last executing test programs: 1m23.491847829s ago: executing program 0 (id=332): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = getpgrp(0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000bff, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000240), 0x8, 0x16, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0xb, 0x1, 0x4f424752, 0x2, 0x11, 0x5, 0x1, 0xa, 0x0, 0x1, 0x0, 0x4}}) r6 = semget$private(0x0, 0x7, 0x191) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000280)=[0x0]) socket$rxrpc(0x21, 0x2, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002e0001dfff0000000000000022dba6f4e5409b7c2756571c4c7c83e5e0ef6921be3d3c2adaa30e997b50d579acce494d53ab9cbfdb907436d56d6d6facc8cd30c207e52903c861a13998a32b35cf3b85032fcccb182165c5efb10c44ba210a81e28c02e5796d5bb95fd16452a3c5e5e0bcc0e2ab14", @ANYRES32, @ANYBLOB="100011800c00238008002b00", @ANYRES32=0x0, @ANYBLOB], 0x28}], 0x1}, 0x0) 1m21.891076968s ago: executing program 0 (id=333): socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) gettid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000000c0)={0x18, r2}) 1m16.177299161s ago: executing program 0 (id=338): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x18) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x80008, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00) 1m14.550990114s ago: executing program 0 (id=340): open(0x0, 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m10.129675637s ago: executing program 0 (id=345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timerfd_create(0x8, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001540)={'vxcan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280056baa6d06ab8f61921f1689f3900007000010000000000000000000700ac8b", @ANYRES32=r11, @ANYBLOB="10000180040004800800010000400300"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x7c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc091}, 0x20000001) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m3.760414739s ago: executing program 0 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000140)={r7, @in={{0x2, 0x4e22, @empty}}, [0x4, 0x0, 0xffffffffffff0000, 0x2, 0x9, 0x100000000, 0xef, 0x9, 0x8, 0x1ff, 0x10000, 0x2, 0x9, 0x7, 0x6]}, &(0x7f0000000240)=0x100) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000340)={'aio_iiro_16\x00', [0x8005, 0xb, 0x0, 0x7a55f50e, 0x27, 0xcc6, 0xb, 0x7, 0x3, 0xff, 0x0, 0x0, 0x4000000a, 0x6, 0xa991, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x9, 0x5, 0x0, 0x4fa7f95b, 0x5, 0x514b]}) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 59.955516366s ago: executing program 32 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000140)={r7, @in={{0x2, 0x4e22, @empty}}, [0x4, 0x0, 0xffffffffffff0000, 0x2, 0x9, 0x100000000, 0xef, 0x9, 0x8, 0x1ff, 0x10000, 0x2, 0x9, 0x7, 0x6]}, &(0x7f0000000240)=0x100) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000340)={'aio_iiro_16\x00', [0x8005, 0xb, 0x0, 0x7a55f50e, 0x27, 0xcc6, 0xb, 0x7, 0x3, 0xff, 0x0, 0x0, 0x4000000a, 0x6, 0xa991, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x9, 0x5, 0x0, 0x4fa7f95b, 0x5, 0x514b]}) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 18.706138232s ago: executing program 4 (id=521): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c4932", 0x1f) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000100)={[{@numtail}, {@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@shortname_lower}, {@fat=@tz_utc}]}, 0x1, 0x360, &(0x7f0000000900)="$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") socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, 0x0) 17.235422181s ago: executing program 4 (id=525): r0 = socket(0x2000000015, 0x80005, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101840, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0xffff0001) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) open(0x0, 0x56042, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) socket(0x1e, 0x4, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 16.311931406s ago: executing program 4 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400000a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 15.327537078s ago: executing program 4 (id=540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000480), 0x1, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) syz_clone(0x61804400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), 0xffffffffffffffff) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) 14.333050497s ago: executing program 4 (id=550): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000180)="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", 0x498}], 0x1}, 0x20008804) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 13.491959422s ago: executing program 4 (id=556): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0) 12.958505058s ago: executing program 33 (id=556): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0) 8.908028038s ago: executing program 1 (id=586): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/94, 0x5e}, 0xcce1}], 0x1, 0x20, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="b5", 0x1}, {&(0x7f0000000500)="c76076cc31820ed25ef8c60987c6eb9f040ca6812011ef4f9647f88951a50c3b", 0x20}], 0x2}}], 0x2, 0x4001) 8.643910306s ago: executing program 1 (id=588): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000005cfddaebe3d100000500"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56741, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.768037793s ago: executing program 1 (id=595): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/94, 0x5e}, 0xcce1}], 0x1, 0x20, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="b5", 0x1}, {&(0x7f0000000500)="c76076cc31820ed25ef8c60987c6eb9f040ca6812011ef4f9647f88951a50c3b", 0x20}], 0x2}}], 0x2, 0x4001) 7.593554853s ago: executing program 1 (id=597): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000380)=0x4) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000300)={0x0, 0x7734, 0x1, 0x1, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.377545442s ago: executing program 3 (id=599): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="010026bd7000fcdbdf251b00000010002e800c003f426ad39b34683caaaa0c00060001"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000002c0)={[{@nombcache}, {@inlinecrypt}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}, {@minixdf}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") r2 = syz_pidfd_open(0x0, 0x0) pread64(r2, &(0x7f00000021c0)=""/4096, 0x1000, 0x62) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000140)=0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fadvise64(r4, 0x9, 0x9, 0x5) 7.23980479s ago: executing program 1 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b9a6, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) 6.542926428s ago: executing program 3 (id=605): r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x4004550d, 0x0) 6.162809891s ago: executing program 3 (id=607): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3ff, 0x121000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/125) 5.971923246s ago: executing program 3 (id=608): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000380)=0x4) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000300)={0x0, 0x7734, 0x1, 0x1, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.865433661s ago: executing program 3 (id=609): r0 = syz_io_uring_setup(0x3c3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x1f}, &(0x7f00000008c0)=0x0, &(0x7f0000000180)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 5.490562025s ago: executing program 3 (id=611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4100, 0x1004}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 4.079959547s ago: executing program 2 (id=619): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.615721639s ago: executing program 2 (id=620): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 3.224082028s ago: executing program 2 (id=621): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000200)=""/94, 0x5e}, 0xcce1}], 0x1, 0x20, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="b5", 0x1}, {&(0x7f0000000500)="c76076cc31820ed25ef8c60987c6eb9f040ca6812011ef4f9647f88951a50c3b", 0x20}], 0x2}}], 0x2, 0x4001) 3.075794394s ago: executing program 2 (id=622): mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1800, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, r4, 0x321, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) 373.140467ms ago: executing program 1 (id=623): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x1, @random="3bd6b1fa3104", 'ip6gretap0\x00'}}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") 230.179364ms ago: executing program 2 (id=624): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000380)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000100)=0xffffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 70.986079][ T5755] cgroup: Unknown subsys name 'net' [ 71.116773][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.762913][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.769636][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.876947][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.563722][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.567580][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.594993][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.600763][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.603046][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.618480][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.619615][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.625870][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.635840][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.647959][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.649664][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.657513][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.664597][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.669412][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.676535][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.684618][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.698077][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.706045][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.716706][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.730133][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.733246][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.754574][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.762969][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.770735][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.162497][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 75.261382][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 75.284911][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 75.363836][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 