last executing test programs: 20.745108477s ago: executing program 0 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000040)=""/103, 0x67, 0x800) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.012585823s ago: executing program 0 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setrlimit(0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', 0x0}) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) openat$nullb(0xffffffffffffff9c, 0x0, 0xaca82, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000480)={0x8000001e}) 14.821483362s ago: executing program 1 (id=315): setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x4, 0x8, 0xffff8001, 0x4}, 0x50) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0xa, 0x85, 0xf497}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000100)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x208080) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r3, 0xffffffffffffffff, 0x0) 14.710483905s ago: executing program 3 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000040)=""/103, 0x67, 0x800) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) 13.10006062s ago: executing program 0 (id=317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x9213}}, 0x30) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[], 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x2a0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) r6 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) 12.314740494s ago: executing program 1 (id=318): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)="ff80", 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 10.588678803s ago: executing program 3 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe00}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x1c, &(0x7f0000000280)=""/28, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000b40), r7, 0x0, 0x1, 0x4}}, 0x20) add_key$user(&(0x7f0000000440), &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900)='?', 0x1, r4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000108faffffff00000000000000", @ANYRES32=0x0], 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 10.073896301s ago: executing program 3 (id=320): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)="ff80", 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 9.489266893s ago: executing program 3 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000040)=""/103, 0x67, 0x800) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.484062152s ago: executing program 0 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$tipc(0x1e, 0x5, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 6.828664697s ago: executing program 0 (id=323): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) keyctl$join(0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xf, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) 6.828400647s ago: executing program 2 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) 5.6625201s ago: executing program 2 (id=325): socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @mcast1, 0x4}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 5.576024178s ago: executing program 1 (id=326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x200) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x4040001) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) socket$inet(0x2, 0x3, 0x6) 5.360084153s ago: executing program 2 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x7, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x2900]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) socket(0xa, 0x801, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 4.923931554s ago: executing program 2 (id=328): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$sndctrl(0x0, 0x458, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x1) chdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.664116876s ago: executing program 1 (id=329): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)="ff80", 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3.519227557s ago: executing program 3 (id=330): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x150, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x8000000000000000, 0x1, 0x6811221d, 0x5, 0x8000000000000003, 0x200000200000003, 0x100000000}, {0x4000a, 0xfffffffffffffffd, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x2, 0x0, 0x9, 0x7}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0xb9, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x75, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) 3.253773212s ago: executing program 2 (id=331): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000380)={'fscrypt:', @auto=[0x63, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccdd3bff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x64, 0x36, 0x37, 0x32, 0x30, 0x66, 0x30, 0x39, 0x64, 0x32, 0x65, 0x35, 0x38, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 3.11635498s ago: executing program 1 (id=332): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.111488248s ago: executing program 3 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlockall() mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r3, 0x1) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) 904.188021ms ago: executing program 2 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0xb, 0x2, 0xfffffffc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000200)=0x104) readv(r3, &(0x7f0000000480), 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x1006, 0x2, 0xcf7, 0x70}, 0x5, 0x2, 0x0, 0x2, 0x0, 0xc3}}) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000037c52437dbcf7b57ca6cdcc001fff00052fefd811390d11254186b2bfd5acb839097757f56f58a06f0f6b2666822cbd", @ANYRES32=0x0, @ANYBLOB="00030000557a0000140012800a000100767863616e00000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) 571.345531ms ago: executing program 0 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001900810026bd7000000000001c200000fe00fd010010100030b2d746"], 0x1c}, 0x1, 0x0, 0x0, 0xceb76c03b213e8a5}, 0x30004000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40186f40, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40840) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x9000000, 0x0, 0x240008c4}, 0x20008004) 0s ago: executing program 1 (id=336): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900), 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 83.866535][ T5763] cgroup: Unknown subsys name 'net' [ 84.007868][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.864287][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.282156][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.307399][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.334727][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.335956][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.346722][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.358583][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.359731][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.369647][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.376062][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.380791][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.397474][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.401681][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.410387][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.421537][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.423281][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.429972][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.438255][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.451985][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.459622][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.461939][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.474415][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.500591][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.519411][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.527604][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.060537][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 89.167202][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 89.222303][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 89.420796][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 89.434068][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.445032][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.453441][ T5780] bridge_slave_0: entered allmulticast mode [ 89.461577][ T5780] bridge_slave_0: entered promiscuous mode [ 89.483658][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.491326][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.499054][ T5774] bridge_slave_0: entered allmulticast mode [ 89.506583][ T5774] bridge_slave_0: entered promiscuous mode [ 89.532667][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.543642][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.551113][ T5780] bridge_slave_1: entered allmulticast mode [ 89.559227][ T5780] bridge_slave_1: entered promiscuous mode [ 89.581279][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.589478][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.597310][ T5777] bridge_slave_0: entered allmulticast mode [ 89.605114][ T5777] bridge_slave_0: entered promiscuous mode [ 89.613100][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.620369][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.628751][ T5774] bridge_slave_1: entered allmulticast mode [ 89.636634][ T5774] bridge_slave_1: entered promiscuous mode [ 89.674077][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.681374][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.689026][ T5777] bridge_slave_1: entered allmulticast mode [ 89.696412][ T5777] bridge_slave_1: entered promiscuous mode [ 