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x20fe, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000340)=0x13e) 927.009103ms ago: executing program 2 (id=437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) 926.456198ms ago: executing program 0 (id=451): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10162, 0x0) 858.975115ms ago: executing program 7 (id=438): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$cgroup_freezer_state(r0, &(0x7f0000000480)='FREEZING\x00', 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 714.970251ms ago: executing program 7 (id=440): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 680.130041ms ago: executing program 0 (id=441): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0xc000, 0x973f, 0x81, 0x4}) 671.003896ms ago: executing program 4 (id=442): socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x290e, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x5d, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 639.475768ms ago: executing program 5 (id=443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40380, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 611.89961ms ago: executing program 2 (id=444): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) write$FUSE_POLL(r1, 0x0, 0x0) 548.824541ms ago: executing program 4 (id=445): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x300, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 513.777313ms ago: executing program 3 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 398.307357ms ago: executing program 4 (id=447): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000030805000000000000004c5fa95916f4478a8f6f46d200000000000005"], 0x28}}, 0x0) write(r0, &(0x7f0000000000)="0100000000000007e0", 0x9) 397.19626ms ago: executing program 7 (id=448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) 374.398526ms ago: executing program 7 (id=449): r0 = io_uring_setup(0x4188, &(0x7f0000000240)={0x0, 0x7de2, 0x50, 0x3, 0x112}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2c45, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) flock(r2, 0x1) flock(r2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 337.1729ms ago: executing program 3 (id=450): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 293.389659ms ago: executing program 4 (id=452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 292.378762ms ago: executing program 1 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 278.943556ms ago: executing program 7 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x839}]}) 219.476929ms ago: executing program 4 (id=455): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40000141) 145.508669ms ago: executing program 1 (id=456): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 94.529752ms ago: executing program 5 (id=457): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 11.35759ms ago: executing program 7 (id=458): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x97068100, 0x0, 0x41, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x80000000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 0s ago: executing program 4 (id=459): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x400000b6, 0xc}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}, {0x40000003, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): .398076][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.398205][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.398467][ T5633] bridge_slave_1: entered allmulticast mode [ 58.399756][ T5633] bridge_slave_1: entered promiscuous mode [ 58.490646][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.490705][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.490775][ T5651] bridge_slave_0: entered allmulticast mode [ 58.491705][ T5651] bridge_slave_0: entered promiscuous mode [ 58.493886][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.494007][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.494237][ T5651] bridge_slave_1: entered allmulticast mode [ 58.495448][ T5651] bridge_slave_1: entered promiscuous mode [ 58.517862][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.533037][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.558589][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.573469][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.578310][ T5624] hsr_slave_0: entered promiscuous mode [ 58.578593][ T5624] hsr_slave_1: entered promiscuous mode [ 58.579449][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.579639][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.579681][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.579747][ T5645] bridge_slave_0: entered allmulticast mode [ 58.580091][ T5645] bridge_slave_0: entered promiscuous mode [ 58.583279][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.583425][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.583635][ T5645] bridge_slave_1: entered allmulticast mode [ 58.584889][ T5645] bridge_slave_1: entered promiscuous mode [ 58.588390][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.588597][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.588710][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.588909][ T5627] bridge_slave_0: entered allmulticast mode [ 58.590427][ T5627] bridge_slave_0: entered promiscuous mode [ 58.593187][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.593299][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.593598][ T5627] bridge_slave_1: entered allmulticast mode [ 58.594819][ T5627] bridge_slave_1: entered promiscuous mode [ 58.674288][ T5651] team0: Port device team_slave_0 added [ 58.687578][ T5633] team0: Port device team_slave_0 added [ 58.732038][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.741770][ T5651] team0: Port device team_slave_1 added [ 58.750028][ T5633] team0: Port device team_slave_1 added [ 58.757491][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.759816][ T5639] team0: Port device team_slave_0 added [ 58.769289][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.787719][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.787733][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.787762][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.791728][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.803142][ T5639] team0: Port device team_slave_1 added [ 58.829738][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.829786][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.829879][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.837302][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.837343][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.837433][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.883923][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.883966][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.884050][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.905016][ T5645] team0: Port device team_slave_0 added [ 58.930360][ T5627] team0: Port device team_slave_0 added [ 58.931688][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.931832][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.932033][ T5654] bridge_slave_0: entered allmulticast mode [ 58.934031][ T5654] bridge_slave_0: entered promiscuous mode [ 58.936422][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.936532][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.936763][ T5654] bridge_slave_1: entered allmulticast mode [ 58.937925][ T5654] bridge_slave_1: entered promiscuous mode [ 58.953775][ T5645] team0: Port device team_slave_1 added [ 58.954443][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.954492][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.954581][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.974406][ T5627] team0: Port device team_slave_1 added [ 58.990960][ T5651] hsr_slave_0: entered promiscuous mode [ 58.992482][ T5651] hsr_slave_1: entered promiscuous mode [ 58.993033][ T5651] debugfs: 'hsr0' already exists in 'hsr' [ 58.993081][ T5651] Cannot create hsr debugfs directory [ 58.994356][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.994395][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.994503][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.007403][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.007446][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.007537][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.093791][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.093852][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.093937][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.258757][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.258772][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.258800][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.263544][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.280900][ T5633] hsr_slave_0: entered promiscuous mode [ 59.281853][ T5633] hsr_slave_1: entered promiscuous mode [ 59.282471][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 59.282521][ T5633] Cannot create hsr debugfs directory [ 59.329930][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.329966][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.330050][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.338970][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.394749][ T5639] hsr_slave_0: entered promiscuous mode [ 59.395028][ T5639] hsr_slave_1: entered promiscuous mode [ 59.395190][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 59.395210][ T5639] Cannot create hsr debugfs directory [ 59.428752][ T5645] hsr_slave_0: entered promiscuous mode [ 59.429002][ T5645] hsr_slave_1: entered promiscuous mode [ 59.429157][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 59.429175][ T5645] Cannot create hsr debugfs directory [ 59.431207][ T4938] Bluetooth: hci0: command tx timeout [ 59.455817][ T5654] team0: Port device team_slave_0 added [ 59.474995][ T5654] team0: Port device team_slave_1 added [ 59.501166][ T4938] Bluetooth: hci1: command tx timeout [ 59.501185][ T4938] Bluetooth: hci2: command tx timeout [ 59.502975][ T5627] hsr_slave_0: entered promiscuous mode [ 59.503297][ T5627] hsr_slave_1: entered promiscuous mode [ 59.503462][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 59.503478][ T5627] Cannot create hsr debugfs directory [ 59.507909][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.507923][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.507951][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.557759][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.557808][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.557891][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.591213][ T5625] Bluetooth: hci3: command tx timeout [ 59.661213][ T5629] Bluetooth: hci4: command tx timeout [ 59.661248][ T4938] Bluetooth: hci5: command tx timeout [ 59.661273][ T5625] Bluetooth: hci6: command tx timeout [ 59.668030][ T5624] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.669128][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.669547][ T5624] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.670520][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.676860][ T5624] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.694227][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.699822][ T5654] hsr_slave_0: entered promiscuous mode [ 59.700693][ T5654] hsr_slave_1: entered promiscuous mode [ 59.702024][ T5654] debugfs: 'hsr0' already exists in 'hsr' [ 59.702073][ T5654] Cannot create hsr debugfs directory [ 59.739108][ T5624] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.744139][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.809347][ T5651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.819865][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.835245][ T5651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.836248][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.841205][ T5651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.850989][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.857739][ T5651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.864952][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.892761][ T5645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.894886][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.897273][ T5645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.898468][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.898861][ T5645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.899783][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.923406][ T5645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.952548][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.968621][ T5639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.972026][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.985722][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.986022][ T5639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.987041][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.987376][ T5639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.988104][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.989924][ T5639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.990975][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.057060][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.057325][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.059798][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.060990][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.090717][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.093771][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.096878][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.100069][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.125192][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.126189][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.146693][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.146739][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.147754][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.147784][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.162579][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.188994][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.190093][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.195247][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.195369][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.198003][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.198040][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.214602][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.227480][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.229892][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.236919][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.263127][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.264301][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.306213][ T5654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.307616][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.308078][ T5654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.309130][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.311064][ T5654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.326915][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.358720][ T5654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.363322][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.375215][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.417347][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.429432][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.436028][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.436151][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.464775][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.465960][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.466004][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.498109][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.498245][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.515366][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.517513][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.517545][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.549814][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.574527][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.578944][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.578976][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.604511][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.604556][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.628517][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.650373][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.650419][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.655195][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.655318][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.692991][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.698876][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.762164][ T5633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.764549][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.797580][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.797629][ T3738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.817917][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.817963][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.819246][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.899410][ T5651] veth0_vlan: entered promiscuous mode [ 60.916631][ T5651] veth1_vlan: entered promiscuous mode [ 60.960831][ T5651] veth0_macvtap: entered promiscuous mode [ 60.968445][ T5651] veth1_macvtap: entered promiscuous mode [ 60.996695][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.007094][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.021665][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.042501][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.043098][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.043226][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.061596][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.116845][ T5624] veth0_vlan: entered promiscuous mode [ 61.135769][ T5624] veth1_vlan: entered promiscuous mode [ 61.166466][ T3738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.166493][ T3738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.205260][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.223291][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.226812][ T3738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.226833][ T3738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.230453][ T5624] veth0_macvtap: entered promiscuous mode [ 61.250859][ T5624] veth1_macvtap: entered promiscuous mode [ 61.286068][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.295781][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.314652][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.326088][ T5651] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.349929][ T5639] veth0_vlan: entered promiscuous mode [ 61.367781][ T5639] veth1_vlan: entered promiscuous mode [ 61.376748][ T5633] veth0_vlan: entered promiscuous mode [ 61.383773][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.417330][ T5633] veth1_vlan: entered promiscuous mode [ 61.440262][ T5639] veth0_macvtap: entered promiscuous mode [ 61.447023][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.447064][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.447100][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.447135][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.451783][ T5639] veth1_macvtap: entered promiscuous mode [ 61.494701][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.494721][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.501209][ T5625] Bluetooth: hci0: command tx timeout [ 61.540835][ T5645] veth0_vlan: entered promiscuous mode [ 61.547686][ T5627] veth0_vlan: entered promiscuous mode [ 61.557201][ T5633] veth0_macvtap: entered promiscuous mode [ 61.564345][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.565924][ T5633] veth1_macvtap: entered promiscuous mode [ 61.583193][ T4938] Bluetooth: hci1: command tx timeout [ 61.583225][ T5625] Bluetooth: hci2: command tx timeout [ 61.597351][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.598075][ T5645] veth1_vlan: entered promiscuous mode [ 61.618226][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.618248][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.619507][ T5627] veth1_vlan: entered promiscuous mode [ 61.648853][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.651592][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.652007][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.652054][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.652191][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.671849][ T5625] Bluetooth: hci3: command tx timeout [ 61.705440][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.711096][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.741836][ T5629] Bluetooth: hci4: command tx timeout [ 61.741871][ T4938] Bluetooth: hci5: command tx timeout [ 61.741897][ T5625] Bluetooth: hci6: command tx timeout [ 61.751636][ T5645] veth0_macvtap: entered promiscuous mode [ 61.783546][ T5645] veth1_macvtap: entered promiscuous mode [ 61.800016][ T5899] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 61.800833][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.800851][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.834734][ T5654] veth0_vlan: entered promiscuous mode [ 61.857995][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.858136][ T5654] veth1_vlan: entered promiscuous mode [ 61.883396][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.890759][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.890811][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.911625][ T5627] veth0_macvtap: entered promiscuous mode [ 61.919902][ T5627] veth1_macvtap: entered promiscuous mode [ 61.941068][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11'. [ 61.961489][ T5654] veth0_macvtap: entered promiscuous mode [ 61.965199][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.965217][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.016009][ T5654] veth1_macvtap: entered promiscuous mode [ 62.032385][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.038624][ T5917] ======================================================= [ 62.038624][ T5917] WARNING: The mand mount option has been deprecated and [ 62.038624][ T5917] and is ignored by this kernel. Remove the mand [ 62.038624][ T5917] option from the mount to silence this warning. [ 62.038624][ T5917] ======================================================= [ 62.040084][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.040103][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.098809][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.116544][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.136578][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.141696][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.141714][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.217434][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.217455][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.241201][ T5751] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.263218][ T26] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302564][ T26] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302636][ T26] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302691][ T26] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302740][ T26] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302776][ T26] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302811][ T26] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302848][ T26] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302885][ T26] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302921][ T26] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302956][ T26] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302992][ T26] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.303069][ T26] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.303112][ T26] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.303149][ T26] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.307375][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.307435][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.446022][ T5751] usb 1-1: Using ep0 maxpacket: 32 [ 62.453724][ T5751] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.468946][ T5751] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 62.468978][ T5751] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 62.469005][ T5751] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 62.469042][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.469069][ T5751] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.469098][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.469135][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.480117][ T5751] usb 1-1: config 0 descriptor?? [ 62.499106][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.499159][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.652012][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.652031][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.710873][ T5932] loop4: detected capacity change from 0 to 40427 [ 62.720416][ T5932] F2FS-fs (loop4): build fault injection rate: 14 [ 62.720443][ T5932] F2FS-fs (loop4): build fault injection type: 0x30e4 [ 62.735057][ T5932] F2FS-fs (loop4): invalid crc value [ 62.748779][ T5932] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x2f9/0x810 [ 62.778615][ T5751] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 62.806780][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.806802][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.845654][ T5932] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 62.850841][ T5932] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.896158][ T5932] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x39f/0xda0 [ 62.898765][ T5932] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_find_data_folio+0x174/0x290 [ 62.922989][ T5932] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x68/0x1050 [ 62.963274][ T5946] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 62.986236][ T5645] syz-executor: attempt to access beyond end of device [ 62.986236][ T5645] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 62.986289][ T5645] CPU: 0 UID: 0 PID: 5645 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 62.986317][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 62.986335][ T5645] Call Trace: [ 62.986342][ T5645] [ 62.986349][ T5645] dump_stack_lvl+0x97/0xe0 [ 62.986388][ T5645] f2fs_stop_checkpoint+0x326/0x4f0 [ 62.986426][ T5645] f2fs_write_end_bio+0x656/0x6d0 [ 62.986463][ T5645] f2fs_write_end_io+0x56/0xc0 [ 62.986497][ T5645] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 62.986540][ T5645] bio_endio+0x310/0x480 [ 62.986582][ T5645] submit_bio_noacct+0x209/0xc10 [ 62.986620][ T5645] f2fs_submit_write_bio+0x6b/0x110 [ 62.986656][ T5645] __submit_merged_bio+0x58/0x1b0 [ 62.986697][ T5645] __submit_merged_write_cond+0x241/0x2d0 [ 62.986742][ T5645] f2fs_write_cache_pages+0x1017/0x1110 [ 62.986769][ T5645] ? __create_object+0x59/0xb0 [ 62.986818][ T5645] f2fs_write_data_pages+0x27b/0x7f0 [ 62.986845][ T5645] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 