75.402075][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.409626][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.416959][ T5767] bridge_slave_0: entered allmulticast mode [ 75.424210][ T5767] bridge_slave_0: entered promiscuous mode [ 75.438909][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.446139][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.453576][ T5767] bridge_slave_1: entered allmulticast mode [ 75.461033][ T5767] bridge_slave_1: entered promiscuous mode [ 75.535504][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.543043][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.550446][ T5769] bridge_slave_0: entered allmulticast mode [ 75.557346][ T5769] bridge_slave_0: entered promiscuous mode [ 75.580789][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.594091][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.603611][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.611911][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.619968][ T5769] bridge_slave_1: entered allmulticast mode [ 75.626884][ T5769] bridge_slave_1: entered promiscuous mode [ 75.682320][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.689946][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.697278][ T5766] bridge_slave_0: entered allmulticast mode [ 75.704474][ T5766] bridge_slave_0: entered promiscuous mode [ 75.713558][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.720782][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.728306][ T5766] bridge_slave_1: entered allmulticast mode [ 75.735545][ T5766] bridge_slave_1: entered promiscuous mode [ 75.757849][ T5767] team0: Port device team_slave_0 added [ 75.776523][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.798675][ T5767] team0: Port device team_slave_1 added [ 75.826378][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.857558][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.871191][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.888904][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.897609][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.905278][ T5768] bridge_slave_0: entered allmulticast mode [ 75.913071][ T5768] bridge_slave_0: entered promiscuous mode [ 75.922821][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.930169][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.937299][ T5768] bridge_slave_1: entered allmulticast mode [ 75.944652][ T5768] bridge_slave_1: entered promiscuous mode [ 75.953130][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.960514][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.987046][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.039772][ T5769] team0: Port device team_slave_0 added [ 76.046373][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.056273][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.082800][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.096585][ T5766] team0: Port device team_slave_0 added [ 76.107560][ T5769] team0: Port device team_slave_1 added [ 76.137978][ T5766] team0: Port device team_slave_1 added [ 76.168452][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.201083][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.221557][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.228537][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.258938][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.273522][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.280562][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.307020][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.328097][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.335105][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.361517][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.408517][ T5767] hsr_slave_0: entered promiscuous mode [ 76.415409][ T5767] hsr_slave_1: entered promiscuous mode [ 76.431192][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.438177][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.464887][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.479744][ T5768] team0: Port device team_slave_0 added [ 76.488371][ T5768] team0: Port device team_slave_1 added [ 76.565241][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.575358][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.603919][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.622359][ T5766] hsr_slave_0: entered promiscuous mode [ 76.628659][ T5766] hsr_slave_1: entered promiscuous mode [ 76.635318][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.643148][ T5766] Cannot create hsr debugfs directory [ 76.672761][ T5769] hsr_slave_0: entered promiscuous mode [ 76.679513][ T5769] hsr_slave_1: entered promiscuous mode [ 76.685678][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.693421][ T5769] Cannot create hsr debugfs directory [ 76.702291][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.709321][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.720051][ T5781] Bluetooth: hci0: command tx timeout [ 76.736006][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.799357][ T5781] Bluetooth: hci1: command tx timeout [ 76.799534][ T5777] Bluetooth: hci3: command tx timeout [ 76.879329][ T5777] Bluetooth: hci2: command tx timeout [ 76.935850][ T5768] hsr_slave_0: entered promiscuous mode [ 76.945059][ T5768] hsr_slave_1: entered promiscuous mode [ 76.951446][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.959064][ T5768] Cannot create hsr debugfs directory [ 77.239981][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.264144][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.288737][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.308790][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.357092][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.402478][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.427670][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.437631][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.509529][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.527332][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.545068][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.594527][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.616398][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.628587][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.639235][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.652562][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.746498][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.766268][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.824585][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.858962][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.866397][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.903884][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.911260][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.926224][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.970744][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.978164][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.000488][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.021709][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.028883][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.096374][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.135717][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.154810][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.202665][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.209969][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.228316][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.236213][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.265809][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.273034][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.287890][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.295147][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.488906][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.532740][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.687530][ T5766] veth0_vlan: entered promiscuous mode [ 78.742128][ T5766] veth1_vlan: entered promiscuous mode [ 78.777392][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.801039][ T5777] Bluetooth: hci0: command tx timeout [ 78.854963][ T5766] veth0_macvtap: entered promiscuous mode [ 78.879563][ T5777] Bluetooth: hci1: command tx timeout [ 78.888221][ T5766] veth1_macvtap: entered promiscuous mode [ 78.890730][ T5777] Bluetooth: hci3: command tx timeout [ 78.960276][ T5777] Bluetooth: hci2: command tx timeout [ 78.986507][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.015747][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.034018][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.044468][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.053869][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.063402][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.075460][ T5767] veth0_vlan: entered promiscuous mode [ 79.102296][ T5767] veth1_vlan: entered promiscuous mode [ 79.150842][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.175880][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.258128][ T5767] veth0_macvtap: entered promiscuous mode [ 79.296904][ T2938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.321153][ T2938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.321423][ T5767] veth1_macvtap: entered promiscuous mode [ 79.402123][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.404784][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.422615][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.427985][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.451680][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.460856][ T5768] veth0_vlan: entered promiscuous mode [ 79.468579][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.480266][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.491484][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.528054][ T5768] veth1_vlan: entered promiscuous mode [ 79.548086][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.557150][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.567249][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.576354][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.588270][ T5769] veth0_vlan: entered promiscuous mode [ 79.692516][ T5769] veth1_vlan: entered promiscuous mode [ 79.732649][ T5768] veth0_macvtap: entered promiscuous mode [ 79.765457][ T5768] veth1_macvtap: entered promiscuous mode [ 79.823963][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.832188][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.858076][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.877658][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.888227][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.900320][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.912750][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.959984][ T5769] veth0_macvtap: entered promiscuous mode [ 79.972783][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.992698][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.005354][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.023874][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.038934][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.109557][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.117791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.124716][ T5769] veth1_macvtap: entered promiscuous mode [ 80.138154][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.147253][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.156952][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.167086][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.243638][ T5833] Zero length message leads to an empty skb [ 80.306827][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.321940][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.332796][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.343681][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.354453][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.366415][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.378981][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.426527][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.455626][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.467966][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.478663][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.498544][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.510285][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.526223][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.555602][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.567880][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.584107][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.604098][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.648441][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.678234][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.789826][ T5839] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.959658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.988980][ T5777] Bluetooth: hci0: command tx timeout [ 80.994760][ T5777] Bluetooth: hci3: command tx timeout [ 81.000488][ T5781] Bluetooth: hci1: command tx timeout [ 81.039738][ T5779] Bluetooth: hci2: command tx timeout [ 81.080683][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.809134][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.980908][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.122946][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.159149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.271824][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.299571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.332352][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.569113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 82.671348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.039534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.764610][ T5779] Bluetooth: hci3: command tx timeout [ 83.770291][ T5779] Bluetooth: hci1: command tx timeout [ 83.775732][ T5779] Bluetooth: hci0: command tx timeout [ 83.781404][ T5777] Bluetooth: hci2: command tx timeout [ 83.919552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.929172][ T5854] ======================================================= [ 83.929172][ T5854] WARNING: The mand mount option has been deprecated and [ 83.929172][ T5854] and is ignored by this kernel. Remove the mand [ 83.929172][ T5854] option from the mount to silence this warning. [ 83.929172][ T5854] ======================================================= [ 83.968575][ T5857] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 83.979733][ T5854] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.337494][ T5860] syzkaller0: entered promiscuous mode [ 84.442030][ T5860] syzkaller0: entered allmulticast mode [ 85.478705][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.680329][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 85.716896][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.762904][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.783412][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 85.804411][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.810384][ T5865] netlink: 'syz.3.9': attribute type 13 has an invalid length. [ 85.829525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.838262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.848826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.972984][ T9] usb 1-1: Product: syz [ 86.019086][ T9] usb 1-1: Manufacturer: syz [ 86.032773][ T9] usb 1-1: SerialNumber: syz [ 86.065600][ T9] usb 1-1: config 0 descriptor?? [ 86.223749][ T5874] random: crng reseeded on system resumption [ 87.270919][ T786] cfg80211: failed to load regulatory.db [ 87.517743][ T5810] usb 1-1: USB disconnect, device number 2 [ 90.333769][ T5891] netlink: 'syz.1.15': attribute type 6 has an invalid length. [ 90.972114][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.781091][ T5924] random: crng reseeded on system resumption [ 98.014309][ T5927] netlink: 'syz.2.23': attribute type 13 has an invalid length. [ 101.127870][ T5950] comedi comedi3: Buffer allocation failed [ 112.397870][ T5999] bridge0: port 3(syz_tun) entered blocking state [ 112.410614][ T5999] bridge0: port 3(syz_tun) entered disabled state [ 112.422215][ T5999] syz_tun: entered allmulticast mode [ 112.444877][ T5999] syz_tun: entered promiscuous mode [ 112.537527][ T5999] bridge0: port 3(syz_tun) entered blocking state [ 112.544395][ T5999] bridge0: port 3(syz_tun) entered forwarding state [ 112.554425][ T5981] syz.2.35 (5981): drop_caches: 2 [ 112.620316][ T6006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.689548][ T6012] random: crng reseeded on system resumption [ 118.793907][ T6051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.215501][ T6054] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.766072][ T6063] comedi comedi3: Buffer allocation failed [ 125.081834][ T6071] tipc: Started in network mode [ 125.086906][ T6071] tipc: Node identity 66801a90c7ce, cluster identity 4711 [ 125.131800][ T6071] tipc: Enabled bearer , priority 0 [ 125.174790][ T6073] tipc: Resetting bearer [ 125.296004][ T6069] tipc: Disabling bearer [ 126.528378][ T6081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.947841][ T6119] comedi comedi3: Buffer allocation failed [ 133.203600][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.219094][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.552550][ T6128] random: crng reseeded on system resumption [ 141.347947][ T6165] tipc: Started in network mode [ 141.362494][ T6165] tipc: Node identity 2e48e37eb8a5, cluster identity 4711 [ 141.371224][ T6165] tipc: Enabled bearer , priority 0 [ 141.410125][ T6165] syzkaller0: entered promiscuous mode [ 141.416404][ T6165] syzkaller0: entered allmulticast mode [ 141.676875][ T6165] tipc: Resetting bearer [ 141.773278][ T6164] tipc: Resetting bearer [ 141.847539][ T6164] tipc: Disabling bearer [ 143.175003][ T6183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.588949][ T6191] random: crng reseeded on system resumption [ 147.469373][ T6195] comedi comedi3: Buffer allocation failed [ 148.637177][ T6200] random: crng reseeded on system resumption [ 155.471154][ T6249] netlink: 'syz.2.100': attribute type 6 has an invalid length. [ 155.972908][ T6237] syz.3.97 (6237): drop_caches: 2 [ 159.416985][ T6275] bridge0: port 3(syz_tun) entered blocking state [ 159.423806][ T6275] bridge0: port 3(syz_tun) entered disabled state [ 159.430571][ T6275] syz_tun: entered allmulticast mode [ 159.436858][ T6275] syz_tun: entered promiscuous mode [ 159.442517][ T6275] bridge0: port 3(syz_tun) entered blocking state [ 159.449744][ T6275] bridge0: port 3(syz_tun) entered forwarding state [ 160.132141][ T6280] netlink: 'syz.3.110': attribute type 13 has an invalid length. [ 161.470047][ T6299] random: crng reseeded on system resumption [ 162.454041][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 162.463801][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 162.781755][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 162.787971][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 162.805247][ T6295] ceph: No mds server is up or the cluster is laggy [ 163.632279][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 163.640961][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 164.782976][ T6324] tipc: Started in network mode [ 164.788021][ T6324] tipc: Node identity 5a208c19eb4d, cluster identity 4711 [ 164.797267][ T6324] tipc: Enabled bearer , priority 0 [ 164.810660][ T6324] syzkaller0: entered promiscuous mode [ 164.816408][ T6324] syzkaller0: entered allmulticast mode [ 164.837374][ T6324] tipc: Resetting bearer [ 164.857523][ T6323] tipc: Resetting bearer [ 164.935518][ T6323] tipc: Disabling bearer [ 165.231644][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 165.237678][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 165.390438][ T6307] syz.3.116 (6307): drop_caches: 2 [ 167.171012][ T6335] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 167.707622][ T6337] ceph: No mds server is up or the cluster is laggy [ 167.714677][ T1189] libceph: connect (1)[c::]:6789 error -101 [ 167.775918][ T1189] libceph: mon0 (1)[c::]:6789 connect error [ 170.282716][ T6357] comedi comedi3: Buffer allocation failed [ 171.499691][ T6360] random: crng reseeded on system resumption [ 172.209177][ T1189] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 172.502522][ T1189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.530332][ T1189] usb 1-1: not running at top speed; connect to a high speed hub [ 172.651440][ T1189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.981035][ T1189] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.497944][ T1189] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.508047][ T1189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.519933][ T1189] usb 1-1: Product: syz [ 173.524270][ T1189] usb 1-1: Manufacturer: syz [ 173.528915][ T1189] usb 1-1: SerialNumber: syz [ 173.803872][ T1189] usb 1-1: 0:2 : does not exist [ 174.224163][ T1189] usb 1-1: USB disconnect, device number 3 [ 174.636449][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.716796][ T6394] random: crng reseeded on system resumption [ 177.939274][ T6405] netlink: 'syz.3.137': attribute type 6 has an invalid length. [ 182.791295][ T6414] ceph: No mds server is up or the cluster is laggy [ 182.801553][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 182.888844][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 183.277160][ T8] libceph: connect (1)[c::]:6789 error -101 [ 183.303447][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 