last executing test programs: 1m17.834435951s ago: executing program 2 (id=309): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0xc0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m15.525406101s ago: executing program 2 (id=317): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x8, &(0x7f0000000580)={0x8, 0x88}, 0x0) r1 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = socket$pptp(0x18, 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x3}, {0x6}]}) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) epoll_create(0x9) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x1}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000000)={0x0, 0x0, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x8c3, &(0x7f0000000140)=ANY=[@ANYBLOB='async,fowner>', @ANYRESDEC=r0, @ANYBLOB], 0x1, 0x28d6, &(0x7f00000029c0)="$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") 1m14.570293279s ago: executing program 2 (id=320): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) close(r0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1m13.11328136s ago: executing program 2 (id=321): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m12.04952457s ago: executing program 2 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1m8.991826638s ago: executing program 2 (id=335): open(&(0x7f0000000040)='./file0\x00', 0x440, 0x9c) creat(&(0x7f0000000140)='./bus\x00', 0xc6) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 53.380294525s ago: executing program 32 (id=335): open(&(0x7f0000000040)='./file0\x00', 0x440, 0x9c) creat(&(0x7f0000000140)='./bus\x00', 0xc6) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 17.902995882s ago: executing program 4 (id=446): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181020, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_nanosleep(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{'udp\x00'}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x80002, 0x0) getpeername$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)=[0x7], &(0x7f00000000c0), &(0x7f0000000080)=[0x1], &(0x7f0000000140)}) 16.667279146s ago: executing program 4 (id=450): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) creat(&(0x7f0000000240)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[], 0x0) 15.340326978s ago: executing program 4 (id=452): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000180)='\x00>', 0x2, 0x8080c61) fallocate(r1, 0x3, 0x5, 0x2) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'net_prio'}]}, 0xa) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 14.129574202s ago: executing program 4 (id=455): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x48be, &(0x7f00000011c0)={0x0, 0xc721, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 13.955725474s ago: executing program 5 (id=457): unlink(&(0x7f0000000000)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x1e, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000680)=@newtaction={0x18, 0x30, 0x53b, 0x70bd27, 0x200000, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c00000010000104000000000000001500000000e5352becda513aa82ee01d455b8d1dbd1ef30e92100a003434249f6a543585c35adc385bfe51e251b95e691f6ef62fbae827300772b1d926ee4b5b5a45ad3f9b9327d30c623e6590fa5e4c9230a806855e4d3a3e86cdb2f0735bc132a62e51787a6f7f38a5e23e3001b34c70a8b9e0adaf5f2811b3ba364bcddf5724bc65309510bc394b12077a434c8ccfe0062f87d0f4ee616c0f3a3dc1108437a336dc8cedabe147304279ffe2878f42d8ae42471a9319d14d1095a8b6741b3ca079b58262d0cc003d39a81f8548e7ca7fe6c191932a535b19a87be4bd70da5046c82342", @ANYRES32=0x0, @ANYBLOB="5d580000000000004c001a80480002804400018008001900f5ffffff050019000500000008001f0002000000080007002c52000008001c000900000008000f000700000008001200000000000800030004000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) dup(0xffffffffffffffff) 11.278164906s ago: executing program 1 (id=461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r3, 0xda90) socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) close(r3) 11.221458028s ago: executing program 3 (id=462): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe80900", 0x40}], 0x1) pipe2(&(0x7f0000000140), 0x80000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44080) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffff7f, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.162449553s ago: executing program 5 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f00000023c0)={[{@gid}, {@codepage={'codepage', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}]}, 0x5, 0x357, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10a002, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) splice(r4, 0x0, r1, &(0x7f0000000380)=0x4, 0x11cf, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r5, 0x8004af80, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) 10.169425569s ago: executing program 1 (id=465): syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0xd, 0x1, {0x2}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8.911820269s ago: executing program 4 (id=466): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x45) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000180)='\x00>', 0x2, 0x8080c61) fallocate(r1, 0x3, 0x5, 0x2) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'net_prio'}]}, 0xa) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 7.125996138s ago: executing program 1 (id=467): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = io_uring_setup(0x3295, &(0x7f0000000340)={0x0, 0x4000b2d1, 0x2000, 0x3, 0x106}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000c80)={{0x12, 0x1, 0x201, 0x20, 0x61, 0xce, 0x20, 0x5c6, 0x7002, 0xd298, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe1, 0xfe, 0x20, 0x1, [{{0x9, 0x4, 0x39, 0x0, 0x0, 0x8, 0x6, 0x1, 0x4}}]}}]}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "e404b2fd33461a74", "f4802bf327a188bee09178a58a49d2af", "106c982f", "5b9e129e93500536"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r8, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0) 7.125078064s ago: executing program 5 (id=468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) sysinfo(&(0x7f0000000080)=""/98) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 6.984017407s ago: executing program 3 (id=469): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xeffb, 0x9) 6.856725804s ago: executing program 0 (id=470): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x800) 6.223080427s ago: executing program 3 (id=471): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x10, &(0x7f0000000040)) prlimit64(0x0, 0x8, &(0x7f0000000580)={0x8, 0x88}, 0x0) r0 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = socket$pptp(0x18, 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x3}, {0x6}]}) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) epoll_create(0x9) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x1}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000000)={0x0, 0x0, 0x4}) close_range(r1, 0xffffffffffffffff, 0x0) 6.181611052s ago: executing program 0 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) gettid() write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) 4.348669905s ago: executing program 0 (id=473): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181020, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_nanosleep(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)={[{@name={'name', 0x3d, 'noprefix'}}, {}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x80002, 0x0) getpeername$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)=[0x7], &(0x7f00000000c0), &(0x7f0000000080)=[0x1], &(0x7f0000000140)}) 4.283756719s ago: executing program 3 (id=474): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='rodir,shortname=win95,flush,dos1xfloppy=win95,nfs=stale_rw,shortname=winnt,errors=continue,shortname=winnt,\x00'], 0xfc, 0x2b8, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = dup(0xffffffffffffffff) getsockname$netlink(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400c0d4, 0x0, 0x0) 3.153419669s ago: executing program 3 (id=475): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.970899896s ago: executing program 1 (id=476): mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000300), 0xce4, r0}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x26, 0x8005, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) 2.623444729s ago: executing program 0 (id=477): ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0) 2.089438238s ago: executing program 5 (id=478): syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0xd, 0x1, {0x2}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.009579983s ago: executing program 4 (id=479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$tipc(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc081}, 0x1) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@nouser_xattr}]}, 0x1, 0x4447, &(0x7f000000cd40)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x9, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.750265567s ago: executing program 0 (id=480): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, 0x0) 941.953242ms ago: executing program 5 (id=481): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181020, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_nanosleep(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{'udp\x00'}]}) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)={[{@name={'name', 0x3d, 'noprefix'}}, {}]}) 885.929365ms ago: executing program 1 (id=482): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xeffb, 0x9) 779.057131ms ago: executing program 3 (id=483): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 649.013451ms ago: executing program 0 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 628.092396ms ago: executing program 1 (id=485): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 0s ago: executing program 5 (id=486): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() syz_open_pts(0xffffffffffffffff, 0x101580) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) unshare(0x28000600) epoll_create1(0x80000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x0) kernel console output (not intermixed with test programs): 7] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.533998][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.541455][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.549136][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.556792][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.564994][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.578752][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.588234][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.596206][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.603803][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.612748][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.621122][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.628742][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.629692][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.643158][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.660092][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.667355][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.674578][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.687651][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.696562][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.706047][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.707160][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.228809][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 90.600158][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.609190][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.616624][ T5820] bridge_slave_0: entered allmulticast mode [ 90.626547][ T5820] bridge_slave_0: entered promiscuous mode [ 90.647687][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 90.661558][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 90.676900][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.703091][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.710532][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.717990][ T5820] bridge_slave_1: entered allmulticast mode [ 90.725983][ T5820] bridge_slave_1: entered promiscuous mode [ 90.868564][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 90.902076][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.963834][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.136895][ T5820] team0: Port device team_slave_0 added [ 91.143261][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.151435][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.158966][ T5818] bridge_slave_0: entered allmulticast mode [ 91.166901][ T5818] bridge_slave_0: entered promiscuous mode [ 91.189365][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.196723][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.204871][ T5819] bridge_slave_0: entered allmulticast mode [ 91.214319][ T5819] bridge_slave_0: entered promiscuous mode [ 91.235087][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.242494][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.249955][ T5830] bridge_slave_0: entered allmulticast mode [ 91.261334][ T5830] bridge_slave_0: entered promiscuous mode [ 91.273205][ T5820] team0: Port device team_slave_1 added [ 91.279292][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.286619][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.295156][ T5818] bridge_slave_1: entered allmulticast mode [ 91.303435][ T5818] bridge_slave_1: entered promiscuous mode [ 91.311842][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.319419][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.326682][ T5819] bridge_slave_1: entered allmulticast mode [ 91.334997][ T5819] bridge_slave_1: entered promiscuous mode [ 91.355432][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.362787][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.370780][ T5830] bridge_slave_1: entered allmulticast mode [ 91.378747][ T5830] bridge_slave_1: entered promiscuous mode [ 91.499521][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.506885][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.514675][ T5833] bridge_slave_0: entered allmulticast mode [ 91.522781][ T5833] bridge_slave_0: entered promiscuous mode [ 91.546018][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.553227][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.579744][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.597039][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.612346][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.622076][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.629885][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.637125][ T5833] bridge_slave_1: entered allmulticast mode [ 91.645392][ T5833] bridge_slave_1: entered promiscuous mode [ 91.658634][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.669945][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.676895][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.703526][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.704463][ T5828] Bluetooth: hci1: command tx timeout [ 91.714459][ T5836] Bluetooth: hci2: command tx timeout [ 91.730525][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.744006][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.767846][ T5828] Bluetooth: hci4: command tx timeout [ 91.767854][ T5836] Bluetooth: hci3: command tx timeout [ 91.768155][ T5836] Bluetooth: hci0: command tx timeout [ 91.786605][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.893815][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.921780][ T5830] team0: Port device team_slave_0 added [ 91.930609][ T10] cfg80211: failed to load regulatory.db [ 91.940689][ T5818] team0: Port device team_slave_0 added [ 91.950366][ T5819] team0: Port device team_slave_0 added [ 91.960825][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.004373][ T5830] team0: Port device team_slave_1 added [ 92.013605][ T5818] team0: Port device team_slave_1 added [ 92.022764][ T5819] team0: Port device team_slave_1 added [ 92.061905][ T5820] hsr_slave_0: entered promiscuous mode [ 92.069349][ T5820] hsr_slave_1: entered promiscuous mode [ 92.135484][ T5833] team0: Port device team_slave_0 added [ 92.171918][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.178954][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.205188][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.221987][ T5833] team0: Port device team_slave_1 added [ 92.229622][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.236566][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.262917][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.275907][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.283138][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.309287][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.322612][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.329887][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.356156][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.406585][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.413667][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.440139][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.460242][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.467235][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.493496][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.547816][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.554792][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.581380][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.596110][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.603251][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.629227][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.812724][ T5818] hsr_slave_0: entered promiscuous mode [ 92.820371][ T5818] hsr_slave_1: entered promiscuous mode [ 92.827260][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 92.833185][ T5818] Cannot create hsr debugfs directory [ 92.867631][ T5830] hsr_slave_0: entered promiscuous mode [ 92.875078][ T5830] hsr_slave_1: entered promiscuous mode [ 92.882193][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 92.888272][ T5830] Cannot create hsr debugfs directory [ 92.916952][ T5833] hsr_slave_0: entered promiscuous mode [ 92.924382][ T5833] hsr_slave_1: entered promiscuous mode [ 92.931656][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 92.937461][ T5833] Cannot create hsr debugfs directory [ 92.964150][ T5819] hsr_slave_0: entered promiscuous mode [ 92.971510][ T5819] hsr_slave_1: entered promiscuous mode [ 92.978755][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 92.984527][ T5819] Cannot create hsr debugfs directory [ 93.619000][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.633079][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.658876][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.679869][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.742673][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.757523][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.768276][ T5836] Bluetooth: hci2: command tx timeout [ 93.768689][ T5827] Bluetooth: hci1: command tx timeout [ 93.781163][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.810093][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.847551][ T5827] Bluetooth: hci0: command tx timeout [ 93.858940][ T5827] Bluetooth: hci4: command tx timeout [ 93.860713][ T5836] Bluetooth: hci3: command tx timeout [ 93.919499][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.949539][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.962674][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.974080][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.123661][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.135794][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.149131][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.226831][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.282008][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.310182][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.321692][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.337317][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.361024][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.407026][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.422030][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.459754][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.467040][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.513777][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.521083][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.539351][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.590133][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.659238][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.690341][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.697561][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.726486][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.733663][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.762861][ T4930] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.770089][ T4930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.803327][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.810523][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.874335][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.974140][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.060451][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.067682][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.148893][ T4930] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.156106][ T4930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.210487][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.396900][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.420102][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.482237][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.489460][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.517431][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.525020][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.661722][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.785477][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.847808][ T5836] Bluetooth: hci1: command tx timeout [ 95.848994][ T5827] Bluetooth: hci2: command tx timeout [ 95.919158][ T5820] veth0_vlan: entered promiscuous mode [ 95.931231][ T5827] Bluetooth: hci4: command tx timeout [ 95.931249][ T5836] Bluetooth: hci0: command tx timeout [ 95.936689][ T5827] Bluetooth: hci3: command tx timeout [ 96.024955][ T5820] veth1_vlan: entered promiscuous mode [ 96.046652][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.070432][ T5830] veth0_vlan: entered promiscuous mode [ 96.183126][ T5830] veth1_vlan: entered promiscuous mode [ 96.229283][ T5820] veth0_macvtap: entered promiscuous mode [ 96.266131][ T5820] veth1_macvtap: entered promiscuous mode [ 96.303983][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.373089][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.414990][ T5830] veth0_macvtap: entered promiscuous mode [ 96.432183][ T5819] veth0_vlan: entered promiscuous mode [ 96.454665][ T5830] veth1_macvtap: entered promiscuous mode [ 96.466028][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.485599][ T5818] veth0_vlan: entered promiscuous mode [ 96.511016][ T5819] veth1_vlan: entered promiscuous mode [ 96.529356][ T4930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.540001][ T4930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.566350][ T4930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.576349][ T4930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.603724][ T5818] veth1_vlan: entered promiscuous mode [ 96.660322][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.701247][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.735643][ T5819] veth0_macvtap: entered promiscuous mode [ 96.754634][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.769620][ T5833] veth0_vlan: entered promiscuous mode [ 96.781187][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.790074][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.822247][ T5819] veth1_macvtap: entered promiscuous mode [ 96.830604][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.851035][ T5818] veth0_macvtap: entered promiscuous mode [ 96.889939][ T5818] veth1_macvtap: entered promiscuous mode [ 96.902218][ T5833] veth1_vlan: entered promiscuous mode [ 96.974477][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.983964][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.014858][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.043889][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.074970][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.132809][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.151642][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.160899][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.180039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.202218][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.212072][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.221978][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.244312][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.262960][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.289480][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.297346][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.313001][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.322145][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.337230][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.345698][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.453516][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.487154][ T5833] veth0_macvtap: entered promiscuous mode [ 97.520417][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.550960][ T5833] veth1_macvtap: entered promiscuous mode [ 97.557606][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.945442][ T5944] ======================================================= [ 97.945442][ T5944] WARNING: The mand mount option has been deprecated and [ 97.945442][ T5944] and is ignored by this kernel. Remove the mand [ 97.945442][ T5944] option from the mount to silence this warning. [ 97.945442][ T5944] ======================================================= [ 97.986909][ T5944] FAT-fs (nullb0): bogus number of reserved sectors [ 97.993809][ T5944] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 98.010957][ T5828] Bluetooth: hci2: command tx timeout [ 98.016784][ T5828] Bluetooth: hci3: command tx timeout [ 98.022465][ T5828] Bluetooth: hci4: command tx timeout [ 98.028281][ T5828] Bluetooth: hci0: command tx timeout [ 98.033858][ T5836] Bluetooth: hci1: command tx timeout [ 98.238245][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.288444][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.425419][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.552145][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.607500][ T4930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.623902][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.673707][ T4930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.983769][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.034264][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.046987][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.065599][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.106693][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.145910][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.470627][ T5954] loop1: detected capacity change from 0 to 8 [ 100.555398][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.583017][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.694917][ T5950] loop0: detected capacity change from 0 to 40427 [ 100.710162][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.741072][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.751404][ T5950] F2FS-fs (loop0): build fault injection rate: 174 [ 100.927575][ T5950] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 101.030964][ T5950] F2FS-fs (loop0): invalid crc value [ 101.625242][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.642427][ T10] usb 4-1: no configurations [ 101.647162][ T10] usb 4-1: can't read configurations, error -22 [ 101.932100][ T5969] loop4: detected capacity change from 0 to 4096 [ 101.965299][ T5950] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.995171][ T5950] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.035042][ T5969] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 102.095503][ T5969] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB [ 102.281106][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.408133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.569547][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 102.585567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.691496][ T5819] syz-executor: attempt to access beyond end of device [ 102.691496][ T5819] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.735406][ T29] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 102.766917][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.766945][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 102.766966][ T5819] Call Trace: [ 102.766978][ T5819] [ 102.766984][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.766988][ T5819] dump_stack_lvl+0xe8/0x150 [ 102.767025][ T5819] f2fs_handle_critical_error+0x37c/0x540 [ 102.767162][ T5819] f2fs_write_end_io+0xcdb/0xff0 [ 102.767247][ T5819] ? __submit_merged_bio+0x256/0x700 [ 102.767378][ T5819] __submit_merged_bio+0x256/0x700 [ 102.767466][ T5819] __submit_merged_write_cond+0x3c3/0x4e0 [ 102.767584][ T5819] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 102.767716][ T5819] f2fs_write_data_pages+0x2975/0x35e0 [ 102.767790][ T5819] ? rcu_is_watching+0x15/0xb0 [ 102.767979][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.768185][ T5819] ? check_noncircular+0xda/0x150 [ 102.768278][ T5819] ? lockdep_unlock+0x5d/0xd0 [ 102.768375][ T5819] ? __pfx___schedule+0x10/0x10 [ 102.768472][ T5819] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.768553][ T5819] ? preempt_schedule_common+0x82/0xd0 [ 102.768665][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.768741][ T5819] do_writepages+0x32e/0x550 [ 102.768829][ T5819] ? preempt_schedule_common+0x82/0xd0 [ 102.768895][ T5819] ? preempt_schedule_thunk+0x16/0x30 [ 102.768980][ T5819] filemap_fdatawrite+0x1e9/0x2f0 [ 102.769066][ T5819] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 102.769255][ T5819] ? preempt_schedule_common+0x82/0xd0 [ 102.769314][ T5819] ? preempt_schedule_thunk+0x16/0x30 [ 102.769401][ T5819] f2fs_sync_dirty_inodes+0x30e/0x860 [ 102.769539][ T5819] f2fs_write_checkpoint+0x9cf/0x2680 [ 102.769725][ T5819] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 102.769994][ T5819] kill_f2fs_super+0x314/0x720 [ 102.770108][ T5819] ? __pfx_kill_f2fs_super+0x10/0x10 [ 102.770226][ T5819] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.770327][ T5819] deactivate_locked_super+0xbc/0x130 [ 102.770406][ T5819] cleanup_mnt+0x437/0x4d0 [ 102.770467][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.770541][ T5819] task_work_run+0x1d9/0x270 [ 102.770614][ T5819] ? __pfx_task_work_run+0x10/0x10 [ 102.770702][ T5819] exit_to_user_mode_loop+0xed/0x480 [ 102.770766][ T5819] ? rcu_is_watching+0x15/0xb0 [ 102.770856][ T5819] do_syscall_64+0x32d/0xf80 [ 102.770921][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.770993][ T5819] ? clear_bhb_loop+0x40/0x90 [ 102.771068][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.771133][ T5819] RIP: 0033:0x7f99b239c117 [ 102.771206][ T5819] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.771255][ T5819] RSP: 002b:00007ffd3cb01868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.771324][ T5819] RAX: 0000000000000000 RBX: 00007f99b240471f RCX: 00007f99b239c117 [ 102.771376][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3cb01920 [ 102.771415][ T5819] RBP: 00007ffd3cb01920 R08: 00007ffd3cb02920 R09: 00000000ffffffff [ 102.771455][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3cb029b0 [ 102.771488][ T5819] R13: 00007f99b240471f R14: 0000000000018eab R15: 00007ffd3cb029f0 [ 102.771586][ T5819] [ 103.128041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.148447][ T5819] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.304380][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 103.321122][ T5980] netlink: 'syz.4.13': attribute type 30 has an invalid length. [ 103.366764][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 103.375849][ T5981] netlink: 'syz.4.13': attribute type 30 has an invalid length. [ 103.594297][ T5981] Zero length message leads to an empty skb [ 103.650712][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.711702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.727718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.727746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.727790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.727830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.727871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.727911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.757837][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.758319][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.758879][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.891568][ T29] usb 3-1: config 0 descriptor?? [ 104.106397][ T29] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 104.117253][ T5986] loop1: detected capacity change from 0 to 2048 [ 104.140137][ T5986] EXT4-fs: Ignoring removed bh option [ 104.156543][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.161605][ T29] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 104.161704][ T29] usb 3-1: media controller created [ 104.228959][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.250902][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.550157][ T6003] process 'syz.3.17' launched './file2' with NULL argv: empty string added [ 105.950988][ T29] stb0899_attach: Driver disabled by Kconfig [ 105.957145][ T29] az6027: no front-end attached [ 105.957145][ T29] [ 106.022951][ T29] az6027: usb out operation failed. (-71) [ 106.045314][ T30] audit: type=1326 audit(1770175029.216:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 106.047487][ T29] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 106.090329][ T30] audit: type=1326 audit(1770175029.216:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 106.330687][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 106.498724][ T5993] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.926090][ T30] audit: type=1326 audit(1770175029.246:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 106.949004][ T30] audit: type=1326 audit(1770175029.246:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 106.972415][ T30] audit: type=1326 audit(1770175029.246:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 107.081151][ T29] dvb-usb: schedule remote query interval to 400 msecs. [ 107.096471][ T29] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 107.121864][ T30] audit: type=1326 audit(1770175029.246:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 107.324886][ T29] usb 3-1: USB disconnect, device number 2 [ 107.387491][ T30] audit: type=1326 audit(1770175029.246:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 107.473864][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 107.496479][ T30] audit: type=1326 audit(1770175029.256:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 107.527601][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.527601][ T12] [ 107.528459][ T30] audit: type=1326 audit(1770175029.256:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 107.537272][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 107.537302][ T12] EXT4-fs (loop1): Free/Dirty block details [ 107.634387][ T30] audit: type=1326 audit(1770175029.256:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025699aeb9 code=0x7ffc0000 [ 107.865709][ T29] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 107.969123][ T12] EXT4-fs (loop1): free_blocks=2415919104 [ 107.974946][ T12] EXT4-fs (loop1): dirty_blocks=16 [ 107.991459][ T12] EXT4-fs (loop1): Block reservation details [ 108.102128][ T12] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 108.130226][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.451287][ T6026] loop0: detected capacity change from 0 to 4096 [ 109.625229][ T6043] comedi comedi3: board detection failed [ 109.726149][ T6035] loop1: detected capacity change from 0 to 40427 [ 109.773749][ T6035] F2FS-fs (loop1): build fault injection rate: 174 [ 109.781114][ T6035] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 109.794248][ T6047] loop3: detected capacity change from 0 to 256 [ 109.801978][ T6045] loop0: detected capacity change from 0 to 512 [ 109.802320][ T6035] F2FS-fs (loop1): invalid crc value [ 109.873353][ T6047] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 109.934718][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.064759][ T6045] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.510400][ T6035] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 110.524345][ T6045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.559826][ T6035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.655223][ T6035] syz.1.23: attempt to access beyond end of device [ 110.655223][ T6035] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.957304][ T6035] syz.1.23: attempt to access beyond end of device [ 110.957304][ T6035] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 111.321393][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.454008][ T5820] syz-executor: attempt to access beyond end of device [ 111.454008][ T5820] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 111.489861][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 111.489890][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 111.489902][ T5820] Call Trace: [ 111.489910][ T5820] [ 111.489919][ T5820] dump_stack_lvl+0xe8/0x150 [ 111.489954][ T5820] f2fs_handle_critical_error+0x37c/0x540 [ 111.489989][ T5820] f2fs_write_end_io+0xcdb/0xff0 [ 111.490019][ T5820] ? __submit_merged_bio+0x256/0x700 [ 111.490060][ T5820] __submit_merged_bio+0x256/0x700 [ 111.490093][ T5820] __submit_merged_write_cond+0x3c3/0x4e0 [ 111.490128][ T5820] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 111.490178][ T5820] f2fs_write_data_pages+0x2975/0x35e0 [ 111.490243][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.490288][ T5820] ? css_rstat_updated+0x23a/0x530 [ 111.490334][ T5820] ? rcu_is_watching+0x15/0xb0 [ 111.490363][ T5820] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 111.490394][ T5820] ? lru_gen_update_size+0x7c9/0xd10 [ 111.490442][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 111.490491][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.490521][ T5820] do_writepages+0x32e/0x550 [ 111.490557][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 111.490582][ T5820] filemap_fdatawrite+0x1e9/0x2f0 [ 111.490614][ T5820] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 111.490688][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 111.490714][ T5820] f2fs_sync_dirty_inodes+0x30e/0x860 [ 111.490760][ T5820] f2fs_write_checkpoint+0x9cf/0x2680 [ 111.490823][ T5820] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 111.490909][ T5820] kill_f2fs_super+0x314/0x720 [ 111.490946][ T5820] ? __pfx_kill_f2fs_super+0x10/0x10 [ 111.490990][ T5820] ? lockdep_hardirqs_on+0x7a/0x110 [ 111.491030][ T5820] deactivate_locked_super+0xbc/0x130 [ 111.491062][ T5820] cleanup_mnt+0x437/0x4d0 [ 111.491082][ T5820] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.491107][ T5820] task_work_run+0x1d9/0x270 [ 111.491132][ T5820] ? __pfx_task_work_run+0x10/0x10 [ 111.491166][ T5820] exit_to_user_mode_loop+0xed/0x480 [ 111.491188][ T5820] ? rcu_is_watching+0x15/0xb0 [ 111.491221][ T5820] do_syscall_64+0x32d/0xf80 [ 111.491244][ T5820] ? trace_irq_disable+0x3b/0x150 [ 111.491273][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.491293][ T5820] ? clear_bhb_loop+0x40/0x90 [ 111.491319][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.491345][ T5820] RIP: 0033:0x7f1ee859c117 [ 111.491364][ T5820] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 111.491380][ T5820] RSP: 002b:00007ffd5df048b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 111.491400][ T5820] RAX: 0000000000000000 RBX: 00007f1ee860471f RCX: 00007f1ee859c117 [ 111.491414][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5df04970 [ 111.491435][ T5820] RBP: 00007ffd5df04970 R08: 00007ffd5df05970 R09: 00000000ffffffff [ 111.491449][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5df05a00 [ 111.491461][ T5820] R13: 00007f1ee860471f R14: 000000000001b2ac R15: 00007ffd5df05a40 [ 111.491493][ T5820] [ 111.491502][ T5820] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 111.913055][ T6063] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.049862][ T6078] netlink: 'syz.1.34': attribute type 4 has an invalid length. [ 114.165245][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 114.165264][ T30] audit: type=1400 audit(1770175037.336:50): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=6074 comm="syz.1.34" [ 116.383387][ T6073] loop3: detected capacity change from 0 to 40427 [ 116.384801][ T6091] loop2: detected capacity change from 0 to 8 [ 116.426728][ T6073] F2FS-fs (loop3): build fault injection rate: 174 [ 116.441517][ T6073] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 116.542645][ T6073] F2FS-fs (loop3): invalid crc value [ 116.570094][ T6096] netlink: 92 bytes leftover after parsing attributes in process `syz.2.43'. [ 117.281358][ T6073] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.305837][ T30] audit: type=1326 audit(1770175040.466:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 117.551105][ T30] audit: type=1326 audit(1770175040.506:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 117.765967][ T6101] syzkaller0: entered promiscuous mode [ 118.032303][ T30] audit: type=1326 audit(1770175040.506:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 118.267486][ T6101] syzkaller0: entered allmulticast mode [ 118.283401][ T30] audit: type=1326 audit(1770175040.506:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 118.404568][ T30] audit: type=1326 audit(1770175040.506:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 118.438641][ T30] audit: type=1326 