89.763564][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.785124][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.798499][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.824196][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.889277][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.902599][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.937702][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.944904][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.957233][ T5779] bridge_slave_0: entered allmulticast mode [ 89.970483][ T5779] bridge_slave_0: entered promiscuous mode [ 89.997892][ T5774] team0: Port device team_slave_0 added [ 90.020725][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.030070][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.038695][ T5779] bridge_slave_1: entered allmulticast mode [ 90.047658][ T5779] bridge_slave_1: entered promiscuous mode [ 90.059990][ T5780] team0: Port device team_slave_0 added [ 90.076118][ T5774] team0: Port device team_slave_1 added [ 90.100783][ T5777] team0: Port device team_slave_0 added [ 90.126440][ T5780] team0: Port device team_slave_1 added [ 90.172313][ T5777] team0: Port device team_slave_1 added [ 90.216156][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.224803][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.253490][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.270679][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.278355][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.305205][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.317958][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.324972][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.352963][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.367567][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.381366][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.394762][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.403996][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.434574][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.454080][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.461175][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.488505][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.503546][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.513892][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.541461][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.569602][ T5781] Bluetooth: hci1: command tx timeout [ 90.570025][ T5790] Bluetooth: hci2: command tx timeout [ 90.580064][ T5783] Bluetooth: hci0: command tx timeout [ 90.583898][ T5787] Bluetooth: hci3: command tx timeout [ 90.623577][ T5779] team0: Port device team_slave_0 added [ 90.633644][ T5779] team0: Port device team_slave_1 added [ 90.676043][ T5780] hsr_slave_0: entered promiscuous mode [ 90.683063][ T5780] hsr_slave_1: entered promiscuous mode [ 90.763051][ T5774] hsr_slave_0: entered promiscuous mode [ 90.770787][ T5774] hsr_slave_1: entered promiscuous mode [ 90.778811][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.787458][ T5774] Cannot create hsr debugfs directory [ 90.807552][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.814573][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.846251][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.865733][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.874241][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.907777][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.981400][ T5777] hsr_slave_0: entered promiscuous mode [ 90.990556][ T5777] hsr_slave_1: entered promiscuous mode [ 91.000725][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.008876][ T5777] Cannot create hsr debugfs directory [ 91.165741][ T5779] hsr_slave_0: entered promiscuous mode [ 91.173103][ T5779] hsr_slave_1: entered promiscuous mode [ 91.182570][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.190920][ T5779] Cannot create hsr debugfs directory [ 91.595819][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.619550][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.634605][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.646796][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.712766][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.725313][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.744196][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.764097][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.890714][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.926277][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.938789][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.954127][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.080775][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.096507][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.132670][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.146204][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.195080][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.256465][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.319680][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.328710][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.370123][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.384256][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.392533][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.445835][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.509102][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.565124][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.582137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.589851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.619782][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.627216][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.648294][ T5790] Bluetooth: hci1: command tx timeout [ 92.653948][ T5787] Bluetooth: hci0: command tx timeout [ 92.664827][ T5790] Bluetooth: hci3: command tx timeout [ 92.666324][ T5783] Bluetooth: hci2: command tx timeout [ 92.710578][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.720975][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.743675][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.753866][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.850366][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.936771][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.974610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.981911][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.999663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.006863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.149890][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.351493][ T5774] veth0_vlan: entered promiscuous mode [ 93.396553][ T5774] veth1_vlan: entered promiscuous mode [ 93.572811][ T5774] veth0_macvtap: entered promiscuous mode [ 93.615305][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.635595][ T5774] veth1_macvtap: entered promiscuous mode [ 93.689657][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.712583][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.744304][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.792543][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.804997][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.815832][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.825707][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.889006][ T5779] veth0_vlan: entered promiscuous mode [ 93.915546][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.971751][ T5779] veth1_vlan: entered promiscuous mode [ 94.002521][ T5780] veth0_vlan: entered promiscuous mode [ 94.089761][ T5777] veth0_vlan: entered promiscuous mode [ 94.108145][ T5780] veth1_vlan: entered promiscuous mode [ 94.159805][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.170806][ T5777] veth1_vlan: entered promiscuous mode [ 94.182830][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.264995][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.274875][ T5779] veth0_macvtap: entered promiscuous mode [ 94.281157][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.306391][ T5779] veth1_macvtap: entered promiscuous mode [ 94.366723][ T5780] veth0_macvtap: entered promiscuous mode [ 94.395056][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.408027][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.423905][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.449745][ T5780] veth1_macvtap: entered promiscuous mode [ 94.470145][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.482508][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.495936][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.505725][ T5777] veth0_macvtap: entered promiscuous mode [ 94.528871][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.540565][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.551247][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.560644][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.579047][ T5777] veth1_macvtap: entered promiscuous mode [ 94.586523][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.599623][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.610319][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.621941][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.634232][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.727926][ T5783] Bluetooth: hci2: command tx timeout [ 94.731244][ T5787] Bluetooth: hci0: command tx timeout [ 94.733624][ T5783] Bluetooth: hci3: command tx timeout [ 94.739231][ T5790] Bluetooth: hci1: command tx timeout [ 96.297456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.033297][ T5783] Bluetooth: hci3: command tx timeout [ 97.037291][ T5781] Bluetooth: hci0: command tx timeout [ 97.040805][ T5783] Bluetooth: hci1: command tx timeout [ 97.046527][ T5781] Bluetooth: hci2: command tx timeout [ 97.182579][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.220964][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.235085][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.248143][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.261598][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.320460][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.336495][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.355376][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.364815][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.382055][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.394433][ T9] cfg80211: failed to load regulatory.db [ 97.396810][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.418477][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.434152][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.446434][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.463694][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.483886][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.503696][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.515347][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.530411][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.542509][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.555249][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.571132][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.588769][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.690129][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.706524][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.722418][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.732610][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.757308][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.774287][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.925653][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.944308][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.164356][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.216387][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.246407][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.299978][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.358286][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.393898][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.426509][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.450744][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.698715][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.786205][ T5855] syz.0.1[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.806860][ T5855] loop0: detected capacity change from 0 to 128 [ 98.831325][ T5855] ======================================================= [ 98.831325][ T5855] WARNING: The mand mount option has been deprecated and [ 98.831325][ T5855] and is ignored by this kernel. Remove the mand [ 98.831325][ T5855] option from the mount to silence this warning. [ 98.831325][ T5855] ======================================================= [ 98.976745][ T5860] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.052893][ T5820] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 99.125988][ T5855] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.656653][ T5855] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.902803][ T5855] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.797484][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.809176][ T5820] usb 2-1: Product: syz [ 101.814063][ T5820] usb 2-1: Manufacturer: syz [ 101.818943][ T5820] usb 2-1: SerialNumber: syz [ 102.044529][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.089751][ T5820] usb 2-1: can't set config #1, error -71 [ 102.177729][ T5820] usb 2-1: USB disconnect, device number 2 [ 106.857064][ C0] sched: RT throttling activated [ 108.194935][ T5897] binder: 5896:5897 ioctl c0306201 2000000004c0 returned -22 [ 108.533700][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.694196][ T5904] loop0: detected capacity change from 0 to 1024 [ 108.709864][ T5904] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.834686][ T5904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.915081][ T5904] ip_tables: iptables: counters copy to user failed while replacing table [ 109.345546][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.869030][ T5918] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 112.182092][ T5938] loop0: detected capacity change from 0 to 512 [ 115.187971][ T5938] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 116.406921][ T5950] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure [ 116.443720][ T5952] Zero length message leads to an empty skb [ 116.509150][ T5951] loop0: detected capacity change from 0 to 32768 [ 116.548375][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 116.569022][ T5951] loop1: detected capacity change from 0 to 65536 [ 116.612124][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.805899][ T5957] process 'syz.2.24' launched '/dev/fd/4' with NULL argv: empty string added [ 118.275928][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.303784][ T5951] workqueue: Failed to create a rescuer kthread for wq "dm-thin": -EINTR [ 118.866476][ T5965] nvmet_rdma: address family 255 not supported [ 118.972081][ T5951] device-mapper: table: 248:0: thin-pool: Error creating pool's workqueue (-ENOMEM) [ 119.005370][ T5951] device-mapper: ioctl: error adding target to table [ 119.726826][ T5971] loop1: detected capacity change from 0 to 32768 [ 119.783613][ T5971] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.912931][ T5971] XFS (loop1): Ending clean mount [ 119.936025][ T5971] XFS (loop1): Quotacheck needed: Please wait. [ 120.096859][ T5971] XFS (loop1): Quotacheck: Done. [ 121.234801][ T5779] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.246418][ T5994] loop3: detected capacity change from 0 to 164 [ 121.365449][ T5992] syzkaller0: entered promiscuous mode [ 121.380857][ T5992] syzkaller0: entered allmulticast mode [ 121.457242][ T28] audit: type=1800 audit(1790406152.556:2): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.37" name="UDC" dev="configfs" ino=6933 res=0 errno=0 [ 121.571849][ T5998] netlink: 'syz.3.38': attribute type 10 has an invalid length. [ 121.583823][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.593003][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.624837][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.632229][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.640914][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.648223][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.719333][ T5998] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 121.779780][ T5998] netlink: 'syz.3.38': attribute type 10 has an invalid length. [ 121.840687][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.856497][ T5998] team0: Port device bond0 added [ 122.493772][ T6011] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 124.457845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 124.937736][ T789] IPVS: starting estimator thread 0... [ 125.037350][ T6020] IPVS: using max 18 ests per chain, 43200 per kthread [ 125.387745][ T6029] loop1: detected capacity change from 0 to 512 [ 125.425055][ T6029] EXT4-fs: inline encryption not supported [ 125.479323][ T6029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.553665][ T6029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.586639][ T6029] EXT4-fs (loop1): Invalid default hash set in the superblock [ 125.646293][ T6025] loop0: detected capacity change from 0 to 32768 [ 126.001502][ T6025] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.667581][ T6025] XFS (loop0): Ending clean mount [ 126.674684][ T6029] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 126.680665][ T6025] XFS (loop0): Quotacheck needed: Please wait. [ 126.725322][ T6025] XFS (loop0): Quotacheck: Done. [ 127.662537][ T5780] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.139045][ T6061] syzkaller0: entered promiscuous mode [ 130.184824][ T6061] syzkaller0: entered allmulticast mode [ 131.561395][ T6076] syzkaller0: entered promiscuous mode [ 131.582957][ T6076] syzkaller0: entered allmulticast mode [ 133.232361][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.262997][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.279904][ T28] audit: type=1800 audit(1790406164.346:3): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.52" name="bus" dev="ramfs" ino=8277 res=0 errno=0 [ 133.880137][ T6092] loop3: detected capacity change from 0 to 1024 [ 133.894195][ T6092] EXT4-fs (loop3): filesystem is read-only [ 133.901113][ T6092] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 1280 [ 141.152888][ T6133] loop3: detected capacity change from 0 to 256 [ 143.911845][ T28] audit: type=1804 audit(1790406175.016:4): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.68" name="/newroot/17/file1" dev="fuse" ino=1 res=1 errno=0 [ 144.407067][ T6142] loop1: detected capacity change from 0 to 8192 [ 147.907455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 148.317303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 149.752114][ T6170] loop2: detected capacity change from 0 to 8 [ 149.915590][ T6170] SQUASHFS error: Failed to read block 0x8f: -5 [ 150.057395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 150.467601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 151.791525][ T28] audit: type=1800 audit(1790406182.896:5): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.76" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 152.168068][ T28] audit: type=1800 audit(1790406183.266:6): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.76" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 152.198783][ T6178] SQUASHFS error: Failed to read block 0x285: -5 [ 