187.370665][ T6449] comedi comedi3: Buffer allocation failed [ 189.302229][ T6466] netlink: 'syz.1.153': attribute type 6 has an invalid length. [ 189.979685][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 189.993954][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 190.015116][ T6456] ceph: No mds server is up or the cluster is laggy [ 190.943501][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 190.969394][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 193.362844][ T6492] random: crng reseeded on system resumption [ 195.153724][ T6497] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 196.101284][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.108480][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.525389][ T6514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 201.617827][ T6518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.563783][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 202.570164][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 202.571008][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 202.576194][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 203.972790][ T6527] random: crng reseeded on system resumption [ 205.494555][ T6533] netlink: 'syz.1.166': attribute type 6 has an invalid length. [ 209.070110][ T6545] comedi comedi3: Buffer allocation failed [ 210.000713][ T6553] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 212.153385][ T6558] netlink: 'syz.0.176': attribute type 6 has an invalid length. [ 216.388086][ T6577] netlink: 'syz.0.178': attribute type 13 has an invalid length. [ 219.885284][ T6598] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 222.060192][ T6606] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 223.477101][ T6609] syz.3.183[6609]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 223.880019][ T6614] netlink: 'syz.1.185': attribute type 6 has an invalid length. [ 224.444609][ T6615] netlink: 'syz.3.188': attribute type 6 has an invalid length. [ 229.235634][ T6622] syz.1.189 (6622): drop_caches: 2 [ 231.124596][ T6650] netlink: 'syz.1.195': attribute type 13 has an invalid length. [ 232.502560][ T6661] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 234.069585][ T5810] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 234.279091][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 234.293604][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.304098][ T5810] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.334547][ T5810] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.344076][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.357475][ T5810] usb 1-1: Product: syz [ 234.363732][ T5810] usb 1-1: Manufacturer: syz [ 234.368844][ T5810] usb 1-1: SerialNumber: syz [ 234.443758][ T5810] usb 1-1: config 0 descriptor?? [ 235.833977][ T786] usb 1-1: USB disconnect, device number 4 [ 236.202241][ T6681] netlink: 'syz.2.198': attribute type 6 has an invalid length. [ 236.960079][ T6682] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.163391][ T6695] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 241.696683][ T6699] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 249.153333][ T6732] netlink: 'syz.2.215': attribute type 13 has an invalid length. [ 250.361060][ T6743] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 252.136141][ T6750] netlink: 'syz.0.217': attribute type 6 has an invalid length. [ 256.049403][ T6773] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 256.139484][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.145800][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.056142][ T6833] netlink: 'syz.1.230': attribute type 6 has an invalid length. [ 273.301325][ T6864] fuse: Bad value for 'fd' [ 273.991418][ T6873] netlink: 'syz.2.250': attribute type 6 has an invalid length. [ 278.169040][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 278.780724][ T6903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 279.911310][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 279.920791][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.948124][ T8] usb 1-1: config 0 descriptor?? [ 280.202620][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 280.219906][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 280.360287][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 280.450355][ T8] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 280.500755][ T8] [drm] Initialized udl on minor 2 [ 280.518806][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.539997][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 280.589897][ T786] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.621803][ T8] usb 1-1: USB disconnect, device number 5 [ 280.788870][ T786] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 282.742154][ T6921] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 285.279632][ T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 285.482434][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.499761][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 285.543115][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.568096][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.629963][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.666947][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.676961][ T8] usb 3-1: Product: syz [ 285.685583][ T8] usb 3-1: Manufacturer: syz [ 285.695736][ T8] usb 3-1: SerialNumber: syz [ 286.011925][ T8] usb 3-1: 0:2 : does not exist [ 286.098397][ T8] usb 3-1: USB disconnect, device number 2 [ 286.519476][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 286.744376][ T5812] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 286.790525][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.955515][ T5812] usb 4-1: config 0 descriptor?? [ 287.438896][ T5812] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 287.447785][ T5812] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 287.498213][ T5812] [drm:udl_init] *ERROR* Selecting channel failed [ 288.039251][ T5812] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 288.049105][ T5812] [drm] Initialized udl on minor 2 [ 288.055984][ T5812] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.064814][ T5812] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 288.073340][ T5811] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.084880][ T5811] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 288.099174][ T5812] usb 4-1: USB disconnect, device number 2 [ 290.373219][ T6960] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 293.486000][ T6975] tipc: Enabled bearer , priority 0 [ 293.522322][ T6975] syzkaller0: entered promiscuous mode [ 293.572103][ T6975] syzkaller0: entered allmulticast mode [ 293.726217][ T6975] tipc: Resetting bearer [ 293.798138][ T6974] tipc: Resetting bearer [ 294.432686][ T6974] tipc: Disabling bearer [ 296.432200][ T5781] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 296.499016][ T5810] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 296.713333][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.739701][ T5810] usb 4-1: not running at top speed; connect to a high speed hub [ 296.777417][ T5810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.788251][ T5810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.859859][ T5810] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.877809][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.904469][ T5810] usb 4-1: Product: syz [ 296.909312][ T5810] usb 4-1: Manufacturer: syz [ 296.914356][ T5810] usb 4-1: SerialNumber: syz [ 297.364173][ T5810] usb 4-1: 0:2 : does not exist [ 297.414401][ T5810] usb 4-1: USB disconnect, device number 3 [ 297.508504][ T6721] udevd[6721]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.007775][ T6986] syz.0.276 (6986): drop_caches: 2 [ 298.505196][ T7011] netlink: 'syz.3.288': attribute type 6 has an invalid length. [ 298.929486][ T7014] tipc: Enabled bearer , priority 0 [ 298.947270][ T7014] syzkaller0: entered promiscuous mode [ 298.966259][ T7014] syzkaller0: entered allmulticast mode [ 299.345383][ T7014] tipc: Resetting bearer [ 299.564137][ T7012] tipc: Resetting bearer [ 300.275813][ T7022] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.225397][ T7012] tipc: Disabling bearer [ 301.312639][ T5830] tipc: Node number set to 2976746521 [ 303.049202][ T7040] netlink: 'syz.3.297': attribute type 6 has an invalid length. [ 304.466944][ T7047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 311.093950][ T7085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 312.169133][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 312.451194][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 312.497682][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.552459][ T9] usb 3-1: config 0 descriptor?? [ 312.846134][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 312.871903][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 312.898294][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 312.944431][ T9] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 312.970063][ T9] [drm] Initialized udl on minor 2 [ 313.000116][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.032143][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 313.079066][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.087214][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 313.094340][ T9] usb 3-1: USB disconnect, device number 3 [ 313.533465][ T7096] netlink: 'syz.0.308': attribute type 13 has an invalid length. [ 313.637014][ T9] libceph: connect (1)[c::]:6789 error -101 [ 313.646136][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 313.709564][ T7090] ceph: No mds server is up or the cluster is laggy [ 317.528764][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.535589][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.679218][ T7123] tipc: Enabled bearer , priority 0 [ 318.730241][ T7123] syzkaller0: entered promiscuous mode [ 318.749844][ T7123] syzkaller0: entered allmulticast mode [ 319.011173][ T7123] tipc: Resetting bearer [ 320.068786][ T7122] tipc: Resetting bearer [ 320.125488][ T7122] tipc: Disabling bearer [ 320.158254][ T786] tipc: Node number set to 2532172670 [ 320.809364][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 321.466404][ T7139] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 322.487101][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 322.523440][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.570474][ T8] usb 2-1: config 0 descriptor?? [ 323.230511][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 324.730049][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 324.749095][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 324.792295][ T8] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 324.829103][ T8] [drm] Initialized udl on minor 2 [ 324.850843][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 