audit(1770175040.506:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 118.515836][ T30] audit: type=1326 audit(1770175040.506:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 119.608483][ T30] audit: type=1326 audit(1770175040.506:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 119.709766][ T30] audit: type=1326 audit(1770175040.506:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 119.857467][ T30] audit: type=1326 audit(1770175040.506:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 119.923217][ T30] audit: type=1326 audit(1770175040.516:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 120.031856][ T30] audit: type=1326 audit(1770175040.516:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 120.117501][ T30] audit: type=1326 audit(1770175040.516:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 120.198498][ T30] audit: type=1326 audit(1770175040.716:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 120.477484][ T30] audit: type=1326 audit(1770175040.716:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 120.504333][ T30] audit: type=1326 audit(1770175040.726:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 120.531951][ T30] audit: type=1326 audit(1770175040.726:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b239aeb9 code=0x7ffc0000 [ 120.966764][ T6130] qrtr: Invalid version 0 [ 121.555287][ T6138] loop1: detected capacity change from 0 to 64 [ 123.476562][ T6145] Bluetooth: MGMT ver 1.23 [ 125.173381][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 125.173401][ T30] audit: type=1326 audit(1770175048.346:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 125.471937][ T30] audit: type=1326 audit(1770175048.346:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 125.495908][ T30] audit: type=1326 audit(1770175048.456:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 127.427821][ T30] audit: type=1326 audit(1770175048.456:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 127.453761][ T30] audit: type=1326 audit(1770175048.456:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 127.480683][ T30] audit: type=1326 audit(1770175048.456:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 127.506727][ T30] audit: type=1326 audit(1770175048.456:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 127.615091][ T6166] loop1: detected capacity change from 0 to 256 [ 127.651227][ T30] audit: type=1326 audit(1770175048.456:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 127.699521][ T30] audit: type=1326 audit(1770175048.466:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 127.784396][ T6166] exfat: Deprecated parameter 'utf8' [ 127.798856][ T30] audit: type=1326 audit(1770175048.466:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb659aeb9 code=0x7ffc0000 [ 127.932576][ T6166] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 128.893964][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.125654][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 129.162266][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.189904][ T10] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 129.219033][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 129.257488][ T10] usb 2-1: config 4 has no interface number 0 [ 129.284293][ T10] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 129.323353][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.353592][ T10] usb 2-1: Product: syz [ 129.366020][ T10] usb 2-1: Manufacturer: syz [ 129.382494][ T10] usb 2-1: SerialNumber: syz [ 130.618497][ T6180] loop2: detected capacity change from 0 to 40427 [ 130.637580][ T6180] F2FS-fs (loop2): build fault injection rate: 174 [ 130.655308][ T6180] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 130.678442][ T6180] F2FS-fs (loop2): invalid crc value [ 132.832167][ T6180] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 133.359260][ T6207] qrtr: Invalid version 0 [ 134.557700][ T10] uvcvideo 2-1:4.147: probe with driver uvcvideo failed with error -22 [ 134.593108][ T10] usb 2-1: USB disconnect, device number 2 [ 134.714877][ T5837] Bluetooth: hci3: unexpected cc 0x042f length: 1 < 7 [ 135.267766][ T6226] ubi31: attaching mtd0 [ 135.287968][ T6226] ubi31: scanning is finished [ 135.292764][ T6226] ubi31: empty MTD device detected [ 137.893625][ T6226] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 138.016650][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.034207][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.257866][ T6260] loop4: detected capacity change from 0 to 1024 [ 141.341897][ T6260] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 141.430152][ T6260] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.530730][ T6260] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 141.577779][ T6260] System zones: 0-1, 4-36, 102-102 [ 141.603793][ T6260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.012386][ T6270] netlink: 64 bytes leftover after parsing attributes in process `syz.4.88'. [ 142.772110][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.277587][ T5916] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.467493][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 143.489381][ T5916] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 143.550702][ T5916] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 143.561574][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.574250][ T5916] usb 5-1: Product: syz [ 143.585925][ T5916] usb 5-1: Manufacturer: syz [ 143.599095][ T5916] usb 5-1: SerialNumber: syz [ 143.621933][ T5916] usb 5-1: config 0 descriptor?? [ 143.642754][ T5916] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 143.663951][ T5916] usb 5-1: setting power ON [ 143.675893][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 143.710388][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.734475][ T5916] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 143.762114][ T5916] usb 5-1: media controller created [ 143.843969][ T6277] dvb-usb: bulk message failed: -22 (3/0) [ 143.860520][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.879228][ T6277] dvb-usb: bulk message failed: -22 (6/0) [ 143.940642][ T5916] usb 5-1: selecting invalid altsetting 6 [ 143.964493][ T5916] usb 5-1: digital interface selection failed (-22) [ 143.977610][ T5916] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 144.000300][ T5916] usb 5-1: setting power OFF [ 144.012550][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 144.034706][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 144.050020][ T5916] (NULL device *): no alternate interface [ 144.125798][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 144.167983][ T5916] usb 5-1: USB disconnect, device number 2 [ 145.689319][ T5837] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 145.700068][ T5837] Bluetooth: hci1: Injecting HCI hardware error event [ 145.709713][ T5837] Bluetooth: hci1: hardware error 0x00 [ 146.662736][ T6305] loop4: detected capacity change from 0 to 512 [ 146.670196][ T6305] EXT4-fs: Ignoring removed oldalloc option [ 146.676625][ T6305] EXT4-fs: quotafile must be on filesystem root [ 147.470167][ T6307] overlayfs: overlapping lowerdir path [ 148.416799][ T5837] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 149.123609][ T6315] netlink: 'syz.1.107': attribute type 4 has an invalid length. [ 149.547586][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.060140][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 150.076373][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.090605][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.141358][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 150.167076][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 150.196415][ T9] usb 4-1: Product: syz [ 150.217877][ T9] usb 4-1: Manufacturer: syz [ 150.243599][ T9] hub 4-1:4.0: USB hub found [ 150.452284][ T9] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 151.511276][ T6338] loop0: detected capacity change from 0 to 8 [ 152.383840][ T5882] usb 4-1: USB disconnect, device number 4 [ 152.480037][ T6350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 152.579674][ T6358] netlink: 'syz.0.118': attribute type 13 has an invalid length. [ 152.967533][ T5837] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 152.976811][ T5837] Bluetooth: hci2: Injecting HCI hardware error event [ 152.984950][ T5837] Bluetooth: hci2: hardware error 0x00 [ 153.200215][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.209047][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.481138][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.496883][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.697031][ T5836] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 153.889846][ T5961] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.904438][ T5961] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.944487][ T5961] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.974011][ T5961] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.986484][ T6360] loop3: detected capacity change from 0 to 40427 [ 153.998571][ T6360] F2FS-fs (loop3): build fault injection rate: 174 [ 154.005182][ T6360] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 154.021094][ T6360] F2FS-fs (loop3): invalid crc value [ 154.364572][ T6360] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 154.375560][ T6360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.421189][ T6360] syz.3.120: attempt to access beyond end of device [ 154.421189][ T6360] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.622781][ T6379] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x361/0xd80 [ 155.246040][ T5837] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 155.547596][ T6386] loop0: detected capacity change from 0 to 64 [ 155.608320][ T5830] syz-executor: attempt to access beyond end of device [ 155.608320][ T5830] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 155.740287][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 155.740317][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 155.740331][ T5830] Call Trace: [ 155.740339][ T5830] [ 155.740349][ T5830] dump_stack_lvl+0xe8/0x150 [ 155.740384][ T5830] f2fs_handle_critical_error+0x37c/0x540 [ 155.740420][ T5830] f2fs_write_end_io+0xcdb/0xff0 [ 155.740450][ T5830] ? __submit_merged_bio+0x256/0x700 [ 155.740501][ T5830] __submit_merged_bio+0x256/0x700 [ 155.740535][ T5830] __submit_merged_write_cond+0x3c3/0x4e0 [ 155.740570][ T5830] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 155.740621][ T5830] f2fs_write_data_pages+0x2975/0x35e0 [ 155.740695][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.740746][ T5830] ? trace_sched_exit_tp+0x3a/0x150 [ 155.740806][ T5830] ? __pfx___schedule+0x10/0x10 [ 155.740850][ T5830] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.740875][ T5830] ? irqentry_exit+0x59e/0x620 [ 155.740898][ T5830] ? rcu_is_watching+0x15/0xb0 [ 155.740947][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.740978][ T5830] do_writepages+0x32e/0x550 [ 155.741018][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 155.741045][ T5830] filemap_fdatawrite+0x1e9/0x2f0 [ 155.741079][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 155.741155][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 155.741181][ T5830] f2fs_sync_dirty_inodes+0x30e/0x860 [ 155.741228][ T5830] f2fs_write_checkpoint+0x9cf/0x2680 [ 155.741294][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 155.741381][ T5830] kill_f2fs_super+0x314/0x720 [ 155.741419][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 155.741463][ T5830] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.741502][ T5830] deactivate_locked_super+0xbc/0x130 [ 155.741536][ T5830] cleanup_mnt+0x437/0x4d0 [ 155.741556][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.741583][ T5830] task_work_run+0x1d9/0x270 [ 155.741609][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 155.741643][ T5830] exit_to_user_mode_loop+0xed/0x480 [ 155.741667][ T5830] ? rcu_is_watching+0x15/0xb0 [ 155.741701][ T5830] do_syscall_64+0x32d/0xf80 [ 155.741731][ T5830] ? trace_irq_disable+0x3b/0x150 [ 155.741762][ T5830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.741783][ T5830] ? clear_bhb_loop+0x40/0x90 [ 155.741809][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.741830][ T5830] RIP: 0033:0x7fceb659c117 [ 155.741856][ T5830] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 155.741873][ T5830] RSP: 002b:00007ffed638d708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 155.741895][ T5830] RAX: 0000000000000000 RBX: 00007fceb660471f RCX: 00007fceb659c117 [ 155.741909][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed638d7c0 [ 155.741921][ T5830] RBP: 00007ffed638d7c0 R08: 00007ffed638e7c0 R09: 00000000ffffffff [ 155.741935][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed638e850 [ 155.741948][ T5830] R13: 00007fceb660471f R14: 0000000000025eb6 R15: 00007ffed638e890 [ 155.741982][ T5830] [ 156.297555][ T5830] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 156.486936][ T6390] loop2: detected capacity change from 0 to 8 [ 157.327332][ T6398] loop2: detected capacity change from 0 to 512 [ 157.351009][ T6398] EXT4-fs (loop2): Test dummy encryption mode enabled [ 157.377505][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 157.395700][ T6398] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 157.441059][ T6398] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 157.500066][ T6398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.577527][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 157.709365][ T6398] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 157.724256][ T5882] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 157.736642][ T6398] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 157.954133][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 158.410844][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.428500][ T5882] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 158.499583][ T6404] netlink: 'syz.4.132': attribute type 30 has an invalid length. [ 158.500073][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.517765][ T5882] usb 1-1: Product: syz [ 158.522117][ T5882] usb 1-1: Manufacturer: syz [ 158.528482][ T5882] usb 1-1: SerialNumber: syz [ 158.550600][ T5882] usb 