62.986872][ T5645] do_writepages+0xe9/0x1f0 [ 62.986898][ T5645] ? wbc_attach_and_unlock_inode+0x1a1/0x1d0 [ 62.986941][ T5645] filemap_writeback+0x109/0x140 [ 62.986978][ T5645] f2fs_sync_dirty_inodes+0x1af/0x390 [ 62.987007][ T5645] block_operations+0x9a/0x5f0 [ 62.987043][ T5645] f2fs_write_checkpoint+0x293/0x1a50 [ 62.987072][ T5645] ? _raw_spin_unlock_irq+0x9/0x30 [ 62.987105][ T5645] ? __wait_for_common+0x180/0x1b0 [ 62.987142][ T5645] ? __pfx_schedule_timeout+0x10/0x10 [ 62.987175][ T5645] kill_f2fs_super+0x1af/0x1f0 [ 62.987210][ T5645] deactivate_locked_super+0x4b/0xd0 [ 62.987256][ T5645] deactivate_super+0xa7/0xc0 [ 62.987301][ T5645] cleanup_mnt+0x145/0x1f0 [ 62.987328][ T5645] task_work_run+0x95/0xf0 [ 62.987354][ T5645] exit_to_user_mode_loop+0x1b9/0x690 [ 62.987387][ T5645] ? __x64_sys_umount+0xa1/0xf0 [ 62.987419][ T5645] do_syscall_64+0x40d/0x530 [ 62.987458][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.987485][ T5645] RIP: 0033:0x7f0a72d9f397 [ 62.987517][ T5645] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 62.987543][ T5645] RSP: 002b:00007ffd3cfa0eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 62.987568][ T5645] RAX: 0000000000000000 RBX: 00007f0a72e344bb RCX: 00007f0a72d9f397 [ 62.987585][ T5645] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3cfa0f70 [ 62.987601][ T5645] RBP: 00007ffd3cfa0f70 R08: 00007ffd3cfa1f70 R09: 00000000ffffffff [ 62.987618][ T5645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3cfa2000 [ 62.987634][ T5645] R13: 00007f0a72e344bb R14: 000000000000f5c7 R15: 00007ffd3cfa2040 [ 62.987656][ T5645] [ 63.029474][ T5645] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 63.029518][ T5645] CPU: 0 UID: 0 PID: 5645 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 63.029548][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 63.029562][ T5645] Call Trace: [ 63.029569][ T5645] [ 63.029585][ T5645] dump_stack_lvl+0x97/0xe0 [ 63.029619][ T5645] f2fs_stop_checkpoint+0x326/0x4f0 [ 63.029660][ T5645] f2fs_write_end_bio+0x656/0x6d0 [ 63.029700][ T5645] f2fs_write_end_io+0x56/0xc0 [ 63.029737][ T5645] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 63.029774][ T5645] bio_endio+0x310/0x480 [ 63.029814][ T5645] submit_bio_noacct+0x209/0xc10 [ 63.029844][ T5645] f2fs_submit_write_bio+0x6b/0x110 [ 63.029877][ T5645] __submit_merged_bio+0x58/0x1b0 [ 63.029914][ T5645] __submit_merged_write_cond+0x241/0x2d0 [ 63.029958][ T5645] f2fs_write_cache_pages+0x1017/0x1110 [ 63.029985][ T5645] ? __create_object+0x59/0xb0 [ 63.030038][ T5645] f2fs_write_data_pages+0x27b/0x7f0 [ 63.030067][ T5645] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 63.030094][ T5645] do_writepages+0xe9/0x1f0 [ 63.030120][ T5645] ? wbc_attach_and_unlock_inode+0x1a1/0x1d0 [ 63.030163][ T5645] filemap_writeback+0x109/0x140 [ 63.030198][ T5645] f2fs_sync_dirty_inodes+0x1af/0x390 [ 63.030229][ T5645] block_operations+0x9a/0x5f0 [ 63.030267][ T5645] f2fs_write_checkpoint+0x293/0x1a50 [ 63.030296][ T5645] ? _raw_spin_unlock_irq+0x9/0x30 [ 63.030327][ T5645] ? __wait_for_common+0x180/0x1b0 [ 63.030363][ T5645] ? __pfx_schedule_timeout+0x10/0x10 [ 63.030395][ T5645] kill_f2fs_super+0x1af/0x1f0 [ 63.030427][ T5645] deactivate_locked_super+0x4b/0xd0 [ 63.030472][ T5645] deactivate_super+0xa7/0xc0 [ 63.030535][ T5645] cleanup_mnt+0x145/0x1f0 [ 63.030561][ T5645] task_work_run+0x95/0xf0 [ 63.030594][ T5645] exit_to_user_mode_loop+0x1b9/0x690 [ 63.030628][ T5645] ? __x64_sys_umount+0xa1/0xf0 [ 63.030659][ T5645] do_syscall_64+0x40d/0x530 [ 63.030696][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.030721][ T5645] RIP: 0033:0x7f0a72d9f397 [ 63.030739][ T5645] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 63.030764][ T5645] RSP: 002b:00007ffd3cfa0eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 63.030787][ T5645] RAX: 0000000000000000 RBX: 00007f0a72e344bb RCX: 00007f0a72d9f397 [ 63.030804][ T5645] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3cfa0f70 [ 63.030820][ T5645] RBP: 00007ffd3cfa0f70 R08: 00007ffd3cfa1f70 R09: 00000000ffffffff [ 63.030837][ T5645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3cfa2000 [ 63.030852][ T5645] R13: 00007f0a72e344bb R14: 000000000000f5c7 R15: 00007ffd3cfa2040 [ 63.030873][ T5645] [ 63.128121][ C1] usblp0: nonzero read bulk status received: -71 [ 63.132545][ T5018] usb 1-1: USB disconnect, device number 2 [ 63.185010][ T5645] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 63.523539][ T5911] usblp0: removed [ 63.581289][ T5625] Bluetooth: hci0: command tx timeout [ 63.623252][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26'. [ 63.636540][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17'. [ 63.643302][ T5927] ip_vti0: entered promiscuous mode [ 63.643354][ T5927] ip_vti0: entered allmulticast mode [ 63.661941][ T4938] Bluetooth: hci1: command tx timeout [ 63.661978][ T5625] Bluetooth: hci2: command tx timeout [ 63.686193][ T5941] loop1: detected capacity change from 0 to 32768 [ 63.688426][ T5941] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (5941) [ 63.690832][ T5941] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.690871][ T5941] BTRFS info (device loop1): using sha256 checksum algorithm [ 63.741953][ T5625] Bluetooth: hci3: command tx timeout [ 63.774904][ T5971] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.817601][ T5941] BTRFS info (device loop1): enabling ssd optimizations [ 63.817627][ T5941] BTRFS info (device loop1): turning on async discard [ 63.817646][ T5941] BTRFS info (device loop1): enabling free space tree [ 63.821620][ T5629] Bluetooth: hci4: command tx timeout [ 63.821654][ T4938] Bluetooth: hci5: command tx timeout [ 63.821682][ T5625] Bluetooth: hci6: command tx timeout [ 63.958677][ T5941] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 64.048962][ T5941] BTRFS info (device loop1): balance: start -d -m [ 64.050561][ T5941] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 64.097190][ T5941] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 64.159721][ T5941] BTRFS info (device loop1): found 9 extents, stage: move data extents [ 64.186478][ T5941] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 64.208467][ T5941] BTRFS info (device loop1): balance: ended with status: 0 [ 64.241424][ T5765] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.313227][ T5627] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.391720][ T5765] usb 4-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 64.395677][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.395708][ T5765] usb 4-1: Product: syz [ 64.395728][ T5765] usb 4-1: Manufacturer: syz [ 64.395747][ T5765] usb 4-1: SerialNumber: syz [ 64.397803][ T5765] ums-datafab 4-1:1.0: USB Mass Storage device detected [ 64.405714][ T5765] ums-datafab 4-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 64.405714][ T5765] Please send a copy of this message to and [ 64.412782][ T5765] scsi host1: usb-storage 4-1:1.0 [ 64.465169][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.465586][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.466101][ T6010] bridge0: entered allmulticast mode [ 64.472181][ T5997] loop0: detected capacity change from 0 to 32768 [ 64.473513][ T5997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.35 (5997) [ 64.478093][ T5997] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.478178][ T5997] BTRFS info (device loop0): using sha256 checksum algorithm [ 64.553952][ T6010] bridge_slave_1: left allmulticast mode [ 64.553977][ T6010] bridge_slave_1: left promiscuous mode [ 64.554084][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.568574][ T6010] bridge_slave_0: left allmulticast mode [ 64.568597][ T6010] bridge_slave_0: left promiscuous mode [ 64.568693][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.610295][ T5997] BTRFS info (device loop0): rebuilding free space tree [ 64.624218][ T5997] BTRFS info (device loop0): enabling ssd optimizations [ 64.624248][ T5997] BTRFS info (device loop0): using spread ssd allocation scheme [ 64.624270][ T5997] BTRFS info (device loop0): turning on async discard [ 64.624290][ T5997] BTRFS info (device loop0): enabling free space tree [ 64.624309][ T5997] BTRFS info (device loop0): force clearing of disk cache [ 64.799188][ T5639] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.963484][ T6047] netlink: 104 bytes leftover after parsing attributes in process `syz.6.49'. [ 64.982480][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.50'. [ 64.982519][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.50'. [ 65.051717][ T5983] loop3: detected capacity change from 0 to 32768 [ 65.060331][ T5983] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.30 (5983) [ 65.086919][ T5983] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 65.086961][ T5983] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 65.141720][ T5983] BTRFS info (device loop3): enabling ssd optimizations [ 65.141739][ T5983] BTRFS info (device loop3): turning on async discard [ 65.141753][ T5983] BTRFS info (device loop3): enabling free space tree [ 65.159100][ T6053] loop1: detected capacity change from 0 to 512 [ 65.181623][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.181654][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.182072][ T6053] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.182089][ T6053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.190367][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.55'. [ 65.220635][ T6053] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.51: bad orphan inode 131083 [ 65.220733][ T6053] loop1: lost filesystem error report for type 5 error -117 [ 65.231193][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 65.231255][ C0] EXT4-fs (loop1): initial error at time 1789570635: ext4_orphan_get:1429 [ 65.231317][ C0] EXT4-fs (loop1): last error at time 1789570635: ext4_orphan_get:1429 [ 65.245107][ T6073] input: syz0 as /devices/virtual/input/input5 [ 65.248087][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.380072][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.432500][ T26] scsi 1:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 65.436290][ T26] scsi 1:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 65.463703][ T26] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 65.479819][ T26] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 65.661334][ T5625] Bluetooth: hci0: command tx timeout [ 65.741192][ T4938] Bluetooth: hci1: command tx timeout [ 65.741216][ T5625] Bluetooth: hci2: command tx timeout [ 65.821836][ T5625] Bluetooth: hci3: command tx timeout [ 65.901611][ T5629] Bluetooth: hci4: command tx timeout [ 65.901636][ T4938] Bluetooth: hci5: command tx timeout [ 65.901653][ T5625] Bluetooth: hci6: command tx timeout [ 65.944825][ T6108] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.039059][ T6110] loop5: detected capacity change from 0 to 2048 [ 66.077955][ T6110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.149371][ T5633] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 66.401536][ T5751] usb 4-1: USB disconnect, device number 2 [ 66.441633][ T3611] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 66.441681][ T3611] sd 1:0:0:0: [sdb] Sense not available. [ 66.441739][ T3611] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 66.441763][ T3611] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 66.441800][ T3611] sd 1:0:0:0: [sdb] Write Protect is off [ 66.441859][ T3611] sd 1:0:0:0: [sdb] Asking for cache data failed [ 66.441888][ T3611] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 66.443154][ T68] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 66.443392][ T68] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 66.443424][ T68] sd 1:0:0:1: [sdc] Sense not available. [ 66.443579][ T68] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 66.443603][ T68] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 66.443653][ T68] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 66.443701][ T68] sd 1:0:0:1: [sdc] Asking for cache data failed [ 66.443724][ T68] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 66.449472][ T3611] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 66.455954][ T68] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 66.460160][ T5915] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 66.638508][ T5630] udevd[5630]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 66.686789][ T5915] udevd[5915]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 66.763731][ T5635] udevd[5635]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 66.804907][ T5630] udevd[5630]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 66.849553][ T6110] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.849614][ T6110] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 66.849643][ T6110] EXT4-fs (loop5): This should not happen!! Data will be lost [ 66.849643][ T6110] [ 66.849659][ T6110] EXT4-fs (loop5): Total free blocks count 0 [ 66.849674][ T6110] EXT4-fs (loop5): Free/Dirty block details [ 66.849688][ T6110] EXT4-fs (loop5): free_blocks=2415919104 [ 66.849704][ T6110] EXT4-fs (loop5): dirty_blocks=16 [ 66.849718][ T6110] EXT4-fs (loop5): Block reservation details [ 66.849731][ T6110] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 66.932550][ T5654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.107116][ T6133] loop2: detected capacity change from 0 to 32768 [ 67.108456][ T6133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.75 (6133) [ 67.109398][ T6133] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.109432][ T6133] BTRFS info (device loop2): using crc32c checksum algorithm [ 67.173168][ T6133] BTRFS info (device loop2): enabling ssd optimizations [ 67.173188][ T6133] BTRFS info (device loop2): turning on flush-on-commit [ 67.173203][ T6133] BTRFS info (device