152.205617][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.206131][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.214439][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.215673][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.225845][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.232483][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.238951][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.248309][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.248470][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.256392][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.262983][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.270436][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.276926][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.284915][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.292476][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.299531][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.299548][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.306757][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.316421][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.319680][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.319746][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.327447][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.334427][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.341637][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.341870][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.348389][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.356535][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.361441][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.368681][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.377198][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.385369][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.391184][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.391539][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.398515][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.405930][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.418984][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.420799][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.428844][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.434550][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.441547][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.447676][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.454769][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.454939][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.462619][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.469286][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.476028][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.482240][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.482380][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.488859][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.497455][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.505117][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.511800][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.518596][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 152.519129][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.519147][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.520660][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.526333][ T6170] SQUASHFS error: Failed to read block 0x0: -5 [ 152.526440][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.533936][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.534897][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.540307][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.547305][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.554568][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.561823][ T6178] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.569023][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.575750][ T6178] SQUASHFS error: read_indexes: reading block [283:0] [ 152.583502][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.693364][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.700672][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.708214][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.716379][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.724908][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.732182][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.739688][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.746768][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.754164][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.761189][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.768645][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.775746][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.783283][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.790473][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.798035][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.805133][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.813169][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.820435][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.830894][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.838120][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.845475][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.853254][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.860989][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.868261][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.875663][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 152.882930][ T6170] SQUASHFS error: Unable to read metadata cache entry [283] [ 152.890566][ T6170] SQUASHFS error: read_indexes: reading block [283:0] [ 154.143971][ T6185] binder: 6181:6185 ioctl c0306201 0 returned -14 [ 155.177459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.243697][ T6183] tty tty3: ldisc open failed (-12), clearing slot 2 [ 156.343985][ T6191] loop0: detected capacity change from 0 to 256 [ 156.370524][ T6191] exfat: Deprecated parameter 'namecase' [ 156.397662][ T6191] exfat: Deprecated parameter 'namecase' [ 156.483811][ T6191] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 158.074967][ T6203] loop3: detected capacity change from 0 to 512 [ 160.950850][ T6203] fscrypt: Error allocating hmac(sha512): -2 [ 161.512087][ T6213] serio: Serial port ttyS3 [ 164.959526][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 164.975086][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.91'. [ 164.984709][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 164.994662][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 165.319845][ T6237] 9pnet_fd: Insufficient options for proto=fd [ 167.122418][ T6247] capability: warning: `syz.1.96' uses 32-bit capabilities (legacy support in use) [ 167.595730][ T6251] ªªªªªª: renamed from vlan0 (while UP) [ 167.988287][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 168.019024][ T6256] netlink: 'syz.3.99': attribute type 10 has an invalid length. [ 168.451796][ T6266] xt_hashlimit: size too large, truncated to 1048576 [ 168.460399][ T6266] xt_hashlimit: max too large, truncated to 1048576 [ 168.467938][ T6266] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 168.960989][ T789] IPVS: starting estimator thread 0... [ 169.050929][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 169.063032][ T6269] IPVS: using max 16 ests per chain, 38400 per kthread [ 169.153772][ T23] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 169.203153][ T23] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 169.219137][ T23] usb 1-1: Product: syz [ 169.223590][ T23] usb 1-1: Manufacturer: syz [ 169.237141][ T23] usb 1-1: SerialNumber: syz [ 169.260599][ T23] usb 1-1: config 0 descriptor?? [ 169.268674][ T6254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.289636][ T6271] loop1: detected capacity change from 0 to 16 [ 169.392226][ T6271] erofs: (device loop1): mounted with root inode @ nid 36. [ 169.483845][ T6256] team0 (unregistering): Port device team_slave_0 removed [ 169.549724][ T6256] team0 (unregistering): Port device team_slave_1 removed [ 169.840670][ T6256] team0 (unregistering): Port device bond0 removed [ 170.428838][ T6275] loop2: detected capacity change from 0 to 8 [ 170.673321][ T6285] comedi comedi1: board detection failed [ 170.783216][ T6286] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 171.721986][ T5785] usb 1-1: USB disconnect, device number 2 [ 171.817370][ T6290] overlayfs: missing 'lowerdir' [ 171.915957][ T6288] null_blk: disk rnullb0 created [ 173.049404][ T6293] syz.1.106 (6293) used greatest stack depth: 16760 bytes left [ 173.193771][ T28] audit: type=1800 audit(1790406204.286:7): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.107" name=08 dev="sda1" ino=2045 res=0 errno=0 [ 174.497523][ T6305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.859686][ T5787] Bluetooth: hci3: command tx timeout [ 183.337349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 184.050481][ T6348] loop1: detected capacity change from 0 to 1024 [ 184.125298][ T6348] hfsplus: failed to load catalog file [ 184.582761][ T6354] loop2: detected capacity change from 0 to 1024 [ 184.627673][ T6354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.707576][ T6354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.411272][ T6368] loop1: detected capacity change from 0 to 512 [ 186.228915][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.252386][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.973224][ T6368] fscrypt: Error allocating hmac(sha512): -2 [ 189.851546][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.130036][ T6412] loop1: detected capacity change from 0 to 16 [ 192.364701][ T6412] erofs: (device loop1): mounted with root inode @ nid 36. [ 193.705671][ T6418] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 194.772554][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.782253][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.321959][ T6425] loop1: detected capacity change from 0 to 512 [ 197.355918][ T6425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.745015][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.330782][ T6448] loop0: detected capacity change from 0 to 32768 [ 203.432038][ T6447] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 203.432038][ T6447] [ 203.469989][ T6447] ERROR: (device loop0): remounting filesystem as read-only [ 203.478301][ T6447] ialloc: diAlloc returned -5! [ 207.272836][ T6479] loop0: detected capacity change from 0 to 512 [ 