324.880756][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 324.889970][ T5771] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 324.939418][ T8] usb 2-1: USB disconnect, device number 2 [ 324.947191][ T5771] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 327.403892][ T7157] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 333.251948][ T7172] Illegal XDP return value 4294967282 on prog (id 14) dev N/A, expect packet loss! [ 333.490669][ T7175] netlink: 'syz.1.331': attribute type 6 has an invalid length. [ 333.955786][ T7180] netlink: 'syz.3.329': attribute type 6 has an invalid length. [ 338.418266][ T7198] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 339.447938][ T7200] random: crng reseeded on system resumption [ 346.986837][ T7253] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 349.261147][ T7261] comedi comedi3: Buffer allocation failed [ 349.268955][ C1] sched: RT throttling activated [ 349.836476][ T7236] bridge0: port 3(syz_tun) entered disabled state [ 349.964541][ T7236] syz_tun (unregistering): left allmulticast mode [ 349.974276][ T7236] syz_tun (unregistering): left promiscuous mode [ 349.987247][ T7236] bridge0: port 3(syz_tun) entered disabled state [ 350.483786][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.202380][ T7273] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 352.729423][ T7275] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 353.901605][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.134582][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.502948][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.896443][ T49] tipc: Left network mode [ 356.804236][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.849249][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.862639][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.892765][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.920094][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.929314][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.890436][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 359.039914][ T5781] Bluetooth: hci1: command tx timeout [ 360.486947][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.508051][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.552359][ T7287] bridge_slave_0: entered allmulticast mode [ 360.576086][ T7287] bridge_slave_0: entered promiscuous mode [ 360.635048][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.679224][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.687576][ T7287] bridge_slave_1: entered allmulticast mode [ 360.738119][ T7287] bridge_slave_1: entered promiscuous mode [ 360.945219][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.128982][ T5781] Bluetooth: hci1: command tx timeout [ 361.158995][ T49] hsr_slave_0: left promiscuous mode [ 361.252509][ T49] hsr_slave_1: left promiscuous mode [ 361.289735][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.297403][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.324316][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.340975][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.360042][ T49] bridge_slave_1: left allmulticast mode [ 361.367079][ T49] bridge_slave_1: left promiscuous mode [ 361.376186][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.403987][ T49] bridge_slave_0: left allmulticast mode [ 361.415776][ T49] bridge_slave_0: left promiscuous mode [ 361.429367][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.502761][ T7324] syz.3.366 (7324): drop_caches: 2 [ 361.522365][ T49] veth1_macvtap: left promiscuous mode [ 361.534234][ T49] veth0_macvtap: left promiscuous mode [ 361.549906][ T49] veth1_vlan: left promiscuous mode [ 361.560406][ T49] veth0_vlan: left promiscuous mode [ 361.665470][ T7326] syz.1.363 (7326): drop_caches: 2 [ 364.377227][ T5781] Bluetooth: hci1: command tx timeout [ 364.618458][ T7361] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 364.627184][ T7361] overlayfs: overlapping lowerdir path [ 364.639090][ T7352] syz.1.368 (7352): drop_caches: 2 [ 365.608197][ T49] team0 (unregistering): Port device team_slave_1 removed [ 365.709039][ T49] team0 (unregistering): Port device team_slave_0 removed [ 365.798683][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.025522][ T7368] comedi comedi3: Buffer allocation failed [ 367.086212][ T5781] Bluetooth: hci1: command tx timeout [ 367.174342][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.762479][ T49] bond0 (unregistering): Released all slaves [ 367.977505][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.317606][ T7287] team0: Port device team_slave_0 added [ 368.373296][ T7287] team0: Port device team_slave_1 added [ 368.468068][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.485786][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.558516][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.584244][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.639020][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.750965][ T7388] loop3: detected capacity change from 0 to 512 [ 368.772847][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.893454][ T7388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.925882][ T7287] hsr_slave_0: entered promiscuous mode [ 368.974507][ T7287] hsr_slave_1: entered promiscuous mode [ 368.980345][ T7388] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.379: iget: checksum invalid [ 369.900853][ T7378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 370.003475][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.221924][ T7405] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 371.617401][ T7287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.650814][ T7287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.722957][ T7287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.769293][ T7287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.898636][ T7419] loop3: detected capacity change from 0 to 512 [ 372.011174][ T786] IPVS: starting estimator thread 0... [ 372.028359][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.057496][ T7419] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.109350][ T7425] IPVS: using max 19 ests per chain, 45600 per kthread [ 372.269091][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.398835][ T7429] syzkaller0: entered promiscuous mode [ 372.420301][ T7429] syzkaller0: entered allmulticast mode [ 372.682750][ T7440] loop3: detected capacity change from 0 to 128 [ 372.710275][ T7440] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.734526][ T7440] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 372.866238][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.187047][ T7449] loop3: detected capacity change from 0 to 512 [ 373.286824][ T7449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.307709][ T7449] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.429267][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.563958][ T7457] loop3: detected capacity change from 0 to 1024 [ 373.572996][ T7457] EXT4-fs: Ignoring removed orlov option [ 373.666687][ T7457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.810376][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.926103][ T7461] loop3: detected capacity change from 0 to 256 [ 375.424317][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.514733][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.534121][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.541293][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.564814][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.572174][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.766988][ T7472] loop1: detected capacity change from 0 to 164 [ 375.844557][ T7282] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 375.970698][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.060936][ T7478] batadv_slave_0: entered promiscuous mode [ 376.199106][ T7478] syz.2.399 (7478) used greatest stack depth: 20904 bytes left [ 376.560294][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.993460][ T7511] loop2: detected capacity change from 0 to 512 [ 377.113154][ T7511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.130644][ T7511] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.268280][ T7511] process 'syz.2.408' launched './file1' with NULL argv: empty string added [ 377.335970][ T7511] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.408: corrupted xattr block 33: invalid checksum [ 377.479724][ T7511] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 377.623506][ T7521] loop3: detected capacity change from 0 to 1024 [ 377.647457][ T7523] loop1: detected capacity change from 0 to 256 [ 377.673249][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.690699][ T7521] EXT4-fs: Ignoring removed orlov option [ 377.716370][ T7521] EXT4-fs: Ignoring removed nobh option [ 377.783232][ T7287] veth0_vlan: entered promiscuous mode [ 377.800967][ T7521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.838698][ T7287] veth1_vlan: entered promiscuous mode [ 377.861416][ T7523] FAT-fs (loop1): Directory bread(block 64) failed [ 377.871495][ T7523] FAT-fs (loop1): Directory bread(block 65) failed [ 377.878133][ T7523] FAT-fs (loop1): Directory bread(block 66) failed [ 377.959137][ T7523] FAT-fs (loop1): Directory bread(block 67) failed [ 377.981015][ T7523] FAT-fs (loop1): Directory bread(block 68) failed [ 377.987715][ T7523] FAT-fs (loop1): Directory bread(block 69) failed [ 378.009755][ T7287] veth0_macvtap: entered promiscuous mode [ 378.015717][ T7523] FAT-fs (loop1): Directory bread(block 70) failed [ 378.027571][ T7531] loop2: detected capacity change from 0 to 1764 [ 378.036425][ T7523] FAT-fs (loop1): Directory bread(block 71) failed [ 378.050810][ T7523] FAT-fs (loop1): Directory bread(block 72) failed [ 378.057699][ T7523] FAT-fs (loop1): Directory bread(block 73) failed [ 378.062086][ T7287] veth1_macvtap: entered promiscuous mode [ 378.142109][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.234343][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.287746][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.330111][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.370095][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.395257][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.467236][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.508932][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.534521][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.568248][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.583372][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.595546][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.605085][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.625487][ T7287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.687455][ T7287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.703810][ T7287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.739904][ T7546] loop2: detected capacity change from 0 to 512 [ 378.746865][ T7287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.782974][ T7546] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 378.870336][ T7546] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 378.904599][ T7546] EXT4-fs (loop2): 1 truncate cleaned up [ 378.922510][ T7546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.947734][ T7546] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 378.972857][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.979644][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.153349][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.171732][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.216895][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.362076][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.379536][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.984634][ T7575] loop1: detected capacity change from 0 to 512 [ 380.023882][ T7575] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 380.088275][ T7575] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.423: bg 0: block 4: invalid block bitmap [ 380.115956][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 380.143913][ T7575] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 380.307840][ T7575] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.423: invalid indirect mapped block 1 (level 1) [ 380.366514][ T7585] random: crng reseeded on system resumption [ 380.433173][ T7575] EXT4-fs (loop1): 1 truncate cleaned up [ 380.477173][ T7575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.231551][ T7592] loop2: detected capacity change from 0 to 4096 [ 381.831647][ T7592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.890208][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.939594][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.230746][ T7605] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 382.393338][ T7609] loop2: detected capacity change from 0 to 512 [ 382.408273][ T7600] loop3: detected capacity change from 0 to 8192 [ 382.505984][ T27] audit: type=1326 audit(1772359562.137:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.1.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91b5b9c799 code=0x0 [ 383.647623][ T7621] loop1: detected capacity change from 0 to 128 [ 383.743712][ T7621] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 383.860009][ T7621] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 383.924598][ T7625] loop2: detected capacity change from 0 to 1024 [ 383.963970][ T7627] loop3: detected capacity change from 0 to 256 [ 383.984921][ T7625] EXT4-fs: inline encryption not supported [ 384.010438][ T7625] EXT4-fs: Ignoring removed bh option [ 384.036172][ T7625] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 384.172372][ T7625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.473581][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.627967][ T7649] loop3: detected capacity change from 0 to 512 [ 384.951509][ T7654] loop2: detected capacity change from 0 to 512 [ 384.992642][ T7654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.005956][ T7654] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.851136][ T7654] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.446: corrupted xattr block 33: invalid checksum [ 386.024396][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.066216][ T7660] loop4: detected capacity change from 0 to 512 [ 386.114212][ T7662] loop3: detected capacity change from 0 to 512 [ 386.207555][ T7660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.254513][ T7662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.259652][ T7660] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.562224][ T7287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.601469][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.616163][ T7673] loop2: detected capacity change from 0 to 128 [ 386.841531][ T7673] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.870127][ T7673] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 387.053188][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.132710][ T7685] loop4: detected capacity change from 0 to 1024 [ 387.200109][ T7685] EXT4-fs: inline encryption not supported [ 387.206158][ T7685] EXT4-fs: Ignoring removed bh option [ 387.279528][ T7685] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 387.355627][ T7685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.523007][ T7287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.761163][ T7715] loop2: detected capacity change from 0 to 128 [ 387.801584][ T7715] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.848432][ T7715] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 388.055968][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.341687][ T7752] loop2: detected capacity change from 0 to 512 [ 390.025014][ T7768] loop2: detected capacity change from 0 to 512 [ 390.094485][ T7768] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 390.323672][ T5768] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 390.626858][ T7706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.023207][ T7823] loop4: detected capacity change from 0 to 1024 [ 392.041567][ T7823] EXT4-fs: Ignoring removed orlov option [ 392.047277][ T7823] EXT4-fs: Ignoring removed nobh option [ 392.110759][ T7823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.522451][ T7836] loop3: detected capacity change from 0 to 128 [ 392.594151][ T7287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.620302][ T7836] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.708099][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 392.716478][ T7836] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.974229][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.062204][ T7849] loop2: detected capacity change from 0 to 1024 [ 393.084897][ T7849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.119835][ T7849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 393.155911][ T7849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 393.179886][ T7853] netlink: 72 bytes leftover after parsing attributes in process `syz.3.502'. [ 393.218085][ T7851] loop4: detected capacity change from 0 to 2048 [ 393.218933][ T7849] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 393.224874][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 393.233431][ T7849] System zones: 0-1, 3-36 [ 393.260380][ T7849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.293636][ T7856] loop1: detected capacity change from 0 to 512 [ 393.299048][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.502'. [ 393.321337][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 393.391775][ T7856] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #13: comm syz.1.504: iget: bad i_size value: 12154757448730 [ 393.447663][ T7851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.451745][ T7849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.488830][ T7856] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.504: couldn't read orphan inode 13 (err -117) [ 393.504991][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.523584][ T7861] loop3: detected capacity change from 0 to 1024 [ 393.554604][ T7856] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 393.613536][ T7861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.730599][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.769232][ T27] audit: type=1800 audit(1772359573.397:3): pid=7861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.505" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 393.773629][ T41] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 393.834886][ T7867] loop2: detected capacity change from 0 to 512 [ 393.870705][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 101 with error 28 [ 393.896527][ T7867] EXT4-fs: Ignoring removed oldalloc option [ 393.906694][ T41] EXT4-fs (loop4): This should not happen!! Data will be lost [ 393.906694][ T41] [ 393.932548][ T41] EXT4-fs (loop4): Total free blocks count 0 [ 393.949632][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.966071][ T41] EXT4-fs (loop4): Free/Dirty block details [ 393.974316][ T41] EXT4-fs (loop4): free_blocks=2415919504 [ 393.979853][ T7867] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.506: invalid indirect mapped block 4294967295 (level 1) [ 393.989037][ T41] EXT4-fs (loop4): dirty_blocks=112 [ 394.007891][ T41] EXT4-fs (loop4): Block reservation details [ 394.014875][ T7867] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.506: invalid indirect mapped block 4294967295 (level 1) [ 394.036449][ T41] EXT4-fs (loop4): i_reserved_data_blocks=7 [ 394.076055][ T7287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.089997][ T7867] EXT4-fs (loop2): 2 truncates cleaned up [ 394.098013][ T7867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.226702][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.284033][ T7874] loop3: detected capacity change from 0 to 512 [ 394.308462][ T7875] loop1: detected capacity change from 0 to 1024 [ 394.355208][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.391246][ T7874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.424355][ T7874] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.456492][ T7885] loop2: detected capacity change from 0 to 128 [ 394.530240][ T7885] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.551195][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.630592][ T7885] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 394.673269][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.875913][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.019160][ T7899] Dev loop5: unable to read RDB block 7 [ 395.035561][ T7899] loop5: unable to read partition table [ 395.056227][ T7899] loop5: partition table beyond EOD, truncated [ 395.079416][ T7899] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 395.142360][ T7903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.240564][ T7903] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.347989][ T7903] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.516: corrupted xattr block 33: invalid checksum [ 395.415064][ T7908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.653229][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.830748][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.233600][ T7914] FAT-fs (loop4): Directory bread(block 64) failed [ 396.249607][ T7914] FAT-fs (loop4): Directory bread(block 65) failed [ 396.263331][ T7914] FAT-fs (loop4): Directory bread(block 66) failed [ 396.287689][ T7914] FAT-fs (loop4): Directory bread(block 67) failed [ 396.307876][ T7914] FAT-fs (loop4): Directory bread(block 68) failed [ 396.324867][ T7914] FAT-fs (loop4): Directory bread(block 69) failed [ 396.344460][ T7914] FAT-fs (loop4): Directory bread(block 70) failed [ 396.359107][ T7914] FAT-fs (loop4): Directory bread(block 71) failed [ 396.378167][ T7914] FAT-fs (loop4): Directory bread(block 72) failed [ 396.398351][ T7914] FAT-fs (loop4): Directory bread(block 73) failed [ 396.842831][ T7934] sctp: [Deprecated]: syz.3.526 (pid 7934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.842831][ T7934] Use struct sctp_sack_info instead [ 397.475153][ T7941] set_capacity_and_notify: 5 callbacks suppressed [ 397.475170][ T7941] loop1: detected capacity change from 0 to 512 [ 397.522670][ T7941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.560553][ T7941] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 397.561290][ T7946] loop2: detected capacity change from 0 to 512 [ 397.706606][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.725869][ T7946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.810138][ T7946] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 397.901341][ T7958] loop3: detected capacity change from 0 to 512 [ 397.920222][ T7946] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.530: corrupted inode contents [ 397.966344][ T7946] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.530: mark_inode_dirty error [ 397.974113][ T7958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.994855][ T7946] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.530: corrupted inode contents [ 398.003662][ T7958] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.010167][ T7962] loop1: detected capacity change from 0 to 512 [ 398.026853][ T7946] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.530: mark_inode_dirty error [ 398.049109][ T7962] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.533: inode has both inline data and extents flags [ 398.091882][ T7958] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.535: corrupted xattr block 33: invalid checksum [ 398.141505][ T7962] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.533: couldn't read orphan inode 15 (err -117) [ 398.748283][ T7975] loop4: detected capacity change from 0 to 1024 [ 399.872257][ T7287] EXT4-fs unmount: 5 callbacks suppressed [ 399.872277][ T7287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.337141][ T8018] loop3: detected capacity change from 0 to 512 [ 400.409222][ T8018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 400.507477][ T8018] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.553: bg 0: block 393: padding at end of block bitmap is not set [ 400.619311][ T8018] EXT4-fs (loop3): Remounting filesystem read-only [ 400.631076][ T8018] EXT4-fs (loop3): 2 truncates cleaned up [ 400.638359][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.842058][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.294981][ T2963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.483409][ T2963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.669761][ T2963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.687173][ T27] audit: type=1326 audit(1772359581.317:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.2.564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e6119c799 code=0x0 [ 401.951572][ T2963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.130894][ T8057] syzkaller0: entered promiscuous mode [ 402.136763][ T8057] syzkaller0: entered allmulticast mode [ 402.159650][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.179439][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.189540][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.204570][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.217434][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 402.226653][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.571071][ T8077] loop3: detected capacity change from 0 to 2048 [ 402.667481][ T8077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.676226][ T8083] loop2: detected capacity change from 0 to 128 [ 402.697398][ T8083] FAT-fs (loop2): Directory bread(block 524322) failed [ 402.705964][ T8083] FAT-fs (loop2): Directory bread(block 524323) failed [ 402.713493][ T8083] FAT-fs (loop2): Directory bread(block 524324) failed [ 402.721699][ T8083] FAT-fs (loop2): Directory bread(block 524325) failed [ 402.728739][ T8083] FAT-fs (loop2): Directory bread(block 524326) failed [ 402.736392][ T8083] FAT-fs (loop2): Directory bread(block 524327) failed [ 402.743794][ T8083] FAT-fs (loop2): Directory bread(block 524328) failed [ 402.751379][ T8083] FAT-fs (loop2): Directory bread(block 524329) failed [ 402.770480][ T8083] FAT-fs (loop2): Directory bread(block 524322) failed [ 402.778472][ T8083] FAT-fs (loop2): Directory bread(block 524323) failed [ 402.992784][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.155187][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 403.406524][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.427778][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.461825][ T8065] bridge_slave_0: entered allmulticast mode [ 403.507585][ T8065] bridge_slave_0: entered promiscuous mode [ 403.552794][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.594477][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.639216][ T8065] bridge_slave_1: entered allmulticast mode [ 403.667177][ T8065] bridge_slave_1: entered promiscuous mode [ 403.679883][ T5771] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 403.863400][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.890351][ T5771] usb 4-1: Using ep0 maxpacket: 8 [ 403.910510][ T5771] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.959030][ T5771] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 403.968147][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.977423][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.035282][ T5771] usb 4-1: config 0 descriptor?? [ 404.072853][ T5771] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 404.300393][ T786] usb 4-1: USB disconnect, device number 4 [ 404.319487][ T5781] Bluetooth: hci1: command tx timeout [ 404.408088][ T8065] team0: Port device team_slave_0 added [ 404.451678][ T8065] team0: Port device team_slave_1 added [ 404.606257][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.642326][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.719727][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.748116][ T8127] loop1: detected capacity change from 0 to 8192 [ 404.762243][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.787156][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.825282][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.282966][ T8065] hsr_slave_0: entered promiscuous mode [ 405.342892][ T8065] hsr_slave_1: entered promiscuous mode [ 405.359986][ T8065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.384122][ T8065] Cannot create hsr debugfs directory [ 405.543507][ T8147] syzkaller0: entered promiscuous mode [ 405.572319][ T8147] syzkaller0: entered allmulticast mode [ 405.890330][ T8160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.592'. [ 405.899990][ T8160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.592'. [ 406.108014][ T8160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.592'. [ 406.400130][ T5781] Bluetooth: hci1: command tx timeout [ 406.736043][ T8187] loop3: detected capacity change from 0 to 512 [ 406.768197][ T8187] EXT4-fs: inline encryption not supported [ 406.794212][ T8187] EXT4-fs: Ignoring removed i_version option [ 406.846937][ T8187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e09d, mo2=0002] [ 406.859467][ T8187] System zones: 1-12 [ 406.952733][ T8187] EXT4-fs (loop3): 1 orphan inode deleted [ 406.978649][ T8201] loop2: detected capacity change from 0 to 128 [ 407.031514][ T8187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.032421][ T8201] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.101471][ T8201] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 407.388626][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.390195][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.624296][ T2963] hsr_slave_0: left promiscuous mode [ 407.650629][ T2963] hsr_slave_1: left promiscuous mode [ 407.666346][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.690349][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.710306][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.729023][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.750163][ T2963] bridge_slave_1: left allmulticast mode [ 407.755887][ T2963] bridge_slave_1: left promiscuous mode [ 407.769534][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.825022][ T2963] bridge_slave_0: left allmulticast mode [ 407.838582][ T2963] bridge_slave_0: left promiscuous mode [ 407.857877][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.017818][ T2963] veth1_macvtap: left promiscuous mode [ 408.040082][ T2963] veth0_macvtap: left promiscuous mode [ 408.059170][ T2963] veth1_vlan: left promiscuous mode [ 408.064741][ T2963] veth0_vlan: left promiscuous mode [ 408.235695][ T8239] loop2: detected capacity change from 0 to 512 [ 408.311206][ T8239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.376995][ T8239] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.479040][ T5781] Bluetooth: hci1: command tx timeout [ 408.500658][ T8239] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.610: corrupted inode contents [ 408.534870][ T8239] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.610: mark_inode_dirty error [ 408.547382][ T8239] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.610: corrupted inode contents [ 408.589576][ T8239] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.610: mark_inode_dirty error [ 408.645518][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.682129][ T8250] syz.3.611 uses obsolete (PF_INET,SOCK_PACKET) [ 409.121483][ T8257] loop2: detected capacity change from 0 to 512 [ 409.130698][ T8257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.156799][ T8257] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 409.165596][ T8257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 409.174403][ T8257] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 409.199201][ T8257] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 409.212658][ T8257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 409.252812][ T8257] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.614: Abort forced by user [ 409.314628][ T8257] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 409.361693][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.776136][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'. [ 409.873912][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 409.938555][ T8270] loop2: detected capacity change from 0 to 512 [ 409.964808][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 410.038484][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.044595][ T8270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.078805][ T8270] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.134317][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.343877][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.513458][ T8275] loop2: detected capacity change from 0 to 4096 [ 410.553561][ T8275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.578678][ T5781] Bluetooth: hci1: command tx timeout [ 410.690834][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.772157][ T2963] bond0 (unregistering): Released all slaves [ 410.935837][ T8280] loop2: detected capacity change from 0 to 512 [ 410.987217][ T7282] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.057924][ T8206] syzkaller0: entered promiscuous mode [ 411.063913][ T8206] syzkaller0: entered allmulticast mode [ 413.825912][ T8065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 413.848022][ T8291] loop1: detected capacity change from 0 to 512 [ 413.872971][ T8065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 413.900211][ T8291] EXT4-fs: Ignoring removed nobh option [ 413.909046][ T8065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 413.920529][ T8065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.021415][ T8291] ------------[ cut here ]------------ [ 414.027322][ T8291] EA inode 11 i_nlink=1026 [ 414.055292][ T8291] WARNING: CPU: 1 PID: 8291 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 414.070602][ T8291] Modules linked in: [ 414.074560][ T8291] CPU: 1 PID: 8291 Comm: syz.1.623 Not tainted syzkaller #0 [ 414.082093][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.092291][ T8291] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 414.099036][ T8291] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 a5 ec 98 ff 49 8b 37 48 c7 c7 e0 d4 de 8a 89 da e8 94 7e 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 5e 13 3e 08 [ 414.119103][ T8291] RSP: 0018:ffffc9000414f1a0 EFLAGS: 00010246 [ 414.125340][ T8291] RAX: 799bc6acc8634e00 RBX: 0000000000000402 RCX: 0000000000080000 [ 414.133618][ T8291] RDX: ffffc9000dd9e000 RSI: 0000000000034ece RDI: 0000000000034ecf [ 414.142186][ T8291] RBP: ffffc9000414f298 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 414.150597][ T8291] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 414.158627][ T8291] R13: ffff88823bc0e4a8 R14: ffff88823bc0e2b0 R15: ffff88823bc0e300 [ 414.166790][ T8291] FS: 00007f91b6b146c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 414.175827][ T8291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.182568][ T8291] CR2: 00007f7e611ad400 CR3: 00000000660ba000 CR4: 00000000003506e0 [ 414.190647][ T8291] Call Trace: [ 414.193975][ T8291] [ 414.196973][ T8291] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 414.202962][ T8291] ? ext4_xattr_inode_iget+0x3df/0x600 [ 414.208527][ T8291] ext4_xattr_set_entry+0xcda/0x1e90 [ 414.214041][ T8291] ext4_xattr_ibody_set+0x254/0x6a0 [ 414.219588][ T8291] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 414.225708][ T8291] __ext4_expand_extra_isize+0x306/0x400 [ 414.231491][ T8291] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 414.237026][ T8291] ext4_evict_inode+0x7f3/0xea0 [ 414.242758][ T8291] ? _raw_spin_unlock+0x28/0x40 [ 414.247676][ T8291] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 414.253790][ T8291] ? do_raw_spin_unlock+0x121/0x230 [ 414.259137][ T8291] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 414.265275][ T8291] evict+0x4ca/0x8d0 [ 414.269325][ T8291] ? proc_nr_inodes+0x230/0x230 [ 414.274232][ T8291] ? do_raw_spin_unlock+0x121/0x230 [ 414.279601][ T8291] ? _raw_spin_unlock+0x28/0x40 [ 414.284642][ T8291] ? iput+0x706/0x920 [ 414.288689][ T8291] ext4_orphan_cleanup+0xbec/0x1420 [ 414.294063][ T8291] ? ext4_orphan_del+0xbf0/0xbf0 [ 414.299144][ T8291] ? ext4_register_li_request+0x183/0x940 [ 414.304948][ T8291] ? errseq_check_and_advance+0x66/0x120 [ 414.310772][ T8291] ext4_fill_super+0x5ed3/0x6790 [ 414.315871][ T8291] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 414.322344][ T8291] ? __might_sleep+0xe0/0xe0 [ 414.327000][ T8291] ? read_lock_is_recursive+0x20/0x20 [ 414.332561][ T8291] ? snprintf+0xe9/0x140 [ 414.336880][ T8291] ? down_read_killable+0x340/0x340 [ 414.342237][ T8291] ? setup_bdev_super+0x56b/0x660 [ 414.347756][ T8291] get_tree_bdev+0x3f3/0x520 [ 414.352608][ T8291] ? vfs_parse_fs_string+0x170/0x170 [ 414.357955][ T8291] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 414.364578][ T8291] ? setup_bdev_super+0x660/0x660 [ 414.369717][ T8291] ? apparmor_capable+0x137/0x1a0 [ 414.374803][ T8291] ? bpf_lsm_capable+0x9/0x10 [ 414.379610][ T8291] ? security_capable+0x89/0xb0 [ 414.384523][ T8291] vfs_get_tree+0x8c/0x280 [ 414.389061][ T8291] do_new_mount+0x24b/0xa40 [ 414.393637][ T8291] __se_sys_mount+0x2e7/0x3d0 [ 414.398477][ T8291] ? __x64_sys_mount+0xc0/0xc0 [ 414.403524][ T8291] ? lockdep_hardirqs_on+0x98/0x150 [ 414.408919][ T8291] ? __x64_sys_mount+0x20/0xc0 [ 414.413743][ T8291] do_syscall_64+0x55/0xa0 [ 414.418219][ T8291] ? clear_bhb_loop+0x40/0x90 [ 414.423073][ T8291] ? clear_bhb_loop+0x40/0x90 [ 414.427901][ T8291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.434024][ T8291] RIP: 0033:0x7f91b5b9da0a [ 414.438495][ T8291] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.459041][ T8291] RSP: 002b:00007f91b6b13e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.467782][ T8291] RAX: ffffffffffffffda RBX: 00007f91b6b13ee0 RCX: 00007f91b5b9da0a [ 414.476020][ T8291] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f91b6b13ea0 [ 414.484472][ T8291] RBP: 0000200000000180 R08: 00007f91b6b13ee0 R09: 0000000000800718 [ 414.492594][ T8291] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 414.500779][ T8291] R13: 00007f91b6b13ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 414.509045][ T8291] [ 414.512108][ T8291] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 414.512424][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.526022][ T8291] CPU: 1 PID: 8291 Comm: syz.1.623 Not tainted syzkaller #0 [ 414.533437][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.543531][ T8291] Call Trace: [ 414.546852][ T8291] [ 414.549817][ T8291] dump_stack_lvl+0x18c/0x250 [ 414.551467][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.561265][ T8291] ? show_regs_print_info+0x20/0x20 [ 414.566614][ T8291] ? load_image+0x400/0x400 [ 414.567289][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.567406][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.585638][ T8291] panic+0x2dc/0x730 [ 414.589641][ T8291] ? bpf_jit_dump+0xd0/0xd0 [ 414.594171][ T8291] __warn+0x2e0/0x470 [ 414.598255][ T8291] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 414.604252][ T8291] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 414.610339][ T8291] report_bug+0x2be/0x4f0 [ 414.614683][ T8291] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 414.620686][ T8291] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 414.626854][ T8291] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 414.633107][ T8291] handle_bug+0xcf/0x120 [ 414.637650][ T8291] exc_invalid_op+0x1a/0x50 [ 414.642201][ T8291] asm_exc_invalid_op+0x1a/0x20 [ 414.647090][ T8291] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 414.653716][ T8291] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 a5 ec 98 ff 49 8b 37 48 c7 c7 e0 d4 de 8a 89 da e8 94 7e 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 5e 13 3e 08 [ 414.673603][ T8291] RSP: 0018:ffffc9000414f1a0 EFLAGS: 00010246 [ 414.679913][ T8291] RAX: 799bc6acc8634e00 RBX: 0000000000000402 RCX: 0000000000080000 [ 414.687894][ T8291] RDX: ffffc9000dd9e000 RSI: 0000000000034ece RDI: 0000000000034ecf [ 414.695964][ T8291] RBP: ffffc9000414f298 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 414.704115][ T8291] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 414.712126][ T8291] R13: ffff88823bc0e4a8 R14: ffff88823bc0e2b0 R15: ffff88823bc0e300 [ 414.720133][ T8291] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 414.725792][ T8291] ? ext4_xattr_inode_iget+0x3df/0x600 [ 414.731273][ T8291] ext4_xattr_set_entry+0xcda/0x1e90 [ 414.736598][ T8291] ext4_xattr_ibody_set+0x254/0x6a0 [ 414.741818][ T8291] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 414.747756][ T8291] __ext4_expand_extra_isize+0x306/0x400 [ 414.753439][ T8291] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 414.758931][ T8291] ext4_evict_inode+0x7f3/0xea0 [ 414.763843][ T8291] ? _raw_spin_unlock+0x28/0x40 [ 414.768714][ T8291] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 414.774632][ T8291] ? do_raw_spin_unlock+0x121/0x230 [ 414.779848][ T8291] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 414.785749][ T8291] evict+0x4ca/0x8d0 [ 414.789666][ T8291] ? proc_nr_inodes+0x230/0x230 [ 414.794525][ T8291] ? do_raw_spin_unlock+0x121/0x230 [ 414.799739][ T8291] ? _raw_spin_unlock+0x28/0x40 [ 414.804597][ T8291] ? iput+0x706/0x920 [ 414.808593][ T8291] ext4_orphan_cleanup+0xbec/0x1420 [ 414.813904][ T8291] ? ext4_orphan_del+0xbf0/0xbf0 [ 414.818848][ T8291] ? ext4_register_li_request+0x183/0x940 [ 414.824768][ T8291] ? errseq_check_and_advance+0x66/0x120 [ 414.830440][ T8291] ext4_fill_super+0x5ed3/0x6790 [ 414.835417][ T8291] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 414.841672][ T8291] ? __might_sleep+0xe0/0xe0 [ 414.846281][ T8291] ? read_lock_is_recursive+0x20/0x20 [ 414.851756][ T8291] ? snprintf+0xe9/0x140 [ 414.856115][ T8291] ? down_read_killable+0x340/0x340 [ 414.861356][ T8291] ? setup_bdev_super+0x56b/0x660 [ 414.866422][ T8291] get_tree_bdev+0x3f3/0x520 [ 414.871108][ T8291] ? vfs_parse_fs_string+0x170/0x170 [ 414.876410][ T8291] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 414.882748][ T8291] ? setup_bdev_super+0x660/0x660 [ 414.887775][ T8291] ? apparmor_capable+0x137/0x1a0 [ 414.892822][ T8291] ? bpf_lsm_capable+0x9/0x10 [ 414.897510][ T8291] ? security_capable+0x89/0xb0 [ 414.902373][ T8291] vfs_get_tree+0x8c/0x280 [ 414.906806][ T8291] do_new_mount+0x24b/0xa40 [ 414.911418][ T8291] __se_sys_mount+0x2e7/0x3d0 [ 414.916291][ T8291] ? __x64_sys_mount+0xc0/0xc0 [ 414.921154][ T8291] ? lockdep_hardirqs_on+0x98/0x150 [ 414.926458][ T8291] ? __x64_sys_mount+0x20/0xc0 [ 414.931326][ T8291] do_syscall_64+0x55/0xa0 [ 414.935754][ T8291] ? clear_bhb_loop+0x40/0x90 [ 414.940579][ T8291] ? clear_bhb_loop+0x40/0x90 [ 414.945318][ T8291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.951239][ T8291] RIP: 0033:0x7f91b5b9da0a [ 414.955668][ T8291] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.975299][ T8291] RSP: 002b:00007f91b6b13e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.983753][ T8291] RAX: ffffffffffffffda RBX: 00007f91b6b13ee0 RCX: 00007f91b5b9da0a [ 414.991736][ T8291] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f91b6b13ea0 [ 414.999718][ T8291] RBP: 0000200000000180 R08: 00007f91b6b13ee0 R09: 0000000000800718 [ 415.007783][ T8291] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 415.016131][ T8291] R13: 00007f91b6b13ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 415.024238][ T8291] [ 415.027691][ T8291] Kernel Offset: disabled [ 415.032106][ T8291] Rebooting in 86400 seconds..