loop2): enabling free space tree [ 67.173231][ T6133] BTRFS info (device loop2): force zlib compression, level 3 [ 67.173265][ T6133] BTRFS info (device loop2): max_inline set to 4096 [ 67.315539][ T5651] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.741588][ T5788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.806044][ T6171] syz.5.83 (6171): drop_caches: 3 [ 67.844640][ T6176] syz.5.83 (6176): drop_caches: 3 [ 67.902162][ T5788] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 67.902864][ T5788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.902908][ T5788] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 67.902941][ T5788] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.903953][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 67.903980][ T5788] usb 4-1: Product: syz [ 67.903999][ T5788] usb 4-1: Manufacturer: syz [ 67.905978][ T6179] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.906835][ T5788] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 67.907731][ T5788] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 67.942093][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.091527][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 68.092248][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.147207][ T5788] usb 4-1: USB disconnect, device number 3 [ 68.157746][ T5788] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 68.157990][ T5788] garmin_gps 4-1:1.0: device disconnected [ 68.184873][ T6201] loop2: detected capacity change from 0 to 512 [ 68.187659][ T6201] EXT4-fs (loop2): invalid journal inode [ 68.187691][ T6201] EXT4-fs (loop2): can't get journal size [ 68.216620][ T6201] EXT4-fs (loop2): 1 truncate cleaned up [ 68.217139][ T6201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.300557][ T24] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 68.556897][ T24] usb 7-1: USB disconnect, device number 2 [ 68.662045][ T5651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.714961][ T6216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.773687][ T6222] loop1: detected capacity change from 0 to 4096 [ 68.774880][ T6222] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 68.799451][ T6222] ntfs3(loop1): ino=19, mi_enum_attr [ 68.799485][ T6222] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 68.800278][ T6222] ntfs3(loop1): ino=1a, mi_enum_attr [ 68.800333][ T6222] ntfs3(loop1): ino=1a, mi_enum_attr [ 68.800604][ T6222] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 68.858571][ T30] audit: type=1800 audit(1789570639.298:2): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file1" dev="loop1" ino=31 res=0 errno=0 [ 68.952078][ T6228] loop2: detected capacity change from 0 to 2048 [ 68.972128][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.012553][ T6228] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 69.012757][ T6228] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 19 with error 28 [ 69.012790][ T6228] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.012790][ T6228] [ 69.012807][ T6228] EXT4-fs (loop2): Total free blocks count 0 [ 69.012823][ T6228] EXT4-fs (loop2): Free/Dirty block details [ 69.012837][ T6228] EXT4-fs (loop2): free_blocks=4096 [ 69.012852][ T6228] EXT4-fs (loop2): dirty_blocks=64 [ 69.012866][ T6228] EXT4-fs (loop2): Block reservation details [ 69.012878][ T6228] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 69.014823][ T6227] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.158251][ T6237] FAULT_INJECTION: forcing a failure. [ 69.158251][ T6237] name failslab, interval 1, probability 0, space 0, times 1 [ 69.158286][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 69.158319][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 69.158335][ T6237] Call Trace: [ 69.158342][ T6237] [ 69.158350][ T6237] dump_stack_lvl+0x97/0xe0 [ 69.158386][ T6237] should_fail_ex.cold+0x2f/0x34 [ 69.158425][ T6237] should_failslab+0x44/0x70 [ 69.158451][ T6237] __kmalloc_noprof+0xd2/0x540 [ 69.158481][ T6237] ? tomoyo_realpath_from_path+0x48/0x2c0 [ 69.158513][ T6237] tomoyo_realpath_from_path+0x48/0x2c0 [ 69.158546][ T6237] tomoyo_path_number_perm+0xfe/0x2c0 [ 69.158598][ T6237] ? raw_ioctl+0x1d8/0x10c0 [ 69.158622][ T6237] security_file_ioctl+0xd3/0x230 [ 69.158681][ T6237] __x64_sys_ioctl+0x5a/0x140 [ 69.158725][ T6237] do_syscall_64+0xe9/0x530 [ 69.158763][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.158790][ T6237] RIP: 0033:0x7fcec559ddeb [ 69.158809][ T6237] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 69.158835][ T6237] RSP: 002b:00007fcec6442f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.158858][ T6237] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcec559ddeb [ 69.158874][ T6237] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 69.158890][ T6237] RBP: 00007fcec6443fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 69.158906][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.158921][ T6237] R13: 0000200000000180 R14: 0000000000000005 R15: 0000000000000000 [ 69.158942][ T6237] [ 69.158950][ T6237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.409238][ T6235] loop5: detected capacity change from 0 to 40427 [ 69.411781][ T5758] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.415319][ T6235] F2FS-fs (loop5): invalid crc value [ 69.496091][ T6235] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 69.496313][ T6235] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 69.496340][ T6235] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 69.496369][ T6235] F2FS-fs (loop5): Start checkpoint disabled! [ 69.496762][ T6235] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 69.497702][ T6250] netlink: 'syz.0.114': attribute type 3 has an invalid length. [ 69.498396][ T6235] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 69.561470][ T5758] usb 3-1: Using ep0 maxpacket: 32 [ 69.562421][ T5758] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 0.40 [ 69.569025][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.569052][ T5758] usb 3-1: Product: syz [ 69.569068][ T5758] usb 3-1: Manufacturer: syz [ 69.569085][ T5758] usb 3-1: SerialNumber: syz [ 69.631251][ T5902] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.635764][ T6235] syz.5.107: attempt to access beyond end of device [ 69.635764][ T6235] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.673611][ T6247] loop4: detected capacity change from 0 to 40427 [ 69.679401][ T6247] F2FS-fs (loop4): invalid crc value [ 69.688875][ T68] kworker/u8:5: attempt to access beyond end of device [ 69.688875][ T68] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 69.688999][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 69.689081][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 69.689141][ T68] Workqueue: writeback wb_workfn (flush-7:5) [ 69.689226][ T68] Call Trace: [ 69.689246][ T68] [ 69.689267][ T68] dump_stack_lvl+0x97/0xe0 [ 69.689353][ T68] f2fs_stop_checkpoint+0x326/0x4f0 [ 69.689494][ T68] f2fs_write_end_bio+0x656/0x6d0 [ 69.689596][ T68] f2fs_write_end_io+0x56/0xc0 [ 69.689700][ T68] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 69.689822][ T68] bio_endio+0x310/0x480 [ 69.689993][ T68] submit_bio_noacct+0x209/0xc10 [ 69.690079][ T68] f2fs_submit_write_bio+0x6b/0x110 [ 69.690180][ T68] __submit_merged_bio+0x58/0x1b0 [ 69.690285][ T68] __submit_merged_write_cond+0x241/0x2d0 [ 69.690405][ T68] f2fs_write_cache_pages+0x1017/0x1110 [ 69.690536][ T68] f2fs_write_data_pages+0x27b/0x7f0 [ 69.690609][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 69.690680][ T68] do_writepages+0xe9/0x1f0 [ 69.690752][ T68] ? wb_io_lists_populated+0x60/0x80 [ 69.690816][ T68] __writeback_single_inode+0x68/0x560 [ 69.690936][ T68] ? inode_to_bdi+0x36/0x70 [ 69.690994][ T68] ? _raw_spin_unlock+0x9/0x30 [ 69.691076][ T68] writeback_sb_inodes+0x2f3/0x7d0 [ 69.691247][ T68] wb_writeback+0xb0/0x490 [ 69.691319][ T68] wb_workfn+0x10a/0x660 [ 69.691381][ T68] ? __schedule+0x46a/0x1960 [ 69.691472][ T68] ? kick_pool_pick+0xe4/0x270 [ 69.691578][ T68] process_one_work+0x2b8/0x5f0 [ 69.691654][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 69.691723][ T68] worker_thread+0x255/0x4a0 [ 69.691805][ T68] ? __pfx_worker_thread+0x10/0x10 [ 69.691878][ T68] kthread+0x150/0x1a0 [ 69.691972][ T68] ? __pfx_kthread+0x10/0x10 [ 69.692067][ T68] ret_from_fork+0x219/0x490 [ 69.692135][ T68] ? __pfx_kthread+0x10/0x10 [ 69.692236][ T68] ret_from_fork_asm+0x1a/0x30 [ 69.692348][ T68] [ 69.712827][ T68] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 69.791002][ T5902] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 69.800337][ T5902] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 69.800440][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.800506][ T5902] usb 7-1: config 0 has no interfaces? [ 69.800599][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.830780][ T5902] usb 7-1: config 0 descriptor?? [ 69.972076][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 70.006583][ T5758] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 70.008183][ T5758] gspca_zc3xx: reg_w_i err -71 [ 70.028979][ T6247] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 70.035860][ T6247] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.048379][ T6260] Zero length message leads to an empty skb [ 70.072179][ T6263] loop5: detected capacity change from 0 to 4096 [ 70.107548][ T6267] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.107656][ T6263] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 70.109149][ T6263] NILFS (loop5): mounting fs with errors [ 70.116459][ T24] usb 7-1: USB disconnect, device number 3 [ 70.245853][ T6268] loop1: detected capacity change from 0 to 32768 [ 70.270001][ T6268] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 70.296070][ T6268] XFS (loop1): Ending clean mount [ 70.302498][ T42] cfg80211: failed to load regulatory.db [ 70.342470][ T30] audit: type=1800 audit(1789570640.788:3): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 70.378314][ T6247] loop4: detected capacity change from 0 to 16 [ 70.389786][ T6247] erofs (device loop4): mounted with root inode @ nid 36. [ 70.554030][ T6289] loop2: detected capacity change from 0 to 16 [ 70.570981][ T6289] erofs (device loop2): mounted with root inode @ nid 36. [ 70.591278][ T5758] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 70.591304][ T5758] gspca_zc3xx 3-1:1.0: probe with driver gspca_zc3xx failed with error -71 [ 70.591694][ T5758] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 70.626688][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.628627][ T6292] netlink: 'syz.4.122': attribute type 16 has an invalid length. [ 70.628646][ T6292] netlink: 'syz.4.122': attribute type 17 has an invalid length. [ 70.628727][ T5758] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.630901][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.675227][ T5758] usb 3-1: USB disconnect, device number 2 [ 70.692648][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.988543][ T6306] loop2: detected capacity change from 0 to 512 [ 71.005323][ T6306] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.009703][ T6306] EXT4-fs (loop2): 1 truncate cleaned up [ 71.010571][ T6306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.059618][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.059657][ T6292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.096084][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.096151][ T6292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.143005][ T5627] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 71.212834][ T6310] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.218018][ T5651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.292276][ T30] audit: type=1800 audit(1789570641.728:4): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.131" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 71.501933][ T6323] netlink: 44 bytes leftover after parsing attributes in process `syz.6.135'. [ 71.540728][ T6323] netlink: 44 bytes leftover after parsing attributes in process `syz.6.135'. [ 71.561406][ T6304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.129 (6304) [ 71.615121][ T6304] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.615148][ T6304] BTRFS info (device loop0): using crc32c checksum algorithm [ 71.678330][ T5018] libceph: connect (1)[c::]:6789 error -101 [ 71.678393][ T5018] libceph: mon0 (1)[c::]:6789 connect error [ 71.714516][ T6304] BTRFS info (device loop0): enabling ssd optimizations [ 71.714545][ T6304] BTRFS info (device loop0): turning on flush-on-commit [ 71.714565][ T6304] BTRFS info (device loop0): enabling free space tree [ 71.714584][ T6304] BTRFS info (device loop0): enabling auto defrag [ 71.714603][ T6304] BTRFS info (device loop0): use lzo compression, level 1 [ 71.714628][ T6304] BTRFS info (device loop0): max_inline set to 4096 [ 71.767604][ T5018] libceph: connect (1)[c::]:6789 error -101 [ 71.767652][ T5018] libceph: mon0 (1)[c::]:6789 connect error [ 71.838345][ T30] audit: type=1326 audit(1789570642.278:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.3.140" exe="/root/ci-upstream-gce-leak/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88faf9e159 code=0x0 [ 71.894209][ T6357] syz.5.141 uses obsolete (PF_INET,SOCK_PACKET) [ 71.931447][ T5758] libceph: connect (1)[c::]:6789 error -101 [ 71.931496][ T5758] libceph: mon0 (1)[c::]:6789 connect error [ 72.021418][ T5758] libceph: connect (1)[c::]:6789 error -101 [ 72.021468][ T5758] libceph: mon0 (1)[c::]:6789 connect error [ 72.191328][ T6344] F2FS-fs (loop6): Invalid log_blocksize (64), supports only 12 [ 72.191358][ T6344] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 72.192173][ T6344] F2FS-fs (loop6): Image doesn't support compression [ 72.194040][ T6344] F2FS-fs (loop6): invalid crc value [ 72.265238][ T6344] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 72.265483][ T6344] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 72.265511][ T6344] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 72.265538][ T6344] F2FS-fs (loop6): Start checkpoint disabled! [ 72.265827][ T6344] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 72.269940][ T6344] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 72.269968][ T6344] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 72.442217][ T5758] libceph: connect (1)[c::]:6789 error -101 [ 72.442267][ T5758] libceph: mon0 (1)[c::]:6789 connect error [ 72.448097][ T5639] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.477230][ T6327] ceph: No mds server is up or the cluster is laggy [ 72.477366][ T6348] ceph: No mds server is up or the cluster is laggy [ 72.553145][ T6375] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.582834][ T6379] ip_tables: iptables: counters copy to user failed while replacing table [ 72.684316][ T68] IPVS: starting estimator thread 0... [ 72.772941][ T6388] IPVS: using max 4848 ests per chain, 242400 per kthread [ 73.266023][ T6425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 73.310740][ T6413] block nbd6: shutting down sockets [ 73.354909][ T6430] set_capacity_and_notify: 4 callbacks suppressed [ 73.354929][ T6430] loop6: detected capacity change from 0 to 512 [ 73.376559][ T6430] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.168: inode has both inline data and extents flags [ 73.376594][ T6430] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.376677][ T6430] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.168: couldn't read orphan inode 15 (err -117) [ 73.376706][ T6430] loop6: lost filesystem error report for type 5 error -117 [ 73.377123][ T6430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.491318][ T6430] loop6: detected capacity change from 512 to 0 [ 73.496276][ T6430] EXT4-fs error (device loop6): ext4_get_inode_loc:5053: inode #18: block 9: comm syz.6.168: unable to read itable block [ 73.496377][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.496398][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.496415][ T6430] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: IO failure [ 73.496461][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.496479][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.496494][ T6430] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #18: comm syz.6.168: mark_inode_dirty error [ 73.496543][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.496561][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.496671][ T6430] EXT4-fs error (device loop6): ext4_get_inode_loc:5053: inode #18: block 9: comm syz.6.168: unable to read itable block [ 73.496743][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.496761][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.496783][ T6430] EXT4-fs error (device loop6): ext4_get_max_inline_size:120: inode #18: comm syz.6.168: can't get inode location 18 [ 73.496837][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.496855][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.496982][ T6430] EXT4-fs error (device loop6): ext4_get_inode_loc:5053: inode #18: block 9: comm syz.6.168: unable to read itable block [ 73.497035][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.497052][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.497068][ T6430] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: IO failure [ 73.497108][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.497125][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.497140][ T6430] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #18: comm syz.6.168: mark_inode_dirty error [ 73.497216][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.497234][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.497316][ T6430] EXT4-fs error (device loop6): ext4_check_bdev_write_error:234: comm syz.6.168: Error while async write back metadata [ 73.497365][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.497383][ T6430] EXT4-fs (loop6): I/O error while writing superblock [ 73.497398][ T6430] EXT4-fs error (device loop6): ext4_check_bdev_write_error:234: comm syz.6.168: Error while async write back metadata [ 73.497472][ T6430] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 73.644913][ T5624] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 73.858656][ T6428] loop2: detected capacity change from 0 to 40427 [ 73.869120][ T6428] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 73.869150][ T6428] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 73.869259][ T6428] F2FS-fs (loop2): Image doesn't support compression [ 73.869574][ T6428] F2FS-fs (loop2): invalid crc value [ 73.942534][ T6428] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 73.942704][ T6428] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 73.942734][ T6428] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 73.942758][ T6428] F2FS-fs (loop2): Start checkpoint disabled! [ 73.943129][ T6428] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 73.944780][ T6428] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 73.944804][ T6428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 74.003226][ T26] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.051191][ T5018] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.057452][ T26] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.102864][ T26] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.105761][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.105883][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.105982][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.106218][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.106391][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.114391][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 74.114472][ T6446] bridge_slave_1: left allmulticast mode [ 74.114525][ T6446] bridge_slave_1: left promiscuous mode [ 74.114806][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.122030][ T6446] bridge_slave_0: left allmulticast mode [ 74.122054][ T6446] bridge_slave_0: left promiscuous mode [ 74.122140][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.214521][ T26] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.233056][ T5018] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 74.235532][ T5018] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.235575][ T5018] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 74.235611][ T5018] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 74.235650][ T5018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.406562][ T6458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.177'. [ 74.450927][ T26] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.461787][ T6454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.177'. [ 74.464217][ T26] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.466271][ T26] bond0 (unregistering): Released all slaves [ 74.553616][ T6461] loop2: detected capacity change from 0 to 8192 [ 74.589786][ T30] audit: type=1800 audit(1789570645.028:6): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="file2" dev="loop2" ino=1048617 res=0 errno=0 [ 74.623618][ T6461] syz.2.176: attempt to access beyond end of device [ 74.623618][ T6461] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 74.667146][ T5018] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 74.667170][ T5018] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 74.667194][ T5018] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 74.669183][ T5018] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 74.708595][ T26] hsr_slave_0: left promiscuous mode [ 74.708906][ T26] hsr_slave_1: left promiscuous mode [ 74.708955][ T5018] usb 2-1: USB disconnect, device number 2 [ 74.709616][ T26] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.709633][ T26] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.710175][ T26] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.710191][ T26] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.762392][ T26] veth1_macvtap: left promiscuous mode [ 74.762483][ T26] veth0_macvtap: left promiscuous mode [ 74.762606][ T26] veth1_vlan: left promiscuous mode [ 74.762691][ T26] veth0_vlan: left promiscuous mode [ 74.934582][ T26] team0 (unregistering): Port device team_slave_1 removed [ 74.939778][ T26] team0 (unregistering): Port device team_slave_0 removed [ 75.140599][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.141441][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.141648][ T6447] bridge_slave_0: entered allmulticast mode [ 75.148108][ T6447] bridge_slave_0: entered promiscuous mode [ 75.156755][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.158202][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.158462][ T6447] bridge_slave_1: entered allmulticast mode [ 75.161021][ T6447] bridge_slave_1: entered promiscuous mode [ 75.174174][ T6489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.188513][ T6489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.210979][ T6489] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 75.211006][ T6489] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 75.211105][ T6489] overlayfs: d_ino too big (9, ino=9223372036854775869, xinobits=3) [ 75.212820][ T6489] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 75.213047][ T6489] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 75.213256][ T6489] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 75.213488][ T6489] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 75.215728][ T6489] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 75.217177][ T6489] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 75.217462][ T6489] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 75.224882][ T6447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.233782][ T6447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.329377][ T6447] team0: Port device team_slave_0 added [ 75.336324][ T6447] team0: Port device team_slave_1 added [ 75.363332][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.363349][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.363382][ T6447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.363864][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.363878][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.363909][ T6447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.447165][ T6447] hsr_slave_0: entered promiscuous mode [ 75.449104][ T6447] hsr_slave_1: entered promiscuous mode [ 75.511107][ T6501] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 75.581688][ T5758] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.583777][ T6497] loop4: detected capacity change from 0 to 40427 [ 75.584449][ T6497] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 75.584474][ T6497] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 75.649431][ T6497] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 75.649899][ T6497] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 75.649923][ T6497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.700058][ T6497] syz.4.188: attempt to access beyond end of device [ 75.700058][ T6497] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 75.722881][ T57] kworker/u8:3: attempt to access beyond end of device [ 75.722881][ T57] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 75.745011][ T5758] usb 4-1: Using ep0 maxpacket: 32 [ 75.751634][ T5758] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 75.753564][ T5758] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 75.753600][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 75.753633][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 75.753662][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 75.753695][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 75.755703][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.755734][ T5758] usb 4-1: Product: syz [ 75.755753][ T5758] usb 4-1: Manufacturer: syz [ 75.755771][ T5758] usb 4-1: SerialNumber: syz [ 75.756857][ T5758] usb 4-1: config 0 descriptor?? [ 75.978440][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.980285][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.997697][ T6526] netlink: 'syz.0.194': attribute type 16 has an invalid length. [ 75.997730][ T6526] netlink: 'syz.0.194': attribute type 17 has an invalid length. [ 76.107335][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.107387][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.126476][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.126611][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.142591][ T4938] Bluetooth: hci0: command tx timeout [ 76.171939][ T5758] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 76.171967][ T5758] input input6: Device does not respond to id packet M [ 76.172478][ T5758] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 76.172502][ T5758] input input6: Device does not respond to id packet P [ 76.172973][ T5758] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 76.172998][ T5758] input input6: Device does not respond to id packet B [ 76.234244][ T6420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.307544][ T6541] FAULT_INJECTION: forcing a failure. [ 76.307544][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 76.307585][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 76.307617][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 76.307634][ T6541] Call Trace: [ 76.307642][ T6541] [ 76.307650][ T6541] dump_stack_lvl+0x97/0xe0 [ 76.307690][ T6541] should_fail_ex.cold+0x2f/0x34 [ 76.307730][ T6541] should_failslab+0x44/0x70 [ 76.307757][ T6541] kmem_cache_alloc_noprof+0x76/0x420 [ 76.307790][ T6541] ? anon_vma_clone+0x99/0x2f0 [ 76.307838][ T6541] anon_vma_clone+0x99/0x2f0 [ 76.307886][ T6541] vma_modify+0x7cf/0xbe0 [ 76.307918][ T6541] vma_modify_flags+0xf1/0x170 [ 76.307954][ T6541] mlock_fixup+0x1fa/0x4b0 [ 76.307998][ T6541] apply_mlockall_flags.isra.0+0x1ce/0x330 [ 76.308039][ T6541] __do_sys_munlockall+0x77/0x140 [ 76.308077][ T6541] do_syscall_64+0xe9/0x530 [ 76.308120][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.308149][ T6541] RIP: 0033:0x7f0d1c39e159 [ 76.308169][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.308197][ T6541] RSP: 002b:00007f0d1d302028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 76.308221][ T6541] RAX: ffffffffffffffda RBX: 00007f0d1c625fa0 RCX: 00007f0d1c39e159 [ 76.308239][ T6541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.308256][ T6541] RBP: 00007f0d1c625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 76.308273][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.308290][ T6541] R13: 00007f0d1c626038 R14: 00007f0d1c625fa0 R15: 00007ffe5be46848 [ 76.308314][ T6541] [ 76.398073][ T5758] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 76.398288][ T5758] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 76.439493][ T5758] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 76.439943][ T5758] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 76.440529][ T5758] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 76.532484][ T5758] usb 4-1: USB disconnect, device number 4 [ 76.554910][ T6551] input: syz1 as /devices/virtual/input/input7 [ 76.600787][ T6447] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 76.609003][ T6447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.634750][ T6447] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 76.637471][ T6447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.645729][ T6447] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 76.667426][ T6447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.669831][ T6447] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 76.689921][ T6447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.848314][ T6447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.878456][ T6447] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.897748][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.897795][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.905613][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.905753][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.944382][ T6577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.944400][ T6577] IPv6: NLM_F_CREATE should be set when creating new route [ 77.073045][ T6587] FAULT_INJECTION: forcing a failure. [ 77.073045][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 77.073086][ T6587] CPU: 0 UID: 0 PID: 6587 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(full) [ 77.073121][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 77.073138][ T6587] Call Trace: [ 77.073145][ T6587] [ 77.073154][ T6587] dump_stack_lvl+0x97/0xe0 [ 77.073190][ T6587] should_fail_ex.cold+0x2f/0x34 [ 77.073225][ T6587] should_failslab+0x44/0x70 [ 77.073249][ T6587] __kmalloc_noprof+0xd2/0x540 [ 77.073279][ T6587] ? __memcg_list_lru_alloc+0x259/0x3f0 [ 77.073316][ T6587] __memcg_list_lru_alloc+0x259/0x3f0 [ 77.073352][ T6587] ? xas_load+0x44/0x1d0 [ 77.073400][ T6587] memcg_list_lru_alloc+0x84/0xa0 [ 77.073435][ T6587] __memcg_slab_post_alloc_hook+0xdd/0x520 [ 77.073457][ T6587] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 77.073484][ T6587] kmem_cache_alloc_lru_noprof+0x3df/0x410 [ 77.073510][ T6587] ? alloc_inode+0xdf/0x120 [ 77.073557][ T6587] alloc_inode+0xdf/0x120 [ 77.073588][ T6587] path_from_stashed+0xfa/0x3b0 [ 77.073617][ T6587] pidfs_alloc_file+0xae/0x180 [ 77.073640][ T6587] pidfd_prepare+0xbc/0x130 [ 77.073674][ T6587] __x64_sys_pidfd_open+0x11d/0x1d0 [ 77.073694][ T6587] do_syscall_64+0xe9/0x530 [ 77.073725][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.073746][ T6587] RIP: 0033:0x7fe8bcf9e159 [ 77.073761][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.073782][ T6587] RSP: 002b:00007fe8bde21018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 77.073800][ T6587] RAX: ffffffffffffffda RBX: 00007fe8bd225fa0 RCX: 00007fe8bcf9e159 [ 77.073814][ T6587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003d [ 77.073829][ T6587] RBP: 00007fe8bd03506b R08: 0000000000000000 R09: 0000000000000000 [ 77.073842][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.073854][ T6587] R13: 00007fe8bd226038 R14: 00007fe8bd225fa0 R15: 00007ffc7b05dbe8 [ 77.073871][ T6587] [ 77.126563][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 77.432233][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.217'. [ 77.432255][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.217'. [ 77.516236][ T6447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.674607][ T6447] veth0_vlan: entered promiscuous mode [ 77.689009][ T6447] veth1_vlan: entered promiscuous mode [ 77.716016][ T6447] veth0_macvtap: entered promiscuous mode [ 77.717881][ T6447] veth1_macvtap: entered promiscuous mode [ 77.731647][ T5788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.743759][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.746529][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.749413][ T3611] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.749490][ T3611] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.749530][ T3611] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.764421][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.845893][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.864877][ T6603] loop0: detected capacity change from 0 to 32768 [ 77.884602][ T5788] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.887919][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.887939][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.888952][ T5788] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.889000][ T5788] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 77.901516][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.901551][ T5788] usb 6-1: Product: syz [ 77.901570][ T5788] usb 6-1: Manufacturer: syz [ 77.901587][ T5788] usb 6-1: SerialNumber: syz [ 77.914129][ T5788] cdc_mbim 6-1:1.0: skipping garbage [ 77.930461][ T6603] JBD2: Ignoring recovery information on journal [ 77.998504][ T6603] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 78.034635][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.034675][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.105059][ T5639] ocfs2: Unmounting device (7,0) on (node local) [ 78.165637][ T6620] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 78.221163][ T4938] Bluetooth: hci0: command tx timeout [ 78.343416][ T6673] loop3: detected capacity change from 0 to 1024 [ 78.373316][ T6673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.401173][ T5751] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.436783][ T30] audit: type=1800 audit(1789570648.878:7): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 78.552357][ T5751] usb 1-1: Using ep0 maxpacket: 8 [ 78.555827][ T5751] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.555855][ T5751] usb 1-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 78.556968][ T5751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.557023][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.557053][ T5751] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 78.563578][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.563692][ T5751] usb 1-1: Product: syz [ 78.563749][ T5751] usb 1-1: Manufacturer: syz [ 78.563795][ T5751] usb 1-1: SerialNumber: syz [ 78.656204][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.802665][ T6620] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 78.802964][ T5788] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 78.827053][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.833941][ T5751] usb 1-1: can't set first interface for hiFace device. [ 78.834005][ T5751] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 78.856202][ T5751] usb 1-1: USB disconnect, device number 3 [ 78.913057][ T6695] FAULT_INJECTION: forcing a failure. [ 78.913057][ T6695] name failslab, interval 1, probability 0, space 0, times 0 [ 78.913113][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.3.233 Not tainted syzkaller #0 PREEMPT(full) [ 78.913148][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 78.913165][ T6695] Call Trace: [ 78.913172][ T6695] [ 78.913181][ T6695] dump_stack_lvl+0x97/0xe0 [ 78.913218][ T6695] should_fail_ex.cold+0x2f/0x34 [ 78.913259][ T6695] should_failslab+0x44/0x70 [ 78.913283][ T6695] __kmalloc_cache_noprof+0x78/0x420 [ 78.913315][ T6695] ? alloc_mnt_ns+0x60/0x220 [ 78.913340][ T6695] alloc_mnt_ns+0x60/0x220 [ 78.913362][ T6695] copy_mnt_ns+0x160/0x6e0 [ 78.913395][ T6695] ? kmem_cache_alloc_noprof+0x3e1/0x420 [ 78.913426][ T6695] create_new_namespaces+0x5c/0x520 [ 78.913461][ T6695] unshare_nsproxy_namespaces+0xd0/0x150 [ 78.913499][ T6695] ksys_unshare+0x2ac/0x6c0 [ 78.913523][ T6695] __x64_sys_unshare+0x16/0x20 [ 78.913547][ T6695] do_syscall_64+0xe9/0x530 [ 78.913591][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.913620][ T6695] RIP: 0033:0x7f88faf9e159 [ 78.913642][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.913671][ T6695] RSP: 002b:00007f88fbea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 78.913697][ T6695] RAX: ffffffffffffffda RBX: 00007f88fb225fa0 RCX: 00007f88faf9e159 [ 78.913725][ T6695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 78.913744][ T6695] RBP: 00007f88fb03506b R08: 0000000000000000 R09: 0000000000000000 [ 78.913762][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.913779][ T6695] R13: 00007f88fb226038 R14: 00007f88fb225fa0 R15: 00007ffdf1b81978 [ 78.913804][ T6695] [ 79.079027][ T5788] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 79.087142][ T5788] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 79.121765][ T5788] wwan wwan0: port wwan0mbim0 attached [ 79.123095][ T5788] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 06:88:09:ac:79:d7 [ 79.241968][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 79.337379][ T5788] usb 6-1: USB disconnect, device number 2 [ 79.337618][ T5788] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 79.337841][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 79.373509][ T57] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 79.391982][ T5751] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.403641][ T5788] wwan wwan0: port wwan0mbim0 disconnected [ 79.541175][ T5751] usb 1-1: Using ep0 maxpacket: 8 [ 79.544962][ T5751] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.545043][ T5751] usb 1-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 79.546283][ T5751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.546370][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.546449][ T5751] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.550691][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.550762][ T5751] usb 1-1: Product: syz [ 79.550813][ T5751] usb 1-1: Manufacturer: syz [ 79.550863][ T5751] usb 1-1: SerialNumber: syz [ 79.768201][ T6748] loop1: detected capacity change from 0 to 32768 [ 79.787174][ T6748] JBD2: Ignoring recovery information on journal [ 79.822759][ T6748] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 79.823750][ T57] (kworker/u8:3,57,1):ocfs2_read_blocks_sync:110 ERROR: status = -12 [ 79.823781][ T57] (kworker/u8:3,57,1):ocfs2_read_locked_inode:633 ERROR: status = -12 [ 79.823827][ T57] (kworker/u8:3,57,1):ocfs2_check_dir_entry:335 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 79.911185][ T5018] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 79.966725][ T5627] ocfs2: Unmounting device (7,1) on (node local) [ 80.013768][ T6773] gadgetfs: bound to dummy_udc driver [ 80.061579][ T5018] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 80.062270][ T5018] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.062305][ T5018] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 80.063652][ T5018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.063687][ T5018] usb 4-1: Product: syz [ 80.063705][ T5018] usb 4-1: Manufacturer: syz [ 80.063722][ T5018] usb 4-1: SerialNumber: syz [ 80.223885][ T6779] loop2: detected capacity change from 0 to 32768 [ 80.224101][ T6787] input: syz1 as /devices/virtual/input/input8 [ 80.258657][ T6779] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 80.282533][ T6791] loop1: detected capacity change from 0 to 512 [ 80.286822][ T6791] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.302358][ T6791] EXT4-fs (loop1): 1 truncate cleaned up [ 80.309495][ T4938] Bluetooth: hci0: command tx timeout [ 80.309929][ T6791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.352184][ T5018] kaweth 4-1:1.0: Firmware present in device. [ 80.393105][ T5758] usb 1-1: USB disconnect, device number 4 [ 80.411956][ T5651] ocfs2: Unmounting device (7,2) on (node local) [ 80.487330][ T5018] kaweth 4-1:1.0: Statistics collection: 0 [ 80.487353][ T5018] kaweth 4-1:1.0: Multicast filter limit: 0 [ 80.487370][ T5018] kaweth 4-1:1.0: MTU: 0 [ 80.487386][ T5018] kaweth 4-1:1.0: Read MAC address 00:00:00:00:00:00 [ 80.588287][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.623499][ T6808] erspan0: entered promiscuous mode [ 80.624647][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 80.670632][ T6814] loop5: detected capacity change from 0 to 512 [ 80.687385][ T6814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.687482][ T6814] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.739667][ T6814] EXT4-fs error (device loop5): ext4_readdir:278: inode #2: block 3: comm syz.5.276: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 80.744423][ T6814] EXT4-fs error (device loop5): ext4_readdir:278: inode #2: block 12: comm