1-1: config 0 descriptor?? [ 158.563889][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 158.584901][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 158.729618][ T5882] usb 1-1: setting power ON [ 158.734188][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 158.743989][ T6406] netlink: 'syz.4.132': attribute type 30 has an invalid length. [ 158.796137][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.874576][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 158.928849][ T5882] usb 1-1: media controller created [ 159.023448][ T6412] loop3: detected capacity change from 0 to 512 [ 159.046534][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.093706][ T6412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.285506][ T6412] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 159.304255][ T6412] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=4000e118, mo2=0002] [ 159.938136][ T6412] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.944916][ T6412] __quota_error: 10 callbacks suppressed [ 159.944935][ T6412] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 160.111700][ T6412] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 160.126863][ T6412] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 160.151464][ T6412] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.127: bg 0: block 40: padding at end of block bitmap is not set [ 160.189982][ T6412] loop3: lost filesystem error report for type 5 error -117 [ 160.195787][ T6412] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 160.203452][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 160.203578][ C0] EXT4-fs (loop3): initial error at time 1770175083: ext4_validate_block_bitmap:441 [ 160.203608][ C0] EXT4-fs (loop3): last error at time 1770175083: ext4_validate_block_bitmap:441 [ 160.500124][ T6424] loop4: detected capacity change from 0 to 512 [ 160.527454][ T6424] EXT4-fs: Ignoring removed oldalloc option [ 160.535017][ T6424] EXT4-fs: quotafile must be on filesystem root [ 161.243721][ T6412] loop3: lost filesystem error report for type 5 error -117 [ 161.251019][ T6412] EXT4-fs (loop3): 1 truncate cleaned up [ 162.307138][ T5882] usb 1-1: selecting invalid altsetting 6 [ 162.318312][ T6412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.374417][ T5882] usb 1-1: digital interface selection failed (-22) [ 162.391669][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 162.430357][ T5882] usb 1-1: setting power OFF [ 162.435191][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 162.456451][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 162.633216][ T5882] (NULL device *): no alternate interface [ 162.664553][ T6430] ptrace attach of "./syz-executor exec"[5819] was attempted by " [ 162.699500][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.747704][ T5925] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.864967][ T6433] loop2: detected capacity change from 0 to 64 [ 163.683145][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 163.749546][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.761445][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.841276][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.065125][ T5882] usb 1-1: USB disconnect, device number 2 [ 164.182255][ T5925] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.560285][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.696734][ T5925] usb 5-1: config 0 descriptor?? [ 165.035703][ T9] IPVS: starting estimator thread 0... [ 165.121387][ T6452] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20004 [ 165.226817][ T6454] IPVS: using max 38 ests per chain, 91200 per kthread [ 165.312994][ T5925] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 165.369796][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.602120][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 165.638100][ T5882] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.649352][ T5882] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.670455][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 165.683070][ T5882] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 165.754786][ T5882] usb 1-1: Product: syz [ 165.783520][ T5882] usb 1-1: Manufacturer: syz [ 166.033648][ T5882] hub 1-1:4.0: USB hub found [ 166.254990][ T5882] hub 1-1:4.0: 2 ports detected [ 166.980463][ T5925] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 167.231031][ T5882] usb 1-1: Failed to suspend device, error -71 [ 167.251616][ T5882] usb 1-1: USB disconnect, device number 3 [ 167.259077][ T5925] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 167.293169][ T852] usb 5-1: USB disconnect, device number 3 [ 167.431258][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 167.464652][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 167.496811][ T5925] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 167.523230][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.552944][ T5925] usb 3-1: config 0 descriptor?? [ 167.572034][ T6467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.887445][ T5916] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.109138][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 168.115195][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 168.145338][ T5925] usb 3-1: USB disconnect, device number 3 [ 168.156326][ T6478] ptrace attach of "./syz-executor exec"[5819] was attempted by " [ 168.160921][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 168.321870][ T6466] loop3: detected capacity change from 0 to 32768 [ 168.350616][ T5916] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.361803][ T5916] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.383355][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 168.394137][ T6466] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.147 (6466) [ 168.407213][ T5916] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 168.419729][ T5916] usb 5-1: Product: syz [ 168.424189][ T5916] usb 5-1: Manufacturer: syz [ 168.447661][ T6466] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 168.459189][ T6466] BTRFS info (device loop3): using sha256 checksum algorithm [ 168.474891][ T5916] hub 5-1:4.0: USB hub found [ 168.623275][ T6466] BTRFS info (device loop3): enabling ssd optimizations [ 168.633230][ T6466] BTRFS info (device loop3): turning on async discard [ 168.641642][ T6466] BTRFS info (device loop3): enabling free space tree [ 168.695863][ T5916] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 169.478521][ T6504] loop2: detected capacity change from 0 to 512 [ 169.490898][ T6504] EXT4-fs: Ignoring removed oldalloc option [ 169.497351][ T6504] EXT4-fs: quotafile must be on filesystem root [ 170.952231][ T5916] usb 5-1: USB disconnect, device number 4 [ 171.981622][ T6506] loop2: detected capacity change from 0 to 40427 [ 172.032223][ T6506] F2FS-fs (loop2): build fault injection rate: 174 [ 172.067455][ T6506] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 172.117548][ T6506] F2FS-fs (loop2): invalid crc value [ 173.106813][ T6527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.160'. [ 173.144384][ T6506] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 173.173431][ T5830] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 173.214451][ T6506] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.216382][ T6530] tipc: Started in network mode [ 173.442057][ T6534] ptrace attach of "./syz-executor exec"[5820] was attempted by " [ 173.484048][ T6530] tipc: Node identity , cluster identity 4711 [ 173.636963][ T6530] tipc: Failed to obtain node identity [ 173.642810][ T6530] tipc: Enabling of bearer rejected, failed to enable media [ 174.018608][ T852] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 174.241443][ T852] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 174.249344][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 174.260557][ T852] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.273413][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 174.284764][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 174.374030][ T852] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 174.398018][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 174.448043][ T852] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.486017][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 174.520261][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.111632][ T852] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 176.119259][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.137492][ T852] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.149577][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.160828][ T852] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.187487][ T852] usb 1-1: string descriptor 0 read error: -22 [ 176.194606][ T852] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 176.209930][ T852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.300635][ T852] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 176.929507][ T6549] netlink: 72 bytes leftover after parsing attributes in process `syz.2.164'. [ 178.758735][ T5882] usb 1-1: USB disconnect, device number 4 [ 180.301539][ C0] Unknown status report in ack skb [ 180.789190][ T6570] ptrace attach of "./syz-executor exec"[5818] was attempted by " [ 181.066400][ T6558] loop3: detected capacity change from 0 to 40427 [ 181.219415][ T6558] F2FS-fs (loop3): build fault injection rate: 174 [ 181.263774][ T6558] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 181.308990][ T6558] F2FS-fs (loop3): invalid crc value [ 181.514168][ T6574] loop1: detected capacity change from 0 to 2048 [ 181.543054][ T6558] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 181.577147][ T6558] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 181.633798][ T6558] syz.3.171: attempt to access beyond end of device [ 181.633798][ T6558] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.672532][ T6574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.791654][ T5830] syz-executor: attempt to access beyond end of device [ 181.791654][ T5830] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 181.831658][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 181.831685][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 181.831697][ T5830] Call Trace: [ 181.831705][ T5830] [ 181.831718][ T5830] dump_stack_lvl+0xe8/0x150 [ 181.831743][ T5830] f2fs_handle_critical_error+0x37c/0x540 [ 181.831767][ T5830] f2fs_write_end_io+0xcdb/0xff0 [ 181.831788][ T5830] ? __submit_merged_bio+0x256/0x700 [ 181.831815][ T5830] __submit_merged_bio+0x256/0x700 [ 181.831837][ T5830] __submit_merged_write_cond+0x3c3/0x4e0 [ 181.831860][ T5830] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 181.831893][ T5830] f2fs_write_data_pages+0x2975/0x35e0 [ 181.831940][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.831969][ T5830] ? css_rstat_updated+0x23a/0x530 [ 181.832002][ T5830] ? rcu_is_watching+0x15/0xb0 [ 181.832022][ T5830] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 181.832047][ T5830] ? lru_gen_update_size+0x7c9/0xd10 [ 181.832076][ T5830] ? __lock_acquire+0x6b5/0x2cf0 [ 181.832109][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.832142][ T5830] do_writepages+0x32e/0x550 [ 181.832168][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 181.832186][ T5830] filemap_fdatawrite+0x1e9/0x2f0 [ 181.832208][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 181.832257][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 181.832274][ T5830] f2fs_sync_dirty_inodes+0x30e/0x860 [ 181.832306][ T5830] f2fs_write_checkpoint+0x9cf/0x2680 [ 181.832349][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 181.832405][ T5830] kill_f2fs_super+0x314/0x720 [ 181.832430][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 181.832459][ T5830] ? lockdep_hardirqs_on+0x7a/0x110 [ 181.832485][ T5830] deactivate_locked_super+0xbc/0x130 [ 181.832507][ T5830] cleanup_mnt+0x437/0x4d0 [ 181.832521][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 181.832539][ T5830] task_work_run+0x1d9/0x270 [ 181.832556][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 181.832578][ T5830] exit_to_user_mode_loop+0xed/0x480 [ 181.832594][ T5830] ? rcu_is_watching+0x15/0xb0 [ 181.832616][ T5830] do_syscall_64+0x32d/0xf80 [ 181.832633][ T5830] ? trace_irq_disable+0x3b/0x150 [ 181.832653][ T5830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.832667][ T5830] ? clear_bhb_loop+0x40/0x90 [ 181.832684][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.832698][ T5830] RIP: 0033:0x7fceb659c117 [ 181.832712][ T5830] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 181.832723][ T5830] RSP: 002b:00007ffed638d708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 181.832738][ T5830] RAX: 0000000000000000 RBX: 00007fceb660471f RCX: 00007fceb659c117 [ 181.832748][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed638d7c0 [ 181.832756][ T5830] RBP: 00007ffed638d7c0 R08: 00007ffed638e7c0 R09: 00000000ffffffff [ 181.832765][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed638e850 [ 181.832774][ T5830] R13: 00007fceb660471f R14: 000000000002c574 R15: 00007ffed638e890 [ 181.832796][ T5830] [ 181.835131][ T5830] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 182.465864][ T6586] FAT-fs (nullb0): bogus number of reserved sectors [ 182.473460][ T6586] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 184.271360][ T6590] netlink: 72 bytes leftover after parsing attributes in process `syz.4.179'. [ 185.888391][ T5837] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 185.897954][ T5837] Bluetooth: hci4: Injecting HCI hardware error event [ 185.908116][ T5836] Bluetooth: hci4: hardware error 0x00 [ 187.434700][ T6607] netlink: 56 bytes leftover after parsing attributes in process `syz.1.183'. [ 187.444852][ T6607] tipc: Started in network mode [ 187.449916][ T6607] tipc: Node identity , cluster identity 4711 [ 187.456188][ T6607] tipc: Failed to obtain node identity [ 187.461765][ T6607] tipc: Enabling of bearer rejected, failed to enable media [ 188.330623][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 188.467541][ T5946] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 188.619412][ T6621] ptrace attach of "./syz-executor exec"[5819] was attempted by " [ 