last executing test programs: 1m56.357964907s ago: executing program 2 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90ade5c4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="5001000000000000030000000000000004000000000000000300000000000000ffffff7f0000000003000000000000000900000001000100060000000000000009000000000000000400000000000000a146000000000000060000000000000000000000000000000600000001", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="018000000000008000000000010000000000000001000000000000000100000094015432000000000000000004"], 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 1m56.092449225s ago: executing program 2 (id=279): socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0xed, 0x2}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 1m55.918157181s ago: executing program 2 (id=282): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m53.250323908s ago: executing program 2 (id=304): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m53.068873974s ago: executing program 2 (id=306): setresgid(0xee00, 0xee01, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c4004060000000000bf852c8986626691b01b5f44e4"], 0xe0}], 0x1}, 0x44040) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/uts\x00') 1m52.610642369s ago: executing program 2 (id=311): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r1, @ANYBLOB="d00000000a000100000000000000001008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000002481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 1m52.371602686s ago: executing program 32 (id=311): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r1, @ANYBLOB="d00000000a000100000000000000001008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000002481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 1m39.886576055s ago: executing program 1 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1m39.592921975s ago: executing program 1 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, 0x0, 0xe4840, 0x88) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x2000, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r2, 0x5, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m39.186618468s ago: executing program 1 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 1m38.538349729s ago: executing program 1 (id=366): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x180d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000540)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000000140)=""/191, 0xbf) 1m37.666398507s ago: executing program 1 (id=372): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000000, 0x6, 0x6}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m36.538961694s ago: executing program 1 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m36.123067978s ago: executing program 33 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 9.271648137s ago: executing program 0 (id=741): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006500)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xc, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60040000) 7.808423405s ago: executing program 5 (id=736): socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.631079663s ago: executing program 0 (id=737): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20e000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000002a00090000000000000000000440002c08001700", @ANYRES16=r0], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) 5.970245824s ago: executing program 0 (id=739): close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000017c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) fadvise64(r0, 0x8000000000000001, 0x9, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) close(r0) 5.357354735s ago: executing program 4 (id=742): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.150287312s ago: executing program 3 (id=743): timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {r2, r3+10000000}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r5, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 4.534683402s ago: executing program 5 (id=744): socket(0x40000000015, 0x5, 0x0) socket(0x2a, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 4.470647104s ago: executing program 4 (id=745): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.392293846s ago: executing program 4 (id=746): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.248383841s ago: executing program 5 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a8", 0x36, 0x40, &(0x7f00000000c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.066772397s ago: executing program 4 (id=748): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.006626569s ago: executing program 3 (id=749): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x7]}, 0x8, 0x800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.849728844s ago: executing program 3 (id=750): syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x10) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.718240138s ago: executing program 5 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.438898107s ago: executing program 0 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x0, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 3.113017788s ago: executing program 3 (id=753): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdb6, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x20}}], 0x20}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.377261792s ago: executing program 5 (id=754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0) mq_getsetattr(r3, &(0x7f0000001080)={0x0, 0x0, 0x8001, 0x55e}, 0x0) 2.230633967s ago: executing program 0 (id=755): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80, 0x8) 331.573089ms ago: executing program 4 (id=756): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 318.90316ms ago: executing program 5 (id=757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="1f3221a1b56b5a471ff5eb5d05616f818100ae07927521c5e48d66f562d0e082fa83435db908c3eb9cb6c3e04118c72b75e469b053eb4a8de1fb45ac24a5d83a", 0x40}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@init_itable}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@dioread_nolock}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 252.530482ms ago: executing program 0 (id=758): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "39731513e732e826", "796002605557d9779ad9dce8592d6a6d", "13c1d8e0", "8e3d388f167059c2"}, 0x28) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="b98256db3224cdf4f7e3201c7863b17c71c6b4dc23e09bd5001a77e98ef5a8b083a68a3772b212847be4b0b055856e1e5eb7e8531cf0452bac65e4c2f634a52d4177c4dfca3edc5107342e046363d2f911a8ad16495c1af72c024963d59fbfa5fe17d74de95a81e5cb964c6fcf20c4eb756d96830257b94c0c8af17a95a9f1c3c8a1e16359a48febdaa71a3b772e51e196d8ad360786cd5eb19d253b5b4a8a0ab7031403b4a271a38d74dae789963c22e4594917e76a6f0cfbd3aaac43307e11d394cd78d009dc1b3c6b8d3208a735672a8ac1b9cbaaabffa3c2336e65af340da2061d7ef32c85c1063af439c0a65cd88e07d7904579231dc83579ee770555", 0xff}, {&(0x7f00000007c0)="11c3e85bb11156cebf92df3b65b0577f2b166c27f4f6039ffb1868f500563e23304abb42db743441f726812f068589a9e7619869322e83f1f5a94a7caef127a049f12aaeea3082bb2cb14f706466ca424b65ed6455c6a402abcf9bd088166f33f68caab04d6d8ab11d2b59db21ee339c5e95bf549d9545676717e16d0a46ef0e21fc90f3f42e7d23ad1ede7673bc5bde99df928e46e25366db886525ab80ef54836d05b03d0b4bfe7a6a614713", 0xad}, {&(0x7f0000000600)="7580ff2c23d417c0523db9788ad47ce8cd0c223ea553b6beee3dcfe23ec24218c2d0c7e6885771ba032d6a67201525e6e244161902c6fcc02048d249ed49be1f476c74db262eb68b5eb23954d8bc0854e687203e030ab6350701ecfd92eb9426e36da9fc52f6190f1a0a9f5460d1615e9bbb3c67fa7371591c8a6517c55fcbf0aaa6a97cbd", 0x85}, {&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebcc997799498f98ef0b749ecc8eba4bd4186d32e085fb138a2436a1797e41f041ff7c750a8c9e24bc892c38fb50e6dd842bba05913401ae1c30cb8ea803aa8d8bc335a9b0a8dc8897d7900fd31844f0c58037700c3ce36e6d38ec3f571c36ecf02e4f7ba21879072017a5aa519c64c8ca1aa2da5edf75900ea24c56f4b2f45946b0303540c1e8aed4a47acc7ad5b913054972f92abe0a3a57267600c7a700fad32317e4cfdf8c25bed691274ca9fec371c6bd3dd00f15dc2", 0xe2}, {&(0x7f00000008c0)="26b80df6eca985188e62a64122b2d4bb8b5b22176766e8679e35a5c8813a9a246766e96f9ed22e3dc371cf1bedeaa8521b186cf551eab0cce8c2fc9b4832e9a29fd64b78da1ac7611be5fd8e427758ebed1cd0dd69f5b0bf9a198fb16284f10d870ff83660ff1dfb076fff863368a9c8f3c17e45b86e52264b429d732dc87683eb30feff97872ceb22143ff169522872822dcca0963c11faff9db65c635905906f302710f9bda57002b2e1fa8fc2f47cf692cf582e249f7a3d22889e71e00bebdd067afd7b18b99dc953f24e320e", 0xce}], 0x5}, 0x40000c8) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) 134.565746ms ago: executing program 3 (id=759): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 1.54703ms ago: executing program 4 (id=760): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 0s ago: executing program 3 (id=761): r0 = socket$inet(0x2, 0x3, 0x6) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x1008}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x110, 0x700, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x8, 0x8000, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x5f, 0x0, 0xf9, 0x2f, 0x0, @rand_addr=0x64010101, @remote}}}}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 4086][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.753327][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.781980][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.813750][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.820863][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.847161][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.903461][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.911111][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.937338][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.960289][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.967561][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.974702][ T5782] bridge_slave_0: entered allmulticast mode [ 79.981731][ T5782] bridge_slave_0: entered promiscuous mode [ 79.990518][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.997744][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.005254][ T5782] bridge_slave_1: entered allmulticast mode [ 80.012488][ T5782] bridge_slave_1: entered promiscuous mode [ 80.019956][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.027263][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.053730][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.112637][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.142492][ T5774] hsr_slave_0: entered promiscuous mode [ 80.149011][ T5774] hsr_slave_1: entered promiscuous mode [ 80.170025][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.239373][ T5778] hsr_slave_0: entered promiscuous mode [ 80.246253][ T5778] hsr_slave_1: entered promiscuous mode [ 80.252984][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.260952][ T5778] Cannot create hsr debugfs directory [ 80.282141][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.289604][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.296955][ T5784] bridge_slave_0: entered allmulticast mode [ 80.303813][ T5784] bridge_slave_0: entered promiscuous mode [ 80.313466][ T5782] team0: Port device team_slave_0 added [ 80.323336][ T5782] team0: Port device team_slave_1 added [ 80.361724][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.369411][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.376924][ T5784] bridge_slave_1: entered allmulticast mode [ 80.383959][ T5784] bridge_slave_1: entered promiscuous mode [ 80.408806][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.416018][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.442454][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.477210][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.484195][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.512946][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.533480][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.545801][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.609272][ T5784] team0: Port device team_slave_0 added [ 80.618541][ T5784] team0: Port device team_slave_1 added [ 80.635545][ T5085] Bluetooth: hci0: command tx timeout [ 80.718357][ T5085] Bluetooth: hci1: command tx timeout [ 80.733291][ T5782] hsr_slave_0: entered promiscuous mode [ 80.739781][ T5782] hsr_slave_1: entered promiscuous mode [ 80.746325][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.753981][ T5782] Cannot create hsr debugfs directory [ 80.775654][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.782656][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.815220][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.832939][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.840680][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.866722][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.884905][ T5085] Bluetooth: hci2: command tx timeout [ 80.955404][ T5085] Bluetooth: hci3: command tx timeout [ 81.018692][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.049990][ T5784] hsr_slave_0: entered promiscuous mode [ 81.056442][ T5784] hsr_slave_1: entered promiscuous mode [ 81.062544][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.070539][ T5784] Cannot create hsr debugfs directory [ 81.081437][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.091003][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.114704][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.268638][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.280010][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.312914][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.345567][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.480413][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.506233][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.517325][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.527279][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.607167][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.650771][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.662284][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.672525][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.693310][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.733655][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.760741][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.768103][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.788312][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.817610][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.825222][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.879582][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.913651][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.920923][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.938879][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.982303][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.989594][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.006816][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.037665][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.044976][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.060001][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.067651][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.128629][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.139846][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.189214][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.270420][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.289763][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.353574][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.360855][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.372003][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.379235][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.675506][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.715384][ T5085] Bluetooth: hci0: command tx timeout [ 82.796129][ T5085] Bluetooth: hci1: command tx timeout [ 82.824531][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.851715][ T5778] veth0_vlan: entered promiscuous mode [ 82.860757][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.894657][ T5778] veth1_vlan: entered promiscuous mode [ 82.933093][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.955349][ T5085] Bluetooth: hci2: command tx timeout [ 82.974296][ T5782] veth0_vlan: entered promiscuous mode [ 83.022209][ T5774] veth0_vlan: entered promiscuous mode [ 83.035061][ T5085] Bluetooth: hci3: command tx timeout [ 83.052400][ T5778] veth0_macvtap: entered promiscuous mode [ 83.064288][ T5782] veth1_vlan: entered promiscuous mode [ 83.082860][ T5778] veth1_macvtap: entered promiscuous mode [ 83.098687][ T5774] veth1_vlan: entered promiscuous mode [ 83.157642][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.171505][ T5784] veth0_vlan: entered promiscuous mode [ 83.184245][ T5774] veth0_macvtap: entered promiscuous mode [ 83.195202][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.217444][ T5774] veth1_macvtap: entered promiscuous mode [ 83.231890][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.241345][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.252807][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.262106][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.291409][ T5784] veth1_vlan: entered promiscuous mode [ 83.311858][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.324933][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.336912][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.347549][ T5782] veth0_macvtap: entered promiscuous mode [ 83.360377][ T5782] veth1_macvtap: entered promiscuous mode [ 83.388799][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.401420][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.416367][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.448841][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.459896][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.469095][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.478197][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.492076][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.504120][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.514134][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.525588][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.537573][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.604566][ T5784] veth0_macvtap: entered promiscuous mode [ 83.632392][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.644177][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.654479][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.665302][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.679233][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.698353][ T5784] veth1_macvtap: entered promiscuous mode [ 83.736338][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.741854][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.744351][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.767032][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.775943][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.784673][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.817821][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.832953][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.844498][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.855498][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.865952][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.877777][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.889103][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.929847][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.941932][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.952214][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.962717][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.972837][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.983327][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.994402][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.048694][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.059337][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.060147][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.076854][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.082816][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.094627][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.131971][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.140505][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.163628][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.181726][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.280102][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.310321][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.383546][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.411677][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.536426][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.574857][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.631289][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.642084][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.795940][ T5085] Bluetooth: hci0: command tx timeout [ 84.820119][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.874834][ T5085] Bluetooth: hci1: command tx timeout [ 85.035862][ T5085] Bluetooth: hci2: command tx timeout [ 85.153821][ T5085] Bluetooth: hci3: command tx timeout [ 85.325355][ T5834] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 85.873462][ T5834] usb 3-1: config 1 interface 0 has no altsetting 0 [ 85.897934][ T5834] usb 3-1: string descriptor 0 read error: -22 [ 85.904334][ T5834] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.913523][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.057651][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.323141][ T5867] syz.3.8[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.450686][ T5869] Illegal XDP return value 78614584 on prog (id 2) dev syz_tun, expect packet loss! [ 86.470543][ T5838] loop2: detected capacity change from 0 to 256 [ 86.506874][ T5838] ======================================================= [ 86.506874][ T5838] WARNING: The mand mount option has been deprecated and [ 86.506874][ T5838] and is ignored by this kernel. Remove the mand [ 86.506874][ T5838] option from the mount to silence this warning. [ 86.506874][ T5838] ======================================================= [ 86.610631][ T5838] exfat: Deprecated parameter 'utf8' [ 86.630592][ T5838] exfat: Deprecated parameter 'namecase' [ 86.640690][ T5838] exfat: Deprecated parameter 'utf8' [ 86.658020][ T5838] exfat: Bad value for 'gid' [ 86.711342][ T5834] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 86.787865][ T5834] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0001/input/input5 [ 86.875694][ T5085] Bluetooth: hci0: command tx timeout [ 86.956019][ T5085] Bluetooth: hci1: command tx timeout [ 87.006871][ T5834] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 87.028791][ T5834] usb 3-1: USB disconnect, device number 2 [ 87.115551][ T5085] Bluetooth: hci2: command tx timeout [ 87.194923][ T5085] Bluetooth: hci3: command tx timeout [ 87.393532][ T5876] fido_id[5876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 87.463303][ T5867] loop3: detected capacity change from 0 to 32768 [ 87.522418][ T5867] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.8 (5867) [ 87.649414][ T5867] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 87.706518][ T5867] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 87.735025][ T5867] BTRFS info (device loop3): metadata ratio 0 [ 87.741194][ T5867] BTRFS info (device loop3): using free space tree [ 88.054154][ T5867] BTRFS info (device loop3): enabling ssd optimizations [ 88.075219][ T5867] BTRFS info (device loop3): auto enabling async discard [ 88.344943][ T28] audit: type=1800 audit(1781919905.416:2): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 88.371529][ T5871] loop0: detected capacity change from 0 to 40427 [ 88.444800][ T5871] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 88.466089][ T5871] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.505544][ T5871] F2FS-fs (loop0): invalid crc value [ 88.511096][ T5871] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 88.571173][ T5871] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.784798][ T5871] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.792150][ T5871] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.067581][ T5899] loop2: detected capacity change from 0 to 4096 [ 89.128561][ T5899] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 89.211511][ T5774] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 89.433290][ T5782] syz-executor: attempt to access beyond end of device [ 89.433290][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.566262][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.809617][ T5934] syz.3.23 uses obsolete (PF_INET,SOCK_PACKET) [ 90.925006][ T5775] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.116811][ T5775] usb 2-1: Using ep0 maxpacket: 32 [ 91.124658][ T5775] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.141083][ T5939] loop3: detected capacity change from 0 to 128 [ 91.152164][ T5926] loop0: detected capacity change from 0 to 32768 [ 91.173373][ T5775] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 91.212589][ T5939] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.240548][ T5939] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.254247][ T5775] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 91.276527][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.312766][ T28] audit: type=1800 audit(1781919908.386:3): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.25" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 91.352682][ T5775] usb 2-1: Product: syz [ 91.375970][ T5775] usb 2-1: Manufacturer: syz [ 91.386166][ T5775] usb 2-1: SerialNumber: syz [ 91.479770][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.679809][ T5775] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.699004][ T5775] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.799345][ T5775] usb 2-1: USB disconnect, device number 2 [ 92.241782][ T9] cfg80211: failed to load regulatory.db [ 93.270974][ T5952] loop2: detected capacity change from 0 to 32768 [ 93.388551][ T5952] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.577764][ T5952] XFS (loop2): Ending clean mount [ 93.755163][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.807639][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.954997][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 93.973270][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.990118][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.999054][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.009011][ T23] usb 2-1: Product: syz [ 94.013388][ T23] usb 2-1: Manufacturer: syz [ 94.018436][ T23] usb 2-1: SerialNumber: syz [ 94.025703][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.039388][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.050509][ T23] usb 2-1: config 0 descriptor?? [ 94.057241][ T5978] netlink: 64 bytes leftover after parsing attributes in process `syz.3.35'. [ 94.060634][ T5834] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 94.094611][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.111239][ T5834] usb 1-1: config 0 descriptor?? [ 94.141509][ T5978] syzkaller1: entered promiscuous mode [ 94.162055][ T5978] syzkaller1: entered allmulticast mode [ 94.294464][ T23] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 94.469681][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 94.594069][ T5834] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 94.601881][ T5834] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 94.609621][ T5834] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 94.617239][ T5834] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 94.624357][ T5834] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 94.632400][ T5834] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 94.640322][ T5834] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 94.656791][ T5834] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 94.941963][ T5986] loop3: detected capacity change from 0 to 256 [ 95.567272][ T23] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 95.606869][ T23] usb 2-1: USB disconnect, device number 3 [ 95.619342][ T5834] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 95.645126][ T5834] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 95.672378][ T5834] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -32 [ 95.713162][ T5834] usb 1-1: USB disconnect, device number 2 [ 96.179547][ T5993] loop2: detected capacity change from 0 to 32768 [ 96.253452][ T5993] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 96.507606][ T5993] XFS (loop2): Ending clean mount [ 96.697016][ T6011] fuse: Bad value for 'fd' [ 96.769476][ T5778] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 96.919492][ T6017] loop0: detected capacity change from 0 to 512 [ 96.970935][ T6017] EXT4-fs: Ignoring removed i_version option [ 97.002292][ T6017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.121479][ T6017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.187823][ T6017] ext4 filesystem being mounted at /8/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.326461][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.425200][ T6017] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.49: Unrecognised inode hash code 20 [ 97.464927][ T6017] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.49: Corrupt directory, running e2fsck is recommended [ 97.479400][ T5976] udevd[5976]: incorrect ext4 checksum on /dev/loop0 [ 97.516017][ T6017] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.49: Unrecognised inode hash code 20 [ 97.544507][ T6017] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.49: Corrupt