208.498184][ T6479] fscrypt: Error allocating hmac(sha512): -2 [ 210.483378][ T6506] loop1: detected capacity change from 0 to 8 [ 211.519360][ T6506] SQUASHFS error: Failed to read block 0x8f: -5 [ 211.526112][ T28] audit: type=1800 audit(1790406242.626:8): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 211.867097][ T28] audit: type=1800 audit(1790406242.966:9): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 211.889764][ T6516] SQUASHFS error: Failed to read block 0x285: -5 [ 211.896483][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.896512][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.903945][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 211.911785][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.911847][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.911919][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.911934][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.911980][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.912078][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.912092][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.912141][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.912200][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.912213][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.912258][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.912320][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.912334][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.912379][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.912437][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.912450][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.912515][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.912573][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.912586][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.912637][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.912695][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.919648][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 211.926322][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.932906][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.940071][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.946755][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 211.953141][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.960414][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 211.967218][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 211.967335][ T6506] SQUASHFS error: Failed to read block 0x0: -5 [ 211.973898][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.981324][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 211.988260][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 211.994156][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.001657][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 212.010217][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.018338][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.023231][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.029699][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.035894][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.042763][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 212.049478][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.050195][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.055925][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.063181][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.069389][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.076829][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.083522][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 212.083596][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.083610][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.083662][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 212.083815][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.089889][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.090442][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.096749][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.104138][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.110522][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 212.117863][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.117880][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.118083][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.118098][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.118294][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.118308][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.118498][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.118512][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.119021][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.124908][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.132079][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.132725][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.139476][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.146245][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.153363][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 212.160080][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.166865][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.174999][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.181313][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.188479][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.195321][ T6516] SQUASHFS error: Failed to read block 0x0: -5 [ 212.202520][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.208725][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.216344][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.216361][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.216559][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.216573][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.216762][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.216776][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.217217][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.224373][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.231059][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.238979][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.245932][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.251838][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.258950][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.266277][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.272390][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.279320][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.286363][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.294336][ T6516] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.301123][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.307476][ T6516] SQUASHFS error: read_indexes: reading block [283:0] [ 212.313880][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.414217][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 212.415797][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.423987][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 212.429124][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.429878][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.442162][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 212.443490][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 212.459822][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 212.465474][ T6506] SQUASHFS error: Unable to read metadata cache entry [283] [ 212.692403][ T6506] SQUASHFS error: read_indexes: reading block [283:0] [ 216.221150][ T6525] loop3: detected capacity change from 0 to 32768 [ 216.494235][ T6525] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 216.494235][ T6525] [ 216.539783][ T6525] ERROR: (device loop3): remounting filesystem as read-only [ 216.547287][ T6525] ialloc: diAlloc returned -5! [ 217.288183][ T6530] loop0: detected capacity change from 0 to 512 [ 217.636262][ T6530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.225759][ T6540] loop2: detected capacity change from 0 to 512 [ 219.478927][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.642599][ T6540] EXT4-fs (loop2): Test dummy encryption mode enabled [ 219.649646][ T6540] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.695993][ T6540] EXT4-fs (loop2): 1 truncate cleaned up [ 219.703538][ T6540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.998588][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.026495][ T6554] ipvlan2: entered allmulticast mode [ 221.071931][ T6554] macvlan1: entered allmulticast mode [ 221.079963][ T6554] veth1_vlan: entered allmulticast mode [ 221.092409][ T6554] batman_adv: batadv0: Adding interface: ipvlan2 [ 221.102812][ T6554] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.129706][ T6554] batman_adv: batadv0: Interface activated: ipvlan2 [ 221.700176][ T6563] xt_hashlimit: size too large, truncated to 1048576 [ 221.707138][ T6563] xt_hashlimit: max too large, truncated to 1048576 [ 221.713834][ T6563] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 222.147275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 222.335692][ T5820] IPVS: starting estimator thread 0... [ 222.684055][ T6564] IPVS: using max 19 ests per chain, 45600 per kthread [ 225.117224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 225.688329][ T6578] binder: 6577:6578 ioctl c0306201 2000000004c0 returned -22 [ 225.798379][ T6580] binder: 6579:6580 ioctl c0306201 2000000004c0 returned -22 [ 225.983540][ T6584] binder: 6583:6584 ioctl c0306201 2000000004c0 returned -22 [ 226.774116][ T6593] binder: 6592:6593 ioctl c0306201 2000000004c0 returned -22 [ 227.571774][ T6599] loop2: detected capacity change from 0 to 512 [ 227.928171][ T6599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.493602][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.512631][ T6606] loop1: detected capacity change from 0 to 512 [ 228.524973][ T6606] EXT4-fs (loop1): unable to read superblock [ 232.711610][ T6625] binder: 6624:6625 ioctl c0306201 2000000004c0 returned -22 [ 233.939449][ T6636] binder: 6635:6636 ioctl c0306201 2000000004c0 returned -22 [ 234.770081][ T6647] binder: 6646:6647 ioctl c0306201 2000000004c0 returned -22 [ 235.035197][ T6653] loop0: detected capacity change from 0 to 512 [ 235.081417][ T6653] EXT4-fs (loop0): unable to read superblock [ 237.367449][ T6662] binder: BINDER_SET_CONTEXT_MGR already set [ 237.373999][ T6662] binder: 6661:6662 ioctl 4018620d 200000000180 returned -16 [ 237.465983][ T6664] xt_hashlimit: size too large, truncated to 1048576 [ 237.472999][ T6664] xt_hashlimit: max too large, truncated to 1048576 [ 237.479967][ T6664] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 239.202252][ T6675] binder: 6674:6675 ioctl c0306201 2000000004c0 returned -22 [ 242.609205][ T6699] binder: BINDER_SET_CONTEXT_MGR already set [ 242.615747][ T6699] binder: 6698:6699 ioctl 4018620d 200000000180 returned -16 [ 245.054287][ T6713] binder: 6711:6713 ioctl c0306201 2000000004c0 returned -22 [ 245.071392][ T6714] overlayfs: missing 'lowerdir' [ 246.185393][ T6720] loop2: detected capacity change from 0 to 512 [ 246.249246][ T6720] EXT4-fs (loop2): unable to read superblock [ 248.398617][ T6734] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 248.715981][ T6742] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 250.128054][ T6734] team0 (unregistering): Port device team_slave_0 removed [ 251.064422][ T6734] team0 (unregistering): Port device team_slave_1 removed [ 251.925654][ T6762] mmap: syz.2.213 (6762) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 252.594973][ T28] audit: type=1326 audit(1790406282.996:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b6b9e159 code=0x7ffc0000 [ 253.207224][ T28] audit: type=1326 audit(1790406282.996:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f76b6b9e159 code=0x7ffc0000 [ 253.323575][ T28] audit: type=1326 audit(1790406282.996:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b6b9e159 code=0x7ffc0000 [ 253.358523][ T28] audit: type=1326 audit(1790406282.996:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76b6b5e98e code=0x7ffc0000 [ 253.408680][ T6769] loop0: detected capacity change from 0 to 164 [ 253.433159][ T28] audit: type=1326 audit(1790406283.006:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f76b6b9f457 code=0x7ffc0000 [ 253.499277][ T28] audit: type=1326 audit(1790406283.006:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76b6b9e159 code=0x7ffc0000 [ 253.524314][ T28] audit: type=1326 audit(1790406283.006:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f76b6b9f457 code=0x7ffc0000 [ 253.704861][ T28] audit: type=1326 audit(1790406283.006:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76b6b5e98e code=0x7ffc0000 [ 254.173891][ T28] audit: type=1326 audit(1790406283.016:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b6b9e159 code=0x7ffc0000 [ 254.415633][ T28] audit: type=1326 audit(1790406283.016:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76b6b9e159 code=0x7ffc0000 [ 256.187994][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.205515][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.975127][ T6821] loop1: detected capacity change from 0 to 512 [ 263.018477][ T6821] EXT4-fs: Ignoring removed nobh option [ 263.103611][ T6821] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.230: invalid indirect mapped block 256 (level 2) [ 263.212668][ T6821] EXT4-fs (loop1): 2 truncates cleaned up [ 263.241711][ T6821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.216257][ T6820] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.230: bg 0: block 5: invalid block bitmap [ 265.290336][ T6820] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 265.303607][ T6820] EXT4-fs (loop1): This should not happen!! Data will be lost [ 265.303607][ T6820] [ 265.313549][ T6820] EXT4-fs (loop1): Total free blocks count 0 [ 265.320071][ T6820] EXT4-fs (loop1): Free/Dirty block details [ 265.326120][ T6820] EXT4-fs (loop1): free_blocks=0 [ 265.331488][ T6820] EXT4-fs (loop1): dirty_blocks=33 [ 265.336657][ T6820] EXT4-fs (loop1): Block reservation details [ 265.342782][ T6820] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 265.662502][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.129412][ T6835] loop1: detected capacity change from 0 to 32768 [ 266.214167][ T6835] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.346221][ T6835] XFS (loop1): Ending clean mount [ 266.364879][ T6835] XFS (loop1): Quotacheck needed: Please wait. [ 266.430048][ T6835] XFS (loop1): Quotacheck: Done. [ 267.320470][ T5779] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 270.213623][ T6868] loop0: detected capacity change from 0 to 1024 [ 270.228394][ T6868] ext4: Bad value for 'min_batch_time' [ 270.767819][ T5820] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 271.021135][ T6129] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.032379][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 271.055561][ T5820] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 271.078428][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.103165][ T5820] usb 2-1: Product: syz [ 271.115058][ T5820] usb 2-1: Manufacturer: syz [ 271.278070][ T5820] usb 2-1: SerialNumber: syz [ 271.305313][ T5820] usb 2-1: config 0 descriptor?? [ 271.338082][ T5820] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 272.011049][ T5820] gspca_ov534_9: reg_w failed -110 [ 273.431754][ T6879] binder: BINDER_SET_CONTEXT_MGR already set [ 273.469937][ T6879] binder: 6878:6879 ioctl 4018620d 200000000180 returned -16 [ 274.875020][ T5820] gspca_ov534_9: Unknown sensor 0000 [ 274.875150][ T5820] ov534_9: probe of 2-1:0.0 failed with error -22 [ 274.950973][ T5820] usb 2-1: USB disconnect, device number 3 [ 275.246410][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 276.043041][ T6904] Bluetooth: MGMT ver 1.22 [ 276.191654][ T6906] loop1: detected capacity change from 0 to 164 [ 280.887954][ T6930] binder: BINDER_SET_CONTEXT_MGR already set [ 280.947185][ T6930] binder: 6929:6930 ioctl 4018620d 200000000180 returned -16 [ 281.357296][ T5790] Bluetooth: hci1: unexpected event for opcode 0x203d [ 287.140949][ T6954] netlink: 'syz.3.252': attribute type 29 has an invalid length. [ 287.170914][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 287.190987][ T6954] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 289.472206][ T6968] binder: 6967:6968 ioctl c0306201 2000000004c0 returned -22 [ 294.570115][ T6989] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 295.767465][ T7004] Bluetooth: MGMT ver 1.22 [ 295.794610][ T7004] xt_hashlimit: size too large, truncated to 1048576 [ 295.801544][ T7004] xt_hashlimit: max too large, truncated to 1048576 [ 297.918033][ T7021] binder: 7020:7021 ioctl c0306201 2000000004c0 returned -22 [ 298.734834][ T7006] syz.3.273 (7006): drop_caches: 2 [ 300.204356][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 300.393195][ T7041] syz.0.276: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 300.427541][ T7041] CPU: 0 PID: 7041 Comm: syz.0.276 Not tainted syzkaller #0 [ 300.434921][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.445005][ T7041] Call Trace: [ 300.448323][ T7041] [ 300.451302][ T7041] dump_stack_lvl+0x18c/0x250 [ 300.456039][ T7041] ? asm_sysvec_call_function_single+0x1a/0x20 [ 300.462253][ T7041] ? show_regs_print_info+0x20/0x20 [ 300.467528][ T7041] ? asm_sysvec_call_function_single+0x1a/0x20 [ 300.473775][ T7041] warn_alloc+0x246/0x340 [ 300.478147][ T7041] ? zone_watermark_ok_safe+0x230/0x230 [ 300.483742][ T7041] ? asan.module_dtor+0x20/0x20 [ 300.488685][ T7041] ? mark_lock+0x94/0x320 [ 300.493055][ T7041] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 300.499074][ T7041] __vmalloc_node_range+0x129/0x1320 [ 300.504405][ T7041] ? mark_lock+0x94/0x320 [ 300.508779][ T7041] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 300.514792][ T7041] ? trace_irq_disable+0x37/0xe0 [ 300.519779][ T7041] ? asm_sysvec_call_function_single+0x1a/0x20 [ 300.525972][ T7041] ? lockdep_hardirqs_on+0x98/0x150 [ 300.531201][ T7041] ? free_vm_area+0x50/0x50 [ 300.535753][ T7041] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 300.540821][ T7041] vmalloc+0x79/0x90 [ 300.544761][ T7041] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 300.549829][ T7041] dvb_dvr_do_ioctl+0x12e/0x220 [ 300.554745][ T7041] dvb_usercopy+0x195/0x2b0 [ 300.559294][ T7041] ? dvb_dvr_release+0x3e0/0x3e0 [ 300.564267][ T7041] ? dvb_generic_ioctl+0xb0/0xb0 [ 300.569257][ T7041] ? dvb_dvr_poll+0x230/0x230 [ 300.573968][ T7041] dvb_dvr_ioctl+0x29/0x30 [ 300.578420][ T7041] __se_sys_ioctl+0xfd/0x170 [ 300.583051][ T7041] do_syscall_64+0x55/0xb0 [ 300.587534][ T7041] ? clear_bhb_loop+0x40/0x90 [ 300.592263][ T7041] ? clear_bhb_loop+0x40/0x90 [ 300.597093][ T7041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.603084][ T7041] RIP: 0033:0x7f7c9f59e159 [ 300.607542][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.627182][ T7041] RSP: 002b:00007f7ca0471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.635629][ T7041] RAX: ffffffffffffffda RBX: 00007f7c9f826090 RCX: 00007f7c9f59e159 [ 300.643818][ T7041] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 300.651824][ T7041] RBP: 00007f7c9f63506b R08: 0000000000000000 R09: 0000000000000000 [ 300.659847][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.667867][ T7041] R13: 00007f7c9f826128 R14: 00007f7c9f826090 R15: 00007fff3965b3a8 [ 300.675975][ T7041] [ 300.685110][ T7041] Mem-Info: [ 300.698871][ T7041] active_anon:45591 inactive_anon:0 isolated_anon:0 [ 300.698871][ T7041] active_file:18090 inactive_file:40713 isolated_file:0 [ 300.698871][ T7041] unevictable:768 dirty:265 writeback:0 [ 300.698871][ T7041] slab_reclaimable:10687 slab_unreclaimable:90841 [ 300.698871][ T7041] mapped:24820 shmem:41369 pagetables:581 [ 300.698871][ T7041] sec_pagetables:0 bounce:0 [ 300.698871][ T7041] kernel_misc_reclaimable:0 [ 300.698871][ T7041] free:1306674 free_pcp:8580 free_cma:0 [ 300.746969][ T7041] Node 