syz.5.276: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 80.745586][ T6814] EXT4-fs error (device loop5): ext4_readdir:278: inode #2: block 13: comm syz.5.276: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 80.765935][ T6814] EXT4-fs (loop5): shut down requested (2) [ 80.817295][ T5654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.933989][ T6829] input: syz1 as /devices/virtual/input/input9 [ 80.936046][ T6824] loop5: detected capacity change from 0 to 32768 [ 81.043506][ T6839] loop5: detected capacity change from 0 to 1024 [ 81.048041][ T6839] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 81.048845][ T6839] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 81.049323][ T6839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.091548][ T5018] kaweth 4-1:1.0: kaweth interface created at eth5 [ 81.136971][ T6839] EXT4-fs error (device loop5): ext4_iget_extra_inode:5209: inode #15: comm syz.5.285: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 81.176048][ T5654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.234053][ T6851] loop5: detected capacity change from 0 to 4096 [ 81.252503][ T6851] ntfs3(loop5): Failed to load $Extend (-22). [ 81.252526][ T6851] ntfs3(loop5): Failed to initialize $Extend. [ 81.293714][ T5018] usb 4-1: USB disconnect, device number 5 [ 81.324777][ T6857] kvm: apic: phys broadcast and lowest prio [ 81.404070][ T6860] kvm [6859]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 81.549233][ T6869] FAULT_INJECTION: forcing a failure. [ 81.549233][ T6869] name failslab, interval 1, probability 0, space 0, times 0 [ 81.549271][ T6869] CPU: 0 UID: 0 PID: 6869 Comm: syz.0.296 Not tainted syzkaller #0 PREEMPT(full) [ 81.549296][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 81.549309][ T6869] Call Trace: [ 81.549314][ T6869] [ 81.549321][ T6869] dump_stack_lvl+0x97/0xe0 [ 81.549348][ T6869] should_fail_ex.cold+0x2f/0x34 [ 81.549377][ T6869] should_failslab+0x44/0x70 [ 81.549397][ T6869] kmem_cache_alloc_noprof+0x76/0x420 [ 81.549422][ T6869] ? mas_preallocate+0x6b2/0x6f0 [ 81.549443][ T6869] mas_preallocate+0x6b2/0x6f0 [ 81.549465][ T6869] __split_vma+0x17b/0x5d0 [ 81.549487][ T6869] vma_modify+0x977/0xbe0 [ 81.549510][ T6869] vma_modify_flags+0xf1/0x170 [ 81.549551][ T6869] mlock_fixup+0x1fa/0x4b0 [ 81.549595][ T6869] apply_vma_lock_flags+0x1d9/0x2a0 [ 81.549630][ T6869] do_mlock+0x134/0x4a0 [ 81.549653][ T6869] ? do_futex+0x134/0x3b0 [ 81.549677][ T6869] ? xfd_validate_state+0xa1/0xe0 [ 81.549713][ T6869] __x64_sys_mlock+0x3c/0x60 [ 81.549738][ T6869] do_syscall_64+0xe9/0x530 [ 81.549769][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.549790][ T6869] RIP: 0033:0x7fe8bcf9e159 [ 81.549804][ T6869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.549825][ T6869] RSP: 002b:00007fe8bde21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 81.549843][ T6869] RAX: ffffffffffffffda RBX: 00007fe8bd225fa0 RCX: 00007fe8bcf9e159 [ 81.549857][ T6869] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 81.549870][ T6869] RBP: 00007fe8bd03506b R08: 0000000000000000 R09: 0000000000000000 [ 81.549882][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.549894][ T6869] R13: 00007fe8bd226038 R14: 00007fe8bd225fa0 R15: 00007ffc7b05dbe8 [ 81.549911][ T6869] [ 81.770963][ T6867] loop2: detected capacity change from 0 to 32768 [ 81.776016][ T6867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.295 (6867) [ 81.794720][ T6867] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.794757][ T6867] BTRFS info (device loop2): using crc32c checksum algorithm [ 81.840009][ T6867] BTRFS info (device loop2): enabling ssd optimizations [ 81.840048][ T6867] BTRFS info (device loop2): turning on flush-on-commit [ 81.840070][ T6867] BTRFS info (device loop2): enabling free space tree [ 81.840089][ T6867] BTRFS info (device loop2): enabling auto defrag [ 81.840109][ T6867] BTRFS info (device loop2): use lzo compression, level 1 [ 81.840134][ T6867] BTRFS info (device loop2): max_inline set to 4096 [ 82.051415][ T6901] FAULT_INJECTION: forcing a failure. [ 82.051415][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 82.051450][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.3.303 Not tainted syzkaller #0 PREEMPT(full) [ 82.051484][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 82.051501][ T6901] Call Trace: [ 82.051508][ T6901] [ 82.051517][ T6901] dump_stack_lvl+0x97/0xe0 [ 82.051567][ T6901] should_fail_ex.cold+0x2f/0x34 [ 82.051606][ T6901] should_failslab+0x44/0x70 [ 82.051632][ T6901] kmem_cache_alloc_noprof+0x76/0x420 [ 82.051665][ T6901] ? sk_prot_alloc+0x3e/0x1b0 [ 82.051699][ T6901] sk_prot_alloc+0x3e/0x1b0 [ 82.051732][ T6901] sk_alloc+0x36/0x3e0 [ 82.051773][ T6901] inet_create+0x168/0x4b0 [ 82.051811][ T6901] __sock_create+0x1a9/0x2d0 [ 82.051840][ T6901] mptcp_subflow_create_socket+0x68/0x370 [ 82.051878][ T6901] __mptcp_nmpc_sk.part.0+0x75/0x290 [ 82.051917][ T6901] mptcp_listen+0xad/0x220 [ 82.051960][ T6901] ? bpf_lsm_socket_listen+0x9/0x10 [ 82.052004][ T6901] __sys_listen+0xd4/0x120 [ 82.052043][ T6901] __x64_sys_listen+0x18/0x20 [ 82.052082][ T6901] do_syscall_64+0xe9/0x530 [ 82.052124][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.052153][ T6901] RIP: 0033:0x7f88faf9e159 [ 82.052176][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.052204][ T6901] RSP: 002b:00007f88fbea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 82.052229][ T6901] RAX: ffffffffffffffda RBX: 00007f88fb225fa0 RCX: 00007f88faf9e159 [ 82.052247][ T6901] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 82.052263][ T6901] RBP: 00007f88fb03506b R08: 0000000000000000 R09: 0000000000000000 [ 82.052280][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.052295][ T6901] R13: 00007f88fb226038 R14: 00007f88fb225fa0 R15: 00007ffdf1b81978 [ 82.052318][ T6901] [ 82.052930][ T6904] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 82.300045][ T6721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.344874][ T3738] Bluetooth: hci7: Frame reassembly failed (-84) [ 82.381207][ T5625] Bluetooth: hci0: command tx timeout [ 82.467305][ T5651] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.700685][ T6952] loop4: detected capacity change from 0 to 512 [ 82.729398][ T6952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 82.729476][ T6952] System zones: 1-12 [ 82.736893][ T6952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.316: missing EA_INODE flag [ 82.736984][ T6952] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 82.741183][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 82.741246][ C0] EXT4-fs (loop4): initial error at time 1789570653: ext4_xattr_inode_iget:437: inode 12 [ 82.741339][ C0] EXT4-fs (loop4): last error at time 1789570653: ext4_xattr_inode_iget:437: inode 12 [ 82.742290][ T6952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.316: error while reading EA inode 12 err=-117 [ 82.742381][ T6952] loop4: lost filesystem error report for type 5 error -117 [ 82.742683][ T6952] EXT4-fs (loop4): 1 orphan inode deleted [ 82.750258][ T6952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.832271][ T5758] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.852617][ T6952] syz.4.316 (pid 6952) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 82.893084][ T6952] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 82.922048][ T5645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.989398][ T6972] netlink: 276 bytes leftover after parsing attributes in process `syz.4.318'. [ 83.001235][ T6976] loop0: detected capacity change from 0 to 512 [ 83.010073][ T5758] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.010099][ T5758] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 83.025350][ T6976] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.320: iget: bad i_size value: 38620345925642 [ 83.025454][ T6976] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.027268][ T6976] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.320: couldn't read orphan inode 15 (err -117) [ 83.027300][ T6976] loop0: lost filesystem error report for type 5 error -117 [ 83.030135][ T6976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.090008][ T5758] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.091074][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 83.091103][ T5758] usb 2-1: Product: syz [ 83.091146][ T5758] usb 2-1: Manufacturer: syz [ 83.123849][ T5758] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 83.286456][ T6993] netlink: 27 bytes leftover after parsing attributes in process `syz.5.326'. [ 83.373421][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.452910][ T6997] BTRFS warning: excessive commit interval 43283, use with care [ 83.456675][ T6997] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.328 (6997) [ 83.476436][ T6997] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.476470][ T6997] BTRFS info (device loop5): using sha256 checksum algorithm [ 83.479580][ T7004] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 83.479613][ T7004] hpfs: filesystem error: improperly stopped [ 83.479630][ T7004] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 83.479646][ T7004] hpfs: You really don't want any checks? You are crazy... [ 83.479657][ T7004] hpfs: Code page index out of array [ 83.479664][ T7004] hpfs: code page support is disabled [ 83.479838][ T7004] hpfs: hpfs_map_4sectors(): unaligned read [ 83.479887][ T7004] hpfs: hpfs_map_4sectors(): unaligned read [ 83.479898][ T7004] hpfs: filesystem error: unable to find root dir [ 83.527746][ T5758] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 83.569686][ T6997] BTRFS info (device loop5): rebuilding free space tree [ 83.580323][ T6997] BTRFS info (device loop5): turning on async discard [ 83.580389][ T6997] BTRFS info (device loop5): enabling free space tree [ 83.580449][ T6997] BTRFS info (device loop5): force clearing of disk cache [ 83.601192][ T5758] videodev: could not get a free minor [ 83.601207][ T5758] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23). [ 83.687372][ T6997] BTRFS info (device loop5): disk added /dev/nullb0 [ 83.740185][ T5654] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.804889][ T5018] usb 2-1: USB disconnect, device number 3 [ 83.929165][ T7037] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 83.956142][ T7037] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 84.072762][ T7042] ntfs3(loop0): Failed to load $Extend (-22). [ 84.072799][ T7042] ntfs3(loop0): Failed to initialize $Extend. [ 84.210766][ T7057] netlink: 'syz.5.346': attribute type 1 has an invalid length. [ 84.225217][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.256326][ T7057] bond1: (slave geneve2): making interface the new active one [ 84.257166][ T7057] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 84.282545][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 84.381168][ T4938] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 84.391194][ T5018] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 84.455416][ T7052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.343 (7052) [ 84.459353][ T7052] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.459391][ T7052] BTRFS info (device loop2): using sha256 checksum algorithm [ 84.520359][ T7052] BTRFS info (device loop2): enabling ssd optimizations [ 84.520387][ T7052] BTRFS info (device loop2): turning on async discard [ 84.520407][ T7052] BTRFS info (device loop2): enabling free space tree [ 84.683853][ T7119] FAULT_INJECTION: forcing a failure. [ 84.683853][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 84.683886][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT(full) [ 84.683915][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 84.683932][ T7119] Call Trace: [ 84.683938][ T7119] [ 84.683946][ T7119] dump_stack_lvl+0x97/0xe0 [ 84.683979][ T7119] should_fail_ex.cold+0x2f/0x34 [ 84.684013][ T7119] should_failslab+0x44/0x70 [ 84.684036][ T7119] __kmalloc_noprof+0xd2/0x540 [ 84.684064][ T7119] ? __list_lru_init+0x54/0x220 [ 84.684099][ T7119] __list_lru_init+0x54/0x220 [ 84.684131][ T7119] sget_fc+0x3a5/0xb30 [ 84.684152][ T7119] ? __pfx_set_anon_super_fc+0x10/0x10 [ 84.684189][ T7119] ? __kmalloc_cache_noprof+0x38f/0x420 [ 84.684219][ T7119] ? __pfx_mqueue_fill_super+0x10/0x10 [ 84.684263][ T7119] get_tree_nodev+0x26/0xf0 [ 84.684286][ T7119] mqueue_get_tree+0x6a/0x80 [ 84.684315][ T7119] vfs_get_tree+0x30/0x120 [ 84.684348][ T7119] fc_mount_longterm+0x18/0x100 [ 84.684370][ T7119] mq_init_ns+0x192/0x330 [ 84.684406][ T7119] copy_ipcs+0x2af/0x490 [ 84.684441][ T7119] ? copy_utsname+0x67/0x3b0 [ 84.684474][ T7119] create_new_namespaces+0xda/0x520 [ 84.684508][ T7119] unshare_nsproxy_namespaces+0xd0/0x150 [ 84.684541][ T7119] ksys_unshare+0x2ac/0x6c0 [ 84.684563][ T7119] __x64_sys_unshare+0x16/0x20 [ 84.684584][ T7119] do_syscall_64+0xe9/0x530 [ 84.684620][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.684646][ T7119] RIP: 0033:0x7f88faf9e159 [ 84.684663][ T7119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.684687][ T7119] RSP: 002b:00007f88fbea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 84.684710][ T7119] RAX: ffffffffffffffda RBX: 00007f88fb225fa0 RCX: 00007f88faf9e159 [ 84.684725][ T7119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c000400 [ 84.684742][ T7119] RBP: 00007f88fb03506b R08: 0000000000000000 R09: 0000000000000000 [ 84.684757][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.684772][ T7119] R13: 00007f88fb226038 R14: 00007f88fb225fa0 R15: 00007ffdf1b81978 [ 84.684792][ T7119] [ 84.987582][ T5651] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.008400][ T5018] usb 8-1: unable to get BOS descriptor or descriptor too short [ 85.008432][ T5018] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 85.008466][ T5018] usb 8-1: no configurations [ 85.008482][ T5018] usb 8-1: can't