directory, running e2fsck is recommended [ 97.578968][ T6032] netlink: 92 bytes leftover after parsing attributes in process `syz.1.53'. [ 97.582212][ T6017] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.49: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 97.612231][ T6017] EXT4-fs (loop0): Remounting filesystem read-only [ 97.716435][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.878002][ T6034] loop1: detected capacity change from 0 to 1024 [ 97.949189][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.051983][ T6034] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 98.164096][ T6026] loop2: detected capacity change from 0 to 40427 [ 98.211632][ T6026] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 98.221804][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.243492][ T6026] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 98.344974][ T6026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.493064][ T6026] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 98.512400][ T6026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.024961][ T2922] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.217923][ T6069] loop0: detected capacity change from 0 to 512 [ 99.246446][ T6069] EXT4-fs (loop0): invalid journal inode [ 99.252314][ T6069] EXT4-fs (loop0): can't get journal size [ 99.293195][ T6069] EXT4-fs (loop0): 1 truncate cleaned up [ 99.325479][ T6069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.558125][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.703465][ T6083] loop0: detected capacity change from 0 to 32768 [ 100.743259][ T6083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.71 (6083) [ 100.798405][ T6083] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.813484][ T6083] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 100.833456][ T6083] BTRFS info (device loop0): using free space tree [ 100.919319][ T6083] BTRFS info (device loop0): enabling ssd optimizations [ 100.937353][ T6083] BTRFS info (device loop0): auto enabling async discard [ 101.036237][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 101.043545][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 101.262685][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.476643][ T6123] fuse: Bad value for 'fd' [ 101.691797][ T6126] fuse: Bad value for 'fd' [ 101.992874][ T6129] loop0: detected capacity change from 0 to 8192 [ 102.042033][ T6129] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.151966][ T6136] fuse: Bad value for 'fd' [ 103.420538][ T6168] loop1: detected capacity change from 0 to 512 [ 103.430271][ T6168] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.450869][ T6168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.476007][ T6168] EXT4-fs (loop1): orphan file too big: 8388608 [ 103.482935][ T6168] EXT4-fs (loop1): mount failed [ 104.931758][ T55] IPVS: starting estimator thread 0... [ 105.056777][ T6208] IPVS: using max 17 ests per chain, 40800 per kthread [ 106.388025][ T6221] loop0: detected capacity change from 0 to 32768 [ 106.468262][ T6221] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 106.513430][ T6221] JBD2: Ignoring recovery information on journal [ 106.573335][ T6221] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.688819][ T6230] loop2: detected capacity change from 0 to 512 [ 106.729394][ T28] audit: type=1800 audit(1781919923.806:4): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.115" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 106.761971][ T6230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.814901][ T6230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 106.823012][ T6230] System zones: 1-12 [ 106.910315][ T6230] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.969501][ T6230] EXT4-fs (loop2): 1 truncate cleaned up [ 106.980896][ T6230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.010964][ T6237] loop1: detected capacity change from 0 to 512 [ 107.123260][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.137316][ T6237] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.166504][ T6221] syz.0.115 (6221) used greatest stack depth: 19672 bytes left [ 107.418894][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.493689][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 108.242654][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.307617][ T6256] tipc: Started in network mode [ 108.312741][ T6256] tipc: Node identity , cluster identity 4711 [ 108.355387][ T6256] tipc: Failed to set node id, please configure manually [ 108.373391][ T6256] tipc: Enabling of bearer rejected, failed to enable media [ 108.577268][ T6261] mtd partition "" doesn't have enough space: 0x20003 < 0x80000000, disabled [ 108.583888][ T6264] fuse: Bad value for 'fd' [ 108.600735][ T6264] process 'syz.3.128' launched './file0' with NULL argv: empty string added [ 108.601782][ T6261] ftl_cs: FTL header not found. [ 108.888646][ T6270] block device autoloading is deprecated and will be removed. [ 108.913433][ T6269] md: md2 stopped. [ 109.100995][ C0] vcan0: j1939_tp_rxtimer: 0xffff888018f91000: rx timeout, send abort [ 109.281780][ T6278] loop2: detected capacity change from 0 to 16 [ 109.289129][ T6278] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 109.610741][ C0] vcan0: j1939_tp_rxtimer: 0xffff888018f91000: abort rx timeout. Force session deactivation [ 110.314813][ T5085] Bluetooth: hci3: command tx timeout [ 111.022450][ T6298] fuse: Bad value for 'fd' [ 112.319259][ T6325] hsr0: entered promiscuous mode [ 112.384044][ T6325] gretap1: entered allmulticast mode [ 112.400517][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.599203][ T5874] usb 1-1: config 0 has no interfaces? [ 112.612954][ T5874] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 112.653994][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.696254][ T5874] usb 1-1: config 0 descriptor?? [ 113.077659][ T5775] usb 1-1: USB disconnect, device number 3 [ 113.632107][ T6339] loop1: detected capacity change from 0 to 32768 [ 113.836985][ T6341] syz.3.155: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 113.884884][ T6341] CPU: 0 PID: 6341 Comm: syz.3.155 Not tainted syzkaller #0 [ 113.892266][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.902461][ T6341] Call Trace: [ 113.905871][ T6341] [ 113.908845][ T6341] dump_stack_lvl+0x18c/0x250 [ 113.913588][ T6341] ? show_regs_print_info+0x20/0x20 [ 113.918841][ T6341] ? load_image+0x420/0x420 [ 113.923393][ T6341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 113.929949][ T6341] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 113.936622][ T6341] warn_alloc+0x246/0x340 [ 113.941014][ T6341] ? zone_watermark_ok_safe+0x230/0x230 [ 113.946626][ T6341] ? _raw_spin_unlock+0x28/0x40 [ 113.951524][ T6341] ? netlink_rcv_skb+0x235/0x4c0 [ 113.956493][ T6341] __vmalloc_node_range+0x661/0x1320 [ 113.961802][ T6341] ? __asan_memset+0x22/0x40 [ 113.966458][ T6341] ? free_vm_area+0x50/0x50 [ 113.970978][ T6341] ? rcu_is_watching+0x15/0xb0 [ 113.975764][ T6341] ? kvmalloc_node+0x70/0x180 [ 113.980451][ T6341] ? trace_kmalloc+0x1f/0xa0 [ 113.985087][ T6341] kvmalloc_node+0x13f/0x180 [ 113.989694][ T6341] ? hash_netport4_resize+0x24e/0x1a10 [ 113.995182][ T6341] hash_netport4_resize+0x24e/0x1a10 [ 114.000536][ T6341] ? hash_netport4_uadt+0xce0/0xf70 [ 114.005771][ T6341] ? hash_netport4_uadt+0xf70/0xf70 [ 114.011012][ T6341] ? lockdep_hardirqs_on+0x98/0x150 [ 114.016231][ T6341] ? _local_bh_enable+0xa0/0xa0 [ 114.021107][ T6341] call_ad+0x42a/0xb30 [ 114.025215][ T6341] ? ip_set_ad+0x9c0/0x9c0 [ 114.029778][ T6341] ? __nla_parse+0x40/0x50 [ 114.034206][ T6341] ip_set_ad+0x81a/0x9c0 [ 114.038476][ T6341] ? ip_set_dump_done+0x1e0/0x1e0 [ 114.043511][ T6341] ? rcu_is_watching+0x15/0xb0 [ 114.048324][ T6341] nfnetlink_rcv_msg+0xcaf/0x1290 [ 114.053362][ T6341] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.059451][ T6341] ? nfnetlink_rcv_msg+0x228/0x1290 [ 114.064674][ T6341] ? nfnetlink_unbind+0x160/0x160 [ 114.069841][ T6341] ? __dev_queue_xmit+0x198c/0x3630 [ 114.075088][ T6341] ? __netlink_deliver_tap+0x579/0x7f0 [ 114.080597][ T6341] ? netlink_deliver_tap+0x19c/0x1b0 [ 114.085904][ T6341] ? netlink_unicast+0x77b/0x930 [ 114.090943][ T6341] ? netlink_sendmsg+0x8d0/0xbf0 [ 114.095893][ T6341] ? ____sys_sendmsg+0x61b/0x980 [ 114.100933][ T6341] ? ___sys_sendmsg+0x2a6/0x360 [ 114.105798][ T6341] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 114.110835][ T6341] ? do_syscall_64+0x55/0xb0 [ 114.115452][ T6341] netlink_rcv_skb+0x235/0x4c0 [ 114.120269][ T6341] ? nfnetlink_unbind+0x160/0x160 [ 114.125333][ T6341] ? netlink_ack+0x1160/0x1160 [ 114.130139][ T6341] ? apparmor_capable+0x137/0x1a0 [ 114.135190][ T6341] ? bpf_lsm_capable+0x9/0x10 [ 114.139971][ T6341] ? security_capable+0x89/0xb0 [ 114.144853][ T6341] nfnetlink_rcv+0x2c9/0x2490 [ 114.149549][ T6341] ? __local_bh_enable_ip+0x13a/0x1c0 [ 114.154962][ T6341] ? lockdep_hardirqs_on+0x98/0x150 [ 114.160177][ T6341] ? __local_bh_enable_ip+0x13a/0x1c0 [ 114.165569][ T6341] ? _local_bh_enable+0xa0/0xa0 [ 114.170440][ T6341] ? __dev_queue_xmit+0x275/0x3630 [ 114.175583][ T6341] ? __dev_queue_xmit+0x1bc2/0x3630 [ 114.180804][ T6341] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 114.186359][ T6341] ? __dev_queue_xmit+0x275/0x3630 [ 114.191502][ T6341] ? ref_tracker_free+0x686/0x830 [ 114.196545][ T6341] ? refcount_inc+0x70/0x70 [ 114.201062][ T6341] ? __asan_memcpy+0x40/0x70 [ 114.205698][ T6341] ? __skb_clone+0x5c/0x6c0 [ 114.210221][ T6341] ? __skb_clone+0x446/0x6c0 [ 114.214838][ T6341] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.220048][ T6341] ? __lock_acquire+0x7d80/0x7d80 [ 114.225114][ T6341] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.230329][ T6341] netlink_unicast+0x7b1/0x930 [ 114.235122][ T6341] netlink_sendmsg+0x8d0/0xbf0 [ 114.239903][ T6341] ? netlink_getsockopt+0x590/0x590 [ 114.245124][ T6341] ? aa_sock_msg_perm+0x94/0x150 [ 114.250169][ T6341] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 114.255465][ T6341] ? security_socket_sendmsg+0x80/0xa0 [ 114.260931][ T6341] ? netlink_getsockopt+0x590/0x590 [ 114.266147][ T6341] ____sys_sendmsg+0x61b/0x980 [ 114.270931][ T6341] ? __asan_memset+0x22/0x40 [ 114.275535][ T6341] ? __sys_sendmsg_sock+0x30/0x30 [ 114.280574][ T6341] ? __import_iovec+0x5f2/0x850 [ 114.285468][ T6341] ? import_iovec+0x73/0xa0 [ 114.290162][ T6341] ___sys_sendmsg+0x2a6/0x360 [ 114.294858][ T6341] ? __sys_sendmsg+0x2b0/0x2b0 [ 114.299679][ T6341] __se_sys_sendmsg+0x1d0/0x2c0 [ 114.304549][ T6341] ? __x64_sys_sendmsg+0x80/0x80 [ 114.309517][ T6341] ? lockdep_hardirqs_on+0x98/0x150 [ 114.314744][ T6341] do_syscall_64+0x55/0xb0 [ 114.319277][ T6341] ? clear_bhb_loop+0x40/0x90 [ 114.324052][ T6341] ? clear_bhb_loop+0x40/0x90 [ 114.328742][ T6341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.334659][ T6341] RIP: 0033:0x7f3c4079ce59 [ 114.339198][ T6341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.358824][ T6341] RSP: 002b:00007f3c41586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.367269][ T6341] RAX: ffffffffffffffda RBX: 00007f3c40a15fa0 RCX: 00007f3c4079ce59 [ 114.375260][ T6341] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 114.383249][ T6341] RBP: 00007f3c40832e6f R08: 0000000000000000 R09: 0000000000000000 [ 114.391228][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.399210][ T6341] R13: 00007f3c40a16038 R14: 00007f3c40a15fa0 R15: 00007ffd5ee930b8 [ 114.407215][ T6341] [ 114.534900][ T6341] Mem-Info: [ 114.555011][ T6341] active_anon:6242 inactive_anon:0 isolated_anon:0 [ 114.555011][ T6341] active_file:1138 inactive_file:39852 isolated_file:0 [ 114.555011][ T6341] unevictable:768 dirty:161 writeback:0 [ 114.555011][ T6341] slab_reclaimable:10608 slab_unreclaimable:92640 [ 114.555011][ T6341] mapped:24666 shmem:1375 pagetables:655 [ 114.555011][ T6341] sec_pagetables:0 bounce:0 [ 114.555011][ T6341] kernel_misc_reclaimable:0 [ 114.555011][ T6341] free:1365324 free_pcp:7585 free_cma:0 [ 114.600754][ T6341] Node 0 active_anon:24868kB inactive_anon:0kB active_file:4552kB inactive_file:159204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98664kB dirty:644kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10604kB pagetables:2520kB sec_pagetables:0kB all_unreclaimable? no [ 114.634290][ T6341] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 114.667967][ T6341] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.696092][ T6341] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 114.702003][ T6341] Node 0 DMA32 free:1550316kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24824kB inactive_anon:0kB active_file:4552kB inactive_file:158392kB unevictable:1536kB writepending:644kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:7688kB local_pcp:6788kB free_cma:0kB [ 114.783713][ T6341] lowmem_reserve[]: 0 0 0 0 0 [ 114.790189][ T6341] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:812kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 114.849491][ T6341] lowmem_reserve[]: 0 0 0 0 0 [ 114.854323][ T6341] Node 1 Normal free:3895616kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23028kB local_pcp:16180kB free_cma:0kB [ 114.884292][ T6341] lowmem_reserve[]: 0 0 0 0 0 [ 114.889182][ T6341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.902100][ T6341] Node 0 DMA32: 217*4kB (UE) 1281*8kB (UME) 625*16kB (UME) 180*32kB (UME) 92*64kB (UME) 64*128kB (UME) 36*256kB (UM) 28*512kB (UM) 16*1024kB (ME) 3*2048kB (M) 357*4096kB (UM) = 1549308kB [ 114.921284][ T6341] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 114.978783][ T6341] Node 1 Normal: 156*4kB (U) 28*8kB (UME) 17*16kB (UME) 41*32kB (UME) 13*64kB (UE) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3895616kB [ 115.009617][ T6341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.026193][ T6341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.037370][ T6341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.053365][ T6341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.062918][ T6341] 42365 total pagecache pages [ 115.072878][ T6341] 0 pages in swap cache [ 115.079981][ T6341] Free swap = 124996kB [ 115.084212][ T6341] Total swap = 124996kB [ 115.093997][ T6341] 2097051 pages RAM [ 115.098093][ T6341] 0 pages HighMem/MovableOnly [ 115.102826][ T6341] 416931 pages reserved [ 115.111847][ T6341] 0 pages cma reserved [ 115.518644][ T6347] loop0: detected capacity change from 0 to 32768 [ 115.571354][ T6347] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.682148][ T6347] XFS (loop0): Ending clean mount [ 115.715125][ T6347] XFS (loop0): Quotacheck needed: Please wait. [ 115.810615][ T6347] XFS (loop0): Quotacheck: Done. [ 115.913675][ T28] audit: type=1804 audit(1781919932.986:5): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.158" name="/newroot/36/file0/bus/file0" dev="loop0" ino=9292 res=1 errno=0 [ 116.033729][ T5782] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.402749][ T6407] overlayfs: failed to clone upperpath [ 117.525284][ T6400] loop2: detected capacity change from 0 to 32768 [ 117.571697][ T6400] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 117.575517][ T6414] 9pnet_fd: Insufficient options for proto=fd [ 117.677733][ T6400] XFS (loop2): Ending clean mount [ 118.139441][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.729957][ T6433] loop2: detected capacity change from 0 to 764 [ 118.761661][ T6433] rock: directory entry would overflow storage [ 118.774549][ T6433] rock: sig=0x5245, size=8, remaining=5 [ 118.941382][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 118.961438][ T6438] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.970901][ T6438] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.979895][ T6438] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.988802][ T6438] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.001330][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 119.011327][ T6438] Zero length message leads to an empty skb [ 120.096545][ T6452] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 122.559774][ T6483] binder: 6482:6483 unknown command 0 [ 122.595497][ T6483] binder: 6482:6483 ioctl c0306201 2000000001c0 returned -22 [ 122.841381][ T6497] overlayfs: failed to clone upperpath [ 123.015253][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.180228][ T6508] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.194862][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 123.207604][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.220421][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.234599][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.244162][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.266430][ T9] usb 3-1: config 0 descriptor?? [ 123.278172][ T9] hub 3-1:0.0: USB hub found [ 123.506398][ T9] hub 3-1:0.0: 1 port detected [ 124.186108][ T55] hub 3-1:0.0: activate --> -90 [ 124.389396][ T55] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 124.389654][ T23] usb 3-1: USB disconnect, device number 3 [ 125.201692][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d4e3c00: rx timeout, send abort [ 125.654836][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.701836][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d4e2c00: rx timeout, send abort [ 125.710185][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d4e3c00: abort rx timeout. Force session deactivation [ 125.848315][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.859373][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.869036][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.881451][ T23] usb 3-1: config 0 descriptor?? [ 126.099705][ T6568] bridge0: port 3(syz_tun) entered blocking state [ 126.110599][ T6568] bridge0: port 3(syz_tun) entered disabled state [ 126.118602][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 126.125202][ T6568] syz_tun: entered allmulticast mode [ 126.130709][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 126.134590][ T6568] syz_tun: entered promiscuous mode [ 126.143893][ T6568] bridge0: port 3(syz_tun) entered blocking state [ 126.151166][ T6568] bridge0: port 3(syz_tun) entered forwarding state [ 126.153308][ T23] usb 3-1: USB disconnect, device number 4 [ 126.210129][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d4e2c00: abort rx timeout. Force session deactivation [ 126.774959][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.831871][ T6589] xt_hashlimit: size too large, truncated to 1048576 [ 126.987013][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.999925][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 127.024778][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.057673][ T23] usb 3-1: config 0 descriptor?? [ 127.203933][ T5775] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.424268][ T5775] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.446193][ T5775] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.466730][ T5775] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 127.499702][ T5775] usb 1-1: string descriptor 0 read error: -22 [ 127.508743][ T5775] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 127.528988][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.753231][ T28] audit: type=1800 audit(1781919944.826:6): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.240" name="/" dev="fuse" ino=4 res=0 errno=0 [ 127.900052][ T23] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 127.919280][ T23] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 128.214922][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.422969][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.435779][ T5775] usb 3-1: USB disconnect, device number 5 [ 128.435881][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 128.450139][ T9] usb 2-1: config 0 has no interfaces? [ 128.461241][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.504381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.555333][ T9] usb 2-1: config 0 descriptor?? [ 128.913468][ T5775] usb 2-1: USB disconnect, device number 4 [ 129.740730][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c0f1800: rx timeout, send abort [ 129.943074][ T9] usb 1-1: USB disconnect, device number 4 [ 130.129870][ T6615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.249079][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c0f1800: abort rx timeout. Force session deactivation [ 131.133066][ T6621] loop1: detected capacity change from 0 to 32768 [ 131.191618][ T6621] JBD2: Ignoring recovery information on journal [ 131.430815][ T6621] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 132.109820][ T6630] loop2: detected capacity change from 0 to 32768 [ 132.118445][ T6623] overlayfs: failed to clone upperpath [ 132.127346][ T6621] syz.1.250 (6621) used greatest stack depth: 17784 bytes left [ 132.174917][ T6630] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.241124][ T6634] sd 0:0:1:0: PR command failed: 1026 [ 132.255599][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 132.285498][ T6634] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 132.292320][ T6634] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 132.356560][ T6630] XFS (loop2): Ending clean mount [ 132.665755][ T5778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.667762][ T6653] loop0: detected capacity change from 0 to 128 [ 132.683042][ T6642] XFS (loop2): SB summary counter sanity check failed [ 132.715091][ T6642] XFS (loop2): Metadata corruption detected at xfs_sb_write_verify+0x1bc/0x3e0, xfs_sb block 0x0 [ 132.737172][ T6642] XFS (loop2): Unmount and run xfs_repair [ 132.751398][ T6642] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 132.774613][ T6653] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.792536][ T6642] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 132.802261][ T6642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.811331][ T6642] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 132.820721][ T6642] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 11 40 ...............@ [ 132.829862][ T6642] 00000040: 00 00 00 00 00 00 11 41 00 00 00 00 00 00 11 42 .......A.......B [ 132.838969][ T6642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 132.849076][ T6642] 00000060: 00 00 04 3e b4 b5 02 00 04 00 00 04 00 00 00 00 ...>............ [ 132.852662][ T6653] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.858032][ T6642] 00000070: 00 00 00 00 00 00 00 00 0c 09 0a 02 0c 00 00 0a ................ [ 132.882448][ T6642] XFS (loop2): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x330/0x620 (fs/xfs/xfs_buf.c:1559). Shutting down filesystem. [ 132.897092][ T6642] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 133.119667][ T6664] io-wq is not configured for unbound workers [ 133.205383][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.223737][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.268800][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.395097][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.604924][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 133.617782][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 133.648490][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 133.673605][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 133.682728][ T9] usb 2-1: Product: syz [ 133.692112][ T9] usb 2-1: Manufacturer: syz [ 133.697167][ T9] usb 2-1: SerialNumber: syz [ 133.705240][ T9] usb 2-1: config 0 descriptor?? [ 133.711164][ T6662] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.847927][ T6686] loop2: detected capacity change from 0 to 128 [ 133.870350][ T6687] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 133.883806][ T6686] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 133.906993][ T6686] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 133.973736][ T6690] ip6gretap1: entered promiscuous mode [ 134.018957][ T5811] usb 2-1: USB disconnect, device number 5 [ 134.035737][ T6690] ip6gretap1: entered allmulticast mode [ 134.101074][ T6690] bond1: (slave ip6gretap1): making interface the new active one [ 134.167213][ T6690] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.181531][ T6690] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.194225][ T6690] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 134.386501][ T6701] lo: entered promiscuous mode [ 134.404800][ T6701] batadv_slave_0: entered promiscuous mode [ 134.429863][ T6700] batadv_slave_0: left promiscuous mode [ 134.437789][ T6700] lo: left promiscuous mode [ 134.607685][ T6707] warning: `syz.2.279' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.854923][ T5874] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.017951][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.057295][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 135.065053][ T5874] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 135.101435][ T5874] usb 1-1: config 0 has no interface number 0 [ 135.118142][ T5874] usb 1-1: config 0 interface 184 has no altsetting 0 [ 135.134197][ T5874] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 135.144216][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.155968][ T5874] usb 1-1: Product: syz [ 135.160192][ T5874] usb 1-1: Manufacturer: syz [ 135.166495][ T5874] usb 1-1: SerialNumber: syz [ 135.181670][ T5874] usb 1-1: config 0 descriptor?? [ 135.208120][ T5874] smsc75xx v1.0.0 [ 135.219642][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.235465][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.243572][ T27] usb 3-1: Product: syz [ 135.258076][ T27] usb 3-1: Manufacturer: syz [ 135.262986][ T27] usb 3-1: SerialNumber: syz [ 135.399068][ T6723] input: syz1 as /devices/virtual/input/input7 [ 135.523269][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 135.571104][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 135.848728][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 135.875069][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 136.627250][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 136.659749][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 136.676062][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 136.708397][ T27] lan78xx: probe of 3-1:1.0 failed with error -71 [ 136.745131][ T27] usb 3-1: USB disconnect, device number 6 [ 136.907328][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 136.927654][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 136.955429][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 136.980321][ T5874] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 137.010493][ T5874] usb 1-1: USB disconnect, device number 5 [ 137.769081][ T6772] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 137.802726][ T6772] bond2: entered promiscuous mode [ 137.811222][ T6772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.889501][ T6772] bond2: (slave veth3): making interface the new active one [ 137.901286][ T6772] veth3: entered promiscuous mode [ 137.916753][ T6772] bond2: (slave veth3): Enslaving as an active interface with an up link [ 137.964947][ T5874] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.225410][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 138.241213][ T2975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.264969][ T5874] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.323696][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.385677][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.477055][ T5874] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.491039][ T2975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.529649][ T5874] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.589803][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.740955][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.761099][ T2975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.804110][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.812925][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.823702][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.834769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 138.843367][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.853510][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.946073][ T6770] loop2: detected capacity change from 0 to 7 [ 138.970957][ T2975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.013045][ T6770] loop2: [POWERTEC] p1 p2 p3 [ 139.027846][ T6770] loop2: p1 size 17891328 extends beyond EOD, truncated [ 139.074383][ T6770] loop2: p2 start 4097 is beyond EOD, truncated [ 139.083051][ T5811] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.103817][ T6770] loop2: p3 start 268435456 is beyond EOD, truncated [ 139.204964][ T5874] usb 2-1: usb_control_msg returned -71 [ 139.210635][ T5874] usbtmc 2-1:16.0: can't read capabilities [ 139.259509][ T5874] usb 2-1: USB disconnect, device number 6 [ 139.273469][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 139.298642][ T5811] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 139.325399][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.333759][ T5811] usb 1-1: Product: syz [ 139.344921][ T5811] usb 1-1: Manufacturer: syz [ 139.349705][ T5811] usb 1-1: SerialNumber: syz [ 139.580260][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 139.614005][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 139.788615][ T6782] chnl_net:caif_netlink_parms(): no params data found [ 140.019949][ T6802] binder: 6800:6802 ioctl c0306201 0 returned -14 [ 140.186673][ T6809] binder: 6800:6809 ioctl c0306201 0 returned -14 [ 140.283810][ T6808] netlink: 'syz.3.318': attribute type 2 has an invalid length. [ 140.306430][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.328876][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.352782][ T6782] bridge_slave_0: entered allmulticast mode [ 140.375702][ T6782] bridge_slave_0: entered promiscuous mode [ 140.452846][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.475622][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.493168][ T6782] bridge_slave_1: entered allmulticast mode [ 140.513303][ T6782] bridge_slave_1: entered promiscuous mode [ 140.637094][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 