189.089234][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 189.237965][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 189.328065][ T5946] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 189.337168][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.348191][ T5946] usb 3-1: config 0 descriptor?? [ 189.361811][ T6614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.832061][ T5946] usbhid 3-1:0.0: can't add hid device: -71 [ 189.852263][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.886777][ T5946] usb 3-1: USB disconnect, device number 4 [ 190.374651][ T6633] syz.4.189 uses obsolete (PF_INET,SOCK_PACKET) [ 190.615960][ T6625] loop0: detected capacity change from 0 to 40427 [ 190.686935][ T6635] loop2: detected capacity change from 0 to 512 [ 190.722881][ T6625] F2FS-fs (loop0): build fault injection rate: 174 [ 190.795656][ T6625] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 190.839394][ T6635] EXT4-fs (loop2): Test dummy encryption mode enabled [ 190.907541][ T6625] F2FS-fs (loop0): invalid crc value [ 191.174667][ T6635] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 191.527529][ T6635] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 191.536324][ T6635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.650837][ T6625] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.683662][ T6635] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 191.757753][ T6625] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 192.630217][ T6647] netlink: 72 bytes leftover after parsing attributes in process `syz.1.191'. [ 193.762801][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.883497][ T6661] ptrace attach of "./syz-executor exec"[5830] was attempted by " [ 194.901974][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 195.031162][ T6662] netlink: 'syz.2.198': attribute type 30 has an invalid length. [ 195.114227][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 195.123330][ T6663] netlink: 'syz.2.198': attribute type 30 has an invalid length. [ 195.151558][ T5963] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.458694][ T5963] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.669901][ T5963] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.711432][ T5963] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.603669][ T6678] loop0: detected capacity change from 0 to 128 [ 197.644239][ T6679] netlink: 56 bytes leftover after parsing attributes in process `syz.4.201'. [ 197.654795][ T6679] tipc: Started in network mode [ 197.659829][ T6679] tipc: Node identity , cluster identity 4711 [ 197.666152][ T6679] tipc: Failed to obtain node identity [ 197.671727][ T6679] tipc: Enabling of bearer rejected, failed to enable media [ 197.748962][ T6678] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 198.323346][ T6682] netlink: 72 bytes leftover after parsing attributes in process `syz.3.204'. [ 199.473851][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.480404][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.551727][ T6685] loop0: detected capacity change from 0 to 256 [ 199.611069][ T6685] exfat: Deprecated parameter 'utf8' [ 199.655405][ T6685] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 199.767463][ T5836] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 199.777148][ T5836] Bluetooth: hci3: Injecting HCI hardware error event [ 199.785416][ T5836] Bluetooth: hci3: hardware error 0x00 [ 200.155225][ T6687] loop0: detected capacity change from 0 to 64 [ 202.051813][ T6704] overlayfs: overlapping lowerdir path [ 202.212836][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 202.601956][ T6706] loop1: detected capacity change from 0 to 512 [ 202.609386][ T6706] EXT4-fs: Ignoring removed oldalloc option [ 202.615396][ T6706] EXT4-fs: quotafile must be on filesystem root [ 206.919139][ T6727] netlink: 72 bytes leftover after parsing attributes in process `syz.4.216'. [ 208.198579][ T6732] loop1: detected capacity change from 0 to 764 [ 210.254805][ T6745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.222'. [ 210.265262][ T6745] tipc: Started in network mode [ 210.270245][ T6745] tipc: Node identity , cluster identity 4711 [ 210.276595][ T6745] tipc: Failed to obtain node identity [ 210.282260][ T6745] tipc: Enabling of bearer rejected, failed to enable media [ 212.394491][ T6763] loop3: detected capacity change from 0 to 512 [ 212.401585][ T6763] EXT4-fs: Ignoring removed oldalloc option [ 212.407773][ T6763] EXT4-fs: quotafile must be on filesystem root [ 212.462930][ T6762] loop2: detected capacity change from 0 to 64 [ 216.048312][ T6771] netlink: 72 bytes leftover after parsing attributes in process `syz.2.228'. [ 217.531407][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 220.812483][ T6785] loop0: detected capacity change from 0 to 40427 [ 220.972740][ T6785] F2FS-fs (loop0): build fault injection rate: 174 [ 221.277976][ T6785] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 221.321769][ T6807] loop2: detected capacity change from 0 to 64 [ 221.432846][ T6785] F2FS-fs (loop0): invalid crc value [ 222.060688][ T6785] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.119865][ T6785] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.178844][ T6785] syz.0.233: attempt to access beyond end of device [ 222.178844][ T6785] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 222.327185][ T6814] syz.0.233: attempt to access beyond end of device [ 222.327185][ T6814] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 222.561680][ T5819] syz-executor: attempt to access beyond end of device [ 222.561680][ T5819] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 222.782909][ T6824] loop2: detected capacity change from 0 to 64 [ 222.794861][ T6824] hfs: Bad value for 'gid' [ 224.603516][ T6824] loop2: detected capacity change from 0 to 262144 [ 224.610639][ T6824] ocfs2: Unknown parameter '' [ 224.668523][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 224.668544][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 224.668569][ T5819] Call Trace: [ 224.668574][ T5819] [ 224.668581][ T5819] dump_stack_lvl+0xe8/0x150 [ 224.668607][ T5819] f2fs_handle_critical_error+0x37c/0x540 [ 224.668630][ T5819] f2fs_write_end_io+0xcdb/0xff0 [ 224.668651][ T5819] ? __submit_merged_bio+0x256/0x700 [ 224.668679][ T5819] __submit_merged_bio+0x256/0x700 [ 224.668701][ T5819] __submit_merged_write_cond+0x3c3/0x4e0 [ 224.668724][ T5819] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 224.668757][ T5819] f2fs_write_data_pages+0x2975/0x35e0 [ 224.668802][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.668832][ T5819] ? css_rstat_updated+0x23a/0x530 [ 224.668864][ T5819] ? rcu_is_watching+0x15/0xb0 [ 224.668885][ T5819] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 224.668907][ T5819] ? lru_gen_update_size+0x7c9/0xd10 [ 224.668936][ T5819] ? __lock_acquire+0x6b5/0x2cf0 [ 224.669014][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.669034][ T5819] do_writepages+0x32e/0x550 [ 224.669059][ T5819] ? do_raw_spin_unlock+0xf5/0x210 [ 224.669075][ T5819] filemap_fdatawrite+0x1e9/0x2f0 [ 224.669096][ T5819] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 224.669142][ T5819] ? do_raw_spin_unlock+0xf5/0x210 [ 224.669158][ T5819] f2fs_sync_dirty_inodes+0x30e/0x860 [ 224.669187][ T5819] f2fs_write_checkpoint+0x9cf/0x2680 [ 224.669227][ T5819] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 224.669279][ T5819] kill_f2fs_super+0x314/0x720 [ 224.669304][ T5819] ? __pfx_kill_f2fs_super+0x10/0x10 [ 224.669331][ T5819] ? lockdep_hardirqs_on+0x7a/0x110 [ 224.669356][ T5819] deactivate_locked_super+0xbc/0x130 [ 224.669376][ T5819] cleanup_mnt+0x437/0x4d0 [ 224.669389][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.669406][ T5819] task_work_run+0x1d9/0x270 [ 224.669423][ T5819] ? __pfx_task_work_run+0x10/0x10 [ 224.669443][ T5819] exit_to_user_mode_loop+0xed/0x480 [ 224.669459][ T5819] ? rcu_is_watching+0x15/0xb0 [ 224.669480][ T5819] do_syscall_64+0x32d/0xf80 [ 224.669495][ T5819] ? trace_irq_disable+0x3b/0x150 [ 224.669514][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.669527][ T5819] ? clear_bhb_loop+0x40/0x90 [ 224.669543][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.669567][ T5819] RIP: 0033:0x7f99b239c117 [ 224.669580][ T5819] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 224.669591][ T5819] RSP: 002b:00007ffd3cb01868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 224.669605][ T5819] RAX: 0000000000000000 RBX: 00007f99b240471f RCX: 00007f99b239c117 [ 224.669614][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3cb01920 [ 224.669622][ T5819] RBP: 00007ffd3cb01920 R08: 00007ffd3cb02920 R09: 00000000ffffffff [ 224.669630][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3cb029b0 [ 224.669638][ T5819] R13: 00007f99b240471f R14: 0000000000036470 R15: 00007ffd3cb029f0 [ 224.669659][ T5819] [ 224.669665][ T5819] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 225.575206][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 225.584502][ T6826] netlink: 'syz.1.243': attribute type 30 has an invalid length. [ 225.726391][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 225.735600][ T6827] netlink: 'syz.1.243': attribute type 30 has an invalid length. [ 226.003514][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.016761][ T6825] netlink: 56 bytes leftover after parsing attributes in process `syz.3.241'. [ 226.119620][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.579103][ T6825] tipc: Started in network mode [ 226.620712][ T6825] tipc: Node identity , cluster identity 4711 [ 226.651827][ T6825] tipc: Failed to obtain node identity [ 226.669030][ T6825] tipc: Enabling of bearer rejected, failed to enable media [ 226.715949][ T6833] loop1: detected capacity change from 0 to 64 [ 226.767094][ T5963] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.786696][ T5963] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.284992][ T6850] loop2: detected capacity change from 0 to 8 [ 230.107583][ T6862] qrtr: Invalid version 0 [ 231.018927][ T6868] loop4: detected capacity change from 0 to 64 [ 231.031302][ T6868] hfs: Bad value for 'gid' [ 233.002524][ T6868] loop4: detected capacity change from 0 to 262144 [ 233.024425][ T6868] ocfs2: Unknown parameter '' [ 233.340152][ T6876] loop2: detected capacity change from 0 to 64 [ 234.589604][ T6890] loop2: detected capacity change from 0 to 8 [ 236.510396][ T6909] netlink: 56 bytes leftover after parsing attributes in process `syz.3.268'. [ 236.524287][ T6909] tipc: Started in network mode [ 236.530455][ T6909] tipc: Node identity , cluster identity 4711 [ 236.537200][ T6909] tipc: Failed to obtain node identity [ 236.543000][ T6909] tipc: Enabling of bearer rejected, failed to enable media [ 237.382996][ T6916] loop1: detected capacity change from 0 to 64 [ 237.396168][ T6916] hfs: Bad value for 'gid' [ 239.295915][ T6916] loop1: detected capacity change from 0 to 262144 [ 239.303025][ T6916] ocfs2: Unknown parameter '' [ 240.200232][ T6926] loop1: detected capacity change from 0 to 8 [ 240.351220][ T6928] loop0: detected capacity change from 0 to 8 [ 240.363377][ T6928] netlink: 1137 bytes leftover after parsing attributes in process `syz.0.276'. [ 240.375512][ T6928] netlink: 68 bytes leftover after parsing attributes in process `syz.0.276'. [ 240.561859][ T6930] loop0: detected capacity change from 0 to 128 [ 240.623105][ T6930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 240.708931][ T6932] loop1: detected capacity change from 0 to 512 [ 240.759839][ T6932] EXT4-fs (loop1): Test dummy encryption mode enabled [ 240.769767][ T6932] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 240.862031][ T6932] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 240.979231][ T6932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.100083][ T6932] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 241.878907][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.009538][ T6949] loop3: detected capacity change from 0 to 64 [ 242.751770][ T6940] loop0: detected capacity change from 0 to 40427 [ 242.814267][ T6940] F2FS-fs (loop0): build fault injection rate: 174 [ 242.838434][ T6940] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 242.867748][ T6940] F2FS-fs (loop0): invalid crc value [ 242.991277][ T6965] loop3: detected capacity change from 0 to 8 [ 243.236771][ T6940] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 243.283952][ T6967] loop3: detected capacity change from 0 to 128 [ 243.306089][ T6940] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 243.320132][ T6967] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 243.396463][ T6940] syz.0.279: attempt to access beyond end of device [ 243.396463][ T6940] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.664615][ T5819] syz-executor: attempt to access beyond end of device [ 243.664615][ T5819] loop0: rw=8390659, sector=45096, nr_sectors = 8 limit=40427 [ 243.755316][ T5819] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 243.827750][ T6959] loop1: detected capacity change from 0 to 32768 [ 243.922148][ T6959] JBD2: Ignoring recovery information on journal [ 243.951376][ T6959] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 243.969061][ T6959] JBD2: bad block at offset 32 [ 244.051813][ T6959] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 244.319305][ T5820] ocfs2: Unmounting device (7,1) on (node local) [ 244.656464][ T6971] loop3: detected capacity change from 0 to 32768 [ 244.743928][ T6971] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 245.452262][ T6971] XFS (loop3): Ending clean mount [ 247.291964][ T7006] loop1: detected capacity change from 0 to 8 [ 248.362320][ T5830] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 249.641630][ T7014] loop4: detected capacity change from 0 to 40427 [ 249.747886][ T7014] F2FS-fs (loop4): build fault injection rate: 174 [ 251.273295][ T7014] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 251.345192][ T7014] F2FS-fs (loop4): invalid crc value [ 251.365437][ T7014] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 251.466835][ T7044] loop0: detected capacity change from 0 to 8 [ 252.263794][ T7053] loop2: detected capacity change from 0 to 16384 [ 252.308326][ T7053] udf: Unknown parameter 