read configurations, error -22 [ 85.044044][ T7126] syz_tun: entered allmulticast mode [ 85.057424][ T7124] syz_tun: left allmulticast mode [ 85.169671][ T7113] set_capacity_and_notify: 6 callbacks suppressed [ 85.169690][ T7113] loop0: detected capacity change from 0 to 40427 [ 85.186966][ T7113] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 85.186996][ T7113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.241669][ T5765] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.323150][ T7113] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 85.334193][ T7113] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.334223][ T7113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.391168][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 85.391981][ T5765] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 85.394221][ T5765] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 85.394252][ T5765] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.394279][ T5765] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.394304][ T5765] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.394328][ T5765] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.394361][ T5765] usb 2-1: config 0 has no interface number 0 [ 85.394394][ T5765] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 85.394429][ T5765] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 85.394458][ T5765] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.394492][ T5765] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.394528][ T5765] usb 2-1: config 0 interface 125 has no altsetting 0 [ 85.394551][ T5765] usb 2-1: config 0 interface 125 has no altsetting 2 [ 85.399360][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.399393][ T5765] usb 2-1: Product: syz [ 85.399412][ T5765] usb 2-1: Manufacturer: syz [ 85.399432][ T5765] usb 2-1: SerialNumber: syz [ 85.400446][ T5765] usb 2-1: config 0 descriptor?? [ 85.401005][ T7123] loop5: detected capacity change from 0 to 32768 [ 85.419739][ T5765] usb 2-1: selecting invalid altsetting 2 [ 85.565969][ T7123] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 85.647268][ T7160] CacheFiles: Failed to register: -95 [ 85.730451][ T5654] ocfs2: Unmounting device (7,5) on (node local) [ 85.752251][ T7170] loop3: detected capacity change from 0 to 2048 [ 85.770376][ T7170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.770468][ T7170] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.835462][ T7177] IPv4: Oversized IP packet from 127.202.26.0 [ 85.867478][ T30] audit: type=1800 audit(1789570656.308:8): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.383" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 85.889214][ T7170] EXT4-fs (loop3): shut down requested (0) [ 85.957897][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.985220][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 86.061046][ T7196] netlink: 'syz.7.393': attribute type 1 has an invalid length. [ 86.061069][ T7196] netlink: 'syz.7.393': attribute type 11 has an invalid length. [ 86.090156][ C0] usb 2-1: async_complete: urb error -71 [ 86.090218][ C0] usb 2-1: async_complete: urb error -71 [ 86.090253][ C0] usb 2-1: async_complete: urb error -71 [ 86.094874][ T5765] get_1284_register: usb error -71 [ 86.117489][ T5765] usb 2-1: USB disconnect, device number 4 [ 86.143379][ T7202] loop7: detected capacity change from 0 to 16 [ 86.177036][ T7202] erofs (device loop7): mounted with root inode @ nid 36. [ 86.493936][ T7162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.494018][ T7162] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.494512][ T7162] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.494979][ T7162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.495017][ T7162] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.495486][ T7162] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.495888][ T7162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.495926][ T7162] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.496301][ T7162] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.496610][ T7162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 86.496650][ T7162] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.496863][ T7162] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.497101][ T7162] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 86.497139][ T7162] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 86.497758][ T7162] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 86.498012][ T7162] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 86.498055][ T7162] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 86.498273][ T7162] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 86.498593][ T7162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.498637][ T7162] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.498858][ T7162] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.641585][ T7223] loop2: detected capacity change from 0 to 512 [ 86.664258][ T7223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.664341][ T7223] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.708617][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 86.727363][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 86.741469][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.741508][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.741540][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.741572][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.793684][ T7227] FAULT_INJECTION: forcing a failure. [ 86.793684][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 86.793724][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.0.402 Not tainted syzkaller #0 PREEMPT(full) [ 86.793757][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 86.793774][ T7227] Call Trace: [ 86.793781][ T7227] [ 86.793790][ T7227] dump_stack_lvl+0x97/0xe0 [ 86.793836][ T7227] should_fail_ex.cold+0x2f/0x34 [ 86.793877][ T7227] should_failslab+0x44/0x70 [ 86.793903][ T7227] __kmalloc_cache_noprof+0x78/0x420 [ 86.793937][ T7227] ? alloc_netdev_mqs+0x51b/0x750 [ 86.793982][ T7227] alloc_netdev_mqs+0x51b/0x750 [ 86.794027][ T7227] __tun_chr_ioctl+0xafb/0x2390 [ 86.794059][ T7227] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 86.794087][ T7227] __x64_sys_ioctl+0xf4/0x140 [ 86.794138][ T7227] do_syscall_64+0xe9/0x530 [ 86.794181][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.794209][ T7227] RIP: 0033:0x7fe8bcf9e159 [ 86.794229][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.794265][ T7227] RSP: 002b:00007fe8bde21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.794291][ T7227] RAX: ffffffffffffffda RBX: 00007fe8bd225fa0 RCX: 00007fe8bcf9e159 [ 86.794310][ T7227] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 86.794327][ T7227] RBP: 00007fe8bd03506b R08: 0000000000000000 R09: 0000000000000000 [ 86.794344][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.794361][ T7227] R13: 00007fe8bd226038 R14: 00007fe8bd225fa0 R15: 00007ffc7b05dbe8 [ 86.794385][ T7227] [ 87.202005][ T7257] capability: warning: `syz.5.413' uses deprecated v2 capabilities in a way that may be insecure [ 87.228953][ T5651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.272454][ T7266] input: syz0 as /devices/virtual/input/input10 [ 87.598791][ T7288] binder: 7286:7288 ioctl c0306201 200000000640 returned -22 [ 87.626417][ T7291] loop7: detected capacity change from 0 to 512 [ 87.653160][ T7291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.653244][ T7291] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.742926][ T7270] loop0: detected capacity change from 0 to 32768 [ 87.758325][ T7270] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 87.781666][ T7270] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 87.786666][ T7270] XFS (loop0): Starting recovery (logdev: internal) [ 87.821221][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.823351][ T7270] XFS (loop0): Ending recovery (logdev: internal) [ 87.906860][ T7270] jffs2: notice: (7270) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.944299][ T7270] syz.0.422 (7270): drop_caches: 2 [ 88.063267][ T5018] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x1dd/0x330, xfs_bnobt block 0x8 [ 88.063333][ T5018] XFS (loop0): Unmount and run xfs_repair [ 88.063362][ T5018] XFS (loop0): xfs_inactive_ifree: xfs_ifree returned error -117 [ 88.063650][ T5018] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x20e/0x290 (fs/xfs/xfs_inode.c:1270). Shutting down filesystem. [ 88.063714][ T5018] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 88.067732][ T5639] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.219889][ T6447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.541181][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout [ 88.541218][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.541237][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.541256][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.541319][ T4938] Bluetooth: hci6: command 0x0c1a tx timeout [ 88.541348][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.771257][ T5765] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.853066][ T7363] gadgetfs: bound to dummy_udc driver [ 88.924329][ T5765] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.925330][ T5765] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.925367][ T5765] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.925398][ T5765] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.925433][ T5765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 88.925464][ T5765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 88.929507][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.929538][ T5765] usb 3-1: Product: syz [ 88.929556][ T5765] usb 3-1: Manufacturer: syz [ 88.960301][ T7336] loop0: detected capacity change from 0 to 32768 [ 88.977507][ T5765] cdc_wdm 3-1:1.0: skipping garbage [ 88.977567][ T5765] cdc_wdm 3-1:1.0: skipping garbage [ 88.985836][ T7336] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.441 (7336) [ 89.002452][ T5765] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 89.002512][ T5765] cdc_wdm 3-1:1.0: Unknown control protocol [ 89.031823][ T7336] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 89.031929][ T7336] BTRFS info (device loop0): using blake2b checksum algorithm [ 89.089864][ T7336] BTRFS info (device loop0): enabling ssd optimizations [ 89.089904][ T7336] BTRFS info (device loop0): turning on async discard [ 89.089924][ T7336] BTRFS info (device loop0): enabling free space tree [ 89.089945][ T7336] BTRFS info (device loop0): use zstd compression, level 3 [ 89.090313][ T7336] Oops: general protection fault, probably for non-canonical address 0xa0ffffffff82753f: 0000 [#1] SMP PTI [ 89.129561][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.0.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.140382][ T7336] Tainted: [L]=SOFTLOCKUP [ 89.144732][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 89.154821][ T7336] RIP: 0010:0xffffffffa0002fad [ 89.159609][ T7336] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ff e3 cc ff e3 cc ff e3 cc 41 ff e4 cc e3 cc ff e0 cc ff e5 cc ff e0 cc ff e0 cc ff e0 cc cc cc cc cc [ 89.179239][ T7336] RSP: 0018:ffffc9000235bd48 EFLAGS: 00010287 [ 89.185340][ T7336] RAX: 0000000000018af5 RBX: a0ffffffff82753f RCX: ffffc9000295d000 [ 89.193333][ T7336] RDX: 0000000000080000 RSI: ffffffff81c64e4a RDI: ffff888130c71780 [ 89.201322][ T7336] RBP: ffff888130c71780 R08: 0000000000000001 R09: 0000000000000000 [ 89.209353][ T7336] R10: 0000000000000001 R11: fefefefefefefeff R12: ffff88810de37800 [ 89.217362][ T7336] R13: ffff888132d4f800 R14: ffff88810e57cb10 R15: ffff88810dc8a000 [ 89.225364][ T7336] FS: 00007fe8bde216c0(0000) GS:ffff8881b20de000(0000) knlGS:0000000000000000 [ 89.234328][ T7336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.240931][ T7336] CR2: 000000110c290174 CR3: 000000010d7de000 CR4: 00000000003526f0 [ 89.248934][ T7336] Call Trace: [ 89.252233][ T7336] [ 89.255180][ T7336] ? put_fs_context+0x82/0x310 [ 89.259985][ T7336] ? btrfs_get_tree+0x354/0xad0 [ 89.264902][ T7336] ? bpf_lsm_capable+0x9/0x10 [ 89.269607][ T7336] ? security_capable+0x80/0x260 [ 89.274575][ T7336] ? vfs_get_tree+0x30/0x120 [ 89.279200][ T7336] ? path_mount+0x5a9/0x13e0 [ 89.283842][ T7336] ? putname+0x71/0xc0 [ 89.287964][ T7336] ? putname+0x76/0xc0 [ 89.292071][ T7336] ? __x64_sys_mount+0x1a3/0x1e0 [ 89.297040][ T7336] ? do_syscall_64+0xe9/0x530 [ 89.301753][ T7336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.307850][ T7336] [ 89.310887][ T7336] Modules linked in: [ 89.315406][ T7336] ---[ end trace 0000000000000000 ]--- [ 89.373207][ T7336] RIP: 0010:0xffffffffa0002fad [ 89.373280][ T7336] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ff e3 cc ff e3 cc ff e3 cc 41 ff e4 cc e3 cc ff e0 cc ff e5 cc ff e0 cc ff e0 cc ff e0 cc cc cc cc cc [ 89.373311][ T7336] RSP: 0018:ffffc9000235bd48 EFLAGS: 00010287 [ 89.373334][ T7336] RAX: 0000000000018af5 RBX: a0ffffffff82753f RCX: ffffc9000295d000 [ 89.373358][ T7336] RDX: 0000000000080000 RSI: ffffffff81c64e4a RDI: ffff888130c71780 [ 89.373376][ T7336] RBP: ffff888130c71780 R08: 0000000000000001 R09: 0000000000000000 [ 89.373393][ T7336] R10: 0000000000000001 R11: fefefefefefefeff R12: ffff88810de37800 [ 89.373411][ T7336] R13: ffff888132d4f800 R14: ffff88810e57cb10 R15: ffff88810dc8a000 [ 89.373434][ T7336] FS: 00007fe8bde216c0(0000) GS:ffff8881b20de000(0000) knlGS:0000000000000000 [ 89.373457][ T7336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.373475][ T7336] CR2: 00007f88fb1ef2f8 CR3: 000000010d7de000 CR4: 00000000003526f0 [ 89.373495][ T7336] Kernel panic - not syncing: Fatal exception [ 89.474194][ T7336] Kernel Offset: disabled [ 89.478526][ T7336] Rebooting in 86400 seconds..