140.657315][ T6782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.658208][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 140.680353][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 140.711912][ T5811] lan78xx: probe of 1-1:1.0 failed with error -71 [ 140.754580][ T5811] usb 1-1: USB disconnect, device number 6 [ 140.782635][ T6782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.956749][ T51] Bluetooth: hci1: command tx timeout [ 140.971987][ T6782] team0: Port device team_slave_0 added [ 140.984887][ T6782] team0: Port device team_slave_1 added [ 141.125512][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.132619][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.223125][ T6823] loop1: detected capacity change from 0 to 256 [ 141.234915][ T6782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.252875][ T6823] exfat: Deprecated parameter 'utf8' [ 141.276033][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.317383][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.383562][ T6823] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x58d80169, utbl_chksum : 0xe619d30d) [ 141.416101][ T6782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.516380][ T6829] loop0: detected capacity change from 0 to 1024 [ 141.590946][ T6829] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 141.655859][ T6829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.766971][ T28] audit: type=1800 audit(1781919958.846:7): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.322" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 141.857591][ T6837] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.322: corrupted xattr entries [ 142.118506][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.188974][ T6782] hsr_slave_0: entered promiscuous mode [ 142.217618][ T6782] hsr_slave_1: entered promiscuous mode [ 142.290582][ T6782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.312575][ T6782] Cannot create hsr debugfs directory [ 142.450962][ T2975] hsr_slave_0: left promiscuous mode [ 142.473168][ T2975] hsr_slave_1: left promiscuous mode [ 142.486816][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.502681][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.522632][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.551459][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.588005][ T2975] bridge_slave_1: left allmulticast mode [ 142.608530][ T2975] bridge_slave_1: left promiscuous mode [ 142.627246][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.661989][ T2975] bridge_slave_0: left allmulticast mode [ 142.674910][ T2975] bridge_slave_0: left promiscuous mode [ 142.688497][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.784594][ T2975] veth1_macvtap: left promiscuous mode [ 142.807584][ T2975] veth0_macvtap: left promiscuous mode [ 142.815695][ T2975] veth1_vlan: left promiscuous mode [ 142.830604][ T2975] veth0_vlan: left promiscuous mode [ 143.051584][ T51] Bluetooth: hci1: command tx timeout [ 144.409915][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 144.461539][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 144.510533][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.564686][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.115150][ T51] Bluetooth: hci1: command tx timeout [ 145.391606][ T2975] bond0 (unregistering): Released all slaves [ 145.590855][ T6850] tipc: Enabling of bearer rejected, failed to enable media [ 146.387819][ T6899] loop0: detected capacity change from 0 to 1024 [ 146.409113][ T6899] EXT4-fs: Ignoring removed orlov option [ 146.443711][ T6782] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.499555][ T6782] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.512982][ T6899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.569554][ T6782] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.642227][ T6782] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.742475][ T28] audit: type=1800 audit(1781919963.816:8): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.341" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 146.850151][ T6913] overlayfs: failed to clone upperpath [ 146.869141][ T6899] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.341: corrupted xattr entries [ 146.921785][ T6899] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #15: comm syz.0.341: corrupt xattr in inline inode [ 146.967148][ T6899] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.341: corrupted xattr entries [ 147.010348][ T6782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.085558][ T6782] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.137305][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.144462][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.198922][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.204748][ T51] Bluetooth: hci1: command tx timeout [ 147.206126][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.433793][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.043095][ T6782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.138085][ T6782] veth0_vlan: entered promiscuous mode [ 149.213454][ T6782] veth1_vlan: entered promiscuous mode [ 149.318192][ T6782] veth0_macvtap: entered promiscuous mode [ 149.338913][ T6782] veth1_macvtap: entered promiscuous mode [ 149.417398][ T6782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.448814][ T6782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.481437][ T6782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.505941][ T6782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.533479][ T6782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.561917][ T6782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.566701][ T6966] loop0: detected capacity change from 0 to 1024 [ 149.587126][ T6782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.626441][ T6966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.654197][ T6782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.689109][ T6966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.701528][ T6782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.725228][ T6782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.747078][ T6782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.765701][ T6970] overlayfs: failed to clone upperpath [ 149.781460][ T6782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.812876][ T6782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.854525][ T6782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.893577][ T6782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.927861][ T6782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.964934][ T6782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.994151][ T6782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.180399][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.216117][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.273456][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.307611][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.307900][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.344395][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.382353][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.393175][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.451325][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.481723][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.485514][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.495741][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.526646][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 150.565453][ T5782] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 151.047961][ T5782] bridge0: port 3(syz_tun) entered disabled state [ 151.138075][ T5782] syz_tun (unregistering): left allmulticast mode [ 151.155601][ T5782] syz_tun (unregistering): left promiscuous mode [ 151.163589][ T5782] bridge0: port 3(syz_tun) entered disabled state [ 151.202954][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 151.246436][ T6992] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.255331][ T6992] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.264330][ T6992] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.273351][ T6992] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.299227][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.343569][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 151.406738][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 151.598638][ T2975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.817325][ T2975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.986687][ T2975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.190099][ T2975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.241026][ T7018] loop1: detected capacity change from 0 to 1024 [ 152.295150][ T7018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.398563][ T7018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.922890][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 152.985336][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.016009][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.045762][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.069994][ T2975] bond1: (slave ip6gretap1): Releasing active interface [ 153.082405][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.124322][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.143030][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.155223][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.161298][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.188215][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.195859][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.212074][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.225441][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.235049][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.245608][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.267333][ T5784] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 153.950053][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.399462][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 154.811104][ T7078] sctp: [Deprecated]: syz.3.384 (pid 7078) Use of int in max_burst socket option. [ 154.811104][ T7078] Use struct sctp_assoc_value instead [ 154.950611][ T2975] hsr_slave_0: left promiscuous mode [ 154.984884][ T2975] hsr_slave_1: left promiscuous mode [ 155.008177][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.028669][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.065716][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.073194][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.111074][ T2975] bridge_slave_1: left allmulticast mode [ 155.129742][ T2975] bridge_slave_1: left promiscuous mode [ 155.145096][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.218679][ T2975] bridge_slave_0: left allmulticast mode [ 155.224993][ T2975] bridge_slave_0: left promiscuous mode [ 155.231209][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.275122][ T5085] Bluetooth: hci2: command tx timeout [ 155.431210][ T2975] veth1_macvtap: left promiscuous mode [ 155.455253][ T2975] veth0_macvtap: left promiscuous mode [ 155.460986][ T2975] veth1_vlan: left promiscuous mode [ 155.477549][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.493055][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.493136][ T2975] veth0_vlan: left promiscuous mode [ 155.515946][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.524417][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.533916][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.544110][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.868608][ T2975] bond2 (unregistering): (slave veth3): Releasing backup interface [ 155.877216][ T2975] veth3 (unregistering): left promiscuous mode [ 156.175650][ T2975] bond2 (unregistering): Released all slaves [ 156.214006][ T2975] bond1 (unregistering): Released all slaves [ 156.667416][ T7122] kvm: pic: single mode not supported [ 156.667581][ T7122] kvm: pic: level sensitive irq not supported [ 157.354942][ T51] Bluetooth: hci2: command tx timeout [ 157.577510][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 157.594917][ T51] Bluetooth: hci3: command tx timeout [ 157.706546][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 157.792757][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.870398][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.270582][ T2975] bond0 (unregistering): Released all slaves [ 158.379567][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.386965][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.394249][ T7038] bridge_slave_0: entered allmulticast mode [ 158.404590][ T7038] bridge_slave_0: entered promiscuous mode [ 158.472129][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.500668][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.516608][ T7038] bridge_slave_1: entered allmulticast mode [ 158.524065][ T7038] bridge_slave_1: entered promiscuous mode [ 158.652310][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.678421][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.831442][ T7038] team0: Port device team_slave_0 added [ 158.865058][ T7038] team0: Port device team_slave_1 added [ 158.990719][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.013644][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.041554][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.083910][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.108313][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.154987][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.370182][ T7038] hsr_slave_0: entered promiscuous mode [ 159.377251][ T7038] hsr_slave_1: entered promiscuous mode [ 159.383904][ T7038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.395010][ T7038] Cannot create hsr debugfs directory [ 159.436796][ T51] Bluetooth: hci2: command tx timeout [ 159.594328][ T2975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.678770][ T51] Bluetooth: hci3: command tx timeout [ 159.723031][ T7100] chnl_net:caif_netlink_parms(): no params data found [ 159.760054][ T7181] binder: 7179:7181 unknown command 0 [ 159.765720][ T7181] binder: 7179:7181 ioctl c0306201 2000000000c0 returned -22 [ 159.897131][ T2975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.045621][ T2975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.228505][ T2975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.621372][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.635228][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.642696][ T7100] bridge_slave_0: entered allmulticast mode [ 160.668964][ T7100] bridge_slave_0: entered promiscuous mode [ 160.777322][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.800787][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.824934][ T7100] bridge_slave_1: entered allmulticast mode [ 160.832884][ T7100] bridge_slave_1: entered promiscuous mode [ 160.996186][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.019766][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.187535][ T7100] team0: Port device team_slave_0 added [ 161.336733][ T7100] team0: Port device team_slave_1 added [ 161.488058][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.504785][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.544419][ T51] Bluetooth: hci2: command tx timeout [ 161.574761][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.697321][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.722363][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.762411][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.762428][ T51] Bluetooth: hci3: command tx timeout [ 162.071033][ T7100] hsr_slave_0: entered promiscuous mode [ 162.083659][ T7100] hsr_slave_1: entered promiscuous mode [ 162.090592][ T7100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.106109][ T7100] Cannot create hsr debugfs directory [ 162.124633][ T7246] netlink: 'syz.3.424': attribute type 39 has an invalid length. [ 162.302881][ T7038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.364313][ T7038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.383303][ T7038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.411093][ T7038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.144152][ T2975] hsr_slave_0: left promiscuous mode [ 163.159041][ T2975] hsr_slave_1: left promiscuous mode [ 163.166599][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.174155][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.184416][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.192246][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.204538][ T2975] bridge_slave_1: left allmulticast mode [ 163.211475][ T2975] bridge_slave_1: left promiscuous mode [ 163.217637][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.229241][ T2975] bridge_slave_0: left allmulticast mode [ 163.235495][ T2975] bridge_slave_0: left promiscuous mode [ 163.241484][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.285233][ T2975] veth1_macvtap: left promiscuous mode [ 163.290796][ T2975] veth0_macvtap: left promiscuous mode [ 163.297959][ T2975] veth1_vlan: left promiscuous mode [ 163.303279][ T2975] veth0_vlan: left promiscuous mode [ 163.841562][ T51] Bluetooth: hci3: command tx timeout [ 163.999565][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 164.054276][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 164.108920][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.160359][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.564664][ T2975] bond0 (unregistering): Released all slaves [ 164.653608][ T7100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.664613][ T7100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.702704][ T7100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.716541][ T7100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.792341][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.916387][ T7038] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.023543][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.030733][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.055256][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.062537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.107966][ T7282] loop4: detected capacity change from 0 to 2048 [ 165.215138][ T7282] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 165.265580][ T7282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.300962][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.381914][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.434264][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.441481][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.472728][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.480280][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.191464][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.249022][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.366280][ T7038] veth0_vlan: entered promiscuous mode [ 166.414090][ T7038] veth1_vlan: entered promiscuous mode [ 166.486955][ T7322] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 166.572892][ T7038] veth0_macvtap: entered promiscuous mode [ 166.608614][ T7038] veth1_macvtap: entered promiscuous mode [ 166.682246][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.719698][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.744840][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.771525][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.806667][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.867832][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.904814][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.934955][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.968661][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.017704][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.057783][ T7038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.087823][ T7038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.098781][ T7038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.125869][ T7038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.267396][ T7100] veth0_vlan: entered promiscuous mode [ 167.389152][ T7100] veth1_vlan: entered promiscuous mode [ 167.547876][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.581057][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.659327][ T7100] veth0_macvtap: entered promiscuous mode [ 167.708261][ T7100] veth1_macvtap: entered promiscuous mode [ 167.728001][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.750281][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.807672][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.836433][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.863011][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.921944][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.934744][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.967168][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.997550][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.052315][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.084747][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.094634][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.118482][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.129756][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.141190][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.165658][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.203318][ T7366] syzkaller0: entered promiscuous mode [ 168.214788][ T7366] syzkaller0: entered allmulticast mode [ 168.262264][ T7100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.285196][ T7100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.294543][ T7100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.310226][ T7100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.384926][ T7372] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 168.408591][ T7373] 8021q: VLANs not supported on gre0 [ 168.675147][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.705277][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.820777][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.847752][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.086085][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e2fe000: rx timeout, send abort [ 169.586210][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e2fe800: rx timeout, send abort [ 169.594640][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e2fe000: abort rx timeout. Force session deactivation [ 170.094600][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e2fe800: abort rx timeout. Force session deactivation [ 170.126534][ T7416] binder: 7415:7416 unknown command 0 [ 170.137655][ T7416] binder: 7415:7416 ioctl c0306201 200000000080 returned -22 [ 170.436185][ T7426] xt_hashlimit: size too large, truncated to 1048576 [ 170.632623][ T7434] loop4: detected capacity change from 0 to 512 [ 170.741739][ T7434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.765007][ T7434] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.833049][ T28] audit: type=1800 audit(1781919987.906:9): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.460" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 170.914191][ T28] audit: type=1800 audit(1781919987.916:10): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.460" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 170.969384][ T7443] EXT4-fs (loop4): shut down requested (2) [ 171.176448][ T6782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.900515][ T7454] team0: Port device team_slave_0 removed [ 171.936913][ T7457] tipc: Started in network mode [ 171.946406][ T7457] tipc: Node identity ac1414aa, cluster identity 4711 [ 171.975788][ T7457] tipc: Enabled bearer , priority 10 [ 172.020067][ T7460] tipc: Enabled bearer , priority 0 [ 173.037794][ T7481] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.130233][ T27] tipc: Node number set to 2886997162 [ 174.016495][ T7502] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.706453][ T7551] loop4: detected capacity change from 0 to 16 [ 175.730374][ T7551] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.557622][ T28] audit: type=1800 audit(1781919993.836:11): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.486" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 177.607773][ T51] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 178.213985][ T7570] syz_tun: entered promiscuous mode [ 178.255646][ T7570] vlan2: entered promiscuous mode [ 178.306505][ T7561] loop0: detected capacity change from 0 to 8192 [ 178.425771][ T7561] loop0: p1 p3 p4 [ 178.443108][ T7561] loop0: partition table partially beyond EOD, truncated [ 178.481985][ T7561] loop0: p3 start 117772289 is beyond EOD, truncated [ 178.516672][ T7561] loop0: p4 size 4281074432 extends beyond EOD, truncated [ 178.825151][ T7581] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 179.009044][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 179.026604][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 180.056087][ T7601] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 181.730116][ T7619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.852188][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.506'. [ 183.453247][ T7701] loop5: detected capacity change from 0 to 16 [ 183.502556][ T7701] erofs: (device loop5): mounted with root inode @ nid 36. [ 183.609135][ T51] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 183.673002][ T7701] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 183.722589][ T28] audit: type=1800 audit(1781920000.766:12): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.519" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 184.875509][ T7706] binder_alloc: 7705: binder_alloc_buf, no vma [ 185.314697][ C1] sched: RT throttling activated [ 186.079112][ T7722] loop0: detected capacity change from 0 to 32768 [ 186.107428][ T7722] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.116100][ T7722] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.193840][ T7722] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 186.212769][ T55] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 186.220168][ T55] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 186.267058][ T55] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 186.282494][ T55] gfs2: fsid=syz:syz.0: jid=0: Done [ 186.296951][ T7722] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 186.484951][ T7722] gfs2: fsid=syz:syz.0: found 1 quota changes [ 186.612192][ T7729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.877925][ T7746] overlayfs: failed to clone upperpath [ 187.080174][ T7038] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 187.080174][ T7038] inode = 11 2339 [ 187.080174][ T7038] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 187.141937][ T7038] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 187.152937][ T7038] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7038 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 187.189760][ T7038] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 187.202588][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 187.206368][ T7038] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 187.296375][ T7038] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 187.333386][ T7038] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 187.401488][ T7038] gfs2: fsid=syz:syz.0: File system withdrawn [ 187.444424][ T7038] CPU: 1 PID: 7038 Comm: syz-executor Not tainted syzkaller #0 [ 187.452141][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.462326][ T7038] Call Trace: [ 187.465646][ T7038] [ 187.468626][ T7038] dump_stack_lvl+0x18c/0x250 [ 187.473361][ T7038] ? show_regs_print_info+0x20/0x20 [ 187.478621][ T7038] ? load_image+0x420/0x420 [ 187.483173][ T7038] ? kobject_uevent_env+0x368/0x890 [ 187.488519][ T7038] gfs2_withdraw+0xe16/0x1400 [ 187.493265][ T7038] ? gfs2_lm+0x240/0x240 [ 187.497566][ T7038] ? preempt_schedule+0xc0/0xd0 [ 187.502557][ T7038] ? gfs2_consist_inode_i+0xf5/0x110 [ 187.507986][ T7038] gfs2_inode_refresh+0xb3c/0x11a0 [ 187.513152][ T7038] ? gfs2_inode_metasync+0xf0/0xf0 [ 187.518320][ T7038] ? gfs2_glock_nq+0xe2e/0x1440 [ 187.523226][ T7038] gfs2_instantiate+0x162/0x220 [ 187.528151][ T7038] gfs2_glock_wait+0x1d4/0x2a0 [ 187.533070][ T7038] do_sync+0x4b8/0xd90 [ 187.537194][ T7038] ? gfs2_quota_sync+0x411/0x5a0 [ 187.542187][ T7038] ? bh_get+0x760/0x760 [ 187.546397][ T7038] ? gfs2_quota_sync+0x318/0x5a0 [ 187.551384][ T7038] ? gfs2_quota_sync+0x411/0x5a0 [ 187.556362][ T7038] ? do_raw_spin_unlock+0x121/0x230 [ 187.561743][ T7038] ? do_raw_spin_unlock+0x121/0x230 [ 187.566870][ T7754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.566979][ T7038] gfs2_quota_sync+0x411/0x5a0 [ 187.567022][ T7038] gfs2_sync_fs+0x4c/0xb0 [ 187.582754][ T7038] sync_filesystem+0xea/0x220 [ 187.587242][ T7754] bond1: (slave bond2): Enslaving as an active interface with an up link [ 187.587559][ T7038] generic_shutdown_super+0x6f/0x2b0 [ 187.601388][ T7038] kill_block_super+0x44/0x90 [ 187.606118][ T7038] deactivate_locked_super+0x97/0x100 [ 187.611589][ T7038] cleanup_mnt+0x3d7/0x460 [ 187.616061][ T7038] task_work_run+0x1d4/0x260 [ 187.620709][ T7038] ? task_work_cancel+0x220/0x220 [ 187.625872][ T7038] ? exit_to_user_mode_loop+0x3b/0x110 [ 187.631383][ T7038] exit_to_user_mode_loop+0xe6/0x110 [ 187.636727][ T7038] exit_to_user_mode_prepare+0xee/0x180 [ 187.642327][ T7038] syscall_exit_to_user_mode+0x1a/0x50 [ 187.647842][ T7038] do_syscall_64+0x61/0xb0 [ 187.652306][ T7038] ? clear_bhb_loop+0x40/0x90 [ 187.657028][ T7038] ? clear_bhb_loop+0x40/0x90 [ 187.661750][ T7038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.667877][ T7038] RIP: 0033:0x7fb7a8d9e097 [ 187.672332][ T7038] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 187.692242][ T7038] RSP: 002b:00007fffc1916a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.700713][ T7038] RAX: 0000000000000000 RBX: 