0 active_anon:182364kB inactive_anon:0kB active_file:72360kB inactive_file:162648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99280kB dirty:1056kB writeback:0kB shmem:163940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10808kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 300.779832][ T7041] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 300.815815][ T7041] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.844132][ T7041] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 300.851817][ T7041] Node 0 DMA32 free:1314680kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:182328kB inactive_anon:0kB active_file:72360kB inactive_file:161812kB unevictable:1536kB writepending:1056kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:17276kB local_pcp:3612kB free_cma:0kB [ 300.883105][ T7041] lowmem_reserve[]: 0 0 0 0 0 [ 300.892518][ T7041] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.919850][ T7041] lowmem_reserve[]: 0 0 0 0 0 [ 300.936999][ T7041] Node 1 Normal free:3896656kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:10656kB free_cma:0kB [ 300.969843][ T7041] lowmem_reserve[]: 0 0 0 0 0 [ 300.991221][ T7041] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.010838][ T7041] Node 0 DMA32: 332*4kB (UM) 425*8kB (UME) 214*16kB (UME) 269*32kB (UE) 75*64kB (UE) 27*128kB (UME) 64*256kB (UME) 61*512kB (UME) 31*1024kB (UM) 15*2048kB (UM) 288*4096kB (UM) = 1314744kB [ 301.065272][ T7041] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 301.090916][ T7041] Node 1 Normal: 270*4kB (UME) 67*8kB (UME) 42*16kB (UME) 109*32kB (UME) 35*64kB (UE) 6*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3896656kB [ 301.137028][ T7041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.146706][ T7041] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.168149][ T7041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.180148][ T7041] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.193860][ T7041] 100171 total pagecache pages [ 301.199776][ T7041] 0 pages in swap cache [ 301.206145][ T7041] Free swap = 124704kB [ 301.213011][ T7041] Total swap = 124996kB [ 301.226977][ T7041] 2097051 pages RAM [ 301.232143][ T7041] 0 pages HighMem/MovableOnly [ 301.239142][ T7041] 416965 pages reserved [ 301.247007][ T7041] 0 pages cma reserved [ 304.407606][ T7054] binder: 7053:7054 ioctl c0306201 2000000004c0 returned -22 [ 304.989973][ T7066] netlink: 'syz.2.280': attribute type 4 has an invalid length. [ 304.997799][ T7066] netlink: 17 bytes leftover after parsing attributes in process `syz.2.280'. [ 307.228675][ T7076] loop0: detected capacity change from 0 to 1024 [ 307.272889][ T7076] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 307.377489][ T7076] JBD2: no valid journal superblock found [ 307.392748][ T7076] EXT4-fs (loop0): Could not load journal inode [ 307.571314][ T7079] loop2: detected capacity change from 0 to 32768 [ 307.594973][ T7079] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.289 (7079) [ 307.673426][ T7079] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 307.684110][ T7079] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 307.693321][ T7079] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 307.703160][ T7079] BTRFS info (device loop2): use zstd compression, level 3 [ 307.710460][ T7079] BTRFS info (device loop2): force clearing of disk cache [ 307.717737][ T7079] BTRFS info (device loop2): enabling disk space caching [ 307.724862][ T7079] BTRFS info (device loop2): disk space caching is enabled [ 309.624282][ T7079] BTRFS info (device loop2): enabling ssd optimizations [ 309.632284][ T7079] BTRFS info (device loop2): auto enabling async discard [ 309.649784][ T7079] BTRFS info (device loop2): rebuilding free space tree [ 309.695136][ T7079] BTRFS info (device loop2): disabling free space tree [ 309.703545][ T7079] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 309.714149][ T7079] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 311.293222][ T5777] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 312.618539][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 313.079239][ T7117] binder: 7116:7117 ioctl c0306201 2000000004c0 returned -22 [ 313.415989][ T5820] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 313.651561][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 313.759959][ T5820] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 313.868096][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.977850][ T5820] usb 1-1: Product: syz [ 314.229584][ T5820] usb 1-1: Manufacturer: syz [ 314.234299][ T5820] usb 1-1: SerialNumber: syz [ 314.259115][ T5820] usb 1-1: config 0 descriptor?? [ 314.270905][ T5820] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 315.790568][ T5820] gspca_ov534_9: reg_w failed -71 [ 316.690909][ T7146] loop1: detected capacity change from 0 to 128 [ 317.652327][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.658977][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.676196][ T5820] gspca_ov534_9: Unknown sensor 0000 [ 317.676291][ T5820] ov534_9: probe of 1-1:0.0 failed with error -22 [ 317.868827][ T5820] usb 1-1: USB disconnect, device number 3 [ 318.865074][ T7166] veth2: entered allmulticast mode [ 319.995405][ T7176] IPVS: length: 170 != 24 [ 320.035346][ T7176] bridge_slave_0: left allmulticast mode [ 320.078063][ T7176] bridge_slave_0: left promiscuous mode [ 320.094429][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.190844][ T7176] bridge_slave_1: left allmulticast mode [ 320.320196][ T7176] bridge_slave_1: left promiscuous mode [ 321.168806][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.391226][ T7190] nvmet_rdma: address family 4 not supported [ 321.437662][ T7176] bond0: (slave bond_slave_0): Releasing backup interface [ 321.514503][ T7176] bond0: (slave bond_slave_1): Releasing backup interface [ 321.674434][ T62] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 321.705619][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 321.708514][ T7176] team0: Port device team_slave_0 removed [ 321.723423][ T62] (NULL device *): queue 0 connect admin queue failed (-6). [ 321.731537][ T62] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 321.740764][ T62] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 321.753658][ T7190] nvme nvme0: NVME-FC{0}: new ctrl: NQN "testsubsys" [ 321.791507][ T7176] team0: Port device team_slave_1 removed [ 321.828347][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.835952][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.919505][ T7176] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 321.926387][ T7176] batman_adv: batadv0: Removing interface: ipvlan2 [ 321.967507][ T7193] loop2: detected capacity change from 0 to 512 [ 321.977642][ T7193] EXT4-fs: Ignoring removed nobh option [ 322.049518][ T7193] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.311: invalid indirect mapped block 256 (level 2) [ 322.065962][ T7193] EXT4-fs (loop2): 2 truncates cleaned up [ 322.080580][ T7193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.297304][ T7195] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 323.472754][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.348307][ T1077] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 325.430489][ T8] (NULL device *): Create Association LS failed: Association Allocation Failed [ 325.477112][ T1077] (NULL device *): queue 0 connect admin queue failed (-6). [ 326.217142][ T1077] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 326.224847][ T1077] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 328.117826][ T7227] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 328.201296][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.319'. [ 329.528743][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 329.735124][ T27] (NULL device *): Create Association LS failed: Association Allocation Failed [ 329.786885][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 329.832777][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 329.878941][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 331.592769][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 331.937706][ T4505] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 331.980560][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 332.024343][ T4505] (NULL device *): queue 0 connect admin queue failed (-6). [ 332.078796][ T4505] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 332.141838][ T4505] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 333.348875][ T7256] IPv6: sit1: Disabled Multicast RS [ 333.793315][ T7261] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 334.618298][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 334.634136][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 334.643722][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 334.651433][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 334.659408][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 334.718380][ T7266] loop0: detected capacity change from 0 to 512 [ 334.725979][ T7266] EXT4-fs: Ignoring removed nobh option [ 334.819307][ T7266] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.323: invalid indirect mapped block 256 (level 2) [ 334.840450][ T7266] EXT4-fs (loop0): 2 truncates cleaned up [ 334.877947][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.428358][ T7265] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.323: bg 0: block 5: invalid block bitmap [ 337.217293][ T7268] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 337.234757][ T4505] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 337.254503][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 337.264175][ T4505] (NULL device *): queue 0 connect admin queue failed (-6). [ 337.272032][ T4505] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 337.281814][ T4505] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 337.290235][ T7265] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 337.302611][ T7265] EXT4-fs (loop0): This should not happen!! Data will be lost [ 337.302611][ T7265] [ 