'fowner>18446744073709551615' [ 252.893237][ T7065] ntfs3(nullb0): Primary boot signature is not NTFS. [ 252.906779][ T7065] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 254.342594][ T7082] netlink: 56 bytes leftover after parsing attributes in process `syz.3.323'. [ 254.353093][ T7082] tipc: Started in network mode [ 254.358045][ T7082] tipc: Node identity , cluster identity 4711 [ 254.364315][ T7082] tipc: Failed to obtain node identity [ 254.369905][ T7082] tipc: Enabling of bearer rejected, failed to enable media [ 254.879521][ T7062] loop0: detected capacity change from 0 to 40427 [ 254.908798][ T7062] F2FS-fs (loop0): build fault injection rate: 174 [ 254.931326][ T7062] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 254.952381][ T7062] F2FS-fs (loop0): invalid crc value [ 255.007663][ T7084] loop1: detected capacity change from 0 to 4096 [ 255.741748][ T7062] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 255.763372][ T30] audit: type=1800 audit(1770175178.936:90): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.324" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 255.829539][ T30] audit: type=1800 audit(1770175178.966:91): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.324" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 258.225448][ T7115] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.317973][ T7129] loop1: detected capacity change from 0 to 512 [ 259.334644][ T7129] EXT4-fs (loop1): Test dummy encryption mode enabled [ 259.372050][ T7129] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 259.460984][ T7129] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 259.512702][ T7129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.704557][ T7129] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 260.426879][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.600367][ T7143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.341'. [ 260.628968][ T7143] tipc: Started in network mode [ 260.675476][ T7143] tipc: Node identity , cluster identity 4711 [ 260.687794][ T7143] tipc: Failed to obtain node identity [ 260.719278][ T7143] tipc: Enabling of bearer rejected, failed to enable media [ 260.749319][ T7146] loop3: detected capacity change from 0 to 2048 [ 260.796763][ T7146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.898174][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.898288][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.448018][ T7161] netlink: 44 bytes leftover after parsing attributes in process `syz.3.347'. [ 262.473375][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.483347][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.933074][ T7180] loop4: detected capacity change from 0 to 512 [ 264.110658][ T7180] EXT4-fs (loop4): Test dummy encryption mode enabled [ 264.546058][ T7180] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 264.599862][ T7180] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 264.632142][ T7180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.738264][ T7180] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 265.154037][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.327017][ T7194] loop1: detected capacity change from 0 to 512 [ 265.351621][ T7194] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 265.369297][ T7194] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 265.379852][ T7194] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.358: Failed to acquire dquot type 1 [ 265.391415][ T7194] loop1: lost filesystem error report for type 5 error -117 [ 265.397029][ T7194] EXT4-fs (loop1): 1 truncate cleaned up [ 265.404464][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 265.404486][ C0] EXT4-fs (loop1): last error at time 1770175188: ext4_acquire_dquot:7003 [ 265.493550][ T7194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.567643][ T7194] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.779963][ T7200] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 265.788838][ T7200] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 265.797442][ T7200] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 266.807780][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 266.847489][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 266.886933][ T7204] netlink: 'syz.4.359': attribute type 6 has an invalid length. [ 266.961626][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.071616][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 267.101156][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 267.126518][ T7204] netlink: 'syz.4.359': attribute type 6 has an invalid length. [ 268.668655][ T7218] netlink: 56 bytes leftover after parsing attributes in process `syz.4.362'. [ 268.679432][ T7218] tipc: Started in network mode [ 268.684654][ T7218] tipc: Node identity , cluster identity 4711 [ 268.690922][ T7218] tipc: Failed to obtain node identity [ 268.696496][ T7218] tipc: Enabling of bearer rejected, failed to enable media [ 269.907421][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 270.098474][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 270.115133][ T10] usb 2-1: no configurations [ 270.136158][ T10] usb 2-1: can't read configurations, error -22 [ 270.227024][ T7229] loop0: detected capacity change from 0 to 512 [ 270.257019][ T7229] EXT4-fs (loop0): Test dummy encryption mode enabled [ 270.298078][ T7229] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 270.323781][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 270.357812][ T7229] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 270.386363][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.460138][ T7229] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 270.477419][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 270.483269][ T10] usb 2-1: no configurations [ 270.492565][ T10] usb 2-1: can't read configurations, error -22 [ 270.499563][ T10] usb usb2-port1: attempt power cycle [ 270.937711][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 270.968583][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 270.976139][ T10] usb 2-1: no configurations [ 270.988218][ T10] usb 2-1: can't read configurations, error -22 [ 271.202257][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.888888][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 271.988964][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 271.998188][ T10] usb 2-1: no configurations [ 272.003158][ T10] usb 2-1: can't read configurations, error -22 [ 272.010425][ T10] usb usb2-port1: unable to enumerate USB device [ 272.123971][ T7242] loop0: detected capacity change from 0 to 128 [ 273.776834][ T7242] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 274.018526][ T7242] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 274.098763][ T7250] loop1: detected capacity change from 0 to 8 [ 274.697014][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.706574][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.718332][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.728771][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.737451][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.978166][ T7264] loop1: detected capacity change from 0 to 32768 [ 275.986763][ T7264] btrfs: Deprecated parameter 'usebackuproot' [ 275.993223][ T7264] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 276.178094][ T7264] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.376 (7264) [ 276.558190][ T7264] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 276.569166][ T7264] BTRFS info (device loop1): using blake2b checksum algorithm [ 276.576718][ T7264] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 276.608815][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0xb8a00fc06297998e8b2a9d640888d3d43888ba3a66183c2ae9e4d9e3d333eba9 level 0 [ 276.632667][ T7264] BTRFS warning (device loop1): failed to read root (objectid=4): -5 [ 276.640804][ T7264] BTRFS warning (device loop1): try to load backup roots slot 1 [ 276.651017][ T7264] BTRFS warning (device loop1): global root 2 0 already exists [ 276.659076][ T7264] BTRFS error (device loop1): failed to load root extent [ 276.667026][ T7264] BTRFS warning (device loop1): try to load backup roots slot 2 [ 276.679122][ T49] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 276.689760][ T7264] BTRFS warning (device loop1): couldn't read tree root [ 276.696796][ T7264] BTRFS warning (device loop1): try to load backup roots slot 3 [ 276.705283][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5251072 mirror 1 wanted 0xe73b2aef0ccc20c12246b6666da18de55d6afe06c40b612a4853318aa8986b5c found 0xf815aa51a633b635c0c4a592073a955f6e9db216dd3928547dd96f7533d3e168 level 0 [ 276.728367][ T7264] BTRFS error (device loop1): failed to load root extent [ 276.745955][ T7264] BTRFS error (device loop1): open_ctree failed: -5 [ 276.820430][ T5837] Bluetooth: hci5: command tx timeout [ 277.614906][ T30] audit: type=1326 audit(1770175200.776:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ee859aeb9 code=0x0 [ 277.729620][ T7253] chnl_net:caif_netlink_parms(): no params data found [ 278.232466][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.274966][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.296728][ T7253] bridge_slave_0: entered allmulticast mode [ 278.573759][ T7253] bridge_slave_0: entered promiscuous mode [ 278.887448][ T5837] Bluetooth: hci5: command tx timeout [ 278.955536][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 279.058693][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.079049][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.086442][ T7253] bridge_slave_1: entered allmulticast mode [ 279.110590][ T7253] bridge_slave_1: entered promiscuous mode [ 279.125540][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.167980][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.199795][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.242277][ T5925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.278563][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.295834][ T5925] usb 1-1: config 0 descriptor?? [ 279.303061][ T7313] loop3: detected capacity change from 0 to 8 [ 279.454790][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.483308][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.733333][ T7253] team0: Port device team_slave_0 added [ 279.768607][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 279.781689][ T7253] team0: Port device team_slave_1 added [ 279.809910][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 279.883682][ T5925] usb 1-1: USB disconnect, device number 5 [ 280.619712][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.626710][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.879642][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.894578][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.901629][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.927668][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.967861][ T5837] Bluetooth: hci5: command tx timeout [ 281.655461][ T7330] netlink: 56 bytes leftover after parsing attributes in process `syz.0.390'. [ 281.758698][ T7336] loop4: detected capacity change from 0 to 512 [ 281.775729][ T7253] hsr_slave_0: entered promiscuous mode [ 281.828906][ T7336] EXT4-fs (loop4): Test dummy encryption mode enabled [ 281.837866][ T7253] hsr_slave_1: entered promiscuous mode [ 281.860094][ T7253] debugfs: 'hsr0' already exists in 'hsr' [ 281.876304][ T7336] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 281.933726][ T7253] Cannot create hsr debugfs directory [ 282.034377][ T7336] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 282.071192][ T7332] tipc: Started in network mode [ 282.086514][ T7336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.102962][ T7332] tipc: Node identity , cluster identity 4711 [ 282.135763][ T7332] tipc: Failed to obtain node identity [ 282.159098][ T7342] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 282.191809][ T7332] tipc: Enabling of bearer rejected, failed to enable media [ 282.714434][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.047474][ T5837] Bluetooth: hci5: command tx timeout [ 284.415062][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 284.993340][ T5961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.143657][ T5961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.370178][ T5961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.380760][ T5961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.292497][ T7253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.389729][ T5961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.438610][ T5961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.647392][ T7253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.789293][ T7253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.829238][ T7253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.593006][ T7377] loop3: detected capacity change from 0 to 512 [ 288.641495][ T7377] EXT4-fs (loop3): Test dummy encryption mode enabled [ 288.690083][ T7377] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 288.757482][ T7377] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 288.853836][ T7377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.993103][ T7388] loop1: detected capacity change from 0 to 128 [ 288.999899][ T7377] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 289.036676][ T5961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.109111][ T5961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.148760][ T7388] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.240441][ T7391] loop4: detected capacity change from 0 to 256 [ 289.269495][ T7391] exfat: Deprecated parameter 'utf8' [ 289.279261][ T7388] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.525229][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.600811][ T7391] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 289.889031][ T5961] bridge_slave_1: left allmulticast mode [ 289.917847][ T5961] bridge_slave_1: left promiscuous mode [ 289.926003][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.992093][ T5961] bridge_slave_0: left allmulticast mode [ 290.002473][ T5961] bridge_slave_0: left promiscuous mode [ 290.013759][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.353342][ T7408] netlink: 56 bytes leftover after parsing attributes in process `syz.4.408'. [ 291.705779][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.762293][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.787066][ T5961] bond0 (unregistering): Released all slaves [ 291.840298][ T7409] tipc: Started in network mode [ 291.848729][ T7409] tipc: Node identity , cluster identity 4711 [ 291.855105][ T7409] tipc: Failed to obtain node identity [ 291.875545][ T7409] tipc: Enabling of bearer rejected, failed to enable media [ 291.966123][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.124246][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.172871][ T5820] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.286249][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.293517][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.331189][ T7415] loop1: detected capacity change from 0 to 128 [ 292.353327][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.360591][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.374065][ T7415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 292.514649][ T7415] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 293.361581][ T7435] loop4: detected capacity change from 0 to 256 [ 293.403265][ T7435] exfat: Deprecated parameter 'utf8' [ 293.643624][ T7435] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 294.714136][ T7452] netlink: 124 bytes leftover after parsing attributes in process `syz.3.419'. [ 295.408557][ T7459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.421'. [ 295.545639][ T5961] hsr_slave_0: left promiscuous mode [ 295.764517][ T5961] hsr_slave_1: left promiscuous mode [ 295.862078][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.957373][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.077997][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.130658][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.461217][ T5961] veth1_macvtap: left promiscuous mode [ 296.524139][ T5961] veth0_macvtap: left promiscuous mode [ 296.558144][ T5961] veth1_vlan: left promiscuous mode [ 296.563563][ T5961] veth0_vlan: left promiscuous mode [ 297.152415][ T7471] overlayfs: overlapping lowerdir path [ 299.188178][ T7481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.426'. [ 299.885011][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 299.985781][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 300.880080][ T7459] tipc: Started in network mode [ 300.897954][ T7459] tipc: Node identity , cluster identity 4711 [ 300.904147][ T7459] tipc: Failed to obtain node identity [ 300.928948][ T7459] tipc: Enabling of bearer rejected, failed to enable media [ 300.979001][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.986757][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.456669][ T7501] loop4: detected capacity change from 0 to 256 [ 302.596617][ T7501] exfat: Deprecated parameter 'utf8' [ 302.740819][ T7501] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 302.792011][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.962065][ T5961] IPVS: stop unused estimator thread 0... [ 304.820547][ T7253] veth0_vlan: entered promiscuous mode [ 305.033336][ T7253] veth1_vlan: entered promiscuous mode [ 305.163935][ T7539] netlink: 124 bytes leftover after parsing attributes in process `syz.3.437'. [ 305.237657][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 305.684994][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.726162][ T7546] netlink: 56 bytes leftover after parsing attributes in process `syz.1.438'. [ 305.785597][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 305.816656][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 305.835891][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 305.853967][ T7253] veth0_macvtap: entered promiscuous mode [ 305.868620][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 305.891277][ T7253] veth1_macvtap: entered promiscuous mode [ 305.939265][ T10] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 305.950021][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 305.959548][ T10] usb 5-1: Product: syz [ 305.963944][ T10] usb 5-1: Manufacturer: syz [ 305.969013][ T10] usb 5-1: SerialNumber: syz [ 305.977069][ T10] usb 5-1: config 0 descriptor?? [ 306.084194][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.164704][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.208436][ T10] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 306.220152][ T5963] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.233828][ T10] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 306.255925][ T5963] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.308627][ T5963] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.409668][ T10] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 306.429508][ T5963] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.451895][ T10] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 306.566531][ T10] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 306.707757][ T10] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 306.783532][ T4930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.829020][ T4930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.935815][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.984597][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.714027][ T10] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 307.757756][ T10] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 307.861123][ T10] usb 5-1: USB disconnect, device number 5 [ 311.178132][ T7605] netlink: 56 bytes leftover after parsing attributes in process `syz.1.449'. [ 311.299193][ T7602] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 314.395724][ T7638] netlink: 124 bytes leftover after parsing attributes in process `syz.5.457'. [ 317.524083][ T7672] loop5: detected capacity change from 0 to 64 [ 320.647444][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 320.868091][ T5882] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 321.068137][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 321.332831][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 321.366027][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 321.449761][ T7706] veth0: entered promiscuous mode [ 321.462114][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 322.206599][ T5882] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 322.251817][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.342423][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.359066][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.601168][ T5882] usb 6-1: config 0 descriptor?? [ 322.765622][ T7687] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 323.025210][ T7714] loop3: detected capacity change from 0 to 128 [ 323.049697][ T7714] vfat: Unexpected value for 'dos1xfloppy' [ 323.384551][ T5882] usbhid 6-1:0.0: can't add hid device: -71 [ 323.406883][ T5882] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 324.065082][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.100299][ T5882] usb 6-1: USB disconnect, device number 2 [ 324.153337][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 324.176889][ T10] usb 2-1: can't read configurations, error -71 [ 324.422641][ T7722] loop3: detected capacity change from 0 to 128 [ 325.106735][ T7722] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 325.441217][ T7722] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 327.208706][ T7757] ------------[ cut here ]------------ [ 327.214556][ T7757] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 327.214580][ T7757] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.1.485/7757 [ 327.233925][ T7757] Modules linked in: [ 327.238304][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.1.485 Not tainted syzkaller #0 PREEMPT(full) [ 327.247678][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 327.258676][ T7757] RIP: 0010:path_noexec+0x1af/0x200 [ 327.263933][ T7757] Code: 02 31 ff 48 89 de e8 b0 1a 82 ff d1 eb eb 07 e8 c7 15 82 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 df 6c 09 cc e8 b2 15 82 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 327.284104][ T7757] RSP: 0018:ffffc90003cbfbd8 EFLAGS: 00010287 [ 327.290558][ T7757] RAX: ffffffff8243881e RBX: ffff88807b550940 RCX: 0000000000080000 [ 327.298591][ T7757] RDX: ffffc9000bd01000 RSI: 0000000000000068 RDI: 0000000000000069 [ 327.306584][ T7757] RBP: 0000000000080000 R08: ffff88802b3a8000 R09: 0000000000000003 [ 327.314592][ T7757] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 327.322599][ T7757] R13: 1ffff92000797f90 R14: 0000000000000000 R15: dffffc0000000000 [ 327.330622][ T7757] FS: 00007f1ee94a66c0(0000) GS:ffff88812546d000(0000) knlGS:0000000000000000 [ 327.340321][ T7757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.346917][ T7757] CR2: 00007f024cbfb000 CR3: 000000009e292000 CR4: 00000000003526f0 [ 327.355562][ T7757] Call Trace: [ 327.359294][ T7757] [ 327.362251][ T7757] do_mmap+0xa32/0x10c0 [ 327.366426][ T7757] ? __pfx_do_mmap+0x10/0x10 [ 327.371142][ T7757] ? down_write_killable+0x180/0x240 [ 327.376446][ T7757] ? __pfx_down_write_killable+0x10/0x10 [ 327.382155][ T7757] ? apparmor_mmap_file+0x2da/0x3e0 [ 327.387414][ T7757] vm_mmap_pgoff+0x2c9/0x4f0 [ 327.392058][ T7757] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 327.397215][ T7757] ? __fget_files+0x2a/0x420 [ 327.401888][ T7757] ? __fget_files+0x3a0/0x420 [ 327.406600][ T7757] ? __fget_files+0x2a/0x420 [ 327.411260][ T7757] ksys_mmap_pgoff+0x51e/0x760 [ 327.416043][ T7757] do_syscall_64+0x14d/0xf80 [ 327.420683][ T7757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.426754][ T7757] ? clear_bhb_loop+0x40/0x90 [ 327.431473][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.437425][ T7757] RIP: 0033:0x7f1ee859aeb9 [ 327.441862][ T7757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.463370][ T7757] RSP: 002b:00007f1ee94a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 327.472454][ T7757] RAX: ffffffffffffffda RBX: 00007f1ee8815fa0 RCX: 00007f1ee859aeb9 [ 327.480491][ T7757] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 327.488525][ T7757] RBP: 00007f1ee8608c1f R08: 0000000000000005 R09: 0000000000000000 [ 327.496530][ T7757] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 327.504580][ T7757] R13: 00007f1ee8816038 R14: 00007f1ee8815fa0 R15: 00007ffd5df05648 [ 327.512598][ T7757] [ 327.515633][ T7757] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.522930][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.1.485 Not tainted syzkaller #0 PREEMPT(full) [ 327.532163][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 327.542259][ T7757] Call Trace: [ 327.545572][ T7757] [ 327.548516][ T7757] vpanic+0x56c/0xa60 [ 327.552544][ T7757] ? __pfx__printk+0x10/0x10 [ 327.557159][ T7757] ? __pfx_vpanic+0x10/0x10 [ 327.561688][ T7757] ? is_bpf_text_address+0x292/0x2b0 [ 327.567073][ T7757] ? is_bpf_text_address+0x26/0x2b0 [ 327.572286][ T7757] panic+0xc5/0xd0 [ 327.576050][ T7757] ? __pfx_panic+0x10/0x10 [ 327.580489][ T7757] __warn+0x315/0x4f0 [ 327.584482][ T7757] ? path_noexec+0x1af/0x200 [ 327.589105][ T7757] ? path_noexec+0x1af/0x200 [ 327.593701][ T7757] __report_bug+0x29a/0x540 [ 327.598226][ T7757] ? path_noexec+0x1af/0x200 [ 327.602854][ T7757] ? __pfx___report_bug+0x10/0x10 [ 327.607886][ T7757] ? irqentry_exit+0x59e/0x620 [ 327.612676][ T7757] ? trace_irq_disable+0x3b/0x150 [ 327.617740][ T7757] ? path_noexec+0x1b1/0x200 [ 327.622386][ T7757] ? path_noexec+0x1af/0x200 [ 327.626988][ T7757] ? path_noexec+0x1af/0x200 [ 327.631601][ T7757] report_bug+0x16a/0x220 [ 327.635955][ T7757] ? path_noexec+0x1af/0x200 [ 327.640552][ T7757] ? path_noexec+0x1b1/0x200 [ 327.645269][ T7757] handle_bug+0x98/0x200 [ 327.649519][ T7757] exc_invalid_op+0x1a/0x50 [ 327.654027][ T7757] asm_exc_invalid_op+0x1a/0x20 [ 327.658877][ T7757] RIP: 0010:path_noexec+0x1af/0x200 [ 327.664116][ T7757] Code: 02 31 ff 48 89 de e8 b0 1a 82 ff d1 eb eb 07 e8 c7 15 82 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 df 6c 09 cc e8 b2 15 82 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 327.683758][ T7757] RSP: 0018:ffffc90003cbfbd8 EFLAGS: 00010287 [ 327.689834][ T7757] RAX: ffffffff8243881e RBX: ffff88807b550940 RCX: 0000000000080000 [ 327.697829][ T7757] RDX: ffffc9000bd01000 RSI: 0000000000000068 RDI: 0000000000000069 [ 327.705800][ T7757] RBP: 0000000000080000 R08: ffff88802b3a8000 R09: 0000000000000003 [ 327.713770][ T7757] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 327.721831][ T7757] R13: 1ffff92000797f90 R14: 0000000000000000 R15: dffffc0000000000 [ 327.729825][ T7757] ? path_noexec+0x1ae/0x200 [ 327.734469][ T7757] ? path_noexec+0x1ae/0x200 [ 327.739087][ T7757] do_mmap+0xa32/0x10c0 [ 327.743271][ T7757] ? __pfx_do_mmap+0x10/0x10 [ 327.747872][ T7757] ? down_write_killable+0x180/0x240 [ 327.753196][ T7757] ? __pfx_down_write_killable+0x10/0x10 [ 327.758855][ T7757] ? apparmor_mmap_file+0x2da/0x3e0 [ 327.764094][ T7757] vm_mmap_pgoff+0x2c9/0x4f0 [ 327.768711][ T7757] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 327.773854][ T7757] ? __fget_files+0x2a/0x420 [ 327.778476][ T7757] ? __fget_files+0x3a0/0x420 [ 327.783189][ T7757] ? __fget_files+0x2a/0x420 [ 327.787827][ T7757] ksys_mmap_pgoff+0x51e/0x760 [ 327.792649][ T7757] do_syscall_64+0x14d/0xf80 [ 327.797248][ T7757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.803338][ T7757] ? clear_bhb_loop+0x40/0x90 [ 327.808035][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.813945][ T7757] RIP: 0033:0x7f1ee859aeb9 [ 327.818368][ T7757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.838006][ T7757] RSP: 002b:00007f1ee94a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 327.846475][ T7757] RAX: ffffffffffffffda RBX: 00007f1ee8815fa0 RCX: 00007f1ee859aeb9 [ 327.854451][ T7757] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 327.862431][ T7757] RBP: 00007f1ee8608c1f R08: 0000000000000005 R09: 0000000000000000 [ 327.870490][ T7757] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 327.878474][ T7757] R13: 00007f1ee8816038 R14: 00007f1ee8815fa0 R15: 00007ffd5df05648 [ 327.886496][ T7757] [ 327.890127][ T7757] Kernel Offset: disabled [ 327.894461][ T7757] Rebooting in 86400 seconds..