00007fb7a8e322ca RCX: 00007fb7a8d9e097 [ 187.708804][ T7038] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc1916b10 [ 187.716817][ T7038] RBP: 00007fffc1916b10 R08: 00007fffc1917b10 R09: 00000000ffffffff [ 187.724826][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc1917ba0 [ 187.732840][ T7038] R13: 00007fb7a8e322ca R14: 000000000002d9f6 R15: 00007fffc1917be0 [ 187.742388][ T7038] [ 187.948747][ T7751] bond1 (unregistering): (slave bond2): Releasing backup interface [ 187.983497][ T7751] bond1 (unregistering): Released all slaves [ 188.611801][ T7775] netlink: 36 bytes leftover after parsing attributes in process `syz.4.538'. [ 189.239557][ T7788] netlink: 'syz.0.543': attribute type 11 has an invalid length. [ 189.420957][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 190.570597][ T7819] loop4: detected capacity change from 0 to 512 [ 190.616564][ T7819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.683333][ T7821] syzkaller0: entered promiscuous mode [ 190.686151][ T7819] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.551: iget: bad i_size value: 38620345925642 [ 190.701314][ T7821] syzkaller0: entered allmulticast mode [ 190.734853][ T7819] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.551: couldn't read orphan inode 15 (err -117) [ 190.803299][ T7819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.030508][ T7794] loop5: detected capacity change from 0 to 40427 [ 191.047495][ T7828] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.551: bg 0: block 5: invalid block bitmap [ 191.093173][ T7794] F2FS-fs (loop5): invalid crc value [ 191.147996][ T7828] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 460 with error 28 [ 191.187323][ T7794] F2FS-fs (loop5): Found nat_bits in checkpoint [ 191.198654][ T7828] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.198654][ T7828] [ 191.254884][ T7828] EXT4-fs (loop4): Total free blocks count 0 [ 191.261131][ T7828] EXT4-fs (loop4): Free/Dirty block details [ 191.335386][ T7828] EXT4-fs (loop4): free_blocks=0 [ 191.374958][ T7828] EXT4-fs (loop4): dirty_blocks=464 [ 191.380254][ T7828] EXT4-fs (loop4): Block reservation details [ 191.409302][ T7828] EXT4-fs (loop4): i_reserved_data_blocks=464 [ 191.416733][ T7794] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 191.749860][ T6782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.470154][ T7855] loop4: detected capacity change from 0 to 256 [ 192.570210][ T5976] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.609262][ T7855] loop4: detected capacity change from 0 to 512 [ 192.624924][ T5976] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.693405][ T7855] EXT4-fs (loop4): 1 truncate cleaned up [ 192.750583][ T7855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.887441][ T7865] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 192.947888][ T6782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.663842][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.670393][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.754001][ T7931] loop5: detected capacity change from 0 to 256 [ 196.786145][ T7931] FAT-fs (loop5): Unrecognized mount option "dmask)N|#=0000000000000000000100" or missing value [ 196.869275][ T5976] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.856813][ T7960] xt_hashlimit: size too large, truncated to 1048576 [ 200.051175][ T7975] loop5: detected capacity change from 0 to 7 [ 201.170878][ T7975] Dev loop5: unable to read RDB block 7 [ 201.194156][ T7975] loop5: unable to read partition table [ 201.215735][ T7975] loop5: partition table beyond EOD, truncated [ 201.231313][ T7980] syzkaller0: entered promiscuous mode [ 201.235923][ T7975] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 201.285328][ T7980] syzkaller0: entered allmulticast mode [ 201.847055][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 204.691234][ T8022] cgroup: fork rejected by pids controller in /syz5 [ 205.728707][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.971999][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.264599][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.457775][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.803798][ T8063] kvm: pic: non byte read [ 206.842481][ T8063] kvm: pic: non byte read [ 207.638283][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.649508][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.660671][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.676435][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.688552][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.698347][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.024868][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 209.215252][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 209.223745][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 209.255151][ T8072] chnl_net:caif_netlink_parms(): no params data found [ 209.280443][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.357793][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.378845][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.413872][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.454780][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.464013][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.734618][ T55] usb 5-1: GET_CAPABILITIES returned 0 [ 209.754876][ T51] Bluetooth: hci3: command tx timeout [ 209.755007][ T12] hsr_slave_0: left promiscuous mode [ 209.761203][ T55] usbtmc 5-1:16.0: can't read capabilities [ 209.782653][ T12] hsr_slave_1: left promiscuous mode [ 209.835199][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.842788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.891192][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.903032][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.916113][ T12] bridge_slave_1: left allmulticast mode [ 209.931887][ T12] bridge_slave_1: left promiscuous mode [ 209.945073][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.970100][ T12] bridge_slave_0: left allmulticast mode [ 209.990262][ T12] bridge_slave_0: left promiscuous mode [ 210.007350][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.101575][ T12] veth1_macvtap: left promiscuous mode [ 210.119276][ T12] veth0_macvtap: left promiscuous mode [ 210.128728][ T55] usb 5-1: USB disconnect, device number 2 [ 210.133212][ T12] veth1_vlan: left promiscuous mode [ 210.150318][ T12] veth0_vlan: left promiscuous mode [ 211.837142][ T51] Bluetooth: hci3: command tx timeout [ 212.590263][ T12] team0 (unregistering): Port device team_slave_1 removed [ 212.649326][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.703263][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.101077][ T8145] loop4: detected capacity change from 0 to 16 [ 213.131034][ T8145] erofs: (device loop4): mounted with root inode @ nid 36. [ 213.265127][ T12] bond0 (unregistering): Released all slaves [ 213.524766][ T55] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 213.717871][ T55] usb 5-1: config 0 has no interfaces? [ 213.727942][ T55] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 213.755375][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.786445][ T55] usb 5-1: config 0 descriptor?? [ 213.902193][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.910223][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.924880][ T51] Bluetooth: hci3: command tx timeout [ 214.038006][ T5874] usb 5-1: USB disconnect, device number 3 [ 214.512104][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.545879][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.634860][ T5874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 214.837215][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.849941][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.860115][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.875894][ T5874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.894058][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.912793][ T5874] usb 5-1: config 0 descriptor?? [ 215.063466][ T8142] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.073027][ T8142] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.082627][ T8142] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.091645][ T8142] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.347587][ T5874] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 215.378110][ T5874] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 215.394380][ T8072] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.446114][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.462506][ T8072] bridge_slave_0: entered allmulticast mode [ 215.471207][ T8072] bridge_slave_0: entered promiscuous mode [ 215.483943][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.491656][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.499646][ T8072] bridge_slave_1: entered allmulticast mode [ 215.507931][ T8072] bridge_slave_1: entered promiscuous mode [ 215.618562][ T8072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.658302][ T8072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.788807][ T8072] team0: Port device team_slave_0 added [ 215.829545][ T8072] team0: Port device team_slave_1 added [ 215.935851][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.943089][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.974832][ T8072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.993518][ C1] plantronics 0003:047F:FFFF.0003: Event data for report 0 was too short (4043 vs 4) [ 215.995240][ T51] Bluetooth: hci3: command tx timeout [ 216.033123][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.054330][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.083551][ C1] plantronics 0003:047F:FFFF.0003: Event data for report 0 was too short (4043 vs 3) [ 216.146079][ T8072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.283252][ T8072] hsr_slave_0: entered promiscuous mode [ 216.290554][ T5775] usb 5-1: USB disconnect, device number 4 [ 216.338142][ T8072] hsr_slave_1: entered promiscuous mode [ 216.367787][ T8072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.387625][ T8072] Cannot create hsr debugfs directory [ 217.841807][ T8234] Bluetooth: MGMT ver 1.22 [ 218.587964][ T8072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.617145][ T8072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.644943][ T8072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.668367][ T8072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.822833][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.859200][ T8072] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.894631][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.901947][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.945067][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.952416][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.216930][ T8273] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 220.285970][ T8273] team0 (unregistering): Port device team_slave_0 removed [ 220.338032][ T8273] team0 (unregistering): Port device team_slave_1 removed [ 220.933195][ T8072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.075013][ T788] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.279991][ T788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.304878][ T788] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.313993][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.347421][ T788] usb 5-1: config 0 descriptor?? [ 221.354147][ T8072] veth0_vlan: entered promiscuous mode [ 221.357397][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 221.399143][ T8072] veth1_vlan: entered promiscuous mode [ 221.493047][ T8072] veth0_macvtap: entered promiscuous mode [ 221.507557][ T8072] veth1_macvtap: entered promiscuous mode [ 221.536767][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.547933][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.573362][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.589565][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.602477][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.620417][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.632113][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.642667][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.655086][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.667997][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.686415][ T8072] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.699072][ T8072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.709271][ T8072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.719027][ T8072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.786151][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 221.809310][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 221.833990][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 221.857023][ T788] pwc: recv_control_msg error -32 req 04 val 1000 [ 221.864647][ T788] pwc: recv_control_msg error -32 req 04 val 1300 [ 221.876004][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.878275][ T788] pwc: recv_control_msg error -32 req 04 val 1400 [ 221.883977][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.892090][ T788] pwc: recv_control_msg error -32 req 02 val 2000 [ 221.940218][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.951836][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.334434][ T788] pwc: recv_control_msg error -71 req 02 val 2500 [ 222.365072][ T788] pwc: recv_control_msg error -71 req 02 val 2400 [ 222.380280][ T788] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.424421][ T788] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.465490][ T788] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.484221][ T788] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.516465][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.541688][ T788] pwc: Registered as video103. [ 222.567713][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 222.647516][ T788] usb 5-1: USB disconnect, device number 5 [ 228.191691][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 229.137151][ T788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 229.336655][ T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.355994][ T788] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.375506][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.399720][ T788] usb 6-1: config 0 descriptor?? [ 229.419253][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 229.657601][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.693438][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.915262][ T8477] syzkaller0: entered promiscuous mode [ 229.935324][ T8477] syzkaller0: entered allmulticast mode [ 229.942654][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.958929][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 229.976288][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 229.990031][ T788] pwc: recv_control_msg error -32 req 04 val 1000 [ 230.012315][ T788] pwc: recv_control_msg error -32 req 04 val 1300 [ 230.031275][ T788] pwc: recv_control_msg error -32 req 04 val 1400 [ 230.045488][ T788] pwc: recv_control_msg error -32 req 02 val 2000 [ 230.062933][ T788] pwc: recv_control_msg error -32 req 02 val 2100 [ 230.274929][ T788] pwc: recv_control_msg error -71 req 02 val 2500 [ 230.295105][ T788] pwc: recv_control_msg error -71 req 02 val 2400 [ 230.314311][ T788] pwc: recv_control_msg error -71 req 02 val 2600 [ 230.325201][ T788] pwc: recv_control_msg error -71 req 02 val 2900 [ 230.338906][ T788] pwc: recv_control_msg error -71 req 02 val 2800 [ 230.355390][ T788] pwc: recv_control_msg error -71 req 04 val 1100 [ 230.365125][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 230.383811][ T788] pwc: Registered as video103. [ 230.390877][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 230.417439][ T788] usb 6-1: USB disconnect, device number 2 [ 232.238200][ T8544] syzkaller0: entered promiscuous mode [ 232.279890][ T8544] syzkaller0: entered allmulticast mode [ 232.633067][ T8562] loop5: detected capacity change from 0 to 128 [ 232.680001][ T8562] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.712029][ T8562] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.180952][ T8072] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.393718][ T8581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.700'. [ 233.423700][ T8580] syzkaller0: entered promiscuous mode [ 233.441084][ T8580] syzkaller0: entered allmulticast mode [ 233.469591][ T8580] tipc: Enabled bearer , priority 0 [ 233.488993][ T8578] tipc: Resetting bearer [ 233.564319][ T8578] tipc: Disabling bearer [ 235.085115][ T8610] syzkaller0: entered promiscuous mode [ 235.104899][ T8610] syzkaller0: entered allmulticast mode [ 235.674365][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 236.236190][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 236.444799][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 236.465875][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.484789][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.504472][ T23] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 236.524967][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.551473][ T23] usb 6-1: config 0 descriptor?? [ 236.623892][ T5811] IPVS: starting estimator thread 0... [ 236.724913][ T8666] IPVS: using max 16 ests per chain, 38400 per kthread [ 239.180539][ T788] usb 6-1: USB disconnect, device number 3 [ 240.303086][ T8730] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 240.329866][ T8730] CIFS mount error: No usable UNC path provided in device string! [ 240.329866][ T8730] [ 240.340509][ T8730] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 240.921136][ T8734] syzkaller0: entered promiscuous mode [ 240.951165][ T8734] syzkaller0: entered allmulticast mode [ 244.358319][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 244.402323][ T8769] netlink: 100 bytes leftover after parsing attributes in process `syz.0.737'. [ 244.569229][ T8772] bond1: entered promiscuous mode [ 244.600438][ T8772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.703116][ T8775] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.815854][ T8775] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 244.879831][ T8775] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 245.115055][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.740'. [ 245.192530][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 245.790439][ T28] audit: type=1326 audit(1781920062.786:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.743" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4079ce59 code=0x7fc00000 [ 245.913358][ T28] audit: type=1326 audit(1781920062.796:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.743" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3c4079ce59 code=0x7fc00000 [ 246.498586][ T8809] syzkaller0: entered promiscuous mode [ 246.518812][ T8809] syzkaller0: entered allmulticast mode [ 247.074640][ T8829] syzkaller0: entered promiscuous mode [ 247.093803][ T8829] syzkaller0: entered allmulticast mode [ 248.142456][ T8838] bond_slave_0: entered promiscuous mode [ 248.148757][ T8838] bond_slave_1: entered promiscuous mode [ 248.262425][ T8838] vlan2: entered promiscuous mode [ 248.288063][ T8838] bond0: entered promiscuous mode [ 250.425944][ T8854] geneve2: entered promiscuous mode [ 250.492855][ T8856] loop5: detected capacity change from 0 to 512 [ 250.527764][ T8856] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.660490][ T8856] [ 250.662886][ T8856] ====================================================== [ 250.670018][ T8856] WARNING: possible circular locking dependency detected [ 250.677066][ T8856] syzkaller #0 Not tainted [ 250.681504][ T8856] ------------------------------------------------------ [ 250.688544][ T8856] syz.5.757/8856 is trying to acquire lock: [ 250.694469][ T8856] ffff8880569a2c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 250.704834][ T8856] [ 250.704834][ T8856] but task is already holding lock: [ 250.712222][ T8856] ffff8880569a0608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b4/0xe70 [ 250.721335][ T8856] [ 250.721335][ T8856] which lock already depends on the new lock. [ 250.721335][ T8856] [ 250.731940][ T8856] [ 250.731940][ T8856] the existing dependency chain (in reverse order) is: [ 250.740984][ T8856] [ 250.740984][ T8856] -> #1 (sb_internal){.+.+}-{0:0}: [ 250.748328][ T8856] percpu_down_read+0x44/0x1a0 [ 250.753746][ T8856] ext4_evict_inode+0x2b4/0xe70 [ 250.759154][ T8856] evict+0x4b7/0x8a0 [ 250.763777][ T8856] ext4_ext_migrate+0xcd4/0x1060 [ 250.769367][ T8856] ext4_ioctl+0x1ede/0x3b70 [ 250.774596][ T8856] __se_sys_ioctl+0xfd/0x170 [ 250.779750][ T8856] do_syscall_64+0x55/0xb0 [ 250.784897][ T8856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.791366][ T8856] [ 250.791366][ T8856] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 250.799836][ T8856] __lock_acquire+0x37ef/0x7d80 [ 250.805331][ T8856] lock_acquire+0x19e/0x420 [ 250.810560][ T8856] percpu_down_read+0x44/0x1a0 [ 250.815899][ T8856] ext4_writepages+0x1a4/0x350 [ 250.821225][ T8856] do_writepages+0x351/0x590 [ 250.826463][ T8856] __writeback_single_inode+0x14e/0xee0 [ 250.832570][ T8856] writeback_single_inode+0x21f/0x760 [ 250.838507][ T8856] write_inode_now+0x183/0x210 [ 250.843838][ T8856] iput+0x58f/0x900 [ 250.848300][ T8856] ext4_xattr_block_set+0x248b/0x2fe0 [ 250.854318][ T8856] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 250.860867][ T8856] __ext4_expand_extra_isize+0x306/0x400 [ 250.867055][ T8856] __ext4_mark_inode_dirty+0x458/0x6d0 [ 250.873072][ T8856] ext4_evict_inode+0x7dd/0xe70 [ 250.878482][ T8856] evict+0x4b7/0x8a0 [ 250.882932][ T8856] ext4_orphan_cleanup+0xc33/0x1470 [ 250.888688][ T8856] ext4_fill_super+0x5fb5/0x6870 [ 250.894364][ T8856] get_tree_bdev+0x3e5/0x520 [ 250.899507][ T8856] vfs_get_tree+0x8c/0x280 [ 250.904478][ T8856] do_new_mount+0x24a/0xa40 [ 250.909530][ T8856] __se_sys_mount+0x2e7/0x3d0 [ 250.914762][ T8856] do_syscall_64+0x55/0xb0 [ 250.919736][ T8856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.926189][ T8856] [ 250.926189][ T8856] other info that might help us debug this: [ 250.926189][ T8856] [ 250.936446][ T8856] Possible unsafe locking scenario: [ 250.936446][ T8856] [ 250.944020][ T8856] CPU0 CPU1 [ 250.949412][ T8856] ---- ---- [ 250.954797][ T8856] rlock(sb_internal); [ 250.958994][ T8856] lock(&sbi->s_writepages_rwsem); [ 250.966931][ T8856] lock(sb_internal); [ 250.973557][ T8856] rlock(&sbi->s_writepages_rwsem); [ 250.978877][ T8856] [ 250.978877][ T8856] *** DEADLOCK *** [ 250.978877][ T8856] [ 250.987147][ T8856] 3 locks held by syz.5.757/8856: [ 250.992201][ T8856] #0: ffff8880569a00e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x345/0x520 [ 251.002448][ T8856] #1: ffff8880569a0608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b4/0xe70 [ 251.011912][ T8856] #2: ffff8880605200c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 251.022417][ T8856] [ 251.022417][ T8856] stack backtrace: [ 251.028323][ T8856] CPU: 0 PID: 8856 Comm: syz.5.757 Not tainted syzkaller #0 [ 251.035641][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.045724][ T8856] Call Trace: [ 251.049043][ T8856] [ 251.052013][ T8856] dump_stack_lvl+0x18c/0x250 [ 251.056733][ T8856] ? load_image+0x420/0x420 [ 251.061534][ T8856] ? show_regs_print_info+0x20/0x20 [ 251.066858][ T8856] ? print_circular_bug+0x12b/0x1a0 [ 251.072102][ T8856] check_noncircular+0x2fc/0x400 [ 251.077205][ T8856] ? print_deadlock_bug+0x5d0/0x5d0 [ 251.082469][ T8856] ? _find_first_zero_bit+0xd6/0x100 [ 251.087805][ T8856] ? add_lock_to_list+0x191/0x280 [ 251.092875][ T8856] __lock_acquire+0x37ef/0x7d80 [ 251.097782][ T8856] ? mark_lock+0x94/0x320 [ 251.102147][ T8856] ? verify_lock_unused+0x140/0x140 [ 251.107389][ T8856] ? __lock_acquire+0x1336/0x7d80 [ 251.112468][ T8856] lock_acquire+0x19e/0x420 [ 251.117185][ T8856] ? ext4_writepages+0x1a4/0x350 [ 251.122178][ T8856] ? __might_sleep+0xe0/0xe0 [ 251.126812][ T8856] ? read_lock_is_recursive+0x20/0x20 [ 251.132230][ T8856] ? mark_lock+0x94/0x320 [ 251.136607][ T8856] ? __lock_acquire+0x1336/0x7d80 [ 251.141689][ T8856] ? __lock_acquire+0x7d80/0x7d80 [ 251.146856][ T8856] percpu_down_read+0x44/0x1a0 [ 251.151672][ T8856] ? ext4_writepages+0x1a4/0x350 [ 251.156659][ T8856] ext4_writepages+0x1a4/0x350 [ 251.161470][ T8856] ? ext4_read_folio+0x2f0/0x2f0 [ 251.166500][ T8856] ? __rwlock_init+0x150/0x150 [ 251.171311][ T8856] ? do_raw_spin_unlock+0x121/0x230 [ 251.176560][ T8856] ? ext4_read_folio+0x2f0/0x2f0 [ 251.181545][ T8856] do_writepages+0x351/0x590 [ 251.186284][ T8856] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 251.192052][ T8856] ? writeback_single_inode+0x214/0x760 [ 251.197738][ T8856] ? __lock_acquire+0x7d80/0x7d80 [ 251.202803][ T8856] ? do_raw_spin_lock+0x11f/0x2b0 [ 251.207959][ T8856] __writeback_single_inode+0x14e/0xee0 [ 251.213616][ T8856] writeback_single_inode+0x21f/0x760 [ 251.219036][ T8856] ? write_inode_now+0x210/0x210 [ 251.224065][ T8856] write_inode_now+0x183/0x210 [ 251.228955][ T8856] ? bdi_split_work_to_wbs+0x900/0x900 [ 251.234460][ T8856] ? do_raw_spin_unlock+0x121/0x230 [ 251.239707][ T8856] ? do_raw_spin_unlock+0x121/0x230 [ 251.244952][ T8856] iput+0x58f/0x900 [ 251.248806][ T8856] ext4_xattr_block_set+0x248b/0x2fe0 [ 251.254227][ T8856] ? write_boundary_block+0xb0/0xb0 [ 251.259572][ T8856] ? xattr_find_entry+0x12b/0x2f0 [ 251.264684][ T8856] ? ext4_xattr_block_find+0x320/0x320 [ 251.270277][ T8856] ? ext4_xattr_block_find+0x2a1/0x320 [ 251.275793][ T8856] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 251.281746][ T8856] __ext4_expand_extra_isize+0x306/0x400 [ 251.287514][ T8856] __ext4_mark_inode_dirty+0x458/0x6d0 [ 251.293106][ T8856] ext4_evict_inode+0x7dd/0xe70 [ 251.298085][ T8856] ? evict+0x482/0x8a0 [ 251.302205][ T8856] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 251.308142][ T8856] ? do_raw_spin_unlock+0x121/0x230 [ 251.313399][ T8856] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 251.319513][ T8856] evict+0x4b7/0x8a0 [ 251.323447][ T8856] ? __lock_acquire+0x7d80/0x7d80 [ 251.328529][ T8856] ? proc_nr_inodes+0x230/0x230 [ 251.333514][ T8856] ? do_raw_spin_unlock+0x121/0x230 [ 251.338854][ T8856] ? _raw_spin_unlock+0x28/0x40 [ 251.343752][ T8856] ext4_orphan_cleanup+0xc33/0x1470 [ 251.349001][ T8856] ? ext4_orphan_del+0xc90/0xc90 [ 251.354049][ T8856] ? ext4_register_li_request+0x182/0x930 [ 251.359804][ T8856] ? errseq_check_and_advance+0x66/0x120 [ 251.365487][ T8856] ext4_fill_super+0x5fb5/0x6870 [ 251.370491][ T8856] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 251.376859][ T8856] ? __might_sleep+0xe0/0xe0 [ 251.381498][ T8856] ? read_lock_is_recursive+0x20/0x20 [ 251.386908][ T8856] ? snprintf+0xe9/0x140 [ 251.391189][ T8856] ? down_read_killable+0x340/0x340 [ 251.396613][ T8856] ? setup_bdev_super+0x56b/0x660 [ 251.401757][ T8856] get_tree_bdev+0x3e5/0x520 [ 251.406497][ T8856] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 251.412777][ T8856] ? setup_bdev_super+0x660/0x660 [ 251.417835][ T8856] ? apparmor_capable+0x137/0x1a0 [ 251.422894][ T8856] ? bpf_lsm_capable+0x9/0x10 [ 251.427610][ T8856] ? security_capable+0x89/0xb0 [ 251.432515][ T8856] vfs_get_tree+0x8c/0x280 [ 251.436973][ T8856] do_new_mount+0x24a/0xa40 [ 251.441512][ T8856] __se_sys_mount+0x2e7/0x3d0 [ 251.446279][ T8856] ? __x64_sys_mount+0xc0/0xc0 [ 251.451189][ T8856] ? lockdep_hardirqs_on+0x98/0x150 [ 251.456524][ T8856] ? __x64_sys_mount+0x20/0xc0 [ 251.461327][ T8856] do_syscall_64+0x55/0xb0 [ 251.465820][ T8856] ? clear_bhb_loop+0x40/0x90 [ 251.470533][ T8856] ? clear_bhb_loop+0x40/0x90 [ 251.475305][ T8856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.481428][ T8856] RIP: 0033:0x7fb8da39e0ca [ 251.485887][ T8856] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.505611][ T8856] RSP: 002b:00007fb8db1bce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.514066][ T8856] RAX: ffffffffffffffda RBX: 00007fb8db1bcee0 RCX: 00007fb8da39e0ca [ 251.522243][ T8856] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fb8db1bcea0 [ 251.530339][ T8856] RBP: 0000200000000180 R08: 00007fb8db1bcee0 R09: 0000000000000000 [ 251.538394][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 251.546534][ T8856] R13: 00007fb8db1bcea0 R14: 000000000000047a R15: 00002000000001c0 [ 251.554750][ T8856] [ 251.802371][ T8870] netlink: 'syz.3.761': attribute type 27 has an invalid length. [ 251.881256][ T8856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.757: iget: bad extra_isize 90 (inode size 256) [ 251.888083][ T8870] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 251.905412][ T8856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.757: error while reading EA inode 11 err=-117 [ 251.919163][ T8870] caif:caif_disconnect_client(): nothing to disconnect [ 251.932388][ T8870] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 251.942047][ T8856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.757: iget: bad extra_isize 90 (inode size 256) [ 251.956798][ T8856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.757: error while reading EA inode 11 err=-117 [ 251.959049][ T8870] chnl_net:chnl_net_open(): state disconnected [ 251.985131][ T8870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.001205][ T8856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.757: iget: bad extra_isize 90 (inode size 256) [ 252.017372][ T8856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.757: error while reading EA inode 18 err=-117 [ 252.030465][ T8856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.757: iget: bad extra_isize 90 (inode size 256) [ 252.055157][ T8856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.757: error while reading EA inode 18 err=-117 [ 252.079442][ T8856] EXT4-fs (loop5): 1 orphan inode deleted [ 252.091947][ T8856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.261328][ T8072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.077404][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.086668][ T1291] ieee802154 phy1 wpan1: encryption failed: -22