337.312576][ T7265] EXT4-fs (loop0): Total free blocks count 0 [ 337.318704][ T7265] EXT4-fs (loop0): Free/Dirty block details [ 337.324647][ T7265] EXT4-fs (loop0): free_blocks=0 [ 337.329700][ T7265] EXT4-fs (loop0): dirty_blocks=33 [ 337.334853][ T7265] EXT4-fs (loop0): Block reservation details [ 337.340930][ T7265] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 338.140453][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.608119][ T7290] [ 338.610523][ T7290] ====================================================== [ 338.617564][ T7290] WARNING: possible circular locking dependency detected [ 338.624786][ T7290] syzkaller #0 Not tainted [ 338.629220][ T7290] ------------------------------------------------------ [ 338.636252][ T7290] syz.1.336/7290 is trying to acquire lock: [ 338.642158][ T7290] ffffffff8ddf43f0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x71/0x4a0 [ 338.653428][ T7290] [ 338.653428][ T7290] but task is already holding lock: [ 338.660993][ T7290] ffff88807a43a4d0 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 338.671435][ T7290] [ 338.671435][ T7290] which lock already depends on the new lock. [ 338.671435][ T7290] [ 338.681859][ T7290] [ 338.681859][ T7290] the existing dependency chain (in reverse order) is: [ 338.690905][ T7290] [ 338.690905][ T7290] -> #3 (&sb->s_type->i_mutex_key#20){++++}-{3:3}: [ 338.699639][ T7290] down_write+0x97/0x200 [ 338.704522][ T7290] configfs_depend_item_unlocked+0x157/0x430 [ 338.711064][ T7290] usbg_make_tpg+0x1e1/0x550 [ 338.716231][ T7290] target_fabric_make_tpg+0xa4/0x6d0 [ 338.722105][ T7290] configfs_mkdir+0x515/0x9e0 [ 338.727339][ T7290] vfs_mkdir+0x2a5/0x470 [ 338.732129][ T7290] do_mkdirat+0x1dc/0x450 [ 338.737004][ T7290] __x64_sys_mkdirat+0x89/0xa0 [ 338.742314][ T7290] do_syscall_64+0x55/0xb0 [ 338.747280][ T7290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.753726][ T7290] [ 338.753726][ T7290] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 338.761663][ T7290] __mutex_lock+0x135/0xc80 [ 338.766717][ T7290] tcm_alloc_inst+0x65/0x190 [ 338.771870][ T7290] usb_get_function_instance+0xdd/0x2e0 [ 338.777963][ T7290] function_make+0x11c/0x350 [ 338.783102][ T7290] configfs_mkdir+0x515/0x9e0 [ 338.788330][ T7290] vfs_mkdir+0x2a5/0x470 [ 338.793117][ T7290] do_mkdirat+0x1dc/0x450 [ 338.797989][ T7290] __x64_sys_mkdirat+0x89/0xa0 [ 338.803320][ T7290] do_syscall_64+0x55/0xb0 [ 338.808301][ T7290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.814748][ T7290] [ 338.814748][ T7290] -> #1 (func_lock){+.+.}-{3:3}: [ 338.821908][ T7290] __mutex_lock+0x135/0xc80 [ 338.827074][ T7290] usb_get_function_instance+0x2e/0x2e0 [ 338.833171][ T7290] function_make+0x11c/0x350 [ 338.838315][ T7290] configfs_mkdir+0x515/0x9e0 [ 338.843628][ T7290] vfs_mkdir+0x2a5/0x470 [ 338.848411][ T7290] do_mkdirat+0x1dc/0x450 [ 338.853285][ T7290] __x64_sys_mkdirat+0x89/0xa0 [ 338.858596][ T7290] do_syscall_64+0x55/0xb0 [ 338.863568][ T7290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.870011][ T7290] [ 338.870011][ T7290] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 338.878289][ T7290] __lock_acquire+0x37ef/0x7d80 [ 338.883690][ T7290] lock_acquire+0x19e/0x420 [ 338.888738][ T7290] __mutex_lock+0x135/0xc80 [ 338.893815][ T7290] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 338.900546][ T7290] configfs_symlink+0x5a5/0xfe0 [ 338.905946][ T7290] vfs_symlink+0x138/0x2b0 [ 338.910909][ T7290] do_symlinkat+0x1ba/0x400 [ 338.915961][ T7290] __x64_sys_symlinkat+0x99/0xb0 [ 338.921468][ T7290] do_syscall_64+0x55/0xb0 [ 338.926436][ T7290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.932885][ T7290] [ 338.932885][ T7290] other info that might help us debug this: [ 338.932885][ T7290] [ 338.943132][ T7290] Chain exists of: [ 338.943132][ T7290] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#20 [ 338.943132][ T7290] [ 338.958148][ T7290] Possible unsafe locking scenario: [ 338.958148][ T7290] [ 338.965636][ T7290] CPU0 CPU1 [ 338.971034][ T7290] ---- ---- [ 338.976415][ T7290] lock(&sb->s_type->i_mutex_key#20); [ 338.981912][ T7290] lock(tpg_instances_lock); [ 338.989147][ T7290] lock(&sb->s_type->i_mutex_key#20); [ 338.997164][ T7290] lock(gadget_subsys.su_mutex); [ 339.002222][ T7290] [ 339.002222][ T7290] *** DEADLOCK *** [ 339.002222][ T7290] [ 339.010391][ T7290] 2 locks held by syz.1.336/7290: [ 339.015439][ T7290] #0: ffff888140efa418 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 339.024722][ T7290] #1: ffff88807a43a4d0 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 339.035651][ T7290] [ 339.035651][ T7290] stack backtrace: [ 339.041561][ T7290] CPU: 1 PID: 7290 Comm: syz.1.336 Not tainted syzkaller #0 [ 339.048894][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.058994][ T7290] Call Trace: [ 339.062302][ T7290] [ 339.065257][ T7290] dump_stack_lvl+0x18c/0x250 [ 339.069973][ T7290] ? load_image+0x420/0x420 [ 339.074517][ T7290] ? show_regs_print_info+0x20/0x20 [ 339.079788][ T7290] ? print_circular_bug+0x12b/0x1a0 [ 339.085053][ T7290] check_noncircular+0x2fc/0x400 [ 339.090028][ T7290] ? print_deadlock_bug+0x5d0/0x5d0 [ 339.095256][ T7290] ? lockdep_lock+0xf5/0x230 [ 339.099884][ T7290] ? _find_first_zero_bit+0xd6/0x100 [ 339.105202][ T7290] __lock_acquire+0x37ef/0x7d80 [ 339.110092][ T7290] ? __lock_acquire+0x1336/0x7d80 [ 339.115147][ T7290] ? verify_lock_unused+0x140/0x140 [ 339.120389][ T7290] lock_acquire+0x19e/0x420 [ 339.124939][ T7290] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 339.131308][ T7290] ? __might_sleep+0xe0/0xe0 [ 339.135932][ T7290] ? read_lock_is_recursive+0x20/0x20 [ 339.141338][ T7290] __mutex_lock+0x135/0xc80 [ 339.145871][ T7290] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 339.152233][ T7290] ? __might_sleep+0xe0/0xe0 [ 339.156857][ T7290] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 339.163222][ T7290] ? read_lock_is_recursive+0x20/0x20 [ 339.168653][ T7290] ? mutex_lock_nested+0x20/0x20 [ 339.173960][ T7290] ? configfs_symlink+0x469/0xfe0 [ 339.179033][ T7290] ? make_vfsuid+0x67/0xb0 [ 339.183486][ T7290] ? generic_permission+0x1ed/0x590 [ 339.188728][ T7290] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 339.194921][ T7290] ? inode_permission+0xf3/0x480 [ 339.199882][ T7290] ? bpf_lsm_inode_permission+0x9/0x10 [ 339.205366][ T7290] ? security_inode_permission+0xb0/0xf0 [ 339.211030][ T7290] configfs_symlink+0x5a5/0xfe0 [ 339.215910][ T7290] ? from_kgid+0x153/0x6a0 [ 339.220360][ T7290] ? generic_permission+0x1ed/0x590 [ 339.225578][ T7290] ? detach_groups+0x370/0x370 [ 339.230369][ T7290] ? inode_permission+0xf3/0x480 [ 339.235343][ T7290] ? bpf_lsm_inode_symlink+0x9/0x10 [ 339.240565][ T7290] ? security_inode_symlink+0xb6/0x100 [ 339.246062][ T7290] vfs_symlink+0x138/0x2b0 [ 339.250522][ T7290] do_symlinkat+0x1ba/0x400 [ 339.255071][ T7290] ? vfs_symlink+0x2b0/0x2b0 [ 339.259697][ T7290] __x64_sys_symlinkat+0x99/0xb0 [ 339.264675][ T7290] do_syscall_64+0x55/0xb0 [ 339.269124][ T7290] ? clear_bhb_loop+0x40/0x90 [ 339.273830][ T7290] ? clear_bhb_loop+0x40/0x90 [ 339.278540][ T7290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.284466][ T7290] RIP: 0033:0x7f3bb119e159 [ 339.288910][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.308541][ T7290] RSP: 002b:00007f3bb1fd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 339.316987][ T7290] RAX: ffffffffffffffda RBX: 00007f3bb1425fa0 RCX: 00007f3bb119e159 [ 339.324988][ T7290] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 339.332983][ T7290] RBP: 00007f3bb123506b R08: 0000000000000000 R09: 0000000000000000 [ 339.340977][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.348996][ T7290] R13: 00007f3bb1426038 R14: 00007f3bb1425fa0 R15: 00007fff303d0b68 [ 339.357009][ T7290] [ 339.373015][ T5961] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 339.410866][ T8] (NULL device *): Create Association LS failed: Association Allocation Failed [ 339.448396][ T5961] (NULL device *): queue 0 connect admin queue failed (-6). [ 339.455961][ T5961] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 339.463881][ T5961] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 339.628572][ T7295] ipvlan2: entered allmulticast mode [ 339.638950][ T7295] macvlan1: entered allmulticast mode [ 339.644523][ T7295] veth1_vlan: entered allmulticast mode [ 339.710832][ T7295] batman_adv: batadv0: Adding interface: ipvlan2 [ 339.730364][ T7295] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.767769][ T7295] batman_adv: batadv0: Interface activated: ipvlan2 [ 341.687118][ T5961] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 341.704356][ T8] (NULL device *): Create Association LS failed: Association Allocation Failed [ 341.713554][ T5961] (NULL device *): queue 0 connect admin queue failed (-6). [ 341.721020][ T5961] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 341.728655][ T5961] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 343.777185][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 343.790905][ T23] (NULL device *): Create Association LS failed: Association Allocation Failed [ 343.800805][ T50] (NULL device *): queue 0 connect admin queue failed (-6). [ 343.808225][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 343.815827][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 345.847210][ T11] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 345.861888][ T5822] (NULL device *): Create Association LS failed: Association Allocation Failed [ 345.870998][ T11] (NULL device *): queue 0 connect admin queue failed (-6). [ 345.878376][ T11] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 345.885950][ T11] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 347.927427][ T4505] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 347.943935][ T23] (NULL device *): Create Association LS failed: Association Allocation Failed [ 347.953082][ T4505] (NULL device *): queue 0 connect admin queue failed (-6). [ 347.960479][ T4505] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 347.968141][ T4505] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds